raspbernetes / k8s-security-policies

This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations. The policies are developed in accordance with the CIS Kubernetes benchmark.
https://raspbernetes.github.io/
Apache License 2.0
176 stars 24 forks source link

chore(deps): update actions/github-script action to v6 - autoclosed #27

Closed renovate[bot] closed 11 months ago

renovate[bot] commented 2 years ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/github-script action major 0.9.0 -> v6.4.1

Release Notes

actions/github-script ### [`v6.4.1`](https://togithub.com/actions/github-script/releases/tag/v6.4.1) [Compare Source](https://togithub.com/actions/github-script/compare/v6.4.0...v6.4.1) #### What's Changed - Add [@​octokit/plugin-request-log](https://togithub.com/octokit/plugin-request-log), to produce debug output for requests by [@​mjpieters](https://togithub.com/mjpieters) in [https://github.com/actions/github-script/pull/358](https://togithub.com/actions/github-script/pull/358) - fix input handling by [@​mjpieters](https://togithub.com/mjpieters) in [https://github.com/actions/github-script/pull/357](https://togithub.com/actions/github-script/pull/357) - Remove unused dependencies by [@​mjpieters](https://togithub.com/mjpieters) in [https://github.com/actions/github-script/pull/356](https://togithub.com/actions/github-script/pull/356) - Default debug to current runner debug state by [@​mjpieters](https://togithub.com/mjpieters) in [https://github.com/actions/github-script/pull/363](https://togithub.com/actions/github-script/pull/363) #### New Contributors - [@​mjpieters](https://togithub.com/mjpieters) made their first contribution in [https://github.com/actions/github-script/pull/358](https://togithub.com/actions/github-script/pull/358) **Full Changelog**: https://github.com/actions/github-script/compare/v6.4.0...v6.4.1 ### [`v6.4.0`](https://togithub.com/actions/github-script/releases/tag/v6.4.0) [Compare Source](https://togithub.com/actions/github-script/compare/v6.3.3...v6.4.0) ##### What's Changed - Bump json5 from 2.1.3 to 2.2.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/github-script/pull/319](https://togithub.com/actions/github-script/pull/319) - Bump minimatch from 3.0.4 to 3.1.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/github-script/pull/320](https://togithub.com/actions/github-script/pull/320) - Add node-fetch by [@​danmichaelo](https://togithub.com/danmichaelo) in [https://github.com/actions/github-script/pull/321](https://togithub.com/actions/github-script/pull/321) ##### New Contributors - [@​jongwooo](https://togithub.com/jongwooo) made their first contribution in [https://github.com/actions/github-script/pull/313](https://togithub.com/actions/github-script/pull/313) - [@​austinvazquez](https://togithub.com/austinvazquez) made their first contribution in [https://github.com/actions/github-script/pull/306](https://togithub.com/actions/github-script/pull/306) - [@​danmichaelo](https://togithub.com/danmichaelo) made their first contribution in [https://github.com/actions/github-script/pull/321](https://togithub.com/actions/github-script/pull/321) **Full Changelog**: https://github.com/actions/github-script/compare/v6.3.3...v6.4.0 ### [`v6.3.3`](https://togithub.com/actions/github-script/releases/tag/v6.3.3) [Compare Source](https://togithub.com/actions/github-script/compare/v6.3.2...v6.3.3) #### What's Changed - Update `@actions/glob` to 0.3.0 by [@​nineinchnick](https://togithub.com/nineinchnick) in [https://github.com/actions/github-script/pull/279](https://togithub.com/actions/github-script/pull/279) #### New Contributors - [@​nineinchnick](https://togithub.com/nineinchnick) made their first contribution in [https://github.com/actions/github-script/pull/279](https://togithub.com/actions/github-script/pull/279) **Full Changelog**: https://github.com/actions/github-script/compare/v6.3.2...v6.3.3 ### [`v6.3.2`](https://togithub.com/actions/github-script/releases/tag/v6.3.2) [Compare Source](https://togithub.com/actions/github-script/compare/v6.3.1...v6.3.2) #### What's Changed - Update [@​actions/core](https://togithub.com/actions/core) to 1.10.0 by [@​rentziass](https://togithub.com/rentziass) in [https://github.com/actions/github-script/pull/295](https://togithub.com/actions/github-script/pull/295) #### New Contributors - [@​rentziass](https://togithub.com/rentziass) made their first contribution in [https://github.com/actions/github-script/pull/295](https://togithub.com/actions/github-script/pull/295) **Full Changelog**: https://github.com/actions/github-script/compare/v6.3.1...v6.3.2 ### [`v6.3.1`](https://togithub.com/actions/github-script/releases/tag/v6.3.1) [Compare Source](https://togithub.com/actions/github-script/compare/v6.3.0...v6.3.1) #### What's Changed - Fix overriding request options from [@​actions/github](https://togithub.com/actions/github) by [@​luketomlinson](https://togithub.com/luketomlinson) in [https://github.com/actions/github-script/pull/293](https://togithub.com/actions/github-script/pull/293) **Full Changelog**: https://github.com/actions/github-script/compare/v6.3.0...v6.3.1 ### [`v6.3.0`](https://togithub.com/actions/github-script/releases/tag/v6.3.0) [Compare Source](https://togithub.com/actions/github-script/compare/v6.2.0...v6.3.0) #### What's Changed - Add retry plugin and related options by [@​luketomlinson](https://togithub.com/luketomlinson) in [https://github.com/actions/github-script/pull/288](https://togithub.com/actions/github-script/pull/288), see https://github.com/actions/github-script/tree/v6.3.0#retries for more information. #### New Contributors - [@​luketomlinson](https://togithub.com/luketomlinson) made their first contribution in [https://github.com/actions/github-script/pull/288](https://togithub.com/actions/github-script/pull/288) **Full Changelog**: https://github.com/actions/github-script/compare/v6.2.0...v6.3.0 ### [`v6.2.0`](https://togithub.com/actions/github-script/releases/tag/v6.2.0) [Compare Source](https://togithub.com/actions/github-script/compare/v6.1.1...v6.2.0) #### What's Changed - Update `@octokit/plugin-rest-endpoint-methods` to version 6.x by [@​desrosj](https://togithub.com/desrosj) in [https://github.com/actions/github-script/pull/283](https://togithub.com/actions/github-script/pull/283) #### New Contributors - [@​desrosj](https://togithub.com/desrosj) made their first contribution in [https://github.com/actions/github-script/pull/283](https://togithub.com/actions/github-script/pull/283) **Full Changelog**: https://github.com/actions/github-script/compare/v6.1.1...v6.2.0 ### [`v6.1.1`](https://togithub.com/actions/github-script/releases/tag/v6.1.1) [Compare Source](https://togithub.com/actions/github-script/compare/v6.1.0...v6.1.1) #### What's Changed - Bump shell-quote from 1.7.2 to 1.7.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/github-script/pull/270](https://togithub.com/actions/github-script/pull/270) - Bump [@​actions/core](https://togithub.com/actions/core) to 1.9.1 by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/github-script/pull/280](https://togithub.com/actions/github-script/pull/280) #### Non-code changes - Create codeql-analysis.yml by [@​joshmgross](https://togithub.com/joshmgross) in [https://github.com/actions/github-script/pull/267](https://togithub.com/actions/github-script/pull/267) - Improve grammar by [@​kevgo](https://togithub.com/kevgo) in [https://github.com/actions/github-script/pull/269](https://togithub.com/actions/github-script/pull/269) #### New Contributors - [@​kevgo](https://togithub.com/kevgo) made their first contribution in [https://github.com/actions/github-script/pull/269](https://togithub.com/actions/github-script/pull/269) - [@​cory-miller](https://togithub.com/cory-miller) made their first contribution in [https://github.com/actions/github-script/pull/280](https://togithub.com/actions/github-script/pull/280) **Full Changelog**: https://github.com/actions/github-script/compare/v6.1.0...v6.1.1 ### [`v6.1.0`](https://togithub.com/actions/github-script/releases/tag/v6.1.0) [Compare Source](https://togithub.com/actions/github-script/compare/v6.0.0...v6.1.0) ##### What's Changed - Bump minimist from 1.2.5 to 1.2.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/github-script/pull/251](https://togithub.com/actions/github-script/pull/251) - Update `@actions/core` to 1.8.1 by [@​smaeda-ks](https://togithub.com/smaeda-ks) in [https://github.com/actions/github-script/pull/263](https://togithub.com/actions/github-script/pull/263) ##### New Contributors - [@​josh-](https://togithub.com/josh-) made their first contribution in [https://github.com/actions/github-script/pull/252](https://togithub.com/actions/github-script/pull/252) - [@​dlech](https://togithub.com/dlech) made their first contribution in [https://github.com/actions/github-script/pull/254](https://togithub.com/actions/github-script/pull/254) - [@​smaeda-ks](https://togithub.com/smaeda-ks) made their first contribution in [https://github.com/actions/github-script/pull/263](https://togithub.com/actions/github-script/pull/263) **Full Changelog**: https://github.com/actions/github-script/compare/v6.0.0...v6.1.0 ### [`v6.0.0`](https://togithub.com/actions/github-script/releases/tag/v6.0.0) [Compare Source](https://togithub.com/actions/github-script/compare/v5.2.0...v6) ##### What's Changed - Update default runtime to node16 by [@​thboop](https://togithub.com/thboop) in [https://github.com/actions/github-script/pull/235](https://togithub.com/actions/github-script/pull/235) - Update `node-fetch` by [@​joshmgross](https://togithub.com/joshmgross) in [https://github.com/actions/github-script/pull/237](https://togithub.com/actions/github-script/pull/237) - Update `@actions/core` to 1.6.0 by [@​joshmgross](https://togithub.com/joshmgross) in [https://github.com/actions/github-script/pull/238](https://togithub.com/actions/github-script/pull/238) ##### Breaking Changes With the update to Node 16 in [#​235](https://togithub.com/actions/github-script/issues/235), all scripts will now be run with Node 16 rather than Node 12. ##### New Contributors - [@​thboop](https://togithub.com/thboop) made their first contribution in [https://github.com/actions/github-script/pull/235](https://togithub.com/actions/github-script/pull/235) **Full Changelog**: https://github.com/actions/github-script/compare/v5...v6.0.0 ### [`v5.2.0`](https://togithub.com/actions/github-script/releases/tag/v5.2.0) [Compare Source](https://togithub.com/actions/github-script/compare/v5.1.1...v5.2.0) #### What's Changed - Upgrade [@​actions/core](https://togithub.com/actions/core) to 1.10.0 for v5 by [@​rentziass](https://togithub.com/rentziass) in [https://github.com/actions/github-script/pull/350](https://togithub.com/actions/github-script/pull/350) **Full Changelog**: https://github.com/actions/github-script/compare/v5.1.1...v5.2.0 ### [`v5.1.1`](https://togithub.com/actions/github-script/releases/tag/v5.1.1) [Compare Source](https://togithub.com/actions/github-script/compare/v5.1.0...v5.1.1) #### What's Changed - Bump [@​actions/core](https://togithub.com/actions/core) to 1.9.1 by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/github-script/pull/281](https://togithub.com/actions/github-script/pull/281) **Full Changelog**: https://github.com/actions/github-script/compare/v5.1.0...v5.1.1 ### [`v5.1.0`](https://togithub.com/actions/github-script/releases/tag/v5.1.0) [Compare Source](https://togithub.com/actions/github-script/compare/v5...v5.1.0) #### What's Changed - Update to latest versions for dev dependencies by [@​joshmgross](https://togithub.com/joshmgross) in [https://github.com/actions/github-script/pull/204](https://togithub.com/actions/github-script/pull/204) - update plugin dependencies by [@​PeterNitscheMI](https://togithub.com/PeterNitscheMI) in [https://github.com/actions/github-script/pull/216](https://togithub.com/actions/github-script/pull/216) - Update licenses and use `jonabc/setup-licensed` in workflow by [@​joshmgross](https://togithub.com/joshmgross) in [https://github.com/actions/github-script/pull/228](https://togithub.com/actions/github-script/pull/228) #### New Contributors - [@​johan-lindqvist](https://togithub.com/johan-lindqvist) made their first contribution in [https://github.com/actions/github-script/pull/201](https://togithub.com/actions/github-script/pull/201) - [@​ansgarm](https://togithub.com/ansgarm) made their first contribution in [https://github.com/actions/github-script/pull/215](https://togithub.com/actions/github-script/pull/215) - [@​PeterNitscheMI](https://togithub.com/PeterNitscheMI) made their first contribution in [https://github.com/actions/github-script/pull/216](https://togithub.com/actions/github-script/pull/216) **Full Changelog**: https://github.com/actions/github-script/compare/v5.0.0...v5.1.0 ### [`v5.0.0`](https://togithub.com/actions/github-script/releases/tag/v5.0.0) [Compare Source](https://togithub.com/actions/github-script/compare/v4.2.0...v5) #### What's Changed - Upgrade to the latest version of Octokit by [@​joshmgross](https://togithub.com/joshmgross) in [https://github.com/actions/github-script/pull/193](https://togithub.com/actions/github-script/pull/193) (Thanks to [@​IronSean](https://togithub.com/IronSean) for contributing to this fix) #### Breaking Changes As part of this update, the Octokit context available via `github` no longer has REST methods directly. These methods are available via `github.rest.*` - https://github.com/octokit/plugin-rest-endpoint-methods.js/releases/tag/v5.0.0 See https://github.com/actions/github-script#breaking-changes-in-v5 **Full Changelog**: https://github.com/actions/github-script/compare/v4.1.1...v5.0.0 ### [`v4.2.0`](https://togithub.com/actions/github-script/releases/tag/v4.2.0) [Compare Source](https://togithub.com/actions/github-script/compare/v4.1.1...v4.2.0) #### What's Changed - Upgrade [@​actions/core](https://togithub.com/actions/core) to 1.10.0 for v4 by [@​rentziass](https://togithub.com/rentziass) in [https://github.com/actions/github-script/pull/349](https://togithub.com/actions/github-script/pull/349) **Full Changelog**: https://github.com/actions/github-script/compare/v4.1.1...v4.2.0 ### [`v4.1.1`](https://togithub.com/actions/github-script/releases/tag/v4.1.1) [Compare Source](https://togithub.com/actions/github-script/compare/v4.1.0...v4.1.1) #### What's Changed - Update minor versions of dependencies by [@​joshmgross](https://togithub.com/joshmgross) in [https://github.com/actions/github-script/pull/192](https://togithub.com/actions/github-script/pull/192) **Full Changelog**: https://github.com/actions/github-script/compare/v4.1.0...v4.1.1 ### [`v4.1.0`](https://togithub.com/actions/github-script/releases/tag/v4.1.0) [Compare Source](https://togithub.com/actions/github-script/compare/v4.0.2...v4.1.0) #### What's Changed - Adding [@​actions/exec](https://togithub.com/actions/exec) to github-script by [@​bhavanakonchada](https://togithub.com/bhavanakonchada) in [https://github.com/actions/github-script/pull/178](https://togithub.com/actions/github-script/pull/178) - Run npm audit and update dev dependencies by [@​joshmgross](https://togithub.com/joshmgross) in [https://github.com/actions/github-script/pull/181](https://togithub.com/actions/github-script/pull/181) #### New Contributors - [@​MichaelDeBoey](https://togithub.com/MichaelDeBoey) made their first contribution in [https://github.com/actions/github-script/pull/145](https://togithub.com/actions/github-script/pull/145) - [@​oscard0m](https://togithub.com/oscard0m) made their first contribution in [https://github.com/actions/github-script/pull/174](https://togithub.com/actions/github-script/pull/174) - [@​brcrista](https://togithub.com/brcrista) made their first contribution in [https://github.com/actions/github-script/pull/177](https://togithub.com/actions/github-script/pull/177) - [@​bhavanakonchada](https://togithub.com/bhavanakonchada) made their first contribution in [https://github.com/actions/github-script/pull/178](https://togithub.com/actions/github-script/pull/178) **Full Changelog**: https://github.com/actions/github-script/compare/v4.0.2...v4.1.0 ### [`v4.0.2`](https://togithub.com/actions/github-script/releases/tag/v4.0.2): Update @​actions/core package [Compare Source](https://togithub.com/actions/github-script/compare/v4.0.1...v4.0.2) This release updates the `@actions/core` package to 1.2.7 - [https://github.com/actions/github-script/pull/137](https://togithub.com/actions/github-script/pull/137) ### [`v4.0.1`](https://togithub.com/actions/github-script/releases/tag/v4.0.1): Fix "require" search path [Compare Source](https://togithub.com/actions/github-script/compare/v4...v4.0.1) Previously, the wrapped `require` searched the existing `module.paths` and *then* `process.cwd()`. We now only search `process.cwd()`. See [https://github.com/actions/github-script/pull/136](https://togithub.com/actions/github-script/pull/136) for details. ### [`v4.0.0`](https://togithub.com/actions/github-script/releases/tag/v4.0.0): Add support for relative and npm package require [Compare Source](https://togithub.com/actions/github-script/compare/v3.2.0...v4) This release adds support for relative require paths, as well as requiring npm modules installed in the working directory. ### [`v3.2.0`](https://togithub.com/actions/github-script/releases/tag/v3.2.0) [Compare Source](https://togithub.com/actions/github-script/compare/v3.1.1...v3.2.0) #### What's Changed - Upgrade [@​actions/core](https://togithub.com/actions/core) to 1.10.0 for v3 by [@​rentziass](https://togithub.com/rentziass) in [https://github.com/actions/github-script/pull/348](https://togithub.com/actions/github-script/pull/348) **Full Changelog**: https://github.com/actions/github-script/compare/v3.1.1...v3.2.0 ### [`v3.1.1`](https://togithub.com/actions/github-script/releases/tag/v3.1.1): Add `@​actions/glob` package [Compare Source](https://togithub.com/actions/github-script/compare/v3.1.0...v3.1.1) This releases adds the [`@actions/glob`](https://togithub.com/actions/toolkit/tree/main/packages/glob) package, which can be used in scripts via the `glob` variable - [#​127](https://togithub.com/actions/github-script/issues/127) ### [`v3.1.0`](https://togithub.com/actions/github-script/releases/tag/v3.1.0): Update Octokit Dependencies [Compare Source](https://togithub.com/actions/github-script/compare/v3.0.2...v3.1.0) This release adds the [latest Octokit dependencies](https://togithub.com/actions/github-script/blob/47f7cf65b5ced0830a325f705cad64f2f58dddf7/package.json#L41-L43). ### [`v3.0.2`](https://togithub.com/actions/github-script/releases/tag/v3.0.2): Fix build [Compare Source](https://togithub.com/actions/github-script/compare/v3.0.1...v3.0.2) I made an error in building v3.0.1, and this resolves that. ### [`v3.0.1`](https://togithub.com/actions/github-script/releases/tag/v3.0.1): Bump actions-core [Compare Source](https://togithub.com/actions/github-script/compare/v3.0.0...v3.0.1) This release bumps actions-core to 1.2.6. ### [`v3.0.0`](https://togithub.com/actions/github-script/releases/tag/v3.0.0): Update Octokit/Actions Toolkit [Compare Source](https://togithub.com/actions/github-script/compare/v2.1.0...v3.0.0) The Actions and Octokit dependencies have been bumped. Since they contain major version updates, this also constitutes a major version update for this action: ```json { "@​actions/core": "^1.2.4", "@​actions/github": "^4.0.0", "@​actions/io": "^1.0.2", "@​octokit/core": "^3.1.2", "@​octokit/plugin-paginate-rest": "^2.3.0", "@​octokit/plugin-rest-endpoint-methods": "^4.1.2" } ``` ### [`v2.1.0`](https://togithub.com/actions/github-script/releases/tag/v2.1.0) [Compare Source](https://togithub.com/actions/github-script/compare/v2.0.1...v2.1.0) ##### What's Changed - Bump [@​actions/core](https://togithub.com/actions/core) to 1.10.0 for v2 by [@​rentziass](https://togithub.com/rentziass) in [https://github.com/actions/github-script/pull/376](https://togithub.com/actions/github-script/pull/376) **Full Changelog**: https://github.com/actions/github-script/compare/v2...v2.1.0 ### [`v2.0.1`](https://togithub.com/actions/github-script/releases/tag/v2.0.1): Vendor third-party licenses [Compare Source](https://togithub.com/actions/github-script/compare/v2.0.0...v2.0.1) This release includes vendored licenses for this action's npm dependencies. ### [`v2.0.0`](https://togithub.com/actions/github-script/releases/tag/v2.0.0): Update actions/github [Compare Source](https://togithub.com/actions/github-script/compare/v1.1.0...v2.0.0) This updates the NPM package `@actions/github` to the latest version, which includes updates to the rest API interface. ### [`v1.1.0`](https://togithub.com/actions/github-script/releases/tag/v1.1.0): Add @​actions/io [Compare Source](https://togithub.com/actions/github-script/compare/v1.0.1...v1.1.0) This release includes the [@​actions/io](https://togithub.com/actions/toolkit/tree/master/packages/io) package, exposed as `io` in the script. ### [`v1.0.1`](https://togithub.com/actions/github-script/compare/v1.0.0...v1.0.1) [Compare Source](https://togithub.com/actions/github-script/compare/v1.0.0...v1.0.1) ### [`v1.0.0`](https://togithub.com/actions/github-script/releases/tag/v1.0.0): Initial release [Compare Source](https://togithub.com/actions/github-script/compare/0.9.0...v1.0.0) This is the initial major release of actions/github-script

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

renovate[bot] commented 1 year ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

âš  Warning: custom changes will be lost.