Skip to content

chore(deps): bump the dependencies group with 3 updates #275

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
May 19, 2025
Merged

chore(deps): bump the dependencies group with 3 updates #275

merged 1 commit into from
May 19, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 19, 2025

Bumps the dependencies group with 3 updates: github/contributors, github/codeql-action and super-linter/super-linter.

Updates github/contributors from 1.5.7 to 1.5.8

Release notes

Sourced from github/contributors's releases.

v1.5.8

Changelog

🐛 Bug Fixes

🧰 Maintenance

See details of all code changes since previous release

Commits
  • 6949781 Merge pull request #270 from PavanRaga/patch-3
  • bd86d87 fix: linting
  • e12c77a Merge pull request #272 from github/dependabot/docker/python-914bf5c
  • 78bea40 Merge pull request #271 from github/dependabot/github_actions/dependencies-ac...
  • 90367f3 chore(deps): bump python from 60248ff to 914bf5c
  • 8e4f332 chore(deps): bump github/contributors in the dependencies group
  • c1d83cf Update test_markdown.py
  • 85f33e7 fix: boolean check for LINK_TO_PROFILE
  • See full diff in compare view

Updates github/codeql-action from 3.28.17 to 3.28.18

Release notes

Sourced from github/codeql-action's releases.

v3.28.18

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.18 - 16 May 2025

  • Update default CodeQL bundle version to 2.21.3. #2893
  • Skip validating SARIF produced by CodeQL for improved performance. #2894
  • The number of threads and amount of RAM used by CodeQL can now be set via the CODEQL_THREADS and CODEQL_RAM runner environment variables. If set, these environment variables override the threads and ram inputs respectively. #2891

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

3.28.18 - 16 May 2025

  • Update default CodeQL bundle version to 2.21.3. #2893
  • Skip validating SARIF produced by CodeQL for improved performance. #2894
  • The number of threads and amount of RAM used by CodeQL can now be set via the CODEQL_THREADS and CODEQL_RAM runner environment variables. If set, these environment variables override the threads and ram inputs respectively. #2891

3.28.17 - 02 May 2025

  • Update default CodeQL bundle version to 2.21.2. #2872

3.28.16 - 23 Apr 2025

  • Update default CodeQL bundle version to 2.21.1. #2863

3.28.15 - 07 Apr 2025

  • Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #2842

3.28.14 - 07 Apr 2025

  • Update default CodeQL bundle version to 2.21.0. #2838

3.28.13 - 24 Mar 2025

No user facing changes.

3.28.12 - 19 Mar 2025

  • Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
  • Update default CodeQL bundle version to 2.20.7. #2810

3.28.11 - 07 Mar 2025

  • Update default CodeQL bundle version to 2.20.6. #2793

3.28.10 - 21 Feb 2025

  • Update default CodeQL bundle version to 2.20.5. #2772
  • Address an issue where the CodeQL Bundle would occasionally fail to decompress on macOS. #2768

3.28.9 - 07 Feb 2025

... (truncated)

Commits
  • ff0a06e Merge pull request #2896 from github/update-v3.28.18-b86edfc27
  • a41e084 Update changelog for v3.28.18
  • b86edfc Merge pull request #2893 from github/update-bundle/codeql-bundle-v2.21.3
  • e93b900 Merge branch 'main' into update-bundle/codeql-bundle-v2.21.3
  • 510dfa3 Merge pull request #2894 from github/henrymercer/skip-validating-codeql-sarif
  • 492d783 Merge branch 'main' into henrymercer/skip-validating-codeql-sarif
  • 83bdf3b Merge pull request #2859 from github/update-supported-enterprise-server-versions
  • cffc916 Merge pull request #2891 from austinpray-mixpanel/patch-1
  • 4420887 Add deprecation warning for CodeQL 2.16.5 and earlier
  • 4e178c5 Update supported versions table in README
  • Additional commits viewable in compare view

Updates super-linter/super-linter from 7.3.0 to 7.4.0

Release notes

Sourced from super-linter/super-linter's releases.

v7.4.0

7.4.0 (2025-05-13)

🚀 Features

🐛 Bugfixes

⬆️ Dependency updates

  • bundler: bump the rubocop group in /dependencies with 10 updates (#6661) (2757a99)
  • bundler: bump the rubocop group in /dependencies with 4 updates (#6782) (17cf935)
  • docker: bump python in the docker-base-images group (#6723) (960298b)
  • docker: bump the docker group across 1 directory with 17 updates (#6776) (8b602a4)
  • java: bump com.google.googlejavaformat:google-java-format (#6780) (aa3f3f8)
  • java: bump com.puppycrawl.tools:checkstyle (#6639) (59f2b6b)
  • npm: bump @​babel/eslint-parser in /dependencies (#6762) (fd53895)
  • npm: bump @​babel/runtime-corejs3 (#6651) (8fbf79e)
  • npm: bump @​stoplight/spectral-cli in /dependencies (#6742) (56355b5)
  • npm: bump asl-validator from 3.13.0 to 3.14.0 in /dependencies (#6631) (30aa4b3)
  • npm: bump asl-validator from 3.14.0 to 3.15.0 in /dependencies (#6777) (660f7dc)
  • npm: bump next (#6676) (f171ee5)
  • npm: bump next (#6708) (43faf95)
  • npm: bump next (#6729) (536538a)
  • npm: bump npm-groovy-lint from 15.1.0 to 15.2.0 in /dependencies (#6779) (c19a3da)
  • npm: bump prettier from 3.5.2 to 3.5.3 in /dependencies (#6629) (6864c8c)

... (truncated)

Changelog

Sourced from super-linter/super-linter's changelog.

Changelog

7.4.0 (2025-05-13)

🚀 Features

🐛 Bugfixes

⬆️ Dependency updates

  • bundler: bump the rubocop group in /dependencies with 10 updates (#6661) (2757a99)
  • bundler: bump the rubocop group in /dependencies with 4 updates (#6782) (17cf935)
  • docker: bump python in the docker-base-images group (#6723) (960298b)
  • docker: bump the docker group across 1 directory with 17 updates (#6776) (8b602a4)
  • java: bump com.google.googlejavaformat:google-java-format (#6780) (aa3f3f8)
  • java: bump com.puppycrawl.tools:checkstyle (#6639) (59f2b6b)
  • npm: bump @​babel/eslint-parser in /dependencies (#6762) (fd53895)
  • npm: bump @​babel/runtime-corejs3 (#6651) (8fbf79e)
  • npm: bump @​stoplight/spectral-cli in /dependencies (#6742) (56355b5)
  • npm: bump asl-validator from 3.13.0 to 3.14.0 in /dependencies (#6631) (30aa4b3)
  • npm: bump asl-validator from 3.14.0 to 3.15.0 in /dependencies (#6777) (660f7dc)
  • npm: bump next (#6676) (f171ee5)
  • npm: bump next (#6708) (43faf95)
  • npm: bump next (#6729) (536538a)
  • npm: bump npm-groovy-lint from 15.1.0 to 15.2.0 in /dependencies (#6779) (c19a3da)

... (truncated)

Commits
  • 1215045 chore(main): release 7.4.0 (#6634)
  • 8b602a4 deps(docker): bump the docker group across 1 directory with 17 updates (#6776)
  • f8df7f6 deps(npm): bump the stylelint group across 1 directory with 3 updates (#6775)
  • 660f7dc deps(npm): bump asl-validator from 3.14.0 to 3.15.0 in /dependencies (#6777)
  • 25d4ced deps(npm): bump renovate from 40.10.4 to 40.11.8 in /dependencies (#6778)
  • c19a3da deps(npm): bump npm-groovy-lint from 15.1.0 to 15.2.0 in /dependencies (#6779)
  • aa3f3f8 deps(java): bump com.google.googlejavaformat:google-java-format (#6780)
  • e154957 deps(python): bump the pip group across 1 directory with 3 updates (#6781)
  • 17cf935 deps(bundler): bump the rubocop group in /dependencies with 4 updates (#6782)
  • 2757a99 deps(bundler): bump the rubocop group in /dependencies with 10 updates (#6661)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the dependencies group with 3 updates
63cd9c7 
Bumps the dependencies group with 3 updates: [github/contributors](https://github.com/github/contributors), [github/codeql-action](https://github.com/github/codeql-action) and [super-linter/super-linter](https://github.com/super-linter/super-linter).


Updates `github/contributors` from 1.5.7 to 1.5.8
- [Release notes](https://github.com/github/contributors/releases)
- [Commits](9e9ce8e...6949781)

Updates `github/codeql-action` from 3.28.17 to 3.28.18
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@60168ef...ff0a06e)

Updates `super-linter/super-linter` from 7.3.0 to 7.4.0
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](super-linter/super-linter@4e8a7c2...1215045)

---
updated-dependencies:
- dependency-name: github/contributors
  dependency-version: 1.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github/codeql-action
  dependency-version: 3.28.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: super-linter/super-linter
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 19, 2025
@dependabot dependabot bot requested a review from a team as a code owner May 19, 2025 00:34
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 19, 2025
@jmeridth jmeridth enabled auto-merge May 19, 2025 00:35
@jmeridth jmeridth merged commit 05b0db2 into main May 19, 2025
27 checks passed
@jmeridth jmeridth deleted the dependabot/github_actions/dependencies-94c2bbf398 branch May 19, 2025 00:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jmeridth jmeridth jmeridth approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code maintenance
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@jmeridth