Lochnair-Labs/irtt-rs
2
0 Fork 0
Code Issues 1 Pull Requests 4 Actions 8 Packages Projects Releases 6 Wiki Activity

chore(deps): pin dependencies #130

Merged
Lochnair merged 1 commits from renovate/github-actions into main 2026-08-29 14:38:39 +00:00
Conversation 0 Commits 1 Files Changed 3
+8 -8
renovate Bot commented 2026-08-29 14:36:39 +00:00
Copy link
Copy source

This PR contains the following updates:

Package Type Update Change
actions/checkout action pinDigest → 11d5960
docker/build-push-action action pinDigest → 10e90e3
docker/login-action action pinDigest → c94ce9f
docker/setup-buildx-action action pinDigest → 8d2750c
github/codeql-action (changelog) action digest ff2f1c6 → cdf488f
google/osv-scanner-action workflow patch v2.5.0 → v2.5.1

Release Notes

google/osv-scanner-action (google/osv-scanner-action)

v2.5.1

Compare Source

This updates OSV-Scanner to v2.3.8.

What's Changed
Fixes:
  • Preserve package namespaces when querying osv.dev API (fixes #​2978).
  • Re-add support for the OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY environment variable (fixes #​2983).
  • Fix local vulnerability matching (--offline-vulnerabilities) not working when network capability is NetworkOnline.

Full Changelog: https://github.com/google/osv-scanner-action/compare/v2.5.0...v2.5.1

Configuration

📅 Schedule: (in timezone Asia/Jakarta)

  • Branch creation
    • "before 10am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | pinDigest | → `11d5960` | | [docker/build-push-action](https://github.com/docker/build-push-action) | action | pinDigest | → `10e90e3` | | [docker/login-action](https://github.com/docker/login-action) | action | pinDigest | → `c94ce9f` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | action | pinDigest | → `8d2750c` | | [github/codeql-action](https://github.com/github/codeql-action) ([changelog](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd..cdf488f595d80d6e07e03d4674febd5ab45fa938)) | action | digest | `ff2f1c6` → `cdf488f` | | [google/osv-scanner-action](https://github.com/google/osv-scanner-action) | workflow | patch | `v2.5.0` → `v2.5.1` | --- ### Release Notes <details> <summary>google/osv-scanner-action (google/osv-scanner-action)</summary> ### [`v2.5.1`](https://github.com/google/osv-scanner-action/releases/tag/v2.5.1) [Compare Source](https://github.com/google/osv-scanner-action/compare/v2.5.0...v2.5.1) This updates OSV-Scanner to v2.3.8. ##### What's Changed - Update actions/checkout action to v7 by [@&#8203;renovate-bot](https://github.com/renovate-bot) in [#&#8203;133](https://github.com/google/osv-scanner-action/pull/133) ##### Fixes: - Preserve package namespaces when querying osv.dev API (fixes [#&#8203;2978](https://github.com/google/osv-scanner/issues/2978)). - Re-add support for the `OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY` environment variable (fixes [#&#8203;2983](https://github.com/google/osv-scanner/issues/2983)). - Fix local vulnerability matching (`--offline-vulnerabilities`) not working when network capability is `NetworkOnline`. **Full Changelog**: <https://github.com/google/osv-scanner-action/compare/v2.5.0...v2.5.1> </details> --- ### Configuration 📅 **Schedule**: (in timezone Asia/Jakarta) - Branch creation - "before 10am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC40OC4xIiwidXBkYXRlZEluVmVyIjoiNDQuNDguMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
renovate Bot added the dependencies label 2026-08-29 14:36:39 +00:00
renovate Bot added 1 commit 2026-08-29 14:36:40 +00:00
chore(deps): pin dependencies 9ab1b78637
Lochnair merged commit 9ab1b78637 into main 2026-08-29 14:38:39 +00:00
Lochnair deleted branch renovate/github-actions 2026-08-29 14:38:42 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Something isn't working
 dependencies
documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 question
Further information is requested
 wontfix
This will not be worked on
No labels dependencies
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
Lochnair renovate (Renovate Bot) Bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Lochnair-Labs/irtt-rs#130