chore(deps): update github actions all dependencies

This PR contains the following updates:

Package	Type	Update	Change
aquasecurity/trivy-action	action	minor	`0.12.0` -> `0.14.0`
bcgov-nr/action-builder-ghcr	action	minor	`v1.2.0` -> `v1.3.0`
bcgov-nr/action-deployer-openshift	action	minor	`v1.0.2` -> `v1.4.0`
bcgov-nr/action-test-and-analyse-java	action	minor	`v0.1.0` -> `v0.2.0`
docker/login-action	action	digest	`f4ef78c` -> `3d58c27`
madrapps/jacoco-report	action	minor	`v1.3` -> `v1.6`

Release Notes

aquasecurity/trivy-action (aquasecurity/trivy-action)

### [`v0.14.0`](https://togithub.com/aquasecurity/trivy-action/releases/tag/0.14.0) [Compare Source](https://togithub.com/aquasecurity/trivy-action/compare/0.13.1...0.14.0) #### What's Changed - fix: set return code after each Trivy call by [@LiamMacP](https://togithub.com/LiamMacP) in [https://github.com/aquasecurity/trivy-action/pull/247](https://togithub.com/aquasecurity/trivy-action/pull/247) - Update to `trivy` version `0.47.0` in Dockerfile by [@MPV](https://togithub.com/MPV) in [https://github.com/aquasecurity/trivy-action/pull/280](https://togithub.com/aquasecurity/trivy-action/pull/280) - feature: add filesystem alias by [@kderck](https://togithub.com/kderck) in [https://github.com/aquasecurity/trivy-action/pull/269](https://togithub.com/aquasecurity/trivy-action/pull/269) #### New Contributors - [@LiamMacP](https://togithub.com/LiamMacP) made their first contribution in [https://github.com/aquasecurity/trivy-action/pull/247](https://togithub.com/aquasecurity/trivy-action/pull/247) - [@MPV](https://togithub.com/MPV) made their first contribution in [https://github.com/aquasecurity/trivy-action/pull/280](https://togithub.com/aquasecurity/trivy-action/pull/280) - [@kderck](https://togithub.com/kderck) made their first contribution in [https://github.com/aquasecurity/trivy-action/pull/269](https://togithub.com/aquasecurity/trivy-action/pull/269) **Full Changelog**: https://github.com/aquasecurity/trivy-action/compare/0.13.1...0.14.0 ### [`v0.13.1`](https://togithub.com/aquasecurity/trivy-action/releases/tag/0.13.1) [Compare Source](https://togithub.com/aquasecurity/trivy-action/compare/0.13.0...0.13.1) #### What's Changed - Update Dockerfile to 0.46.1 by [@witoldsleczkowski](https://togithub.com/witoldsleczkowski) in [https://github.com/aquasecurity/trivy-action/pull/277](https://togithub.com/aquasecurity/trivy-action/pull/277) #### New Contributors - [@witoldsleczkowski](https://togithub.com/witoldsleczkowski) made their first contribution in [https://github.com/aquasecurity/trivy-action/pull/277](https://togithub.com/aquasecurity/trivy-action/pull/277) **Full Changelog**: https://github.com/aquasecurity/trivy-action/compare/0.13.0...0.13.1 ### [`v0.13.0`](https://togithub.com/aquasecurity/trivy-action/releases/tag/0.13.0) [Compare Source](https://togithub.com/aquasecurity/trivy-action/compare/0.12.0...0.13.0) #### What's Changed - fix: mark image-ref attribute optional by [@arxeiss](https://togithub.com/arxeiss) in [https://github.com/aquasecurity/trivy-action/pull/261](https://togithub.com/aquasecurity/trivy-action/pull/261) - Update Dockerfile to 0.46.0 by [@Cr0n1c](https://togithub.com/Cr0n1c) in [https://github.com/aquasecurity/trivy-action/pull/274](https://togithub.com/aquasecurity/trivy-action/pull/274) #### New Contributors - [@arxeiss](https://togithub.com/arxeiss) made their first contribution in [https://github.com/aquasecurity/trivy-action/pull/261](https://togithub.com/aquasecurity/trivy-action/pull/261) - [@Cr0n1c](https://togithub.com/Cr0n1c) made their first contribution in [https://github.com/aquasecurity/trivy-action/pull/274](https://togithub.com/aquasecurity/trivy-action/pull/274) **Full Changelog**: https://github.com/aquasecurity/trivy-action/compare/0.12.0...0.13.0

bcgov-nr/action-builder-ghcr (bcgov-nr/action-builder-ghcr)

### [`v1.3.0`](https://togithub.com/bcgov-nr/action-builder-ghcr/releases/tag/v1.3.0) [Compare Source](https://togithub.com/bcgov-nr/action-builder-ghcr/compare/v1.2.1...v1.3.0) #### New Features - `keep_versions` deletes older GHCR containers, keeping the specified number - `keep_regex` automatically keeps `test` and `prod` tags, but can be overridden - `build_file` can be omitted if in the `build_context` folder - `token` can be omitted if using the default `github.token` #### What's Changed - feat: make token optional, allow inherit by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-builder-ghcr/pull/31](https://togithub.com/bcgov-nr/action-builder-ghcr/pull/31) - fix: pr close by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-builder-ghcr/pull/32](https://togithub.com/bcgov-nr/action-builder-ghcr/pull/32) - feat: ghcr cleanup w/ keep_versions and keep_regex by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-builder-ghcr/pull/33](https://togithub.com/bcgov-nr/action-builder-ghcr/pull/33) - feat: parameters, cleanup and codeowners by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-builder-ghcr/pull/34](https://togithub.com/bcgov-nr/action-builder-ghcr/pull/34) **Full Changelog**: https://github.com/bcgov-nr/action-builder-ghcr/compare/v1.2.1...v1.3.0 ### [`v1.2.1`](https://togithub.com/bcgov-nr/action-builder-ghcr/releases/tag/v1.2.1) [Compare Source](https://togithub.com/bcgov-nr/action-builder-ghcr/compare/v1.2.0...v1.2.1) #### What's Changed - Configure Renovate by [@bcgov-devops](https://togithub.com/bcgov-devops) in [https://github.com/bcgov-nr/action-builder-ghcr/pull/23](https://togithub.com/bcgov-nr/action-builder-ghcr/pull/23) - build(deps): bump actions/checkout from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/bcgov-nr/action-builder-ghcr/pull/25](https://togithub.com/bcgov-nr/action-builder-ghcr/pull/25) - build(deps): bump docker/build-push-action from 4 to 5 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/bcgov-nr/action-builder-ghcr/pull/27](https://togithub.com/bcgov-nr/action-builder-ghcr/pull/27) - build(deps): bump docker/login-action from 2 to 3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/bcgov-nr/action-builder-ghcr/pull/26](https://togithub.com/bcgov-nr/action-builder-ghcr/pull/26) - build(deps): bump docker/setup-buildx-action from 2 to 3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/bcgov-nr/action-builder-ghcr/pull/28](https://togithub.com/bcgov-nr/action-builder-ghcr/pull/28) - bug: disable buildx provenance by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-builder-ghcr/pull/29](https://togithub.com/bcgov-nr/action-builder-ghcr/pull/29) - ci: disable Dependabot, using Renovate by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-builder-ghcr/pull/30](https://togithub.com/bcgov-nr/action-builder-ghcr/pull/30) #### New Contributors - [@bcgov-devops](https://togithub.com/bcgov-devops) made their first contribution in [https://github.com/bcgov-nr/action-builder-ghcr/pull/23](https://togithub.com/bcgov-nr/action-builder-ghcr/pull/23) **Full Changelog**: https://github.com/bcgov-nr/action-builder-ghcr/compare/v1.2.0...v1.2.1

bcgov-nr/action-deployer-openshift (bcgov-nr/action-deployer-openshift)

### [`v1.4.0`](https://togithub.com/bcgov-nr/action-deployer-openshift/releases/tag/v1.4.0) [Compare Source](https://togithub.com/bcgov-nr/action-deployer-openshift/compare/v1.3.0...v1.4.0) ##### Breaking Changes - `timeout` parameter, if left unset, will cause deployments to stop/fail after 15 minutes ##### New Features - `timeout` parameter to prevent deployments from running indefinitely - `penetration_test_artifact` to prevent artifact collisions - token passing to avoid issue duplication, inherited from calling workflow - `penetration_test_token` param to override inherited token ##### What's Changed - Explain issue commenting for penetration_test_issue by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/40](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/40) - Bump zaproxy/action-full-scan from 0.6.0 to 0.7.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/41](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/41) - Configure Renovate by [@bcgov-devops](https://togithub.com/bcgov-devops) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/42](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/42) - Bump actions/checkout from 3 to 4 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/44](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/44) - feat: timeout, parameter by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/45](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/45) - ci: disable Dependabot in favour of Renovate by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/46](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/46) - Codeowners by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/47](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/47) - feat: token param by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/48](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/48) - feat: param for artifact names, avoid collisions by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/49](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/49) - docs: penetration_test_artifact by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/50](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/50) ##### New Contributors - [@bcgov-devops](https://togithub.com/bcgov-devops) made their first contribution in [https://github.com/bcgov-nr/action-deployer-openshift/pull/42](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/42) **Full Changelog**: https://github.com/bcgov-nr/action-deployer-openshift/compare/v1.3.0...v1.4.0 ### [`v1.3.0`](https://togithub.com/bcgov-nr/action-deployer-openshift/releases/tag/v1.3.0) [Compare Source](https://togithub.com/bcgov-nr/action-deployer-openshift/compare/v1.2.1...v1.3.0) ##### What's Changed - feat: allow zap to create issues by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/39](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/39) **Full Changelog**: https://github.com/bcgov-nr/action-deployer-openshift/compare/v1.2.1...v1.3.0 ### [`v1.2.1`](https://togithub.com/bcgov-nr/action-deployer-openshift/releases/tag/v1.2.1) [Compare Source](https://togithub.com/bcgov-nr/action-deployer-openshift/compare/v1.2.0...v1.2.1) ##### What's Changed - Bump zaproxy/action-full-scan from 0.5.1 to 0.6.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/37](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/37) **Full Changelog**: https://github.com/bcgov-nr/action-deployer-openshift/compare/v1.2.0...v1.2.1 ### [`v1.2.0`](https://togithub.com/bcgov-nr/action-deployer-openshift/releases/tag/v1.2.0) [Compare Source](https://togithub.com/bcgov-nr/action-deployer-openshift/compare/v1.1.1...v1.2.0) ##### What's Changed Update to ZAProxy scan to address GitHub actions deprecating Node 12. - Bump zaproxy/action-full-scan from 0.4.0 to 0.5.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/36](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/36) **Full Changelog**: https://github.com/bcgov-nr/action-deployer-openshift/compare/v1.1.0...v1.2.0 ### [`v1.1.1`](https://togithub.com/bcgov-nr/action-deployer-openshift/releases/tag/v1.1.1) [Compare Source](https://togithub.com/bcgov-nr/action-deployer-openshift/compare/v1.1.0...v1.1.1) ##### What's Changed - feat: deployment triggers by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/31](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/31) - feat: omit trigger to always deploy by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/32](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/32) - bug: drop quotes around inputs.triggers by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/34](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/34) **Full Changelog**: https://github.com/bcgov-nr/action-deployer-openshift/compare/v1.0.5...v1.1.1 ### [`v1.1.0`](https://togithub.com/bcgov-nr/action-deployer-openshift/releases/tag/v1.1.0) [Compare Source](https://togithub.com/bcgov-nr/action-deployer-openshift/compare/v1.0.5...v1.1.0) ##### What's Changed - feat: deployment triggers by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/31](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/31) - feat: omit trigger to always deploy by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/32](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/32) - drop quotes around inputs.triggers by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/34](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/34) **Full Changelog**: https://github.com/bcgov-nr/action-deployer-openshift/compare/v1.0.5...v1.1.0 ### [`v1.0.5`](https://togithub.com/bcgov-nr/action-deployer-openshift/releases/tag/v1.0.5) [Compare Source](https://togithub.com/bcgov-nr/action-deployer-openshift/compare/v1.0.4...v1.0.5) ##### What's Changed - Bug: multiple image stream handling by [@barrfalk](https://togithub.com/barrfalk) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/28](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/28) - Chore: update image repo by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/29](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/29) - Bug: renamed envar to prevent collision by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/30](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/30) ##### New Contributors - [@barrfalk](https://togithub.com/barrfalk) made their first contribution in [https://github.com/bcgov-nr/action-deployer-openshift/pull/28](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/28) **Full Changelog**: https://github.com/bcgov-nr/action-deployer-openshift/compare/v1.0.4...v1.0.5 ### [`v1.0.4`](https://togithub.com/bcgov-nr/action-deployer-openshift/releases/tag/v1.0.4) [Compare Source](https://togithub.com/bcgov-nr/action-deployer-openshift/compare/v1.0.3...v1.0.4) #### What's Changed - Support multiple imageStreams by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/26](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/26) **Full Changelog**: https://github.com/bcgov-nr/action-deployer-openshift/compare/v1.0.3...v1.0.4 ### [`v1.0.3`](https://togithub.com/bcgov-nr/action-deployer-openshift/releases/tag/v1.0.3) [Compare Source](https://togithub.com/bcgov-nr/action-deployer-openshift/compare/v1.0.2...v1.0.3) #### What's Changed - Stop cleaning up parameters by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-deployer-openshift/pull/24](https://togithub.com/bcgov-nr/action-deployer-openshift/pull/24) ^ Bug: parameter cleanup was dropping parameter quotes **Full Changelog**: https://github.com/bcgov-nr/action-deployer-openshift/compare/v1.0.2...v1.0.3

bcgov-nr/action-test-and-analyse-java (bcgov-nr/action-test-and-analyse-java)

### [`v0.2.0`](https://togithub.com/bcgov-nr/action-test-and-analyse-java/releases/tag/v0.2.0) [Compare Source](https://togithub.com/bcgov-nr/action-test-and-analyse-java/compare/v0.1.0...v0.2.0) ##### What's Changed - GHA deprecated set-output by [@DerekRoberts](https://togithub.com/DerekRoberts) in [https://github.com/bcgov-nr/action-test-and-analyse-java/pull/8](https://togithub.com/bcgov-nr/action-test-and-analyse-java/pull/8) - feat: adding support for github artifact repository by [@paulushcgcj](https://togithub.com/paulushcgcj) in [https://github.com/bcgov-nr/action-test-and-analyse-java/pull/10](https://togithub.com/bcgov-nr/action-test-and-analyse-java/pull/10) ##### New Contributors - [@paulushcgcj](https://togithub.com/paulushcgcj) made their first contribution in [https://github.com/bcgov-nr/action-test-and-analyse-java/pull/10](https://togithub.com/bcgov-nr/action-test-and-analyse-java/pull/10) **Full Changelog**: https://github.com/bcgov-nr/action-test-and-analyse-java/compare/v0.1.0...v0.2.0

madrapps/jacoco-report (madrapps/jacoco-report)

### [`v1.6`](https://togithub.com/Madrapps/jacoco-report/releases/tag/v1.6) [Compare Source](https://togithub.com/madrapps/jacoco-report/compare/v1.5...v1.6) #### What's Changed - Customize the pass and fail emojis - Show coverage of the Changed Files (Diff) - Styling title to custom headings **Full Changelog**: https://github.com/Madrapps/jacoco-report/compare/v1.5...v1.6 ### [`v1.5`](https://togithub.com/Madrapps/jacoco-report/releases/tag/v1.5) [Compare Source](https://togithub.com/madrapps/jacoco-report/compare/v1.4...v1.5) #### What's Changed - `skip-if-no-changes` option: If true, comment won't be added if there is no coverage information present for the files changed - Suport for JaCoCo aggregated reports (support for the `` tag in the report) - Full support for Multi module projects (comment has module level coverage info in addition to the file level coverage) #### New Contributors - [@tfij](https://togithub.com/tfij) made their first contribution in [https://github.com/Madrapps/jacoco-report/pull/26](https://togithub.com/Madrapps/jacoco-report/pull/26) - [@imbyungjun](https://togithub.com/imbyungjun) made their first contribution in [https://github.com/Madrapps/jacoco-report/pull/33](https://togithub.com/Madrapps/jacoco-report/pull/33) - [@mavotto](https://togithub.com/mavotto) made their first contribution in [https://github.com/Madrapps/jacoco-report/pull/45](https://togithub.com/Madrapps/jacoco-report/pull/45) **Full Changelog**: https://github.com/Madrapps/jacoco-report/compare/v1.4...v1.5 ### [`v1.4`](https://togithub.com/Madrapps/jacoco-report/releases/tag/v1.4) [Compare Source](https://togithub.com/madrapps/jacoco-report/compare/v1.3...v1.4) Addressing the set-output deprecation

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Thanks for the PR!

Any successful deployments (not always required) will be available below. API available

Once merged, code will be promoted and handed off to following workflow run. Main Merge Workflow

bcgov / nr-forest-client-api

chore(deps): update github actions all dependencies #194

Release Notes

Configuration