Skip to content

chore(deps): update wetransform/gha-workflows action to v4.3.1 - #254

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/wetransform-gha-workflows-4.x
Open

chore(deps): update wetransform/gha-workflows action to v4.3.1#254
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/wetransform-gha-workflows-4.x

Conversation

@renovate

@renovate renovate Bot commented Jul 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
wetransform/gha-workflows action minor v4.1.5 → v4.3.1 OpenSSF Scorecard

Release Notes

wetransform/gha-workflows (wetransform/gha-workflows)

v4.3.1

Compare Source

Bug Fixes
  • deps: update dependency wetransform/hk-config to v2.5.0 (f1c2a39)
  • mise-release: pin conventional-changelog-conventionalcommits to 9.x (aea6782)

v4.3.0

Compare Source

Features
  • mise: add support for custom test report locations (c494805)
  • mise: support npm project that resides in subfolder (399fb2b)
  • mise: support using a Docker bake configuration (328745c)
Bug Fixes
  • deps: update actions/cache action to v4.3.0 (e21e7cc)
  • deps: update actions/setup-node action to v6 (51c44bc)
  • deps: update all non-major dependencies (2004017)
  • deps: update all non-major dependencies (2654e0a)
  • deps: update dependency semantic-release to v25 (6cf742a)
  • deps: update gradle/actions action to v5 (485b14f)
  • deps: update jdx/mise-action action to v3.3.0 (151ce9f)
  • deps: update jdx/mise-action action to v3.3.1 (0cd6dcd)
  • deps: update mikepenz/action-junit-report action to v6 (208f401)

v4.2.2

Compare Source

Bug Fixes
  • deps: update actions/setup-node action to v7 (798c67f)
  • deps: update all non-major dependencies (58d29c3)
  • mise: configuring variant should not be required (3455cae)
  • mise: use client-id instead of deprecated app-id (c5fe756)

v4.2.1

Compare Source

Bug Fixes
  • deps: update wetransform/gha-trivy action to v2.7.0 (06a154d)

v4.2.0

Compare Source

Features
  • log in to Docker Hardened Images (c64dd65)

v4.1.6

Compare Source

Features
  • deps: update wetransform/gha-trivy action to v2 (fffeaac)
  • scan-images: include SBOM of scanned images and merge them (e001ea3)
  • scan-images: remove individual SBOM and HTML report artifacts (f804d9f)
Bug Fixes
  • deps: pin jaxxstorm/action-install-gh-release action to 25d5e2d (7de1fbc)
  • deps: update actions/checkout action to v4.1.6 (2e2eaa7)
  • deps: update all non-major dependencies (7b16a5f)
  • deps: update all non-major dependencies (4345049)
  • deps: update all non-major dependencies (7af9039)
  • deps: update docker/build-push-action action to v5.4.0 (15e42be)
  • deps: update docker/build-push-action action to v6 (2622b71)
  • deps: update wetransform/gha-gradle-semantic-release action to v2.1.0 (8caa0d2)
  • scan-images: fix typo (a9c893a)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Jul 9, 2026 •
edited
Loading

Copy link
Copy Markdown

Vulnerability summary (fs) — latest: run #583

Critical High Medium Low Unknown
0 1 4 1 0

Change since last run: no change
Risk≥40: 1 (=)

Grype (risk-based)

⚠️ 1 at/above risk threshold 40

Critical High Medium Low Negligible Unknown
1 1 4 1 0 0

Top by risk

Vulnerability Package Sev Risk EPSS KEV
GHSA-xm6r-4466-mr74 orientdb-core 1.5.1 Critical 68.7 0.73
GHSA-j288-q9x7-2f5v commons-lang 2.6 Medium 1.2 0.02
GHSA-w33c-445m-f8w7 okio 1.6.0 Medium 0.7 0.01
GHSA-pvp8-3xj6-8c6x commons-configuration 1.6 Low 0.5 0.02
GHSA-8wh2-6qhj-h7j9 snappy 0.3 Medium 0.3 0.00
GHSA-r7wm-3cxj-wff9 jackson-core 3.1.2 High 0.0 -
GHSA-xx22-p4ch-683r lz4-java 1.10.2 Medium 0.0 -

Links: workflow run · HTML report · SBOM · Grype report

Previous runs (1)

run #570 · 2026-07-19T06:36:28.635Z

Critical High Medium Low Unknown
0 0 3 1 0

Risk≥40: 1

@github-actions

github-actions Bot commented Jul 9, 2026 •
edited
Loading

Copy link
Copy Markdown

Vulnerability summary (docker.io/wetransform/hale-cli:latest) — latest: run #583

Critical High Medium Low Unknown
0 2 66 24 0

Change since last run: no change
Risk≥40: 2 (=)

Grype (risk-based)

⚠️ 2 at/above risk threshold 40

Critical High Medium Low Negligible Unknown
2 2 163 57 9 0

Top by risk

Vulnerability Package Sev Risk EPSS KEV
GHSA-xm6r-4466-mr74 orientdb-core 1.5.1 Critical 68.7 0.73
GHSA-xm6r-4466-mr74 orientdb-core 1.5.1 Critical 68.7 0.73
GHSA-j288-q9x7-2f5v commons-lang 2.6 Medium 1.2 0.02
GHSA-j288-q9x7-2f5v commons-lang 2.6 Medium 1.2 0.02
CVE-2023-31486 perl-base 5.34.0-3ubuntu1.7 Medium 0.9 0.02
GHSA-w33c-445m-f8w7 okio 1.6.0 Medium 0.7 0.01
GHSA-w33c-445m-f8w7 okio 1.6.0 Medium 0.7 0.01
CVE-2025-59375 libexpat1 2.4.7-1ubuntu0.7 Medium 0.6 0.01
CVE-2021-31879 wget 1.21.2-2ubuntu1.1 Medium 0.6 0.01
CVE-2022-4899 libzstd1 1.4.8+dfsg-3build1 Low 0.5 0.02

Links: workflow run · HTML report · SBOM · Grype report

Previous runs (2)

run #570 · 2026-07-19T06:36:41.787Z

Critical High Medium Low Unknown
0 0 40 25 0

Risk≥40: 2

run #562 · 2026-07-09T23:42:00.250Z

Critical High Medium Low Unknown
0 0 34 25 0

Risk≥40: 2

@renovate
renovate Bot force-pushed the renovate/wetransform-gha-workflows-4.x branch 2 times, most recently from 01fd734 to 9bc90b3 Compare July 9, 2026 14:23
@renovate renovate Bot changed the title chore(deps): update wetransform/gha-workflows action to v4.1.6 chore(deps): update wetransform/gha-workflows action to v4.2.0 Jul 9, 2026
@renovate
renovate Bot force-pushed the renovate/wetransform-gha-workflows-4.x branch 2 times, most recently from 429b842 to fd498e6 Compare July 9, 2026 23:39
@renovate renovate Bot changed the title chore(deps): update wetransform/gha-workflows action to v4.2.0 chore(deps): update wetransform/gha-workflows action to v4.2.1 Jul 9, 2026
@renovate
renovate Bot force-pushed the renovate/wetransform-gha-workflows-4.x branch from fd498e6 to 188c05d Compare July 19, 2026 06:34
@renovate
renovate Bot force-pushed the renovate/wetransform-gha-workflows-4.x branch from 188c05d to d769628 Compare July 30, 2026 20:01
@renovate renovate Bot changed the title chore(deps): update wetransform/gha-workflows action to v4.2.1 chore(deps): update wetransform/gha-workflows action to v4.3.0 Jul 30, 2026
@renovate renovate Bot changed the title chore(deps): update wetransform/gha-workflows action to v4.3.0 chore(deps): update wetransform/gha-workflows action to v4.3.1 Jul 31, 2026
@renovate
renovate Bot force-pushed the renovate/wetransform-gha-workflows-4.x branch from d769628 to d8c62d2 Compare July 31, 2026 00:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

renovate/minor renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants