Skip to content

Commit

Permalink
chore(deps): update workflows (#1468)
Browse files Browse the repository at this point in the history
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
| action | minor | `v4.5.0` -> `v4.6.0` |
|
[docker/setup-qemu-action](https://redirect.github.com/docker/setup-qemu-action)
| action | digest | `49b3bc8` -> `53851d1` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | patch | `v3.28.0` -> `v3.28.1` |
| [ruby/setup-ruby](https://redirect.github.com/ruby/setup-ruby) |
action | minor | `v1.204.0` -> `v1.207.0` |
|
[shivammathur/setup-php](https://redirect.github.com/shivammathur/setup-php)
| action | minor | `2.31.1` -> `2.32.0` |

---

### Release Notes

<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>

###
[`v4.6.0`](https://redirect.github.com/actions/upload-artifact/releases/tag/v4.6.0)

[Compare
Source](https://redirect.github.com/actions/upload-artifact/compare/v4.5.0...v4.6.0)

##### What's Changed

- Expose env vars to control concurrency and timeout by
[@&#8203;yacaovsnc](https://redirect.github.com/yacaovsnc) in
[https://github.com/actions/upload-artifact/pull/662](https://redirect.github.com/actions/upload-artifact/pull/662)

**Full Changelog**:
actions/upload-artifact@v4...v4.6.0

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.28.1`](https://redirect.github.com/github/codeql-action/releases/tag/v3.28.1)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3.28.0...v3.28.1)

##### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

##### 3.28.1 - 10 Jan 2025

- CodeQL Action v2 is now deprecated, and is no longer updated or
supported. For better performance, improved security, and new features,
upgrade to v3. For more information, see [this changelog
post](https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/).
[#&#8203;2677](https://redirect.github.com/github/codeql-action/pull/2677)
- Update default CodeQL bundle version to 2.20.1.
[#&#8203;2678](https://redirect.github.com/github/codeql-action/pull/2678)

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.28.1/CHANGELOG.md)
for more information.

</details>

<details>
<summary>ruby/setup-ruby (ruby/setup-ruby)</summary>

###
[`v1.207.0`](https://redirect.github.com/ruby/setup-ruby/releases/tag/v1.207.0)

[Compare
Source](https://redirect.github.com/ruby/setup-ruby/compare/v1.206.0...v1.207.0)

#### What's Changed

- Update CRuby releases on Windows by
[@&#8203;ruby-builder-bot](https://redirect.github.com/ruby-builder-bot)
in
[https://github.com/ruby/setup-ruby/pull/681](https://redirect.github.com/ruby/setup-ruby/pull/681)

**Full Changelog**:
ruby/setup-ruby@v1.206.0...v1.207.0

###
[`v1.206.0`](https://redirect.github.com/ruby/setup-ruby/releases/tag/v1.206.0)

[Compare
Source](https://redirect.github.com/ruby/setup-ruby/compare/v1.205.0...v1.206.0)

#### What's Changed

- Add ruby-3.4.0,ruby-3.4.1 by
[@&#8203;ruby-builder-bot](https://redirect.github.com/ruby-builder-bot)
in
[https://github.com/ruby/setup-ruby/pull/679](https://redirect.github.com/ruby/setup-ruby/pull/679)

**Full Changelog**:
ruby/setup-ruby@v1.205.0...v1.206.0

###
[`v1.205.0`](https://redirect.github.com/ruby/setup-ruby/releases/tag/v1.205.0)

[Compare
Source](https://redirect.github.com/ruby/setup-ruby/compare/v1.204.0...v1.205.0)

##### What's Changed

- Fixes the latest rubygems installation error with Ruby 3.0 by
[@&#8203;Watson1978](https://redirect.github.com/Watson1978) in
[https://github.com/ruby/setup-ruby/pull/676](https://redirect.github.com/ruby/setup-ruby/pull/676)

##### New Contributors

- [@&#8203;Watson1978](https://redirect.github.com/Watson1978) made
their first contribution in
[https://github.com/ruby/setup-ruby/pull/676](https://redirect.github.com/ruby/setup-ruby/pull/676)

**Full Changelog**:
ruby/setup-ruby@v1.204.0...v1.205.0

</details>

<details>
<summary>shivammathur/setup-php (shivammathur/setup-php)</summary>

###
[`v2.32.0`](https://redirect.github.com/shivammathur/setup-php/releases/tag/2.32.0)

[Compare
Source](https://redirect.github.com/shivammathur/setup-php/compare/2.31.1...2.32.0)

##### Changelog

-   Added support for PHP 8.4 as the default stable PHP version.

```yml
- name: Setup PHP
  uses: shivammathur/setup-php@v2
```

- Added support for PHP 8.5 as the nightly version.
([#&#8203;867](https://redirect.github.com/shivammathur/setup-php/issues/867))

```yml
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
```

- Added support for `pre-installed` in `php-version` input.
([#&#8203;872](https://redirect.github.com/shivammathur/setup-php/issues/872))
It will setup the pre-installed PHP version on the runner as per the
docs here

https://github.com/shivammathur/setup-php?tab=readme-ov-file#github-hosted-runners.
If the runner does not have a pre-installed PHP version, it will fail.
Please note: It is not recommended to use this unless you are doing
something trivial, the pre-installed PHP versions on GitHub hosted
runners are old patch versions.

```yml
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: pre-installed
```

- Added support for `.tool-versions` file format in `php-version-file`
input.
([#&#8203;883](https://redirect.github.com/shivammathur/setup-php/issues/883))
    If you have an asdf .tool-versions file in your project.
For example, you can specify `.tool-versions` now in the
`php-version-file` input and the action would setup the correct PHP
version.

```txt
ruby 3.4
php 8.4
nodejs 23.5
```

```yml
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version-file: .tool-versions
```

- Added support for to specify the path for composer file in the project
to read the PHP version using `COMPOSER_PROJECT_DIR` env value.
([#&#8203;894](https://redirect.github.com/shivammathur/setup-php/issues/894))

```yml
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  env:
    COMPOSER_PROJECT_DIR: php  
```

-   Added support for `macos-15` GitHub hosted environment.

-   Added support for `windows-2025` GitHub hosted environment.

- Added support for composer-dependency-analyser tool
([#&#8203;859](https://redirect.github.com/shivammathur/setup-php/issues/859),
[#&#8203;897](https://redirect.github.com/shivammathur/setup-php/issues/897))

```yml
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    tools: composer-dependency-analyser
```

- Added support for relay extension for PHP 8.4 and 8.5.
([#&#8203;892](https://redirect.github.com/shivammathur/setup-php/issues/892))

```yml
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: relay
```

- Added information on how an extension is loaded in the wiki extension
lists.
([#&#8203;887](https://redirect.github.com/shivammathur/setup-php/issues/887))
    https://github.com/shivammathur/setup-php/wiki

- Fixed support for debug builds.
([#&#8203;880](https://redirect.github.com/shivammathur/setup-php/issues/880))

```yml
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
  env:
    debug: true  
```

-   Fixed support for zts buids on self-hosted runners.

```yml
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
  env:
    phpts: ts
```

-   Fixed support for oci extensions for PHP 8.4 and PHP 8.5.

```yml
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: pdo_oci, oci8
```

-   Fixed support for zephir_parser extension.

```yml
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: zephir_parser
```

-   Fixed support for couchbase extension on old PHP versions.

```yml
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '7.1'
    extensions: couchbase
```

-   Fixed support for pdo_firebird extension on macos-15.

```yml

##### runs-on: macos-15
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.4'
    extensions: pdo_firebird
```

- Improved support to install tools in a multi-user self-hosted
environment.
-   Dropped support for `macos-12` GitHub hosted environments.
-   Dropped support for Debian 10 based self-hosted environments.
-   Update Node.js dependencies.

Thanks [@&#8203;janedbal](https://redirect.github.com/janedbal),
[@&#8203;alexmerlin](https://redirect.github.com/alexmerlin) and
[@&#8203;tillkruss](https://redirect.github.com/tillkruss) for the
contributions 🎉

Thanks [@&#8203;desrosj](https://redirect.github.com/desrosj),
[@&#8203;bloodynumen](https://redirect.github.com/bloodynumen) and
[@&#8203;eliashaeussler](https://redirect.github.com/eliashaeussler) for
the sponsorship ❤️

For the complete list of changes, please refer to the [Full
Changelog](https://redirect.github.com/shivammathur/setup-php/compare/2.31.1...2.32.0)

<p>
  <h4>Follow for updates</h4>
<a href="https://reddit.com/r/setup_php" title="setup-php reddit"><img
alt="setup-php reddit"
src="https://img.shields.io/badge/reddit-join-FF5700?logo=reddit&logoColor=FF5700&labelColor=555555"></a>
<a href="https://twitter.com/setup_php" title="setup-php twitter"><img
alt="setup-php twitter"
src="https://img.shields.io/badge/twitter-follow-1DA1F2?logo=twitter&logoColor=1DA1F2&labelColor=555555"></a>
<a href="https://status.setup-php.com" title="setup-php status"><img
alt="setup-php status"
src="https://img.shields.io/badge/status-subscribe-28A745?logo=statuspage&logoColor=28A745&labelColor=555555"></a>
</p>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 6am on monday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/google/osv-scanner).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44NS4wIiwidXBkYXRlZEluVmVyIjoiMzkuOTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
  • Loading branch information
renovate-bot authored Jan 13, 2025
1 parent 4077a22 commit 35e9d3e
Show file tree
Hide file tree
Showing 8 changed files with 23 additions and 23 deletions.
2 changes: 1 addition & 1 deletion .github/workflows/checks.yml
Original file line number Diff line number Diff line change
Expand Up @@ -80,7 +80,7 @@ jobs:
with:
persist-credentials: false
- run: scripts/build_test_images.sh
- uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: image-fixtures-${{ github.run_number }}-${{ github.run_attempt }}
path: internal/image/fixtures/*.tar
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/codeql-analysis.yml
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ jobs:
go-version-file: go.mod
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
uses: github/codeql-action/init@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
Expand All @@ -59,7 +59,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
uses: github/codeql-action/autobuild@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
uses: github/codeql-action/autobuild@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1

# ℹ️ Command-line programs to run using the OS shell.
# 📚 https://git.io/JvXDl
Expand All @@ -73,4 +73,4 @@ jobs:
# make release

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
uses: github/codeql-action/analyze@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
2 changes: 1 addition & 1 deletion .github/workflows/goreleaser.yml
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ jobs:
with:
go-version: stable
check-latest: true
- uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
- uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3
- uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
- name: ghcr-login
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/osv-scanner-reusable-pr.yml
Original file line number Diff line number Diff line change
Expand Up @@ -86,28 +86,28 @@ jobs:
# format to the repository Actions tab.
- name: "Upload artifact"
if: "!cancelled()"
uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: SARIF file
path: ${{ inputs.results-file-name }}
retention-days: 5
- name: "Upload old scan json results"
if: "!cancelled()"
uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: old-json-results
path: old-results.json
retention-days: 5
- name: "Upload new scan json results"
if: "!cancelled()"
uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: new-json-results
path: new-results.json
retention-days: 5
# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
if: ${{ !cancelled() && inputs.upload-sarif == true }}
uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
with:
sarif_file: ${{ inputs.results-file-name }}
4 changes: 2 additions & 2 deletions .github/workflows/osv-scanner-reusable.yml
Original file line number Diff line number Diff line change
Expand Up @@ -83,14 +83,14 @@ jobs:
# format to the repository Actions tab.
- name: "Upload artifact"
if: "!cancelled()"
uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: SARIF file
path: ${{ inputs.results-file-name }}
retention-days: 5
# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
if: "${{ !cancelled() && inputs.upload-sarif == true }}"
uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
with:
sarif_file: ${{ inputs.results-file-name }}
2 changes: 1 addition & 1 deletion .github/workflows/prerelease-check.yml
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,7 @@ jobs:
with:
persist-credentials: false
- run: scripts/build_test_images.sh
- uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: image-fixtures-${{ github.run_number }}-${{ github.run_attempt }}
path: internal/image/fixtures/*.tar
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/scorecards.yml
Original file line number Diff line number Diff line change
Expand Up @@ -60,14 +60,14 @@ jobs:
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
# format to the repository Actions tab.
- name: "Upload artifact"
uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: SARIF file
path: results.sarif
retention-days: 5

# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1
with:
sarif_file: results.sarif
18 changes: 9 additions & 9 deletions .github/workflows/semantic.yml
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@ jobs:
- run: python3 scripts/generators/generate-debian-versions.py
- run: git status
- run: stat debian-db.zip
- uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: generated-debian-versions
path: internal/semantic/fixtures/debian-versions-generated.txt
Expand Down Expand Up @@ -82,7 +82,7 @@ jobs:
- run: python3 scripts/generators/generate-redhat-versions.py
- run: git status
- run: stat redhat-db.zip
- uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: generated-redhat-versions
path: internal/semantic/fixtures/redhat-versions-generated.txt
Expand All @@ -100,13 +100,13 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
persist-credentials: false
- uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # 2.31.1
- uses: shivammathur/setup-php@9e72090525849c5e82e596468b86eb55e9cc5401 # 2.32.0
with:
php-version: "8.2"
extensions: zip
- run: php scripts/generators/generate-packagist-versions.php
- run: git status
- uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: generated-packagist-versions
path: internal/semantic/fixtures/packagist-versions-generated.txt
Expand All @@ -126,7 +126,7 @@ jobs:
run: pip install packaging==21.3
- run: python3 scripts/generators/generate-pypi-versions.py
- run: git status
- uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: generated-pypi-versions
path: internal/semantic/fixtures/pypi-versions-generated.txt
Expand All @@ -139,14 +139,14 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
persist-credentials: false
- uses: ruby/setup-ruby@401c19e14f474b54450cd3905bb8b86e2c8509cf # v1.204.0
- uses: ruby/setup-ruby@4a9ddd6f338a97768b8006bf671dfbad383215f4 # v1.207.0
with:
ruby-version: "3.1"
- name: setup dependencies
run: gem install rubyzip
- run: ruby scripts/generators/generate-rubygems-versions.rb
- run: git status
- uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: generated-rubygems-versions
path: internal/semantic/fixtures/rubygems-versions-generated.txt
Expand All @@ -172,7 +172,7 @@ jobs:
-o scripts/generators/lib/maven-artifact-3.8.5.jar
- run: java -cp 'scripts/generators/lib/*' scripts/generators/GenerateMavenVersions.java
- run: git status
- uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: generated-maven-versions
path: internal/semantic/fixtures/maven-versions-generated.txt
Expand All @@ -190,7 +190,7 @@ jobs:
r-version: "3.5.3"
- run: Rscript scripts/generators/generate-cran-versions.R
- run: git status
- uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
- uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
with:
name: generated-cran-versions
path: internal/semantic/fixtures/cran-versions-generated.txt
Expand Down

0 comments on commit 35e9d3e

Please sign in to comment.