chore(deps): update all dependencies #7
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Note
Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to
mend[bot]
.This notice will be removed on 2025-10-07.
This PR contains the following updates:
v4.2.2
->v5.0.0
v4.5.0
->v4.8.0
v5.2.0
->v6.0.0
v3.28.0
->v3.30.6
Release Notes
actions/checkout (actions/checkout)
v5.0.0
Compare Source
What's Changed
v2.327.1
Release Notes
Make sure your runner is updated to this version or newer to use this release.
Full Changelog: actions/checkout@v4...v5.0.0
v4.3.0
Compare Source
What's Changed
New Contributors
Full Changelog: actions/checkout@v4...v4.3.0
actions/dependency-review-action (actions/dependency-review-action)
v4.8.0
Compare Source
What's Changed
New Contributors
Full Changelog: actions/dependency-review-action@v4...v4.8.0
v4.7.4
Compare Source
v4.7.3
: 4.7.3Compare Source
What's Changed
Full Changelog: actions/dependency-review-action@v4...v4.7.3
v4.7.2
: 4.7.2Compare Source
What's Changed
New Contributors
Full Changelog: actions/dependency-review-action@v4...v4.7.2
v4.7.1
Compare Source
allow-dependencies-licenses
will be allowed even if the package in question has no license information #889Ruby OR GPL-2.0
) in the allow list are automatically discarded so that they don't invalidate the whole allow list, which should just be license identifier (e.g.Ruby
)v4.7.0
Compare Source
MIT AND GPL-2.0
) in allow lists (fixes #809 and probably others)OTHER
in package licenses withLicenseRef-clearlydefined-OTHER
so that parsing passesv4.6.0
Compare Source
What's Changed
New Contributors
Full Changelog: actions/dependency-review-action@v4.5.0...v4.6.0
actions/setup-go (actions/setup-go)
v6.0.0
Compare Source
What's Changed
Breaking Changes
Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes
Dependency Upgrades
form-data
to bring in fix for critical vulnerability by @matthewhughes934 in #618New Contributors
Full Changelog: actions/setup-go@v5...v6.0.0
v5.5.0
Compare Source
What's Changed
Bug fixes:
Dependency updates:
New Contributors
Full Changelog: actions/setup-go@v5...v5.5.0
v5.4.0
Compare Source
What's Changed
Dependency updates :
New Contributors
Full Changelog: actions/setup-go@v5...v5.4.0
v5.3.0
Compare Source
What's Changed
@actions/cache
to^4.0.0
by @Link- in #531New Contributors
Full Changelog: actions/setup-go@v5...v5.3.0
github/codeql-action (github/codeql-action)
v3.30.6
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.6 - 02 Oct 2025
See the full CHANGELOG.md for more information.
v3.30.5
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.5 - 26 Sep 2025
3.30.4
withupload-sarif
which resulted in files without a.sarif
extension not getting uploaded. #3160See the full CHANGELOG.md for more information.
v3.30.4
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.4 - 25 Sep 2025
codeql-action/init
step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of thecodeql-action/init
step. #3099 and #3100tools: nightly
to theinit
action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130See the full CHANGELOG.md for more information.
v3.30.3
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.3 - 10 Sep 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.30.2
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.2 - 09 Sep 2025
quality-queries
input that was added in3.29.2
as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a newanalysis-kinds
input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064See the full CHANGELOG.md for more information.
v3.30.1
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.1 - 05 Sep 2025
See the full CHANGELOG.md for more information.
v3.30.0
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.0 - 01 Sep 2025
See the full CHANGELOG.md for more information.
v3.29.11
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.29.11 - 21 Aug 2025
See the full CHANGELOG.md for more information.
v3.29.10
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.29.10 - 18 Aug 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.29.9
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.29.9 - 12 Aug 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.29.8
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.29.8 - 08 Aug 2025
See the full CHANGELOG.md for more information.
v3.29.7
Compare Source
This is a re-release of v3.29.5 to mitigate an issue that was discovered with v3.29.6.
v3.29.6
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.29.6 - 07 Aug 2025
cleanup-level
input to theanalyze
Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. #2999See the full CHANGELOG.md for more information.
v3.29.5
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.29.5 - 29 Jul 2025
See the full CHANGELOG.md for more information.
v3.29.4
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.29.4 - 23 Jul 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.29.3
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.29.3 - 21 Jul 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.29.2
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.29.2 - 30 Jun 2025
quality-queries
input for theinit
action is provided with an argument, separate.quality.sarif
files are produced and uploaded for each language with the results of the specified queries. Do not use this in production as it is part of an internal experiment and subject to change at any time. #2935See the full CHANGELOG.md for more information.
v3.29.1
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.29.1 - 27 Jun 2025
include
query filter fails to exclude non-included queries. #2938See the full CHANGELOG.md for more information.
v3.29.0
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.29.0 - 11 Jun 2025
See the full CHANGELOG.md for more information.
v3.28.21
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.21 - 28 July 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.28.20
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.20 - 21 July 2025
See the full CHANGELOG.md for more information.
v3.28.19
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.19 - 03 Jun 2025
actions
language, which is currently in public preview.The
actions
extractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled theactions
language and you have pinnedyour
tools:
property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disableactions
analysis.See the full CHANGELOG.md for more information.
v3.28.18
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.18 - 16 May 2025
CODEQL_THREADS
andCODEQL_RAM
runner environment variables. If set, these environment variables override thethreads
andram
inputs respectively. #2891See the full CHANGELOG.md for more information.
v3.28.17
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.17 - 02 May 2025
See the full CHANGELOG.md for more information.
v3.28.16
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.16 - 23 Apr 2025
See the full CHANGELOG.md for more information.
v3.28.15
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.15 - 07 Apr 2025
See the full CHANGELOG.md for more information.
v3.28.14
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.14 - 07 Apr 2025
See the full CHANGELOG.md for more information.
v3.28.13
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.13 - 24 Mar 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.28.12
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.12 - 19 Mar 2025
build-mode: none
extractions. This should speed up workflows and avoid inconsistent alerts in some cases.See the full CHANGELOG.md for more information.
v3.28.11
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.11 - 07 Mar 2025
See the full CHANGELOG.md for more information.
v3.28.10
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.10 - 21 Feb 2025
See the full CHANGELOG.md for more information.
v3.28.9
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.9 - 07 Feb 2025
See the full CHANGELOG.md for more information.
v3.28.8
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.8 - 29 Jan 2025
See the full CHANGELOG.md for more information.
v3.28.7
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.7 - 29 Jan 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.28.6
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.6 - 27 Jan 2025
See the full CHANGELOG.md for more information.
v3.28.5
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.5 - 24 Jan 2025
See the full CHANGELOG.md for more information.
v3.28.4
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.4 - 23 Jan 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.28.3
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.3 - 22 Jan 2025
See the full CHANGELOG.md for more information.
v3.28.2
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.2 - 21 Jan 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.28.1
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.1 - 10 Jan 2025
See the full CHANGELOG.md for more information.
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.