github/codeql-action (github/codeql-action)
### [`v2.22.2`](https://togithub.com/github/codeql-action/compare/v2.22.1...v2.22.2)
[Compare Source](https://togithub.com/github/codeql-action/compare/v2.22.1...v2.22.2)
### [`v2.22.1`](https://togithub.com/github/codeql-action/compare/v2.22.0...v2.22.1)
[Compare Source](https://togithub.com/github/codeql-action/compare/v2.22.0...v2.22.1)
### [`v2.22.0`](https://togithub.com/github/codeql-action/compare/v2.21.9...v2.22.0)
[Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.9...v2.22.0)
### [`v2.21.9`](https://togithub.com/github/codeql-action/compare/v2.21.8...v2.21.9)
[Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.8...v2.21.9)
google/gts (gts)
### [`v5.2.0`](https://togithub.com/google/gts/blob/HEAD/CHANGELOG.md#520-2023-10-04)
[Compare Source](https://togithub.com/google/gts/compare/v5.1.1...v5.2.0)
##### Features
- warn for ts-ignore comments for ESM ([#810](https://togithub.com/google/gts/issues/810)) ([350fbf0](https://togithub.com/google/gts/commit/350fbf0486c7470123eef19a8ab1816d1d05a6ee))
### [`v5.1.1`](https://togithub.com/google/gts/blob/HEAD/CHANGELOG.md#511-2023-10-04)
[Compare Source](https://togithub.com/google/gts/compare/v5.1.0...v5.1.1)
##### Bug Fixes
- revert feat: no-floating-promises ([44de7f7](https://togithub.com/google/gts/commit/44de7f705cea94d4781e4eb4b2d71a4ee4f0e89d))
### [`v5.1.0`](https://togithub.com/google/gts/blob/HEAD/CHANGELOG.md#510-2023-09-29)
[Compare Source](https://togithub.com/google/gts/compare/v5.0.1...v5.1.0)
##### Features
- no-floating-promises ([#756](https://togithub.com/google/gts/issues/756)) ([c93e733](https://togithub.com/google/gts/commit/c93e73316164137e29daa7bea8a48083f7d7c1da))
##### Bug Fixes
- **deps:** update dependency eslint to v8.49.0 ([#784](https://togithub.com/google/gts/issues/784)) ([5e2a05c](https://togithub.com/google/gts/commit/5e2a05c12886dc63a60219e0c0830846de7c24b9))
- **deps:** update dependency eslint to v8.50.0 ([#802](https://togithub.com/google/gts/issues/802)) ([794abf3](https://togithub.com/google/gts/commit/794abf30e4ee1d4655436ad9efa11ee031027993))
- **deps:** update dependency eslint-config-prettier to v8.10.0 ([#785](https://togithub.com/google/gts/issues/785)) ([5391d89](https://togithub.com/google/gts/commit/5391d89de2b8af68b63954b01b90f88015258406))
- **deps:** update dependency eslint-config-prettier to v9 ([#777](https://togithub.com/google/gts/issues/777)) ([470977a](https://togithub.com/google/gts/commit/470977a2bc7b29db0e4abb36c362920ec16381c5))
- **deps:** update dependency prettier to v3.0.3 ([#782](https://togithub.com/google/gts/issues/782)) ([5a04e76](https://togithub.com/google/gts/commit/5a04e76c74cb4984cbf9c7f7fbee4e800b33ca52))
- run eslint from PATH ([#654](https://togithub.com/google/gts/issues/654)) ([5dc2a76](https://togithub.com/google/gts/commit/5dc2a76aae06e5e46b6b623447837c77b58cd757))
ossf/scorecard-action (ossf/scorecard-action)
### [`v2.3.0`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.3.0)
[Compare Source](https://togithub.com/ossf/scorecard-action/compare/v2.2.0...v2.3.0)
#### What's Changed
- :seedling: Bump github.com/ossf/scorecard/v4 from v4.11.0 to v4.13.0 by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1270](https://togithub.com/ossf/scorecard-action/pull/1270)
- For a full changelist of what this includes, see the [v4.12.0](https://togithub.com/ossf/scorecard/releases/tag/v4.12.0) and [v4.13.0](https://togithub.com/ossf/scorecard/releases/tag/v4.13.0) release notes
- :sparkles: Send rekor tlog index to webapp when publishing results by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1169](https://togithub.com/ossf/scorecard-action/pull/1169)
- :bug: Prevent url clipping for GHES instances by [@rajbos](https://togithub.com/rajbos) in [https://github.com/ossf/scorecard-action/pull/1225](https://togithub.com/ossf/scorecard-action/pull/1225)
##### Documentation
- :book: Update access rights needed to see the results in code scanning by [@rajbos](https://togithub.com/rajbos) in [https://github.com/ossf/scorecard-action/pull/1229](https://togithub.com/ossf/scorecard-action/pull/1229)
- :book: Add package comments. by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1221](https://togithub.com/ossf/scorecard-action/pull/1221)
- :book: Add SECURITY.md file by [@david-a-wheeler](https://togithub.com/david-a-wheeler) in [https://github.com/ossf/scorecard-action/pull/1250](https://togithub.com/ossf/scorecard-action/pull/1250)
- :book: Fix typo in token input docs by [@aabouzaid](https://togithub.com/aabouzaid) in [https://github.com/ossf/scorecard-action/pull/1258](https://togithub.com/ossf/scorecard-action/pull/1258)
#### New Contributors
- [@david-a-wheeler](https://togithub.com/david-a-wheeler) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1250](https://togithub.com/ossf/scorecard-action/pull/1250)
- [@aabouzaid](https://togithub.com/aabouzaid) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1258](https://togithub.com/ossf/scorecard-action/pull/1258)
**Full Changelog**: https://github.com/ossf/scorecard-action/compare/v2.2.0...v2.3.0
step-security/harden-runner (step-security/harden-runner)
### [`v2.6.0`](https://togithub.com/step-security/harden-runner/releases/tag/v2.6.0)
[Compare Source](https://togithub.com/step-security/harden-runner/compare/v2.5.1...v2.6.0)
##### What's Changed
Release v2.6.0 by [@varunsh-coder](https://togithub.com/varunsh-coder) in [https://github.com/step-security/harden-runner/pull/346](https://togithub.com/step-security/harden-runner/pull/346)
This release adds support for self-hosted Virtual Machine runners (e.g. on EC2).
- Both ephemeral and persistent self-hosted VM runners are supported
- Documentation: https://docs.stepsecurity.io/harden-runner/how-tos/enable-runtime-security-vm
**Full Changelog**: https://github.com/step-security/harden-runner/compare/v2...v2.6.0
Configuration
📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
[ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.
This PR contains the following updates:
4.17.17
->4.17.19
1.2.2
->1.2.3
20.7.0
->20.8.5
2.0.12
->2.0.14
v2.21.8
->v2.22.2
5.0.1
->5.2.0
v2.2.0
->v2.3.0
v2.5.1
->v2.6.0
Release Notes
github/codeql-action (github/codeql-action)
### [`v2.22.2`](https://togithub.com/github/codeql-action/compare/v2.22.1...v2.22.2) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.22.1...v2.22.2) ### [`v2.22.1`](https://togithub.com/github/codeql-action/compare/v2.22.0...v2.22.1) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.22.0...v2.22.1) ### [`v2.22.0`](https://togithub.com/github/codeql-action/compare/v2.21.9...v2.22.0) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.9...v2.22.0) ### [`v2.21.9`](https://togithub.com/github/codeql-action/compare/v2.21.8...v2.21.9) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.8...v2.21.9)google/gts (gts)
### [`v5.2.0`](https://togithub.com/google/gts/blob/HEAD/CHANGELOG.md#520-2023-10-04) [Compare Source](https://togithub.com/google/gts/compare/v5.1.1...v5.2.0) ##### Features - warn for ts-ignore comments for ESM ([#810](https://togithub.com/google/gts/issues/810)) ([350fbf0](https://togithub.com/google/gts/commit/350fbf0486c7470123eef19a8ab1816d1d05a6ee)) ### [`v5.1.1`](https://togithub.com/google/gts/blob/HEAD/CHANGELOG.md#511-2023-10-04) [Compare Source](https://togithub.com/google/gts/compare/v5.1.0...v5.1.1) ##### Bug Fixes - revert feat: no-floating-promises ([44de7f7](https://togithub.com/google/gts/commit/44de7f705cea94d4781e4eb4b2d71a4ee4f0e89d)) ### [`v5.1.0`](https://togithub.com/google/gts/blob/HEAD/CHANGELOG.md#510-2023-09-29) [Compare Source](https://togithub.com/google/gts/compare/v5.0.1...v5.1.0) ##### Features - no-floating-promises ([#756](https://togithub.com/google/gts/issues/756)) ([c93e733](https://togithub.com/google/gts/commit/c93e73316164137e29daa7bea8a48083f7d7c1da)) ##### Bug Fixes - **deps:** update dependency eslint to v8.49.0 ([#784](https://togithub.com/google/gts/issues/784)) ([5e2a05c](https://togithub.com/google/gts/commit/5e2a05c12886dc63a60219e0c0830846de7c24b9)) - **deps:** update dependency eslint to v8.50.0 ([#802](https://togithub.com/google/gts/issues/802)) ([794abf3](https://togithub.com/google/gts/commit/794abf30e4ee1d4655436ad9efa11ee031027993)) - **deps:** update dependency eslint-config-prettier to v8.10.0 ([#785](https://togithub.com/google/gts/issues/785)) ([5391d89](https://togithub.com/google/gts/commit/5391d89de2b8af68b63954b01b90f88015258406)) - **deps:** update dependency eslint-config-prettier to v9 ([#777](https://togithub.com/google/gts/issues/777)) ([470977a](https://togithub.com/google/gts/commit/470977a2bc7b29db0e4abb36c362920ec16381c5)) - **deps:** update dependency prettier to v3.0.3 ([#782](https://togithub.com/google/gts/issues/782)) ([5a04e76](https://togithub.com/google/gts/commit/5a04e76c74cb4984cbf9c7f7fbee4e800b33ca52)) - run eslint from PATH ([#654](https://togithub.com/google/gts/issues/654)) ([5dc2a76](https://togithub.com/google/gts/commit/5dc2a76aae06e5e46b6b623447837c77b58cd757))ossf/scorecard-action (ossf/scorecard-action)
### [`v2.3.0`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.3.0) [Compare Source](https://togithub.com/ossf/scorecard-action/compare/v2.2.0...v2.3.0) #### What's Changed - :seedling: Bump github.com/ossf/scorecard/v4 from v4.11.0 to v4.13.0 by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1270](https://togithub.com/ossf/scorecard-action/pull/1270) - For a full changelist of what this includes, see the [v4.12.0](https://togithub.com/ossf/scorecard/releases/tag/v4.12.0) and [v4.13.0](https://togithub.com/ossf/scorecard/releases/tag/v4.13.0) release notes - :sparkles: Send rekor tlog index to webapp when publishing results by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1169](https://togithub.com/ossf/scorecard-action/pull/1169) - :bug: Prevent url clipping for GHES instances by [@rajbos](https://togithub.com/rajbos) in [https://github.com/ossf/scorecard-action/pull/1225](https://togithub.com/ossf/scorecard-action/pull/1225) ##### Documentation - :book: Update access rights needed to see the results in code scanning by [@rajbos](https://togithub.com/rajbos) in [https://github.com/ossf/scorecard-action/pull/1229](https://togithub.com/ossf/scorecard-action/pull/1229) - :book: Add package comments. by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1221](https://togithub.com/ossf/scorecard-action/pull/1221) - :book: Add SECURITY.md file by [@david-a-wheeler](https://togithub.com/david-a-wheeler) in [https://github.com/ossf/scorecard-action/pull/1250](https://togithub.com/ossf/scorecard-action/pull/1250) - :book: Fix typo in token input docs by [@aabouzaid](https://togithub.com/aabouzaid) in [https://github.com/ossf/scorecard-action/pull/1258](https://togithub.com/ossf/scorecard-action/pull/1258) #### New Contributors - [@david-a-wheeler](https://togithub.com/david-a-wheeler) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1250](https://togithub.com/ossf/scorecard-action/pull/1250) - [@aabouzaid](https://togithub.com/aabouzaid) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1258](https://togithub.com/ossf/scorecard-action/pull/1258) **Full Changelog**: https://github.com/ossf/scorecard-action/compare/v2.2.0...v2.3.0step-security/harden-runner (step-security/harden-runner)
### [`v2.6.0`](https://togithub.com/step-security/harden-runner/releases/tag/v2.6.0) [Compare Source](https://togithub.com/step-security/harden-runner/compare/v2.5.1...v2.6.0) ##### What's Changed Release v2.6.0 by [@varunsh-coder](https://togithub.com/varunsh-coder) in [https://github.com/step-security/harden-runner/pull/346](https://togithub.com/step-security/harden-runner/pull/346) This release adds support for self-hosted Virtual Machine runners (e.g. on EC2). - Both ephemeral and persistent self-hosted VM runners are supported - Documentation: https://docs.stepsecurity.io/harden-runner/how-tos/enable-runtime-security-vm **Full Changelog**: https://github.com/step-security/harden-runner/compare/v2...v2.6.0Configuration
📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.