search

miracum / ahd2fhir

A REST service for mapping text analysis results from Averbis Health Discovery to FHIR resources.
Apache License 2.0
8 stars 0 forks source link

chore(deps): update github-actions #189

Closed renovate[bot] closed 1 month ago

renovate[bot] commented 2 months ago

This PR contains the following updates:

Package Type Update Change
actions/checkout action minor v4.1.7 -> v4.2.1
actions/upload-artifact action minor v4.3.3 -> v4.4.3
ghcr.io/miracum/ig-build-tools container patch v2.1.5 -> v2.1.6
github/codeql-action action minor v3.25.11 -> v3.26.13
miracum/.github action minor v1.10.2 -> v1.12.5
ossf/scorecard-action action minor v2.3.3 -> v2.4.0

Release Notes

actions/checkout (actions/checkout) ### [`v4.2.1`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.2.0...v4.2.1) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1924](https://redirect.github.com/actions/checkout/pull/1924) ### [`v4.2.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v420) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.7...v4.2.0) - Add Ref and Commit outputs by [@​lucacome](https://redirect.github.com/lucacome) in [https://github.com/actions/checkout/pull/1180](https://redirect.github.com/actions/checkout/pull/1180) - Dependency updates by [@​dependabot-](https://redirect.github.com/dependabot-) [https://github.com/actions/checkout/pull/1777](https://redirect.github.com/actions/checkout/pull/1777), [https://github.com/actions/checkout/pull/1872](https://redirect.github.com/actions/checkout/pull/1872)
actions/upload-artifact (actions/upload-artifact) ### [`v4.4.3`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.3) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.2...v4.4.3) ##### What's Changed - Undo indirect dependency updates from [#​627](https://redirect.github.com/actions/upload-artifact/issues/627) by [@​joshmgross](https://redirect.github.com/joshmgross) in [https://github.com/actions/upload-artifact/pull/632](https://redirect.github.com/actions/upload-artifact/pull/632) **Full Changelog**: https://github.com/actions/upload-artifact/compare/v4.4.2...v4.4.3 ### [`v4.4.2`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.2) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.1...v4.4.2) ##### What's Changed - Bump `@actions/artifact` to 2.1.11 by [@​robherley](https://redirect.github.com/robherley) in [https://github.com/actions/upload-artifact/pull/627](https://redirect.github.com/actions/upload-artifact/pull/627) - Includes fix for relative symlinks not resolving properly **Full Changelog**: https://github.com/actions/upload-artifact/compare/v4.4.1...v4.4.2 ### [`v4.4.1`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.4.1) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.4.0...v4.4.1) ##### What's Changed - Add a section about hidden files by [@​joshmgross](https://redirect.github.com/joshmgross) in [https://github.com/actions/upload-artifact/pull/607](https://redirect.github.com/actions/upload-artifact/pull/607) - Add workflow file for publishing releases to immutable action package by [@​Jcambass](https://redirect.github.com/Jcambass) in [https://github.com/actions/upload-artifact/pull/621](https://redirect.github.com/actions/upload-artifact/pull/621) - Update [@​actions/artifact](https://redirect.github.com/actions/artifact) to latest version, includes symlink and timeout fixes by [@​robherley](https://redirect.github.com/robherley) in [https://github.com/actions/upload-artifact/pull/625](https://redirect.github.com/actions/upload-artifact/pull/625) ##### New Contributors - [@​Jcambass](https://redirect.github.com/Jcambass) made their first contribution in [https://github.com/actions/upload-artifact/pull/621](https://redirect.github.com/actions/upload-artifact/pull/621) **Full Changelog**: https://github.com/actions/upload-artifact/compare/v4.4.0...v4.4.1 ### [`v4.4.0`](https://redirect.github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0) ### [`v4.3.6`](https://redirect.github.com/actions/upload-artifact/compare/v4.3.5...v4.3.6) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.5...v4.3.6) ### [`v4.3.5`](https://redirect.github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5) ### [`v4.3.4`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.3.4) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4) ##### What's Changed - Update [@​actions/artifact](https://redirect.github.com/actions/artifact) version, bump dependencies by [@​robherley](https://redirect.github.com/robherley) in [https://github.com/actions/upload-artifact/pull/584](https://redirect.github.com/actions/upload-artifact/pull/584) **Full Changelog**: https://github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4
miracum/ig-build-tools (ghcr.io/miracum/ig-build-tools) ### [`v2.1.6`](https://redirect.github.com/miracum/ig-build-tools/releases/tag/v2.1.6) [Compare Source](https://redirect.github.com/miracum/ig-build-tools/compare/v2.1.5...v2.1.6) ##### Miscellaneous Chores - **deps:** update all non-major dependencies ([551651f](https://redirect.github.com/miracum/ig-build-tools/commit/551651f28a67ab94d7f3d1c4e95c900932645307))
github/codeql-action (github/codeql-action) ### [`v3.26.13`](https://redirect.github.com/github/codeql-action/compare/v3.26.12...v3.26.13) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.12...v3.26.13) ### [`v3.26.12`](https://redirect.github.com/github/codeql-action/compare/v3.26.11...v3.26.12) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.11...v3.26.12) ### [`v3.26.11`](https://redirect.github.com/github/codeql-action/compare/v3.26.10...v3.26.11) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.10...v3.26.11) ### [`v3.26.10`](https://redirect.github.com/github/codeql-action/compare/v3.26.9...v3.26.10) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.9...v3.26.10) ### [`v3.26.9`](https://redirect.github.com/github/codeql-action/compare/v3.26.8...v3.26.9) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.8...v3.26.9) ### [`v3.26.8`](https://redirect.github.com/github/codeql-action/compare/v3.26.7...v3.26.8) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.7...v3.26.8) ### [`v3.26.7`](https://redirect.github.com/github/codeql-action/compare/v3.26.6...v3.26.7) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.6...v3.26.7) ### [`v3.26.6`](https://redirect.github.com/github/codeql-action/compare/v3.26.5...v3.26.6) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.5...v3.26.6) ### [`v3.26.5`](https://redirect.github.com/github/codeql-action/compare/v3.26.4...v3.26.5) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.4...v3.26.5) ### [`v3.26.4`](https://redirect.github.com/github/codeql-action/compare/v3.26.3...v3.26.4) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.3...v3.26.4) ### [`v3.26.3`](https://redirect.github.com/github/codeql-action/compare/v3.26.2...v3.26.3) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.2...v3.26.3) ### [`v3.26.2`](https://redirect.github.com/github/codeql-action/compare/v3.26.1...v3.26.2) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.1...v3.26.2) ### [`v3.26.1`](https://redirect.github.com/github/codeql-action/compare/v3.26.0...v3.26.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.26.0...v3.26.1) ### [`v3.26.0`](https://redirect.github.com/github/codeql-action/compare/v3.25.15...v3.26.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.15...v3.26.0) ### [`v3.25.15`](https://redirect.github.com/github/codeql-action/compare/v3.25.14...v3.25.15) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.14...v3.25.15) ### [`v3.25.14`](https://redirect.github.com/github/codeql-action/compare/v3.25.13...v3.25.14) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.13...v3.25.14) ### [`v3.25.13`](https://redirect.github.com/github/codeql-action/compare/v3.25.12...v3.25.13) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.12...v3.25.13) ### [`v3.25.12`](https://redirect.github.com/github/codeql-action/compare/v3.25.11...v3.25.12) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v3.25.11...v3.25.12)
miracum/.github (miracum/.github) ### [`v1.12.5`](https://redirect.github.com/miracum/.github/releases/tag/v1.12.5) [Compare Source](https://redirect.github.com/miracum/.github/compare/v1.12.4...v1.12.5) ##### Miscellaneous Chores - **deps:** updated default java and .net version for codeql ([#​88](https://redirect.github.com/miracum/.github/issues/88)) ([1748b6a](https://redirect.github.com/miracum/.github/commit/1748b6a3730192d63e21629d6d84dafd495fe567)) ### [`v1.12.4`](https://redirect.github.com/miracum/.github/releases/tag/v1.12.4) [Compare Source](https://redirect.github.com/miracum/.github/compare/v1.12.3...v1.12.4) ##### Miscellaneous Chores - **deps:** update all non-major dependencies ([#​82](https://redirect.github.com/miracum/.github/issues/82)) ([1a9180b](https://redirect.github.com/miracum/.github/commit/1a9180b77e3faf2ffb654113b17ce773a45abe7c)) - **deps:** update dependency ubuntu to v24 ([#​87](https://redirect.github.com/miracum/.github/issues/87)) ([0c1519a](https://redirect.github.com/miracum/.github/commit/0c1519ab65e70ab166aa866fd298e92402b48452)) - **deps:** update github-actions ([#​83](https://redirect.github.com/miracum/.github/issues/83)) ([f2019bb](https://redirect.github.com/miracum/.github/commit/f2019bbcad4fdc62c87905899d7d4e2f4c0c3a25)) - **deps:** update github-actions ([#​86](https://redirect.github.com/miracum/.github/issues/86)) ([b86af08](https://redirect.github.com/miracum/.github/commit/b86af08801b64de91437a478a1e0de5400ce9715)) ### [`v1.12.3`](https://redirect.github.com/miracum/.github/releases/tag/v1.12.3) [Compare Source](https://redirect.github.com/miracum/.github/compare/v1.12.2...v1.12.3) ##### Miscellaneous Chores - **deps:** update all non-major dependencies ([#​80](https://redirect.github.com/miracum/.github/issues/80)) ([56eae4d](https://redirect.github.com/miracum/.github/commit/56eae4df68bea21d71acde57fb14c08000a449f7)) - **deps:** update gcr.io/distroless/python3-debian12:nonroot docker digest to [`60a4160`](https://redirect.github.com/miracum/.github/commit/60a4160) ([#​79](https://redirect.github.com/miracum/.github/issues/79)) ([b238904](https://redirect.github.com/miracum/.github/commit/b2389048770aa5b9ed439810bf84911fbb07f645)) - **deps:** update github-actions ([#​81](https://redirect.github.com/miracum/.github/issues/81)) ([9252f7a](https://redirect.github.com/miracum/.github/commit/9252f7a3cccbef8e7e2e222a674d272fc869fb0f)) ### [`v1.12.2`](https://redirect.github.com/miracum/.github/releases/tag/v1.12.2) [Compare Source](https://redirect.github.com/miracum/.github/compare/v1.12.1...v1.12.2) ##### Miscellaneous Chores - **deps:** update github-actions ([#​77](https://redirect.github.com/miracum/.github/issues/77)) ([49140a0](https://redirect.github.com/miracum/.github/commit/49140a0c55dda78f1694ffb02ef3b182a3347756)) ### [`v1.12.1`](https://redirect.github.com/miracum/.github/releases/tag/v1.12.1) [Compare Source](https://redirect.github.com/miracum/.github/compare/v1.12.0...v1.12.1) ##### Miscellaneous Chores - **deps:** update github-actions ([#​76](https://redirect.github.com/miracum/.github/issues/76)) ([73c6da9](https://redirect.github.com/miracum/.github/commit/73c6da999a21c553e2f8b23596ab58c1e508c645)) ### [`v1.12.0`](https://redirect.github.com/miracum/.github/releases/tag/v1.12.0) [Compare Source](https://redirect.github.com/miracum/.github/compare/v1.11.4...v1.12.0) ##### Features - upload slsa attestation to releases ([#​75](https://redirect.github.com/miracum/.github/issues/75)) ([a4eaba9](https://redirect.github.com/miracum/.github/commit/a4eaba9236579e026f335874deae5bc70651c15c)) ##### Miscellaneous Chores - use best-practices preset ([aca53b6](https://redirect.github.com/miracum/.github/commit/aca53b63036f2744074cf4a57c24939896d1f7f6)) ### [`v1.11.4`](https://redirect.github.com/miracum/.github/releases/tag/v1.11.4) [Compare Source](https://redirect.github.com/miracum/.github/compare/v1.11.3...v1.11.4) ##### Miscellaneous Chores - **deps:** update dependency gradle to v8.9 ([#​73](https://redirect.github.com/miracum/.github/issues/73)) ([1965a6a](https://redirect.github.com/miracum/.github/commit/1965a6a256d06cb1195ea55b0c66fc56d0045f4f)) - **deps:** update docker.io/library/python:3.12.4-slim docker digest to [`1ef6f4d`](https://redirect.github.com/miracum/.github/commit/1ef6f4d) ([#​71](https://redirect.github.com/miracum/.github/issues/71)) ([94bc59a](https://redirect.github.com/miracum/.github/commit/94bc59ad38688cdadd85572c9079a812dc2f3476)) - **deps:** update gcr.io/distroless/python3-debian12:nonroot docker digest to [`fdb3a04`](https://redirect.github.com/miracum/.github/commit/fdb3a04) ([#​72](https://redirect.github.com/miracum/.github/issues/72)) ([cde023d](https://redirect.github.com/miracum/.github/commit/cde023da3ffba8ed29d617aa4aa7a6539dbbfb4b)) - **deps:** update github-actions ([#​74](https://redirect.github.com/miracum/.github/issues/74)) ([8bd8b2e](https://redirect.github.com/miracum/.github/commit/8bd8b2ed7eae0c866d830fc8dd8cabf39d346ae5)) ### [`v1.11.3`](https://redirect.github.com/miracum/.github/releases/tag/v1.11.3) [Compare Source](https://redirect.github.com/miracum/.github/compare/v1.11.2...v1.11.3) ##### Miscellaneous Chores - **deps:** update github-actions ([#​70](https://redirect.github.com/miracum/.github/issues/70)) ([6e79e87](https://redirect.github.com/miracum/.github/commit/6e79e87ffce2b28fa1052cbe3ac78f9ab7a2ea77)) ### [`v1.11.2`](https://redirect.github.com/miracum/.github/releases/tag/v1.11.2) [Compare Source](https://redirect.github.com/miracum/.github/compare/v1.11.1...v1.11.2) ##### Bug Fixes - comment only on non fork ([028aedc](https://redirect.github.com/miracum/.github/commit/028aedc2d5806bb362562560f5e871d9364902cd)) ### [`v1.11.1`](https://redirect.github.com/miracum/.github/releases/tag/v1.11.1) [Compare Source](https://redirect.github.com/miracum/.github/compare/v1.11.0...v1.11.1) ##### Bug Fixes - multi-platform builds ([#​69](https://redirect.github.com/miracum/.github/issues/69)) ([588a05e](https://redirect.github.com/miracum/.github/commit/588a05ea7e98dd0ba6a98d23ac5cc5d6d68d40fe)) ### [`v1.11.0`](https://redirect.github.com/miracum/.github/releases/tag/v1.11.0) [Compare Source](https://redirect.github.com/miracum/.github/compare/v1.10.3...v1.11.0) ##### Features - multi-platform build support, sbom and provenance by default ([#​68](https://redirect.github.com/miracum/.github/issues/68)) ([6486774](https://redirect.github.com/miracum/.github/commit/6486774ea526dc545d5e8875fe78e2fecd79526d)) ### [`v1.10.3`](https://redirect.github.com/miracum/.github/releases/tag/v1.10.3) [Compare Source](https://redirect.github.com/miracum/.github/compare/v1.10.2...v1.10.3) ##### Miscellaneous Chores - **deps:** update docker.io/library/python:3.12.4-slim docker digest to [`d5f1674`](https://redirect.github.com/miracum/.github/commit/d5f1674) ([#​66](https://redirect.github.com/miracum/.github/issues/66)) ([948ae97](https://redirect.github.com/miracum/.github/commit/948ae9768d09eb2ce8570c1ea6b4d3334a106aba)) - **deps:** update github-actions ([#​67](https://redirect.github.com/miracum/.github/issues/67)) ([73edc5a](https://redirect.github.com/miracum/.github/commit/73edc5a86dea5e8a86f936918c658f4b0ad05bfb))
ossf/scorecard-action (ossf/scorecard-action) ### [`v2.4.0`](https://redirect.github.com/ossf/scorecard-action/releases/tag/v2.4.0) [Compare Source](https://redirect.github.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0) #### What's Changed This update bumps the Scorecard version to the v5 release. For a complete list of changes, please refer to the [v5.0.0 release notes](https://redirect.github.com/ossf/scorecard/releases/tag/v5.0.0). Of special note to Scorecard Action is the Maintainer Annotation feature, which can be used to suppress some Code Scanning false positives. Alerts will not be generated for any Scorecard Check with an annotation. - :seedling: Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0 by [@​spencerschrock](https://redirect.github.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1410](https://redirect.github.com/ossf/scorecard-action/pull/1410) - :bug: lower license sarif alert threshold to 9 by [@​spencerschrock](https://redirect.github.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1411](https://redirect.github.com/ossf/scorecard-action/pull/1411) ##### Documentation - docs: dogfooding badge by [@​jkowalleck](https://redirect.github.com/jkowalleck) in [https://github.com/ossf/scorecard-action/pull/1399](https://redirect.github.com/ossf/scorecard-action/pull/1399) #### New Contributors - [@​jkowalleck](https://redirect.github.com/jkowalleck) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1399](https://redirect.github.com/ossf/scorecard-action/pull/1399) **Full Changelog**: https://github.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0

Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR was generated by Mend Renovate. View the repository job log.

github-actions[bot] commented 1 month ago

Trivy image scan report

ghcr.io/miracum/ahd2fhir:pr-189 (debian 12.7)

No Vulnerabilities found

No Misconfigurations found

Python

1 known vulnerabilities found (CRITICAL: 0 HIGH: 1 MEDIUM: 0 LOW: 0)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
setuptools CVE-2024-6345 HIGH 65.5.1 70.0.0

No Misconfigurations found

renovate[bot] commented 1 month ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

github-actions[bot] commented 1 month ago

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 5 0 0.03s
✅ BASH bash-exec 2 0 0.03s
✅ BASH shellcheck 2 0 0.03s
✅ BASH shfmt 2 0 0.01s
✅ DOCKERFILE hadolint 2 0 0.19s
✅ JSON jsonlint 16 0 0.4s
✅ JSON npm-package-json-lint yes no 0.71s
✅ JSON prettier 16 0 1.81s
✅ MARKDOWN markdownlint 3 0 0.63s
✅ PYTHON bandit 31 0 1.85s
✅ PYTHON black 31 0 2.07s
✅ PYTHON flake8 31 0 0.8s
✅ PYTHON isort 31 0 0.58s
✅ PYTHON mypy 31 0 11.51s
✅ PYTHON pyright 31 0 10.91s
✅ PYTHON ruff 31 0 0.04s
✅ REPOSITORY checkov yes no 24.06s
✅ REPOSITORY gitleaks yes no 0.07s
✅ REPOSITORY git_diff yes no 0.02s
✅ REPOSITORY grype yes no 14.04s
✅ REPOSITORY kics yes no 34.17s
✅ REPOSITORY secretlint yes no 0.89s
✅ REPOSITORY syft yes no 0.6s
✅ REPOSITORY trivy yes no 13.26s
✅ REPOSITORY trivy-sbom yes no 1.17s
✅ REPOSITORY trufflehog yes no 7.1s
✅ YAML prettier 15 0 0.91s
✅ YAML yamllint 15 0 0.62s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

_MegaLinter is graciously provided by OX Security_

miracum-bot commented 1 month ago

:tada: This PR is included in version 4.0.3 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: