Skip to content

v0.3.5: Dependency/security update

Compare
Choose a tag to compare
@wneessen wneessen released this 04 Jul 08:26
· 254 commits to main since this release
7539d30

This is a maintenance release to update dependencies and to release the packages with the latest Go version 1.22.5, which fixes a security vulnerbility in net/http.

What's Changed

  • build(deps): bump sonarsource/sonarqube-quality-gate-action from f9fe214a5be5769c40619de2fff2726c36d2d5eb to 72f24ebf1f81eda168a979ce14b8203273b7c3ad by @dependabot in #95
  • build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by @dependabot in #96
  • build(deps): bump docker/setup-buildx-action from 3.2.0 to 3.3.0 by @dependabot in #97
  • build(deps): bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @dependabot in #99
  • build(deps): bump golang from c4fb952 to 83d3f5d by @dependabot in #98
  • build(deps): bump golang from 83d3f5d to 450e382 by @dependabot in #100
  • build(deps): bump github.com/labstack/echo/v4 from 4.11.4 to 4.12.0 by @dependabot in #102
  • build(deps): bump github/codeql-action from 3.24.10 to 3.25.0 by @dependabot in #101
  • build(deps): bump github/codeql-action from 3.25.0 to 3.25.1 by @dependabot in #103
  • build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #104
  • build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #105
  • build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #107
  • build(deps): bump github/codeql-action from 3.25.1 to 3.25.2 by @dependabot in #106
  • build(deps): bump golang from 450e382 to d5302d4 by @dependabot in #109
  • build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #108
  • build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 by @dependabot in #111
  • build(deps): bump github/codeql-action from 3.25.2 to 3.25.3 by @dependabot in #110
  • build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.1.0 by @dependabot in #114
  • build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.1 by @dependabot in #113
  • build(deps): bump step-security/harden-runner from 2.7.0 to 2.7.1 by @dependabot in #112
  • build(deps): bump actions/dependency-review-action from 4.3.1 to 4.3.2 by @dependabot in #115
  • build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in #116
  • build(deps): bump github.com/cyphar/filepath-securejoin from 0.2.4 to 0.2.5 by @dependabot in #118
  • build(deps): bump golangci/golangci-lint-action from 5.1.0 to 5.3.0 by @dependabot in #117
  • build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #120
  • build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.0 by @dependabot in #119
  • build(deps): bump golang from d5302d4 to b1e05e2 by @dependabot in #121
  • build(deps): bump golangci/golangci-lint-action from 6.0.0 to 6.0.1 by @dependabot in #123
  • build(deps): bump github/codeql-action from 3.25.3 to 3.25.4 by @dependabot in #122
  • build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #124
  • build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by @dependabot in #125
  • build(deps): bump golang from b1e05e2 to 7eac856 by @dependabot in #126
  • build(deps): bump golang from 7eac856 to 91ad6f9 by @dependabot in #127
  • build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in #129
  • build(deps): bump golang from 91ad6f9 to f43c6f0 by @dependabot in #128
  • build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in #130
  • Bump step-security/harden-runner from 2.7.1 to 2.8.0 by @dependabot in #131
  • Bump sonarsource/sonarqube-scan-action from 2.0.2 to 2.1.0 by @dependabot in #132
  • Bump docker/login-action from 3.1.0 to 3.2.0 by @dependabot in #133
  • Bump github/codeql-action from 3.25.6 to 3.25.7 by @dependabot in #134
  • Bump golang from f43c6f0 to 969349b by @dependabot in #136
  • Bump github/codeql-action from 3.25.7 to 3.25.8 by @dependabot in #135
  • Bump actions/dependency-review-action from 4.3.2 to 4.3.3 by @dependabot in #137
  • Bump step-security/harden-runner from 2.8.0 to 2.8.1 by @dependabot in #138
  • Bump docker/build-push-action from 5.3.0 to 5.4.0 by @dependabot in #139
  • Bump github/codeql-action from 3.25.8 to 3.25.9 by @dependabot in #142
  • Bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #141
  • Bump golang from 969349b to 0f76912 by @dependabot in #140
  • Bump golang from 0f76912 to 2303a02 by @dependabot in #143
  • Bump github/codeql-action from 3.25.9 to 3.25.10 by @dependabot in #144
  • Bump sonarsource/sonarqube-scan-action from 2.1.0 to 2.2 by @dependabot in #145
  • Bump golang from 2303a02 to c2010b9 by @dependabot in #146
  • Bump docker/build-push-action from 5.4.0 to 6.0.0 by @dependabot in #147
  • Bump docker/build-push-action from 6.0.0 to 6.0.1 by @dependabot in #148
  • Bump docker/build-push-action from 6.0.1 to 6.0.2 by @dependabot in #149
  • Bump golang from c2010b9 to a66eda6 by @dependabot in #151
  • Bump docker/build-push-action from 6.0.2 to 6.1.0 by @dependabot in #150
  • Bump docker/build-push-action from 6.1.0 to 6.2.0 by @dependabot in #152
  • Bump github/codeql-action from 3.25.10 to 3.25.11 by @dependabot in #154
  • Bump github.com/wneessen/go-mail from 0.4.1 to 0.4.2 by @dependabot in #153
  • Bump golang from a66eda6 to 74cd6cd by @dependabot in #156
  • Bump sonarsource/sonarqube-scan-action from 2.2.0 to 2.3.0 by @dependabot in #155
  • Bump golang from 74cd6cd to e4292ae by @dependabot in #157
  • Bump docker/build-push-action from 6.2.0 to 6.3.0 by @dependabot in #158
  • Update server.go by @wneessen in #159

Full Changelog: v0.3.4...v0.3.5