Warnings were logged while processing this repo. Please check the logs for more information.
Release Notes
actions/setup-java (actions/setup-java)
### [`v3.13.0`](https://togithub.com/actions/setup-java/releases/tag/v3.13.0)
[Compare Source](https://togithub.com/actions/setup-java/compare/v3.12.0...v3.13.0)
##### What's changed
In the scope of this release, support for Dragonwell JDK was added by [@Accelerator1996](https://togithub.com/Accelerator1996) in [https://github.com/actions/setup-java/pull/532](https://togithub.com/actions/setup-java/pull/532)
```yaml
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Setup-java
uses: actions/setup-java@v3
with:
distribution: 'dragonwell'
java-version: '17'
```
Several inaccuracies were also fixed:
- Fix XML namespaces wrongly using https by [@gnodet](https://togithub.com/gnodet) in [https://github.com/actions/setup-java/pull/503](https://togithub.com/actions/setup-java/pull/503)
- Fix typo and remove unintentional(?) word by [@CyberFlameGO](https://togithub.com/CyberFlameGO) in [https://github.com/actions/setup-java/pull/518](https://togithub.com/actions/setup-java/pull/518)
- Fix usage link within the README.md file by [@dassiorleando](https://togithub.com/dassiorleando) in [https://github.com/actions/setup-java/pull/525](https://togithub.com/actions/setup-java/pull/525)
##### New Contributors
- [@CyberFlameGO](https://togithub.com/CyberFlameGO) made their first contribution in [https://github.com/actions/setup-java/pull/518](https://togithub.com/actions/setup-java/pull/518)
- [@dassiorleando](https://togithub.com/dassiorleando) made their first contribution in [https://github.com/actions/setup-java/pull/525](https://togithub.com/actions/setup-java/pull/525)
- [@gnodet](https://togithub.com/gnodet) made their first contribution in [https://github.com/actions/setup-java/pull/503](https://togithub.com/actions/setup-java/pull/503)
- [@Accelerator1996](https://togithub.com/Accelerator1996) made their first contribution in [https://github.com/actions/setup-java/pull/532](https://togithub.com/actions/setup-java/pull/532)
**Full Changelog**: https://github.com/actions/setup-java/compare/v3...v3.13.0
github/codeql-action (github/codeql-action)
### [`v2.22.3`](https://togithub.com/github/codeql-action/compare/v2.22.2...v2.22.3)
[Compare Source](https://togithub.com/github/codeql-action/compare/v2.22.2...v2.22.3)
### [`v2.22.2`](https://togithub.com/github/codeql-action/compare/v2.22.1...v2.22.2)
[Compare Source](https://togithub.com/github/codeql-action/compare/v2.22.1...v2.22.2)
### [`v2.22.1`](https://togithub.com/github/codeql-action/compare/v2.22.0...v2.22.1)
[Compare Source](https://togithub.com/github/codeql-action/compare/v2.22.0...v2.22.1)
### [`v2.22.0`](https://togithub.com/github/codeql-action/compare/v2.21.9...v2.22.0)
[Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.9...v2.22.0)
### [`v2.21.9`](https://togithub.com/github/codeql-action/compare/v2.21.8...v2.21.9)
[Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.8...v2.21.9)
### [`v2.21.8`](https://togithub.com/github/codeql-action/compare/v2.21.7...v2.21.8)
[Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.7...v2.21.8)
### [`v2.21.7`](https://togithub.com/github/codeql-action/compare/v2.21.6...v2.21.7)
[Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.6...v2.21.7)
### [`v2.21.6`](https://togithub.com/github/codeql-action/compare/v2.21.5...v2.21.6)
[Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.5...v2.21.6)
ossf/scorecard-action (ossf/scorecard-action)
### [`v2.3.0`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.3.0)
[Compare Source](https://togithub.com/ossf/scorecard-action/compare/v2.2.0...v2.3.0)
#### What's Changed
- :seedling: Bump github.com/ossf/scorecard/v4 from v4.11.0 to v4.13.0 by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1270](https://togithub.com/ossf/scorecard-action/pull/1270)
- For a full changelist of what this includes, see the [v4.12.0](https://togithub.com/ossf/scorecard/releases/tag/v4.12.0) and [v4.13.0](https://togithub.com/ossf/scorecard/releases/tag/v4.13.0) release notes
- :sparkles: Send rekor tlog index to webapp when publishing results by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1169](https://togithub.com/ossf/scorecard-action/pull/1169)
- :bug: Prevent url clipping for GHES instances by [@rajbos](https://togithub.com/rajbos) in [https://github.com/ossf/scorecard-action/pull/1225](https://togithub.com/ossf/scorecard-action/pull/1225)
##### Documentation
- :book: Update access rights needed to see the results in code scanning by [@rajbos](https://togithub.com/rajbos) in [https://github.com/ossf/scorecard-action/pull/1229](https://togithub.com/ossf/scorecard-action/pull/1229)
- :book: Add package comments. by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1221](https://togithub.com/ossf/scorecard-action/pull/1221)
- :book: Add SECURITY.md file by [@david-a-wheeler](https://togithub.com/david-a-wheeler) in [https://github.com/ossf/scorecard-action/pull/1250](https://togithub.com/ossf/scorecard-action/pull/1250)
- :book: Fix typo in token input docs by [@aabouzaid](https://togithub.com/aabouzaid) in [https://github.com/ossf/scorecard-action/pull/1258](https://togithub.com/ossf/scorecard-action/pull/1258)
#### New Contributors
- [@david-a-wheeler](https://togithub.com/david-a-wheeler) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1250](https://togithub.com/ossf/scorecard-action/pull/1250)
- [@aabouzaid](https://togithub.com/aabouzaid) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1258](https://togithub.com/ossf/scorecard-action/pull/1258)
**Full Changelog**: https://github.com/ossf/scorecard-action/compare/v2.2.0...v2.3.0
step-security/harden-runner (step-security/harden-runner)
### [`v2.6.0`](https://togithub.com/step-security/harden-runner/releases/tag/v2.6.0)
[Compare Source](https://togithub.com/step-security/harden-runner/compare/v2.5.1...v2.6.0)
##### What's Changed
Release v2.6.0 by [@varunsh-coder](https://togithub.com/varunsh-coder) in [https://github.com/step-security/harden-runner/pull/346](https://togithub.com/step-security/harden-runner/pull/346)
This release adds support for self-hosted Virtual Machine runners (e.g. on EC2).
- Both ephemeral and persistent self-hosted VM runners are supported
- Documentation: https://docs.stepsecurity.io/harden-runner/how-tos/enable-runtime-security-vm
**Full Changelog**: https://github.com/step-security/harden-runner/compare/v2...v2.6.0
GoogleCloudPlatform/app-maven-plugin (com.google.cloud.tools:appengine-maven-plugin)
### [`v2.5.0`](https://togithub.com/GoogleCloudPlatform/app-maven-plugin/blob/HEAD/CHANGELOG.md#250)
[Compare Source](https://togithub.com/GoogleCloudPlatform/app-maven-plugin/compare/v2.4.4...v2.5.0)
- Update to appengine-plugins-core 0.10.0 that supports GAE java17 and java21 runtimes.
Configuration
📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
v3.12.0
->v3.13.0
v2.21.5
->v2.22.3
v2.2.0
->v2.3.0
v2.5.1
->v2.6.0
3.5.0
->3.5.1
9.4.52.v20230823
->9.4.53.v20231009
3.5.0
->3.6.0
9.4.52.v20230823
->9.4.53.v20231009
9.4.52.v20230823
->9.4.53.v20231009
2.4.4
->2.5.0
3.9.4
->3.9.5
3.9.4
->3.9.5
⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the logs for more information.
Release Notes
actions/setup-java (actions/setup-java)
### [`v3.13.0`](https://togithub.com/actions/setup-java/releases/tag/v3.13.0) [Compare Source](https://togithub.com/actions/setup-java/compare/v3.12.0...v3.13.0) ##### What's changed In the scope of this release, support for Dragonwell JDK was added by [@Accelerator1996](https://togithub.com/Accelerator1996) in [https://github.com/actions/setup-java/pull/532](https://togithub.com/actions/setup-java/pull/532) ```yaml steps: - name: Checkout uses: actions/checkout@v3 - name: Setup-java uses: actions/setup-java@v3 with: distribution: 'dragonwell' java-version: '17' ``` Several inaccuracies were also fixed: - Fix XML namespaces wrongly using https by [@gnodet](https://togithub.com/gnodet) in [https://github.com/actions/setup-java/pull/503](https://togithub.com/actions/setup-java/pull/503) - Fix typo and remove unintentional(?) word by [@CyberFlameGO](https://togithub.com/CyberFlameGO) in [https://github.com/actions/setup-java/pull/518](https://togithub.com/actions/setup-java/pull/518) - Fix usage link within the README.md file by [@dassiorleando](https://togithub.com/dassiorleando) in [https://github.com/actions/setup-java/pull/525](https://togithub.com/actions/setup-java/pull/525) ##### New Contributors - [@CyberFlameGO](https://togithub.com/CyberFlameGO) made their first contribution in [https://github.com/actions/setup-java/pull/518](https://togithub.com/actions/setup-java/pull/518) - [@dassiorleando](https://togithub.com/dassiorleando) made their first contribution in [https://github.com/actions/setup-java/pull/525](https://togithub.com/actions/setup-java/pull/525) - [@gnodet](https://togithub.com/gnodet) made their first contribution in [https://github.com/actions/setup-java/pull/503](https://togithub.com/actions/setup-java/pull/503) - [@Accelerator1996](https://togithub.com/Accelerator1996) made their first contribution in [https://github.com/actions/setup-java/pull/532](https://togithub.com/actions/setup-java/pull/532) **Full Changelog**: https://github.com/actions/setup-java/compare/v3...v3.13.0github/codeql-action (github/codeql-action)
### [`v2.22.3`](https://togithub.com/github/codeql-action/compare/v2.22.2...v2.22.3) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.22.2...v2.22.3) ### [`v2.22.2`](https://togithub.com/github/codeql-action/compare/v2.22.1...v2.22.2) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.22.1...v2.22.2) ### [`v2.22.1`](https://togithub.com/github/codeql-action/compare/v2.22.0...v2.22.1) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.22.0...v2.22.1) ### [`v2.22.0`](https://togithub.com/github/codeql-action/compare/v2.21.9...v2.22.0) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.9...v2.22.0) ### [`v2.21.9`](https://togithub.com/github/codeql-action/compare/v2.21.8...v2.21.9) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.8...v2.21.9) ### [`v2.21.8`](https://togithub.com/github/codeql-action/compare/v2.21.7...v2.21.8) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.7...v2.21.8) ### [`v2.21.7`](https://togithub.com/github/codeql-action/compare/v2.21.6...v2.21.7) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.6...v2.21.7) ### [`v2.21.6`](https://togithub.com/github/codeql-action/compare/v2.21.5...v2.21.6) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.5...v2.21.6)ossf/scorecard-action (ossf/scorecard-action)
### [`v2.3.0`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.3.0) [Compare Source](https://togithub.com/ossf/scorecard-action/compare/v2.2.0...v2.3.0) #### What's Changed - :seedling: Bump github.com/ossf/scorecard/v4 from v4.11.0 to v4.13.0 by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1270](https://togithub.com/ossf/scorecard-action/pull/1270) - For a full changelist of what this includes, see the [v4.12.0](https://togithub.com/ossf/scorecard/releases/tag/v4.12.0) and [v4.13.0](https://togithub.com/ossf/scorecard/releases/tag/v4.13.0) release notes - :sparkles: Send rekor tlog index to webapp when publishing results by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1169](https://togithub.com/ossf/scorecard-action/pull/1169) - :bug: Prevent url clipping for GHES instances by [@rajbos](https://togithub.com/rajbos) in [https://github.com/ossf/scorecard-action/pull/1225](https://togithub.com/ossf/scorecard-action/pull/1225) ##### Documentation - :book: Update access rights needed to see the results in code scanning by [@rajbos](https://togithub.com/rajbos) in [https://github.com/ossf/scorecard-action/pull/1229](https://togithub.com/ossf/scorecard-action/pull/1229) - :book: Add package comments. by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1221](https://togithub.com/ossf/scorecard-action/pull/1221) - :book: Add SECURITY.md file by [@david-a-wheeler](https://togithub.com/david-a-wheeler) in [https://github.com/ossf/scorecard-action/pull/1250](https://togithub.com/ossf/scorecard-action/pull/1250) - :book: Fix typo in token input docs by [@aabouzaid](https://togithub.com/aabouzaid) in [https://github.com/ossf/scorecard-action/pull/1258](https://togithub.com/ossf/scorecard-action/pull/1258) #### New Contributors - [@david-a-wheeler](https://togithub.com/david-a-wheeler) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1250](https://togithub.com/ossf/scorecard-action/pull/1250) - [@aabouzaid](https://togithub.com/aabouzaid) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1258](https://togithub.com/ossf/scorecard-action/pull/1258) **Full Changelog**: https://github.com/ossf/scorecard-action/compare/v2.2.0...v2.3.0step-security/harden-runner (step-security/harden-runner)
### [`v2.6.0`](https://togithub.com/step-security/harden-runner/releases/tag/v2.6.0) [Compare Source](https://togithub.com/step-security/harden-runner/compare/v2.5.1...v2.6.0) ##### What's Changed Release v2.6.0 by [@varunsh-coder](https://togithub.com/varunsh-coder) in [https://github.com/step-security/harden-runner/pull/346](https://togithub.com/step-security/harden-runner/pull/346) This release adds support for self-hosted Virtual Machine runners (e.g. on EC2). - Both ephemeral and persistent self-hosted VM runners are supported - Documentation: https://docs.stepsecurity.io/harden-runner/how-tos/enable-runtime-security-vm **Full Changelog**: https://github.com/step-security/harden-runner/compare/v2...v2.6.0GoogleCloudPlatform/app-maven-plugin (com.google.cloud.tools:appengine-maven-plugin)
### [`v2.5.0`](https://togithub.com/GoogleCloudPlatform/app-maven-plugin/blob/HEAD/CHANGELOG.md#250) [Compare Source](https://togithub.com/GoogleCloudPlatform/app-maven-plugin/compare/v2.4.4...v2.5.0) - Update to appengine-plugins-core 0.10.0 that supports GAE java17 and java21 runtimes.Configuration
📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.