Skip to content

build: update scorecard action dependencies #2941

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

angular-robot
Copy link
Collaborator

@angular-robot angular-robot commented Aug 8, 2025

This PR contains the following updates:

Package Type Update Change
actions/checkout action minor v4.2.2 -> v4.3.0
github/codeql-action action patch v3.29.5 -> v3.29.8

Release Notes

actions/checkout (actions/checkout)

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

github/codeql-action (github/codeql-action)

v3.29.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.8 - 08 Aug 2025
  • Fix an issue where the Action would autodetect unsupported languages such as HTML. #​3015

See the full CHANGELOG.md for more information.

v3.29.7

Compare Source

This is a re-release of v3.29.5 to mitigate an issue that was discovered with v3.29.6.

v3.29.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.6 - 07 Aug 2025

  • The cleanup-level input to the analyze Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. #​2999
  • Update default CodeQL bundle version to 2.22.3. #​3000

See the full CHANGELOG.md for more information.


Configuration

📅 Schedule: Branch creation - "after 10:00pm every weekday,before 5:00am every weekday,every weekend" in timezone America/Tijuana, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@angular-robot angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project labels Aug 8, 2025
@angular-robot angular-robot force-pushed the ng-renovate/scorecard-action-dependencies branch from 135a885 to 7bac973 Compare August 8, 2025 10:42
@angular-robot angular-robot changed the title build: update github/codeql-action action to v3.29.7 build: update github/codeql-action action to v3.29.8 Aug 8, 2025
@angular-robot angular-robot force-pushed the ng-renovate/scorecard-action-dependencies branch from 7bac973 to 2228b6d Compare August 11, 2025 10:07
See associated pull request for more information.
@angular-robot angular-robot changed the title build: update github/codeql-action action to v3.29.8 build: update scorecard action dependencies Aug 11, 2025
@angular-robot angular-robot force-pushed the ng-renovate/scorecard-action-dependencies branch from 2228b6d to 8fea5ef Compare August 11, 2025 10:45
Copy link
Member

@josephperrott josephperrott left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@josephperrott
Copy link
Member

This PR was merged into the repository by commit 16824ff.

The changes were merged into the following branches: main

@angular-robot angular-robot deleted the ng-renovate/scorecard-action-dependencies branch August 11, 2025 17:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants