Skip to content

chore(deps): update all non-major dependencies - #276

Merged
renovate[bot] merged 1 commit into
masterfrom
renovate/all-minor-patch
Sep 21, 2026
Merged

renovate[bot] merged 1 commit into
masterfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Sep 21, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
docker/build-push-action action minor v7.3.0 → v7.4.0
docker/setup-buildx-action action minor v4.3.0 → v4.4.1
docker/setup-qemu-action action minor v4.3.0 → v4.4.0
github/codeql-action action patch v4.38.0 → v4.38.1

Release Notes

docker/build-push-action (docker/build-push-action)

v7.4.0

Compare Source

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

docker/setup-buildx-action (docker/setup-buildx-action)

v4.4.1

Compare Source

v4.4.0

Compare Source

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

docker/setup-qemu-action (docker/setup-qemu-action)

v4.4.0

Compare Source

Full Changelog: docker/setup-qemu-action@v4.3.0...v4.4.0

github/codeql-action (github/codeql-action)

v4.38.1

Compare Source

  • The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #​4146

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Sep 21, 2026 •

Copy link
Copy Markdown
Contributor

✅MegaLinter analysis: Success

Descriptor Linter Files Fixed Errors Max errors Warnings Elapsed time
✅ ACTION actionlint 4 0 0 0.05s
✅ ACTION zizmor 4 0 0 3.8s
✅ COPYPASTE jscpd yes no no 0.38s
✅ DOCKERFILE hadolint 1 0 0 0.08s
✅ JSON jsonlint 3 0 0 0.13s
✅ JSON prettier 3 0 0 0.43s
✅ JSON v8r 3 0 0 1.8s
✅ MARKDOWN markdownlint 1 0 0 0.31s
✅ MARKDOWN markdown-table-formatter 1 0 0 0.23s
✅ PYTHON bandit 1 0 0 2.39s
✅ PYTHON black 1 0 0 2.92s
✅ PYTHON flake8 1 0 0 1.42s
✅ PYTHON isort 1 0 0 0.26s
✅ PYTHON mypy 1 0 0 2.41s
✅ PYTHON pylint 1 0 0 2.3s
✅ PYTHON pyright 1 0 0 1.24s
✅ PYTHON ruff 1 0 0 0.04s
✅ REPOSITORY betterleaks yes no no 0.53s
✅ REPOSITORY checkov yes no no 22.85s
✅ REPOSITORY dustilock yes no no 0.03s
✅ REPOSITORY git_diff yes no no 0.01s
✅ REPOSITORY grype yes no no 56.23s
✅ REPOSITORY kingfisher yes no no 4.21s
✅ REPOSITORY osv-scanner yes no no 0.1s
✅ REPOSITORY secretlint yes no no 0.46s
✅ REPOSITORY syft yes no no 1.53s
✅ REPOSITORY trivy yes no no 10.4s
✅ REPOSITORY trivy-sbom yes no no 0.28s
✅ REPOSITORY trufflehog yes no no 2.76s
✅ YAML prettier 7 0 0 0.52s
✅ YAML v8r 7 0 0 4.15s
✅ YAML yamllint 7 0 0 0.51s

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_KICS. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@10.1.0 --custom-flavor-setup --custom-flavor-linters PYTHON_PYLINT,PYTHON_BLACK,PYTHON_FLAKE8,PYTHON_ISORT,PYTHON_BANDIT,PYTHON_MYPY,PYTHON_PYRIGHT,PYTHON_RUFF,ACTION_ACTIONLINT,ACTION_ZIZMOR,COPYPASTE_JSCPD,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_DUSTILOCK,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,REPOSITORY_KINGFISHER,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 36cc306 to cddaea4 Compare September 21, 2026 05:38
@github-actions

Copy link
Copy Markdown
Contributor

Trivy image scan report

ghcr.io/chgl/github-reusable-workflow-without-test-image:pr-276 (debian 13.7)

No Vulnerabilities found

No Misconfigurations found

Python

3 known vulnerabilities found (CRITICAL: 0 HIGH: 2 MEDIUM: 1 LOW: 0)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
msgpack GHSA-6v7p-g79w-8964 HIGH 1.1.2 1.2.1
setuptools CVE-2025-47273 HIGH 70.3.0 78.1.1
setuptools CVE-2026-59890 MEDIUM 70.3.0 83.0.0

No Misconfigurations found

@github-actions

Copy link
Copy Markdown
Contributor

Trivy image scan report

ghcr.io/chgl/github-reusable-workflow:pr-276 (debian 13.7)

No Vulnerabilities found

No Misconfigurations found

Python

3 known vulnerabilities found (CRITICAL: 0 HIGH: 2 MEDIUM: 1 LOW: 0)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
msgpack GHSA-6v7p-g79w-8964 HIGH 1.1.2 1.2.1
setuptools CVE-2025-47273 HIGH 70.3.0 78.1.1
setuptools CVE-2026-59890 MEDIUM 70.3.0 83.0.0

No Misconfigurations found

@github-actions

Copy link
Copy Markdown
Contributor

Trivy image scan report

ghcr.io/chgl/github-reusable-workflow-with-fixed-image-tags:v1.2.3-beta.123 (debian 13.7)

No Vulnerabilities found

No Misconfigurations found

Python

3 known vulnerabilities found (CRITICAL: 0 HIGH: 2 MEDIUM: 1 LOW: 0)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
msgpack GHSA-6v7p-g79w-8964 HIGH 1.1.2 1.2.1
setuptools CVE-2025-47273 HIGH 70.3.0 78.1.1
setuptools CVE-2026-59890 MEDIUM 70.3.0 83.0.0

No Misconfigurations found

@renovate
renovate Bot merged commit 2ac12df into master Sep 21, 2026
41 checks passed
@renovate
renovate Bot deleted the renovate/all-minor-patch branch September 21, 2026 09:08
@github-actions

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 1.11.60 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant