Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update github-actions #174

Merged
merged 1 commit into from
Jan 26, 2025
Merged

chore(deps): update github-actions #174

merged 1 commit into from
Jan 26, 2025

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jan 1, 2025

This PR contains the following updates:

Package Type Update Change
actions/setup-dotnet action minor v4.1.0 -> v4.2.0
actions/upload-artifact action minor v4.4.3 -> v4.6.0
bufbuild/buf-setup-action action minor v1.47.2 -> v1.50.0
docker/build-push-action action digest 4f58ea7 -> ca877d9
docker/setup-buildx-action action digest c47758b -> 6524bf6
docker/setup-qemu-action action digest 49b3bc8 -> 53851d1
github/codeql-action action minor v3.27.6 -> v3.28.5
helm/kind-action action minor v1.10.0 -> v1.12.0
marocchino/sticky-pull-request-comment action patch v2.9.0 -> v2.9.1
miracum/.github action minor v1.12.12 -> v1.13.1

Release Notes

actions/setup-dotnet (actions/setup-dotnet)

v4.2.0

Compare Source

What's Changed

Some .NET binaries and installers currently hosted on Azure Content Delivery Network (CDN) domains ending in .azureedge.net will move to new domains as the provider, edg.io, will soon cease operations. There may be downtime or unavailability of .azureedge.net domains in the future as the .NET team is required to migrate to a new CDN and set of domains moving forward.

If your workflows are pinned to specific SHAs or minor tags, please upgrade to a major release tag to avoid service disruptions. Edgio has confirmed their services will be operational until at least January 15, 2025.

For updates, follow https://github.com/dotnet/core/issues/9671.

New Contributors

Full Changelog: actions/setup-dotnet@v4...v4.2.0

actions/upload-artifact (actions/upload-artifact)

v4.6.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

bufbuild/buf-setup-action (bufbuild/buf-setup-action)

v1.50.0

Compare Source

Release v1.50.0

v1.49.0

Compare Source

Release v1.49.0

v1.48.0

Compare Source

Release v1.48.0

github/codeql-action (github/codeql-action)

v3.28.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.5 - 24 Jan 2025
  • Update default CodeQL bundle version to 2.20.3. #​2717

See the full CHANGELOG.md for more information.

v3.28.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.4 - 23 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.3 - 22 Jan 2025
  • Update default CodeQL bundle version to 2.20.2. #​2707
  • Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise Server instance which occurred when the CodeQL Bundle had been synced to the instance using the CodeQL Action sync tool and the Actions runner did not have Zstandard installed. #​2710
  • Uploading debug artifacts for CodeQL analysis is temporarily disabled. #​2712

See the full CHANGELOG.md for more information.

v3.28.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.2 - 21 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.1 - 10 Jan 2025
  • CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #​2677
  • Update default CodeQL bundle version to 2.20.1. #​2678

See the full CHANGELOG.md for more information.

v3.28.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.28.0 - 20 Dec 2024
  • Bump the minimum CodeQL bundle version to 2.15.5. #​2655
  • Don't fail in the unusual case that a file is on the search path. #​2660.

See the full CHANGELOG.md for more information.

v3.27.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.8

Compare Source

v3.27.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.7 - 10 Dec 2024
  • We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #​2631
  • Update default CodeQL bundle version to 2.20.0. #​2636

See the full CHANGELOG.md for more information.

helm/kind-action (helm/kind-action)

v1.12.0

Compare Source

What's Changed

New Contributors

Full Changelog: helm/kind-action@v1.11.0...v1.12.0

v1.11.0

Compare Source

What's Changed

New Contributors

Full Changelog: helm/kind-action@v1.10.0...v1.11.0

marocchino/sticky-pull-request-comment (marocchino/sticky-pull-request-comment)

v2.9.1

Compare Source

What's Changed

New Contributors

Full Changelog: marocchino/sticky-pull-request-comment@v2.9.0...v2.9.1

miracum/.github (miracum/.github)

v1.13.1

Compare Source

Miscellaneous Chores

v1.13.0

Compare Source

Features
  • support for app-token based releases (91be41c)

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

github-actions bot commented Jan 1, 2025

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 9 0 0.1s
⚠️ CSHARP csharpier 45 1 3.95s
⚠️ CSHARP roslynator 5 5 35.24s
✅ DOCKERFILE hadolint 1 0 0.1s
✅ EDITORCONFIG editorconfig-checker 107 0 0.57s
✅ JSON jsonlint 11 0 0.93s
✅ JSON prettier 11 0 0.63s
✅ MARKDOWN markdownlint 3 0 0.47s
⚠️ MARKDOWN markdown-table-formatter 3 1 0.3s
✅ PROTOBUF protolint 5 0 2.89s
✅ REPOSITORY checkov yes no 21.56s
✅ REPOSITORY dustilock yes no 0.01s
✅ REPOSITORY gitleaks yes no 0.25s
✅ REPOSITORY git_diff yes no 0.02s
✅ REPOSITORY grype yes no 17.43s
✅ REPOSITORY kics yes no 17.83s
✅ REPOSITORY secretlint yes no 0.72s
✅ REPOSITORY syft yes no 1.73s
✅ REPOSITORY trivy yes no 9.71s
✅ REPOSITORY trivy-sbom yes no 0.27s
✅ REPOSITORY trufflehog yes no 4.9s
✅ XML xmllint 1 0 0.4s
✅ YAML prettier 24 0 1.09s
✅ YAML yamllint 24 0 0.74s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

@renovate renovate bot force-pushed the renovate/github-actions branch 4 times, most recently from 635635b to 0deb5ce Compare January 14, 2025 17:57
@renovate renovate bot force-pushed the renovate/github-actions branch 4 times, most recently from f6de667 to d01d554 Compare January 22, 2025 21:22
@renovate renovate bot force-pushed the renovate/github-actions branch 2 times, most recently from e1bb93c to ce121b7 Compare January 24, 2025 21:02
@renovate renovate bot force-pushed the renovate/github-actions branch from ce121b7 to 8038c8c Compare January 26, 2025 14:50
Copy link

Trivy image scan report

ghcr.io/miracum/vfps:pr-174 (ubuntu 24.04)

No Vulnerabilities found

No Misconfigurations found

opt/vfps/Vfps.deps.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.AspNetCore.App/9.0.0/Microsoft.AspNetCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.NETCore.App/9.0.0/Microsoft.NETCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

Copy link

github-actions bot commented Jan 26, 2025

Code Coverage

Package Line Rate Branch Rate Health
Vfps.Tests 99% 100%
Vfps 94% 60%
Summary 95% (431 / 452) 66% (33 / 50)

Minimum allowed line rate is 50%


ghz run statistics

Summary:
  Count:	5000
  Total:	9.54 s
  Slowest:	524.04 ms
  Fastest:	10.07 ms
  Average:	92.09 ms
  Requests/sec:	523.99

Response time histogram:
  10.070  [1]    |
  61.468  [563]  |∎∎∎∎∎∎
  112.865 [3695] |∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎
  164.263 [589]  |∎∎∎∎∎∎
  215.660 [102]  |∎
  267.058 [0]    |
  318.455 [0]    |
  369.853 [0]    |
  421.250 [1]    |
  472.647 [0]    |
  524.045 [49]   |∎

Latency distribution:
  10 % in 58.12 ms 
  25 % in 75.12 ms 
  50 % in 84.50 ms 
  75 % in 101.18 ms 
  90 % in 123.70 ms 
  95 % in 145.06 ms 
  99 % in 190.92 ms 

Status code distribution:
  [OK]   5000 responses   

iter8 report

Experiment summary:
*******************

  Experiment completed: true
  No task failures: true
  Total number of tasks: 6
  Number of completed tasks: 6
  Number of completed loops: 1

Whether or not service level objectives (SLOs) are satisfied:
*************************************************************

  SLO Conditions                  | Satisfied
  --------------                  | ---------
  grpc/error-rate <= 0            | true
  grpc/latency/mean (msec) <= 200 | true
  grpc/latency/p99 (msec) <= 500  | true
  

Latest observed values for metrics:
***********************************

  Metric                   | value
  -------                  | -----
  grpc/error-count         | 0.00
  grpc/error-rate          | 0.00
  grpc/latency/mean (msec) | 126.23
  grpc/latency/p99 (msec)  | 390.00
  grpc/request-count       | 50000.00
  

@chgl chgl merged commit 10a2348 into master Jan 26, 2025
19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant