search

miracum / fhir-gateway

A thin layer between FHIR REST clients and resource processing pipelines.
Apache License 2.0
12 stars 7 forks source link

chore(deps): update github-actions #88

Closed renovate[bot] closed 11 months ago

renovate[bot] commented 11 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/checkout action minor v4.0.0 -> v4.1.0
actions/checkout action digest 3df4ab1 -> 8ade135
actions/setup-java action digest 5ffc13f -> cd89f46
actions/upload-artifact action patch v3.1.2 -> v3.1.3
aquasecurity/trivy-action action minor 0.10.0 -> 0.12.0
github/codeql-action action minor v2.3.6 -> v2.21.9
github/codeql-action action digest 83f0fe6 -> ddccb87
gradle/wrapper-validation-action action digest 55e685c -> 56b90f2
ossf/scorecard-action action minor v2.1.3 -> v2.2.0
oxsecurity/megalinter action minor v7.3.0 -> v7.4.0

Release Notes

actions/checkout (actions/checkout) ### [`v4.1.0`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410) [Compare Source](https://togithub.com/actions/checkout/compare/v4.0.0...v4.1.0) - [Add support for partial checkout filters](https://togithub.com/actions/checkout/pull/1396)
actions/upload-artifact (actions/upload-artifact) ### [`v3.1.3`](https://togithub.com/actions/upload-artifact/releases/tag/v3.1.3) [Compare Source](https://togithub.com/actions/upload-artifact/compare/v3.1.2...v3.1.3) #### What's Changed - chore(github): remove trailing whitespaces by [@​ljmf00](https://togithub.com/ljmf00) in [https://github.com/actions/upload-artifact/pull/313](https://togithub.com/actions/upload-artifact/pull/313) - Bump [@​actions/artifact](https://togithub.com/actions/artifact) version to v1.1.2 by [@​bethanyj28](https://togithub.com/bethanyj28) in [https://github.com/actions/upload-artifact/pull/436](https://togithub.com/actions/upload-artifact/pull/436) **Full Changelog**: https://github.com/actions/upload-artifact/compare/v3...v3.1.3
aquasecurity/trivy-action (aquasecurity/trivy-action) ### [`v0.12.0`](https://togithub.com/aquasecurity/trivy-action/releases/tag/0.12.0) [Compare Source](https://togithub.com/aquasecurity/trivy-action/compare/0.11.2...0.12.0) ##### What's Changed - chore(deps): Update trivy to v0.43.1 by [@​simar7](https://togithub.com/simar7) in [https://github.com/aquasecurity/trivy-action/pull/243](https://togithub.com/aquasecurity/trivy-action/pull/243) - ci: add workflow to bump trivy by [@​nikpivkin](https://togithub.com/nikpivkin) in [https://github.com/aquasecurity/trivy-action/pull/245](https://togithub.com/aquasecurity/trivy-action/pull/245) - Update README.md to change the example to the new default brach name … by [@​jdsmithit](https://togithub.com/jdsmithit) in [https://github.com/aquasecurity/trivy-action/pull/234](https://togithub.com/aquasecurity/trivy-action/pull/234) - feat(trivy): Bump to v0.45.0 by [@​simar7](https://togithub.com/simar7) in [https://github.com/aquasecurity/trivy-action/pull/256](https://togithub.com/aquasecurity/trivy-action/pull/256) ##### New Contributors - [@​nikpivkin](https://togithub.com/nikpivkin) made their first contribution in [https://github.com/aquasecurity/trivy-action/pull/245](https://togithub.com/aquasecurity/trivy-action/pull/245) - [@​jdsmithit](https://togithub.com/jdsmithit) made their first contribution in [https://github.com/aquasecurity/trivy-action/pull/234](https://togithub.com/aquasecurity/trivy-action/pull/234) **Full Changelog**: https://github.com/aquasecurity/trivy-action/compare/0.11.2...0.12.0 ### [`v0.11.2`](https://togithub.com/aquasecurity/trivy-action/releases/tag/0.11.2) [Compare Source](https://togithub.com/aquasecurity/trivy-action/compare/0.11.1...0.11.2) **Full Changelog**: https://github.com/aquasecurity/trivy-action/compare/0.11.1...0.11.2 ### [`v0.11.1`](https://togithub.com/aquasecurity/trivy-action/releases/tag/0.11.1) [Compare Source](https://togithub.com/aquasecurity/trivy-action/compare/0.11.0...0.11.1) #### What's Changed - bump trivy to v0.42.1 by [@​danielchabr](https://togithub.com/danielchabr) in [https://github.com/aquasecurity/trivy-action/pull/240](https://togithub.com/aquasecurity/trivy-action/pull/240) **Full Changelog**: https://github.com/aquasecurity/trivy-action/compare/0.11.0...0.11.1 ### [`v0.11.0`](https://togithub.com/aquasecurity/trivy-action/releases/tag/0.11.0) [Compare Source](https://togithub.com/aquasecurity/trivy-action/compare/0.10.0...0.11.0) #### What's Changed - Include args when using trivy config file by [@​hermanwh](https://togithub.com/hermanwh) in [https://github.com/aquasecurity/trivy-action/pull/231](https://togithub.com/aquasecurity/trivy-action/pull/231) - bump trivy to v0.42.0 by [@​danielchabr](https://togithub.com/danielchabr) in [https://github.com/aquasecurity/trivy-action/pull/237](https://togithub.com/aquasecurity/trivy-action/pull/237) - Enhance GitHub Dependency Snapshot upload by [@​abriko](https://togithub.com/abriko) in [https://github.com/aquasecurity/trivy-action/pull/233](https://togithub.com/aquasecurity/trivy-action/pull/233) - feat: add exit-code parameter to sarif format by [@​rogercoll](https://togithub.com/rogercoll) in [https://github.com/aquasecurity/trivy-action/pull/213](https://togithub.com/aquasecurity/trivy-action/pull/213) #### New Contributors - [@​hermanwh](https://togithub.com/hermanwh) made their first contribution in [https://github.com/aquasecurity/trivy-action/pull/231](https://togithub.com/aquasecurity/trivy-action/pull/231) - [@​danielchabr](https://togithub.com/danielchabr) made their first contribution in [https://github.com/aquasecurity/trivy-action/pull/237](https://togithub.com/aquasecurity/trivy-action/pull/237) - [@​abriko](https://togithub.com/abriko) made their first contribution in [https://github.com/aquasecurity/trivy-action/pull/233](https://togithub.com/aquasecurity/trivy-action/pull/233) - [@​rogercoll](https://togithub.com/rogercoll) made their first contribution in [https://github.com/aquasecurity/trivy-action/pull/213](https://togithub.com/aquasecurity/trivy-action/pull/213) **Full Changelog**: https://github.com/aquasecurity/trivy-action/compare/0.10.0...0.11.0
github/codeql-action (github/codeql-action) ### [`v2.21.9`](https://togithub.com/github/codeql-action/compare/v2.21.8...v2.21.9) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.8...v2.21.9) ### [`v2.21.8`](https://togithub.com/github/codeql-action/compare/v2.21.7...v2.21.8) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.7...v2.21.8) ### [`v2.21.7`](https://togithub.com/github/codeql-action/compare/v2.21.6...v2.21.7) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.6...v2.21.7) ### [`v2.21.6`](https://togithub.com/github/codeql-action/compare/v2.21.5...v2.21.6) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.5...v2.21.6) ### [`v2.21.5`](https://togithub.com/github/codeql-action/compare/v2.21.4...v2.21.5) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.4...v2.21.5) ### [`v2.21.4`](https://togithub.com/github/codeql-action/compare/v2.21.3...v2.21.4) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.3...v2.21.4) ### [`v2.21.3`](https://togithub.com/github/codeql-action/compare/v2.21.2...v2.21.3) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.2...v2.21.3) ### [`v2.21.2`](https://togithub.com/github/codeql-action/compare/v2.21.1...v2.21.2) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.1...v2.21.2) ### [`v2.21.1`](https://togithub.com/github/codeql-action/compare/v2.21.0...v2.21.1) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.21.0...v2.21.1) ### [`v2.21.0`](https://togithub.com/github/codeql-action/compare/v2.20.4...v2.21.0) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.20.4...v2.21.0) ### [`v2.20.4`](https://togithub.com/github/codeql-action/compare/v2.20.3...v2.20.4) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.20.3...v2.20.4) ### [`v2.20.3`](https://togithub.com/github/codeql-action/compare/v2.20.2...v2.20.3) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.20.2...v2.20.3) ### [`v2.20.2`](https://togithub.com/github/codeql-action/compare/v2.20.1...v2.20.2) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.20.1...v2.20.2) ### [`v2.20.1`](https://togithub.com/github/codeql-action/compare/v2.20.0...v2.20.1) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.20.0...v2.20.1) ### [`v2.20.0`](https://togithub.com/github/codeql-action/compare/v2.3.6...v2.20.0) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.3.6...v2.20.0)
ossf/scorecard-action (ossf/scorecard-action) ### [`v2.2.0`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.2.0) [Compare Source](https://togithub.com/ossf/scorecard-action/compare/v2.1.3...v2.2.0) #### What's Changed - :seedling: Bump github.com/ossf/scorecard/v4 from v4.10.5 to v4.11.0 by [@​spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1192](https://togithub.com/ossf/scorecard-action/pull/1192) #### Scorecard Result Viewer Thanks to contributions from [@​cynthia-sg](https://togithub.com/cynthia-sg) and [@​tegioz](https://togithub.com/tegioz) at [CLOMonitor](https://togithub.com/cncf/clomonitor), there is a new Scorecard Result visualization page at `https://securityscorecards.dev/viewer/?uri=`. - [https://github.com/ossf/scorecard-webapp/pull/406](https://togithub.com/ossf/scorecard-webapp/pull/406) - [https://github.com/ossf/scorecard-webapp/pull/422](https://togithub.com/ossf/scorecard-webapp/pull/422) As an example, you can see our own score visualized [here](https://securityscorecards.dev/viewer/?uri=github.com/ossf/scorecard) Checkout our [README](https://togithub.com/ossf/scorecard-action/blob/08b4669551908b1024bb425080c797723083c031/README.md#scorecard-badge) to learn how to link your README badge to the new visualization page. #### Publishing Results This release contains two fixes which will improve the user experience when `publish_results` is `true` - Runs that fail our [workflow restrictions](https://togithub.com/ossf/scorecard-action/blob/08b4669551908b1024bb425080c797723083c031/README.md#workflow-restrictions) will fail with a 400 response indicating the problem, instead of a vague 500 status. ([https://github.com/ossf/scorecard-action/pull/1156](https://togithub.com/ossf/scorecard-action/pull/1156), resolved [https://github.com/ossf/scorecard-action/issues/1150](https://togithub.com/ossf/scorecard-action/issues/1150)) - Scorecard action will retry when signing results and submitting them to our web API. This should help with flakiness from connection failures. ([https://github.com/ossf/scorecard-action/pull/1191](https://togithub.com/ossf/scorecard-action/pull/1191)) #### Docs - 📖 Update README to accept fine-grained tokens by [@​pnacht](https://togithub.com/pnacht) in [https://github.com/ossf/scorecard-action/pull/1175](https://togithub.com/ossf/scorecard-action/pull/1175) - 📖 Update installation instructions to match current GitHub UI by [@​joycebrum](https://togithub.com/joycebrum) in [https://github.com/ossf/scorecard-action/pull/1153](https://togithub.com/ossf/scorecard-action/pull/1153) - 📖 Document the GitHub action workflow restrictions when publishing results. by [@​spencerschrock](https://togithub.com/spencerschrock) in #### New Contributors - [@​bobcallaway](https://togithub.com/bobcallaway) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1140](https://togithub.com/ossf/scorecard-action/pull/1140) - [@​pnacht](https://togithub.com/pnacht) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1175](https://togithub.com/ossf/scorecard-action/pull/1175) **Full Changelog**: https://github.com/ossf/scorecard-action/compare/v2.1.3...v2.2.0
oxsecurity/megalinter (oxsecurity/megalinter) ### [`v7.4.0`](https://togithub.com/oxsecurity/megalinter/blob/HEAD/CHANGELOG.md#v740---2023-09-22) [Compare Source](https://togithub.com/oxsecurity/megalinter/compare/v7.3.0...v7.4.0) - Core - Upgrade python to 3.11.5 - Media - [Maximize your code consistency with Megalinter](https://codewithme.cloud/posts/2023/08/maximize-your-code-consistency-with-megalinter/) by [Tor Ivar Asbølmo](https://www.linkedin.com/in/torivara/) on [codewithme.cloud](https://codewithme.cloud) - [MegaLinter in Azure DevOps](https://jamescook.dev/megalinter-in-azure-devops) by [James Cook](https://www.linkedin.com/in/cookjames/) - Fixes - Fix [IGNORE_GITIGNORED_FILES not working anymore](https://togithub.com/oxsecurity/megalinter/issues/2955) , by [@​iisisrael](https://togithub.com/iisisrael) - Fix [v7 issue when using MEGALINTER_FILES_TO_LINT](https://togithub.com/oxsecurity/megalinter/issues/2744) ( thanks [@​pfiaux](https://togithub.com/pfiaux) !) - Fix [Ignore symlink files when VALIDATE_ALL_CODEBASE is false](https://togithub.com/oxsecurity/megalinter/issues/2944) - Fix rstcheck options & install - Doc - Secretlint logo - reduce size to 150 and remove background - Replace `https://megalinter.io/flavors` with `https://megalinter.io/latest/flavors` to avoid lychee 404 error - CI - Workflow job name changed from `build` to `megalinter` to prevent conflicts with other workflows - Add support for master branch in TEMPLATES/mega-linter.yml, by [@​rasa](https://togithub.com/rasa) - Deprecations - Deprecate SCSS LINT as not maintained anymore () - Linter versions upgrades - [actionlint](https://rhysd.github.io/actionlint/) from 1.6.25 to **1.6.26** - [ansible-lint](https://ansible-lint.readthedocs.io/) from 6.17.2 to **6.20.0** - [bicep_linter](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/linter) from 0.20.4 to **0.21.1** - [black](https://black.readthedocs.io/en/stable/) from 23.7.0 to **23.9.1** - [cfn-lint](https://togithub.com/aws-cloudformation/cfn-lint) from 0.79.6 to **0.80.2** - [checkov](https://www.checkov.io/) from 2.3.360 to **2.4.10** - [checkstyle](https://checkstyle.sourceforge.io) from 10.12.2 to **10.12.3** - [chktex](https://www.nongnu.org/chktex) from 1.7.6 to **1.7.8** - [clippy](https://togithub.com/rust-lang/rust-clippy) from 0.1.71 to **0.1.72** - [clj-kondo](https://togithub.com/borkdude/clj-kondo) from 2023.07.13 to **2023.09.07** - [cspell](https://togithub.com/streetsidesoftware/cspell/tree/master/packages/cspell) from 6.31.3 to **7.3.6** - [devskim](https://togithub.com/microsoft/DevSkim) from 1.0.18 to **1.0.22** - [djlint](https://djlint.com/) from 1.32.1 to **1.34.0** - [dotnet-format](https://docs.microsoft.com/en-us/dotnet/core/tools/dotnet-format) from 6.0.413 to **6.0.414** - [editorconfig-checker](https://editorconfig-checker.github.io/) from 2.7.0 to **2.7.1** - [eslint](https://eslint.org) from 8.46.0 to **8.49.0** - [git_diff](https://git-scm.com) from 2.38.5 to **2.40.1** - [gitleaks](https://togithub.com/gitleaks/gitleaks) from 8.17.0 to **8.18.0** - [golangci-lint](https://golangci-lint.run/) from 1.54.0 to **1.54.2** - [helm](https://helm.sh/docs/helm/helm_lint/) from 3.10.2 to **3.11.3** - [jscpd](https://togithub.com/kucherenko/jscpd/tree/master/packages/jscpd) from 3.5.9 to **3.5.10** - [kics](https://www.kics.io) from 1.7.5 to **1.7.8** - [ktlint](https://ktlint.github.io) from 0.50.0 to **1.0.0** - [kubescape](https://togithub.com/kubescape/kubescape) from 2.3.6 to **2.9.0** - [markdownlint](https://togithub.com/DavidAnson/markdownlint) from 0.35.0 to **0.36.0** - [mypy](https://mypy.readthedocs.io/en/stable/) from 1.4.1 to **1.5.1** - [phpstan](https://phpstan.org/) from 1.10.28 to **1.10.35** - [powershell](https://togithub.com/PowerShell/PSScriptAnalyzer) from 7.3.6 to **7.3.7** - [powershell_formatter](https://togithub.com/PowerShell/PSScriptAnalyzer) from 7.3.6 to **7.3.7** - [prettier](https://prettier.io/) from 3.0.1 to **3.0.3** - [protolint](https://togithub.com/yoheimuta/protolint) from 0.45.0 to **0.46.0** - [psalm](https://psalm.dev) from Psalm.5.14.1@​ to **Psalm.5.15.0@​** - [puppet-lint](http://puppet-lint.com/) from 4.0.1 to **4.2.0** - [pyright](https://togithub.com/Microsoft/pyright) from 1.1.321 to **1.1.327** - [revive](https://revive.run/) from 1.3.2 to **1.3.4** - [rstcheck](https://togithub.com/myint/rstcheck) from 6.1.2 to **6.2.0** - [rstfmt](https://togithub.com/dzhu/rstfmt) from 0.0.13 to **0.0.14** - [rubocop](https://rubocop.org/) from 1.56.0 to **1.56.3** - [ruff](https://togithub.com/charliermarsh/ruff) from 0.0.284 to **0.0.290** - [scalafix](https://scalacenter.github.io/scalafix/) from 0.11.0 to **0.11.1** - [semgrep](https://semgrep.dev/) from 1.34.1 to **1.41.0** - [sfdx-scanner-apex](https://forcedotcom.github.io/sfdx-scanner/) from 3.15.0 to **3.16.0** - [sfdx-scanner-aura](https://forcedotcom.github.io/sfdx-scanner/) from 3.15.0 to **3.16.0** - [sfdx-scanner-lwc](https://forcedotcom.github.io/sfdx-scanner/) from 3.15.0 to **3.16.0** - [snakemake](https://snakemake.readthedocs.io/en/stable/) from 7.32.3 to **7.32.4** - [spectral](https://meta.stoplight.io/docs/spectral/README.md) from 6.10.1 to **6.11.0** - [sqlfluff](https://www.sqlfluff.com/) from 2.2.1 to **2.3.2** - [stylelint](https://stylelint.io) from 15.10.2 to **15.10.3** - [syft](https://togithub.com/anchore/syft) from 0.86.1 to **0.91.0** - [terraform-fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) from 1.5.4 to **1.5.7** - [terragrunt](https://terragrunt.gruntwork.io) from 0.48.6 to **0.51.3** - [terrascan](https://runterrascan.io/) from 1.18.2 to **1.18.3** - [tflint](https://togithub.com/terraform-linters/tflint) from 0.47.0 to **0.48.0** - [trivy-sbom](https://aquasecurity.github.io/trivy/) from 0.44.0 to **0.45.1** - [trivy](https://aquasecurity.github.io/trivy/) from 0.44.0 to **0.45.1** - [trufflehog](https://togithub.com/trufflesecurity/trufflehog) from 3.47.0 to **3.56.1** - [vale](https://vale.sh/) from 2.28.1 to **2.29.0** - [xmllint](http://xmlsoft.org/xmllint.html) from 21004 to **21104**

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR has been generated by Mend Renovate. View repository job log here.

github-actions[bot] commented 11 months ago

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 4 0 0.1s
✅ EDITORCONFIG editorconfig-checker 4 0 0.04s
✅ REPOSITORY checkov yes no 14.27s
✅ REPOSITORY gitleaks yes no 1.26s
✅ REPOSITORY git_diff yes no 0.03s
✅ REPOSITORY grype yes no 13.97s
✅ REPOSITORY kics yes no 34.01s
✅ REPOSITORY secretlint yes no 1.0s
✅ REPOSITORY syft yes no 0.39s
✅ REPOSITORY trivy yes no 6.48s
✅ REPOSITORY trivy-sbom yes no 1.17s
✅ REPOSITORY trufflehog yes no 4.58s
✅ YAML prettier 4 0 0.72s
✅ YAML v8r 4 0 3.52s
✅ YAML yamllint 4 0 0.41s

See detailed report in MegaLinter reports _Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff_

_MegaLinter is graciously provided by OX Security_

miracum-bot commented 11 months ago

:tada: This PR is included in version 3.12.2 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: