Skip to content

build(deps): bump the github-actions-dependencies group across 5 directories with 18 updates - #945

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-af8f1dcebf
Open

build(deps): bump the github-actions-dependencies group across 5 directories with 18 updates#945
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-af8f1dcebf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-dependencies group with 12 updates in the / directory:

Package From To
hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml 0.38.0 0.39.2
hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml 0.28.0 1.0.3
hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml 0.38.0 0.39.2
actions/create-github-app-token 3.2.0 3.3.0
renovatebot/github-action 46.3.8 46.3.12
hoverkraft-tech/ci-github-common/.github/workflows/stale.yml 0.38.0 0.39.2
docker/login-action 4.6.0 4.7.0
hoverkraft-tech/ci-github-common/actions/checkout 0.38.0 0.39.2
hoverkraft-tech/ci-github-common/actions/local-workflow-actions 0.38.0 0.39.2
hoverkraft-tech/ci-github-common/actions/set-matrix-output 0.38.0 0.39.2
hoverkraft-tech/ci-github-common/actions/get-matrix-outputs 0.38.0 0.39.2
hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization 0.38.0 0.39.2
hoverkraft-tech/ci-github-common/actions/checkout 0.38.0 0.39.2
actions/create-github-app-token 3.2.0 3.3.0
hoverkraft-tech/ci-github-common/actions/checkout 0.38.0 0.39.2

Bumps the github-actions-dependencies group with 3 updates in the /actions/docker/build-image directory: hoverkraft-tech/ci-github-common/actions/local-actions, hoverkraft-tech/ci-github-common/actions/slugify and int128/docker-build-cache-config-action.
Bumps the github-actions-dependencies group with 4 updates in the /actions/helm/generate-docs directory: actions/create-github-app-token, hoverkraft-tech/ci-github-common/actions/checkout, hoverkraft-tech/ci-github-nodejs/actions/setup-node and hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request.
Bumps the github-actions-dependencies group with 3 updates in the /actions/helm/release-chart directory: hoverkraft-tech/ci-github-common/actions/checkout, hoverkraft-tech/ci-github-common/actions/local-actions and hoverkraft-tech/ci-github-nodejs/actions/setup-node.
Bumps the github-actions-dependencies group with 1 update in the /actions/helm/update-chart-values directory: mikefarah/yq.

Updates hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml from 0.38.0 to 0.39.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml's releases.

0.39.2

Release Summary

The linter skips commitlint for pushes that contain no commits, including tag creation. Explicit validator settings still take precedence, and branch and pull request commits remain checked.

This release also updates the shared Super-Linter image to 2.0.0 and CodeQL to 4.39.0. Workflow inputs are unchanged.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.39.1...0.39.2

0.39.1

Release Summary

The need-fix-to-issue action now categorizes and deduplicates generated issues. The linter skips commitlint by default on scheduled and manual runs.

Internal updates refresh GitHub Actions dependencies and documentation for actions and workflows.

Breaking changes

No breaking changes reported.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.39.0...0.39.1

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

... (truncated)

Commits
  • 4a6ed33 fix(linter): skip commitlint for pushes without commits
  • ffce5ed chore(deps): update ghcr.io/hoverkraft-tech/docker-base-images/super-linter d...
  • 4051a10 chore: bump hoverkraft-tech/docker-base-images/super-linter
  • 69fe880 docs: update actions and workflows documentation
  • 877f0ed chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • 44f6108 docs: update actions and workflows documentation
  • 088d6de chore: bump the github-actions-dependencies group across 3 directories with 4...
  • b42424d docs: update actions and workflows documentation
  • 1d79d97 fix(deps): add Renovate fallback for Docker actions
  • 089771f fix(linter): skip commitlint by default on scheduled and manual runs
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml from 0.28.0 to 1.0.3

Release notes

Sourced from hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml's releases.

Version 1.0.3

Release Summary

Release workflows now expose an optional merge method for documentation pull requests, allowing repositories with signed-commit requirements to use squash merges. This release also extends automatic retries for changelog summaries and updates the actions and workflows documentation.

Internal changes include a langchain dependency update in /actions/release/summarize-changelog and general dependency maintenance.

Breaking changes

There is no breaking change.

What's Changed

Dependency Updates

  • build(deps): bump langchain from 1.5.16 to 1.5.18 in /actions/release/summarize-changelog in the npm-dependencies group across 1 directory (#488) @​dependabot[bot]

Bug Fixes

  • fix(release): expose documentation pull request merge method (#492) @​neilime
  • fix(release): extend automatic retries for changelog summaries (#490) @​neilime

Documentation

Maintenance

New Contributors

No new contributors in this release.

Full Changelog: hoverkraft-tech/ci-github-publish@1.0.2...1.0.3

Version 1.0.2

Release Summary

Release notes generation and version calculation now scope changes to the working directory and configured include paths, and manual releases can be forced through a new force input. The release also updates the actions and workflows documentation.

Internally, the hoverkraft-tech/docker-base-images/super-linter build dependency was bumped from 1.1.0 to 2.0.0.

Breaking changes

There is no confirmed breaking change in this release.

... (truncated)

Commits
  • ea6682d fix(release): expose documentation pull request merge method
  • 985be63 docs: update actions and workflows documentation
  • e49707b fix(release): extend automatic retries for changelog summaries
  • 8e0ea88 chore: update deps
  • 9d8aa51 build(deps): bump langchain (#488)
  • 4d90668 build(deps): bump hoverkraft-tech/docker-base-images/super-linter
  • 20e4079 docs: update actions and workflows documentation
  • 923ea84 fix(ci): document force-release Checkov exception
  • b227d7b feat(release): allow forced manual releases
  • 1fda75d fix(release): scope generated releases to working directory
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml from 0.38.0 to 0.39.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml's releases.

0.39.2

Release Summary

The linter skips commitlint for pushes that contain no commits, including tag creation. Explicit validator settings still take precedence, and branch and pull request commits remain checked.

This release also updates the shared Super-Linter image to 2.0.0 and CodeQL to 4.39.0. Workflow inputs are unchanged.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.39.1...0.39.2

0.39.1

Release Summary

The need-fix-to-issue action now categorizes and deduplicates generated issues. The linter skips commitlint by default on scheduled and manual runs.

Internal updates refresh GitHub Actions dependencies and documentation for actions and workflows.

Breaking changes

No breaking changes reported.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.39.0...0.39.1

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

... (truncated)

Commits
  • 4a6ed33 fix(linter): skip commitlint for pushes without commits
  • ffce5ed chore(deps): update ghcr.io/hoverkraft-tech/docker-base-images/super-linter d...
  • 4051a10 chore: bump hoverkraft-tech/docker-base-images/super-linter
  • 69fe880 docs: update actions and workflows documentation
  • 877f0ed chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • 44f6108 docs: update actions and workflows documentation
  • 088d6de chore: bump the github-actions-dependencies group across 3 directories with 4...
  • b42424d docs: update actions and workflows documentation
  • 1d79d97 fix(deps): add Renovate fallback for Docker actions
  • 089771f fix(linter): skip commitlint by default on scheduled and manual runs
  • Additional commits viewable in compare view

Updates actions/create-github-app-token from 3.2.0 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)
Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

  • add support for enterprise-level GitHub Apps (#263) (952a2a7)
  • support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

  • deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
  • validate private-key input (#376) (f24bbd8)
Commits
  • 64ab729 chore(main): release 3.3.0 (#402)
  • f3a828e ci: create signed dist commits in release workflow (#404)
  • 655017f docs: clarify when owner grants access to all repositories (#378)
  • 12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
  • a47236f feat: update permission inputs (#399)
  • a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
  • d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
  • 575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
  • e85f677 test: omit stack traces from snapshots (#401)
  • 9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
  • Additional commits viewable in compare view

Updates renovatebot/github-action from 46.3.8 to 46.3.12

Release notes

Sourced from renovatebot/github-action's releases.

v46.3.12

46.3.12 (2026-11-02)

Documentation

  • update references to renovatebot/github-action to v46.3.11 (2d01910)

Miscellaneous Chores

  • deps: update dependency @​containerbase/oxlint-plugin to v1.1.0 (8e810d3)
  • deps: update pnpm to v10.34.8 (021fa2a)
  • deps: update pnpm to v10.34.9 (f7cbc90)

Build System

  • deps: lock file maintenance (6eccec3)

Continuous Integration

  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.198.3 (7b49be6)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.199.0 (704d70b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.199.2 (6536601)

v46.3.11

46.3.11 (2026-10-30)

Bug Fixes

Documentation

  • update references to renovatebot/github-action to v46.3.10 (d435328)

Miscellaneous Chores

  • deps: update dependency npm-run-all2 to v9.0.4 (0d94545)
  • deps: update dependency typescript-eslint to v8.72.0 (3372a91)
  • deps: update node.js to v24.22.2 (c5155d6)
  • replace eslint and prettier with oxlint and oxfmt (#1089) (5b781a4)

Continuous Integration

  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.181.11 (aa5e565)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.182.2 (3b94e1a)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.184.1 (71fd7a5)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.186.6 (7713216)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.186.7 (eedc0c9)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.188.2 (0d6adaa)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.188.4 (e46333c)

... (truncated)

Commits
  • 1c0cf98 chore(release): 46.3.12 [skip ci]
  • ed531e7 skip: merge (6eccec32f3739b43baf37308ba005e901b4c840a) [skip release]
  • e6375d7 skip: merge (2d019106c8c20c6c40b11a4614b543a0c5c2a73d) [skip release]
  • 6eccec3 build(deps): lock file maintenance
  • 2d01910 docs: update references to renovatebot/github-action to v46.3.11
  • 6c81376 skip: merge (6536601b896b43d2c3181542c65b7449446bc3c3) [skip release]
  • 59ddf3c skip: merge (f7cbc907d5426a253b89d20f317e6f1bdbb9f6f2) [skip release]
  • 6536601 ci(deps): update ghcr.io/renovatebot/renovate docker tag to v44.199.2
  • f7cbc90 chore(deps): update pnpm to v10.34.9
  • acbbf28 skip: merge (704d70b3ba6ac8fb4477631b3db3994e93835355) [skip release]
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/stale.yml from 0.38.0 to 0.39.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/stale.yml's releases.

0.39.2

Release Summary

The linter skips commitlint for pushes that contain no commits, including tag creation. Explicit validator settings still take precedence, and branch and pull request commits remain checked.

This release also updates the shared Super-Linter image to 2.0.0 and CodeQL to 4.39.0. Workflow inputs are unchanged.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.39.1...0.39.2

0.39.1

Release Summary

The need-fix-to-issue action now categorizes and deduplicates generated issues. The linter skips commitlint by default on scheduled and manual runs.

Internal updates refresh GitHub Actions dependencies and documentation for actions and workflows.

Breaking changes

No breaking changes reported.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.39.0...0.39.1

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

... (truncated)

Commits
  • 4a6ed33 fix(linter): skip commitlint for pushes without commits
  • ffce5ed chore(deps): update ghcr.io/hoverkraft-tech/docker-base-images/super-linter d...
  • 4051a10 chore: bump hoverkraft-tech/docker-base-images/super-linter
  • 69fe880 docs: update actions and workflows documentation
  • 877f0ed chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • 44f6108 docs: update actions and workflows documentation
  • 088d6de chore: bump the github-actions-dependencies group across 3 directories with 4...
  • b42424d docs: update actions and workflows documentation
  • 1d79d97 fix(deps): add Renovate fallback for Docker actions
  • 089771f fix(linter): skip commitlint by default on scheduled and manual runs
  • Additional commits viewable in compare view

Updates docker/login-action from 4.6.0 to 4.7.0

Release notes

Sourced from docker/login-action's releases.

v4.7.0

Full Changelog: docker/login-action@v4.6.0...v4.7.0

Commits
  • 81c6f93 Merge pull request #1100 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 1b16c8d Merge pull request #1096 from docker/dependabot/npm_and_yarn/uuid-14.0.3
  • ac86b5e [dependabot skip] chore: update generated content
  • 1476d84 build(deps): bump @​docker/actions-toolkit from 0.94.0 to 0.107.0
  • 503cee6 Merge pull request #1095 from docker/dependabot/github_actions/actions/create...
  • f093535 Merge pull request #1099 from docker/dependabot/github_actions/codecov/codeco...
  • d5ae7f1 Merge pull request #1098 from docker/dependabot/github_actions/docker/bake-ac...
  • 6f97507 Merge pull request #1097 from docker/dependabot/github_actions/docker/bake-ac...
  • 006d61f Merge pull request #1094 from docker/dependabot/github_actions/codeql-actions...
  • 93f5f52 Merge pull request #1093 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/actions/checkout from 0.38.0 to 0.39.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/actions/checkout's releases.

0.39.2

Release Summary

The linter skips commitlint for pushes that contain no commits, including tag creation. Explicit validator settings still take precedence, and branch and pull request commits remain checked.

This release also updates the shared Super-Linter image to 2.0.0 and CodeQL to 4.39.0. Workflow inputs are unchanged.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.39.1...0.39.2

0.39.1

Release Summary

The need-fix-to-issue action now categorizes and deduplicates generated issues. The linter skips commitlint by default on scheduled and manual runs.

Internal updates refresh GitHub Actions dependencies and documentation for actions and workflows.

Breaking changes

No breaking changes reported.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.39.0...0.39.1

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

... (truncated)

Commits
  • 4a6ed33 fix(linter): skip commitlint for pushes without commits
  • ffce5ed chore(deps): update ghcr.io/hoverkraft-tech/docker-base-images/super-linter d...
  • 4051a10 chore: bump hoverkraft-tech/docker-base-images/super-linter
  • 69fe880 docs: update actions and workflows documentation
  • 877f0ed chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • 44f6108 docs: update actions and workflows documentation
  • 088d6de chore: bump the github-actions-dependencies group across 3 directories with 4...
  • b42424d docs: update actions and workflows documentation
  • 1d79d97 fix(deps): add Renovate fallback for Docker actions
  • 089771f fix(linter): skip commitlint by default on scheduled and manual runs
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/actions/local-workflow-actions from 0.38.0 to 0.39.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/actions/local-workflow-actions's releases.

0.39.2

Release Summary

The linter skips commitlint for pushes that contain no commits, including tag creation. Explicit validator settings still take precedence, and branch and pull request commits remain checked.

This release also updates the shared Super-Linter image to 2.0.0 and CodeQL to 4.39.0. Workflow inputs are unchanged.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.39.1...0.39.2

0.39.1

Release Summary

The need-fix-to-issue action now categorizes and deduplicates generated issues. The linter skips commitlint by default on scheduled and manual runs.

Internal updates refresh GitHub Actions dependencies and documentation for actions and workflows.

Breaking changes

No breaking changes reported.

What's Changed

@dependabot
build(deps): bump the github-actions-dependencies group across 5 dire…
aa5e6df 
…ctories with 18 updates

Bumps the github-actions-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.2` |
| [hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml](https://github.com/hoverkraft-tech/ci-github-publish) | `0.28.0` | `1.0.3` |
| [hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.2` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` |
| [renovatebot/github-action](https://github.com/renovatebot/github-action) | `46.3.8` | `46.3.12` |
| [hoverkraft-tech/ci-github-common/.github/workflows/stale.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.2` |
| [docker/login-action](https://github.com/docker/login-action) | `4.6.0` | `4.7.0` |
| [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.2` |
| [hoverkraft-tech/ci-github-common/actions/local-workflow-actions](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.2` |
| [hoverkraft-tech/ci-github-common/actions/set-matrix-output](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.2` |
| [hoverkraft-tech/ci-github-common/actions/get-matrix-outputs](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.2` |
| [hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.2` |
| [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.2` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` |
| [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.2` |

Bumps the github-actions-dependencies group with 3 updates in the /actions/docker/build-image directory: [hoverkraft-tech/ci-github-common/actions/local-actions](https://github.com/hoverkraft-tech/ci-github-common), [hoverkraft-tech/ci-github-common/actions/slugify](https://github.com/hoverkraft-tech/ci-github-common) and [int128/docker-build-cache-config-action](https://github.com/int128/docker-build-cache-config-action).
Bumps the github-actions-dependencies group with 4 updates in the /actions/helm/generate-docs directory: [actions/create-github-app-token](https://github.com/actions/create-github-app-token), [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common), [hoverkraft-tech/ci-github-nodejs/actions/setup-node](https://github.com/hoverkraft-tech/ci-github-nodejs) and [hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request](https://github.com/hoverkraft-tech/ci-github-common).
Bumps the github-actions-dependencies group with 3 updates in the /actions/helm/release-chart directory: [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common), [hoverkraft-tech/ci-github-common/actions/local-actions](https://github.com/hoverkraft-tech/ci-github-common) and [hoverkraft-tech/ci-github-nodejs/actions/setup-node](https://github.com/hoverkraft-tech/ci-github-nodejs).
Bumps the github-actions-dependencies group with 1 update in the /actions/helm/update-chart-values directory: [mikefarah/yq](https://github.com/mikefarah/yq).


Updates `hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml` from 0.28.0 to 1.0.3
- [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases)
- [Commits](hoverkraft-tech/ci-github-publish@1ee0354...ea6682d)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

Updates `renovatebot/github-action` from 46.3.8 to 46.3.12
- [Release notes](https://github.com/renovatebot/github-action/releases)
- [Changelog](https://github.com/renovatebot/github-action/blob/main/CHANGELOG.md)
- [Commits](renovatebot/github-action@f0f41e5...1c0cf98)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/stale.yml` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `docker/login-action` from 4.6.0 to 4.7.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@dbcb813...81c6f93)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-common/actions/local-workflow-actions` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-common/actions/set-matrix-output` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-common/actions/get-matrix-outputs` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-common/actions/slugify` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `int128/docker-build-cache-config-action` from 1.71.0 to 1.73.0
- [Release notes](https://github.com/int128/docker-build-cache-config-action/releases)
- [Commits](int128/docker-build-cache-config-action@97740da...7c23da3)

Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-nodejs/actions/setup-node` from 0.24.4 to 1.1.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@df34807...97f64bc)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

Updates `hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-nodejs/actions/setup-node` from 0.24.4 to 1.1.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@df34807...97f64bc)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-nodejs/actions/setup-node` from 0.24.4 to 1.1.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@df34807...97f64bc)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-common/actions/local-actions` from 0.38.0 to 0.39.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...4a6ed33)

Updates `hoverkraft-tech/ci-github-nodejs/actions/setup-node` from 0.24.4 to 1.1.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@df34807...97f64bc)

Updates `mikefarah/yq` from 4.53.6 to 4.54.1
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](mikefarah/yq@c14f446...504fc38)

---
updated-dependencies:
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: renovatebot/github-action
  dependency-version: 46.3.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: docker/login-action
  dependency-version: 4.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/local-workflow-actions
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/set-matrix-output
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/get-matrix-outputs
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/repository-owner-is-organization
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/slugify
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: int128/docker-build-cache-config-action
  dependency-version: 1.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs/actions/setup-node
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs/actions/setup-node
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs/actions/setup-node
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/local-actions
  dependency-version: 0.39.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs/actions/setup-node
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: mikefarah/yq
  dependency-version: 4.54.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 9, 2026
@github-actions

github-actions Bot commented Nov 9, 2026

Copy link
Copy Markdown
Contributor

Hi, thank you for creating your PR, we will check it out very soon

@github-actions

github-actions Bot commented Nov 9, 2026

Copy link
Copy Markdown
Contributor

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
GITHUB_ACTIONS Pass ✅
GITHUB_ACTIONS_ZIZMOR Fail ❌
GITLEAKS Pass ✅
GIT_COMMITLINT Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅
YAML Pass ✅
YAML_PRETTIER Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter
Super-linter revision: 2da136927bd4a73596db63044b504547c62cb854
Super-linter version: 9.0.0

GITHUB_ACTIONS_ZIZMOR 
�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:464:15
    �[1m�[94m|�[0m
�[1m�[94m463�[0m �[1m�[94m|�[0m       - id: build
    �[1m�[94m|�[0m         �[1m�[94m---------�[0m �[1m�[94mthis step�[0m
�[1m�[94m464�[0m �[1m�[94m|�[0m         uses: ./../self-workflow/actions/docker/build-image
    �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:547:15
    �[1m�[94m|�[0m
�[1m�[94m546�[0m �[1m�[94m|�[0m       - id: create-images-manifests
    �[1m�[94m|�[0m         �[1m�[94m---------------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m547�[0m �[1m�[94m|�[0m         uses: ./../self-workflow/actions/docker/create-images-manifests
    �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:573:15
    �[1m�[94m|�[0m
�[1m�[94m573�[0m �[1m�[94m|�[0m         - uses: ./../self-workflow/actions/docker/sign-images
    �[1m�[94m|�[0m           �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m �[1m�[94m _________|�[0m
    �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m574�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         if: steps.get-images-to-sign.outputs.images-to-sign
�[1m�[94m575�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         with:
�[1m�[94m576�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           images: ${{ steps.get-images-to-sign.outputs.images-to-sign }}
�[1m�[94m577�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           github-token: ${{ secrets.GITHUB_TOKEN }}
    �[1m�[94m|�[0m �[1m�[94m|___________________________________________________-�[0m �[1m�[94mthis step�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:629:15
    �[1m�[94m|�[0m
�[1m�[94m629�[0m �[1m�[94m|�[0m         - uses: ./../self-workflow/actions/docker/setup
    �[1m�[94m|�[0m           �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m �[1m�[94m _________|�[0m
    �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m630�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         with:
�[1m�[94m631�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           oci-registry: ${{ inputs.oci-registry }}
�[1m�[94m632�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           oci-registry-username: ${{ inputs.oci-registry-username }}
�[1m�[94m633�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           oci-registry-password: ${{ secrets.oci-registry-password }} # zizmor: ignore[secrets-outside-env]
�[1m�[94m634�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           built-images: ${{ needs.publish-manifests.outputs.built-images }}
�[1m�[94m635�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           setup-buildx: false
    �[1m�[94m|�[0m �[1m�[94m|_____________________________-�[0m �[1m�[94mthis step�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/docker-build-images.yml:637:15
    �[1m�[94m|�[0m
�[1m�[94m637�[0m �[1m�[94m|�[0m         - uses: ./../self-workflow/actions/docker/attest-image
    �[1m�[94m|�[0m           �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m �[1m�[94m _________|�[0m
    �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m638�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         with:
�[1m�[94m639�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           image: ${{ matrix.image }}
�[1m�[94m640�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m           github-token: ${{ secrets.GITHUB_TOKEN }}
    �[1m�[94m|�[0m �[1m�[94m|____________________________________________________-�[0m �[1m�[94mthis step�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/.github/workflows/prune-pull-requests-images-tags.yml:161:15
    �[1m�[94m|�[0m
�[1m�[94m160�[0m �[1m�[94m|�[0m       - id: build
    �[1m�[94m|�[0m         �[1m�[94m---------�[0m �[1m�[94mthis step�[0m
�[1m�[94m161�[0m �[1m�[94m|�[0m         uses: ./../self-workflow/actions/docker/prune-pull-requests-image-tags
    �[1m�[94m|�[0m               �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/docker/build-image/action.yml:164:13
    �[1m�[94m|�[0m
�[1m�[94m163�[0m �[1m�[94m|�[0m     - id: docker-setup
    �[1m�[94m|�[0m       �[1m�[94m----------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m164�[0m �[1m�[94m|�[0m       uses: ./../self-actions/docker/setup
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/docker/build-image/action.yml:172:13
    �[1m�[94m|�[0m
�[1m�[94m171�[0m �[1m�[94m|�[0m     - id: metadata
    �[1m�[94m|�[0m       �[1m�[94m------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m172�[0m �[1m�[94m|�[0m       uses: ./../self-actions/docker/get-image-metadata
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/docker/build-image/action.yml:371:13
    �[1m�[94m|�[0m
�[1m�[94m368�[0m �[1m�[94m|�[0m     - id: build
    �[1m�[94m|�[0m       �[1m�[94m---------�[0m �[1m�[94mthis step�[0m
�[1m�[94m...�[0m
�[1m�[94m371�[0m �[1m�[94m|�[0m       uses: ./../self-actions/docker/build-image/internal
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/helm/release-chart/action.yml:191:13
    �[1m�[94m|�[0m
�[1m�[94m191�[0m �[1m�[94m|�[0m       - uses: ./../self-actions-release-chart/helm/update-chart-values
    �[1m�[94m|�[0m         �[1m�[94m-�[0m     �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m �[1m�[94m _______|�[0m
    �[1m�[94m|�[0m �[1m�[94m|�[0m
�[1m�[94m192�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m       with:
�[1m�[94m193�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         path: ${{ inputs.path }}
�[1m�[94m194�[0m �[1m�[94m|�[0m �[1m�[94m|�[0m         values: ${{ steps.chart-tag-updates.outputs.values }}
    �[1m�[94m|�[0m �[1m�[94m|_____________________________________________________________-�[0m �[1m�[94mthis step�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/helm/release-chart/action.yml:298:13
    �[1m�[94m|�[0m
�[1m�[94m297�[0m �[1m�[94m|�[0m     - name: Prepare chart dependencies
    �[1m�[94m|�[0m       �[1m�[94m--------------------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m298�[0m �[1m�[94m|�[0m       uses: ./../self-actions-release-chart/helm/prepare-chart
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
   �[1m�[94m--> �[0m/github/workspace/actions/helm/release-chart/action.yml:366:13
    �[1m�[94m|�[0m
�[1m�[94m364�[0m �[1m�[94m|�[0m     - name: Sign chart digest
    �[1m�[94m|�[0m       �[1m�[94m-----------------------�[0m �[1m�[94mthis step�[0m
�[1m�[94m365�[0m �[1m�[94m|�[0m       if: inputs.sign == 'true'
�[1m�[94m366�[0m �[1m�[94m|�[0m       uses: ./../self-actions-release-chart/helm/sign-chart
    �[1m�[94m|�[0m             �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
    �[1m�[94m|�[0m
    �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
    �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
    �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[32m40�[39m findings (�[1m�[93m28�[39m suppressed, �[91m12�[39m unsafe fixes�[0m): �[35m0�[39m informational, �[36m12�[39m low, �[33m0�[39m medium, �[31m0�[39m high�[32m INFO�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 zizmor v1.30.1
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__greetings.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__main-ci.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__need-fix-to-issue.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__renovate.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__stale.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__test-action-docker-build-image.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__test-action-helm-release-chart.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__test-action-helm-sign-chart.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/docker-build-images.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/prune-pull-requests-images-tags.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/actions/docker/build-image/action.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/actions/helm/generate-docs/action.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/actions/helm/release-chart/action.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/actions/helm/update-chart-values/action.yml

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants