Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove the description of the old go.mod specification #458

Merged
merged 7 commits into from Apr 18, 2024

Conversation

178inaba
Copy link
Contributor

@178inaba 178inaba commented Feb 17, 2024

Description:

Starting from Go 1.21, the go.mod file now includes patch versions as well.

$ go1.21.0 mod init test
go: creating new go.mod: module test
$ cat go.mod
module test

go 1.21.0

This is explained in the official Go documentation.

Go 1.21 introduces a small change to the numbering of releases. In the past, we used Go 1.N to refer to both the overall Go language version and release family as well as the first release in that family. Starting in Go 1.21, the first release is now Go 1.N.0. Today we are releasing both the Go 1.21 language and its initial implementation, the Go 1.21.0 release. These notes refer to “Go 1.21”; tools like go version will report “go1.21.0” (until you upgrade to Go 1.21.1). See “Go versions” in the “Go Toolchains” documentation for details about the new version numbering.
https://go.dev/doc/go1.21#introduction

setup-go retrieves the version of the go.mod file using the following code and can obtain the patch version as well.

const match = contents.match(/^go (\d+(\.\d+)*)/m);

Test:

https://www.typescriptlang.org/play?#code/MYewdgzgLgBKZQKYIjAvDARAcxDAjAHQBMxhADJgNwBQ80MAtgIZTAAW6c4SKhLbdgAoA9AD1cMIQB0AJgGoZhOfICUAKlUjGq2vRAAbRIQMhsQgR10wYQA

Additionally, I fixed the following:

  • Fix emoji rendering in contributors.md.
  • Fix quoting in README.md.
  • Remove the single quotes from go-version-file.

Related issue:

Fixes #461.

Check list:

  • [ ] Mark if documentation changes are required.
  • [ ] Mark if tests were added or updated to cover the changes.

This pull request is a documentation update itself. No testing is necessary.

@178inaba 178inaba requested a review from a team as a code owner February 17, 2024 16:09
@gowridurgad
Copy link

gowridurgad commented Mar 28, 2024

Hi @178inaba ,Could you please update the readme file with the below content, " The go-version-file input accepts a path to a go.mod file or a go.work file that contains the version of Go to be used by a project. The action will search for the latest available version sequentially in the runner's directory with the cached tools, in the [versions-manifest.json] (https://github.com/actions/go-versions/blob/main/versions- manifest.json) file or at the go servers." please add both with and without quotes here ,because both scenarios are working:
go-version-file: 'path/to/go.mod' or go-version-file: path/to/go.mod

@178inaba
Copy link
Contributor Author

@gowridurgad
Thank you for the review!

The action will search for the latest available version sequentially in the runner's directory with the cached tools, in the versions-manifest.json file or at the go servers.

The go.mod file or go.work file now includes patch versions as well. Therefore, the version is fixed, and I thought there is no need to search for the latest version. Is this thinking incorrect?

please add both with and without quotes here ,because both scenarios are working:
go-version-file: 'path/to/go.mod' or go-version-file: path/to/go.mod

The README includes a section on 'cache-dependency-path', but it is not enclosed in quotes. Therefore, I thought it would be better to align with this.

setup-go/README.md

Lines 175 to 177 in be1aa11

cache-dependency-path: |
subdir/go.sum
tools/go.sum

@ldemailly
Copy link

Searching for latest version is how it's been working before 1.22 / toolchain and I think it's the expected feature, I shouldn't need to keep changing my go.mod for a patch level and the go version in go.mod should be language version not a specific patch level (I complained as much in golang/go#66175 (comment))

@178inaba
Copy link
Contributor Author

178inaba commented Apr 4, 2024

@ldemailly
Thank you for commenting!

In toolchains from version 1.21 onwards, there have been errors when running go mod tidy if the patch version is not specified. Therefore, it is believed that specifying the patch version is required.

$ cat go.mod
module test

go 1.22
$ go1.21.0 mod tidy
go: downloading go1.22 (darwin/amd64)
go: download go1.22 for darwin/amd64: toolchain not available

I've read several issue comments, and the corrective approach seems to be changing the error messages to prompt modifications to the go.mod files.

golang/go#66175 (comment)
golang/go#62278 (comment)

@aparnajyothi-y
Copy link

aparnajyothi-y commented Apr 4, 2024

Hello @178inaba ,
Your reasoning makes sense ,The go.mod file or go.work file now includes patch versions as well. Therefore, the version is fixed, and there is no need to search for the latest version but If you want to allow flexibility for using newer patch versions without updating the go.mod or go.work file, the current behavior can be beneficial and The versions-manifest.json file can help ensure that the action uses a version of Go that's tested. This could be beneficial for ensuring compatibility and stability.so could please update the readme file.

@178inaba
Copy link
Contributor Author

178inaba commented Apr 4, 2024

@aparnajyothi-y
Thank you for commenting!

I also verified that if I specified the toolchain as below, no error would occur with go mod tidy.

$ cat go.mod
module test

go 1.22

toolchain go1.22.0

In this case, setup-go will look for the latest patch version of 1.22.
Therefore, I will add this behavior to the README.

@178inaba
Copy link
Contributor Author

178inaba commented Apr 4, 2024

I have added the following:

The `go` directive in `go.mod` can specify a patch version or omit it altogether (e.g., `go 1.22.0` or `go 1.22`).  
If a patch version is specified, that specific patch version will be used.  
If no patch version is specified, it will search for the latest available patch version in the cache,
[versions-manifest.json](https://github.com/actions/go-versions/blob/main/versions-manifest.json), and the
[official Go language website](https://golang.org/dl/?mode=json&include=all), in that order.

@gowridurgad
Copy link

Hi @178inaba, To avoid confusions, please revert this change or add both with and without quotes because both scenarios are working. go-version-file: 'path/to/go.mod' or go-version-file: path/to/go.mod

@178inaba
Copy link
Contributor Author

@gowridurgad
I reverted!

@Mago16
Copy link

Mago16 commented Apr 10, 2024 via email

JosephKav added a commit to release-argus/Argus that referenced this pull request Apr 15, 2024
* actions/setup-go#458
* move web component build inside Dockerfile
@HarithaVattikuti HarithaVattikuti merged commit cdcb360 into actions:main Apr 18, 2024
3 checks passed
@178inaba 178inaba deleted the fix-documents branch April 18, 2024 14:41
renovate bot added a commit to aenix-io/etcd-operator that referenced this pull request May 4, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change | Age | Adoption | Passing |
Confidence |
|---|---|---|---|---|---|---|---|
| [actions/setup-go](https://togithub.com/actions/setup-go) | action |
patch | `v5.0.0` -> `v5.0.1` |
[![age](https://developer.mend.io/api/mc/badges/age/github-tags/actions%2fsetup-go/v5.0.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/actions%2fsetup-go/v5.0.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/actions%2fsetup-go/v5.0.0/v5.0.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/actions%2fsetup-go/v5.0.0/v5.0.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [github.com/onsi/gomega](https://togithub.com/onsi/gomega) | require |
patch | `v1.33.0` -> `v1.33.1` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fonsi%2fgomega/v1.33.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fonsi%2fgomega/v1.33.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fonsi%2fgomega/v1.33.0/v1.33.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fonsi%2fgomega/v1.33.0/v1.33.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [golangci/golangci-lint](https://togithub.com/golangci/golangci-lint)
| | minor | `v1.57.2` -> `v1.58.0` |
[![age](https://developer.mend.io/api/mc/badges/age/github-tags/golangci%2fgolangci-lint/v1.58.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/golangci%2fgolangci-lint/v1.58.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/golangci%2fgolangci-lint/v1.57.2/v1.58.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/golangci%2fgolangci-lint/v1.57.2/v1.58.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [hugo-extended](https://togithub.com/jakejarvis/hugo-extended) |
devDependencies | patch | [`0.125.2` ->
`0.125.4`](https://renovatebot.com/diffs/npm/hugo-extended/0.125.2/0.125.4)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/hugo-extended/0.125.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/hugo-extended/0.125.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/hugo-extended/0.125.2/0.125.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/hugo-extended/0.125.2/0.125.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [k8s.io/utils](https://togithub.com/kubernetes/utils) | require |
patch | `v0.0.0-20240423183400-0849a56e8f22` ->
`v0.0.0-20240502163921-fe8a2dddb1d0` |
[![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2futils/v0.0.0-20240502163921-fe8a2dddb1d0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/k8s.io%2futils/v0.0.0-20240502163921-fe8a2dddb1d0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/k8s.io%2futils/v0.0.0-20240423183400-0849a56e8f22/v0.0.0-20240502163921-fe8a2dddb1d0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2futils/v0.0.0-20240423183400-0849a56e8f22/v0.0.0-20240502163921-fe8a2dddb1d0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[losisin/helm-values-schema-json](https://togithub.com/losisin/helm-values-schema-json)
| | minor | `v1.2.4` -> `v1.3.0` |
[![age](https://developer.mend.io/api/mc/badges/age/github-tags/losisin%2fhelm-values-schema-json/v1.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/losisin%2fhelm-values-schema-json/v1.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/losisin%2fhelm-values-schema-json/v1.2.4/v1.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/losisin%2fhelm-values-schema-json/v1.2.4/v1.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[sigs.k8s.io/controller-runtime](https://togithub.com/kubernetes-sigs/controller-runtime)
| require | patch | `v0.18.0` -> `v0.18.1` |
[![age](https://developer.mend.io/api/mc/badges/age/go/sigs.k8s.io%2fcontroller-runtime/v0.18.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/sigs.k8s.io%2fcontroller-runtime/v0.18.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/sigs.k8s.io%2fcontroller-runtime/v0.18.0/v0.18.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/sigs.k8s.io%2fcontroller-runtime/v0.18.0/v0.18.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>actions/setup-go (actions/setup-go)</summary>

###
[`v5.0.1`](https://togithub.com/actions/setup-go/releases/tag/v5.0.1)

[Compare
Source](https://togithub.com/actions/setup-go/compare/v5.0.0...v5.0.1)

#### What's Changed

- Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by
[@&#8203;dependabot](https://togithub.com/dependabot) ,
[@&#8203;HarithaVattikuti](https://togithub.com/HarithaVattikuti) in
[actions/setup-go#465
- Update documentation with latest V5 release notes by
[@&#8203;ab](https://togithub.com/ab) in
[actions/setup-go#459
- Update version documentation by
[@&#8203;178inaba](https://togithub.com/178inaba) in
[actions/setup-go#458
- Documentation update of `actions/setup-go` to v5 by
[@&#8203;chenrui333](https://togithub.com/chenrui333) in
[actions/setup-go#449

#### New Contributors

- [@&#8203;ab](https://togithub.com/ab) made their first contribution in
[actions/setup-go#459

**Full Changelog**:
actions/setup-go@v5.0.0...v5.0.1

</details>

<details>
<summary>onsi/gomega (github.com/onsi/gomega)</summary>

### [`v1.33.1`](https://togithub.com/onsi/gomega/releases/tag/v1.33.1)

[Compare
Source](https://togithub.com/onsi/gomega/compare/v1.33.0...v1.33.1)

##### 1.33.1

##### Fixes

- fix confusing eventually docs
\[[`3a66379`](https://togithub.com/onsi/gomega/commit/3a66379)]

##### Maintenance

- Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2
\[[`e9bc35a`](https://togithub.com/onsi/gomega/commit/e9bc35a)]

</details>

<details>
<summary>golangci/golangci-lint (golangci/golangci-lint)</summary>

###
[`v1.58.0`](https://togithub.com/golangci/golangci-lint/compare/v1.57.2...v1.58.0)

[Compare
Source](https://togithub.com/golangci/golangci-lint/compare/v1.57.2...v1.58.0)

</details>

<details>
<summary>jakejarvis/hugo-extended (hugo-extended)</summary>

###
[`v0.125.4`](https://togithub.com/jakejarvis/hugo-extended/compare/v0.125.3...v0.125.4)

[Compare
Source](https://togithub.com/jakejarvis/hugo-extended/compare/v0.125.3...v0.125.4)

###
[`v0.125.3`](https://togithub.com/jakejarvis/hugo-extended/compare/v0.125.2...v0.125.3)

[Compare
Source](https://togithub.com/jakejarvis/hugo-extended/compare/v0.125.2...v0.125.3)

</details>

<details>
<summary>losisin/helm-values-schema-json
(losisin/helm-values-schema-json)</summary>

###
[`v1.3.0`](https://togithub.com/losisin/helm-values-schema-json/releases/tag/v1.3.0)

[Compare
Source](https://togithub.com/losisin/helm-values-schema-json/compare/v1.2.4...v1.3.0)

#### Changelog

-
[`53d2c61`](https://togithub.com/losisin/helm-values-schema-json/commit/53d2c61)
Bump azure/setup-helm from 4.1.0 to 4.2.0
-
[`b453151`](https://togithub.com/losisin/helm-values-schema-json/commit/b453151)
Bump golangci/golangci-lint-action from 4 to 5
-
[`a4a9822`](https://togithub.com/losisin/helm-values-schema-json/commit/a4a9822)
Merge pull request
[#&#8203;59](https://togithub.com/losisin/helm-values-schema-json/issues/59)
from losisin/dependabot/github_actions/azure/setup-helm-4.2.0
-
[`f04bbe4`](https://togithub.com/losisin/helm-values-schema-json/commit/f04bbe4)
Merge pull request
[#&#8203;60](https://togithub.com/losisin/helm-values-schema-json/issues/60)
from losisin/dependabot/github_actions/golangci/golangci-lint-action-5
-
[`f87b874`](https://togithub.com/losisin/helm-values-schema-json/commit/f87b874)
Merge pull request
[#&#8203;62](https://togithub.com/losisin/helm-values-schema-json/issues/62)
from losisin/feature/indent-cli-option
-
[`cb41def`](https://togithub.com/losisin/helm-values-schema-json/commit/cb41def)
add indent cli option
-
[`2a02a16`](https://togithub.com/losisin/helm-values-schema-json/commit/2a02a16)
add step to check code in workflow
-
[`613cb3a`](https://togithub.com/losisin/helm-values-schema-json/commit/613cb3a)
update readme

</details>

<details>
<summary>kubernetes-sigs/controller-runtime
(sigs.k8s.io/controller-runtime)</summary>

###
[`v0.18.1`](https://togithub.com/kubernetes-sigs/controller-runtime/releases/tag/v0.18.1)

[Compare
Source](https://togithub.com/kubernetes-sigs/controller-runtime/compare/v0.18.0...v0.18.1)

#### What's Changed

- \[release-0.18] 🐛 Cache: Fix label defaulting of byObject when
namespaces are configured by
[@&#8203;k8s-infra-cherrypick-robot](https://togithub.com/k8s-infra-cherrypick-robot)
in
[kubernetes-sigs/controller-runtime#2808
- \[release-0.18] 🐛 correct kind source type by
[@&#8203;k8s-infra-cherrypick-robot](https://togithub.com/k8s-infra-cherrypick-robot)
in
[kubernetes-sigs/controller-runtime#2809

**Full Changelog**:
kubernetes-sigs/controller-runtime@v0.18.0...v0.18.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 6" (UTC), Automerge - At any
time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/aenix-io/etcd-operator).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMzEuMCIsInVwZGF0ZWRJblZlciI6IjM3LjMzMS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJvay10by10ZXN0Il19-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Hidden Marten <hiddenmarten@gmail.com>
another-rex pushed a commit to google/osv-scanner that referenced this pull request May 6, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action |
patch | `v4.1.1` -> `v4.1.4` |
|
[actions/download-artifact](https://togithub.com/actions/download-artifact)
| action | patch | `v4.1.4` -> `v4.1.7` |
| [actions/setup-go](https://togithub.com/actions/setup-go) | action |
patch | `v5.0.0` -> `v5.0.1` |
|
[actions/upload-artifact](https://togithub.com/actions/upload-artifact)
| action | patch | `v4.3.1` -> `v4.3.3` |
| [codecov/codecov-action](https://togithub.com/codecov/codecov-action)
| action | patch | `v4.3.0` -> `v4.3.1` |
| [github/codeql-action](https://togithub.com/github/codeql-action) |
action | minor | `v3.24.10` -> `v3.25.3` |
|
[golangci/golangci-lint-action](https://togithub.com/golangci/golangci-lint-action)
| action | patch | `v4.0.0` -> `v4.0.1` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

###
[`v4.1.4`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414)

[Compare
Source](https://togithub.com/actions/checkout/compare/v4.1.3...v4.1.4)

- Disable `extensions.worktreeConfig` when disabling `sparse-checkout`
by [@&#8203;jww3](https://togithub.com/jww3) in
[actions/checkout#1692
- Add dependabot config by
[@&#8203;cory-miller](https://togithub.com/cory-miller) in
[actions/checkout#1688
- Bump the minor-actions-dependencies group with 2 updates by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[actions/checkout#1693
- Bump word-wrap from 1.2.3 to 1.2.5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[actions/checkout#1643

###
[`v4.1.3`](https://togithub.com/actions/checkout/releases/tag/v4.1.3)

[Compare
Source](https://togithub.com/actions/checkout/compare/v4.1.2...v4.1.3)

#### What's Changed

- Update `actions/checkout` version in `update-main-version.yml` by
[@&#8203;jww3](https://togithub.com/jww3) in
[actions/checkout#1650
- Check git version before attempting to disable `sparse-checkout` by
[@&#8203;jww3](https://togithub.com/jww3) in
[actions/checkout#1656
- Add SSH user parameter by
[@&#8203;cory-miller](https://togithub.com/cory-miller) in
[actions/checkout#1685

**Full Changelog**:
actions/checkout@v4.1.2...v4.1.3

###
[`v4.1.2`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412)

[Compare
Source](https://togithub.com/actions/checkout/compare/v4.1.1...v4.1.2)

- Fix: Disable sparse checkout whenever `sparse-checkout` option is not
present [@&#8203;dscho](https://togithub.com/dscho) in
[actions/checkout#1598

</details>

<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>

###
[`v4.1.7`](https://togithub.com/actions/download-artifact/releases/tag/v4.1.7)

[Compare
Source](https://togithub.com/actions/download-artifact/compare/v4.1.6...v4.1.7)

#### What's Changed

- Update
[@&#8203;actions/artifact](https://togithub.com/actions/artifact)
dependency by [@&#8203;bethanyj28](https://togithub.com/bethanyj28) in
[actions/download-artifact#325

**Full Changelog**:
actions/download-artifact@v4.1.6...v4.1.7

###
[`v4.1.6`](https://togithub.com/actions/download-artifact/releases/tag/v4.1.6)

[Compare
Source](https://togithub.com/actions/download-artifact/compare/v4.1.5...v4.1.6)

#### What's Changed

- updating `@actions/artifact` dependency to v2.1.6 by
[@&#8203;eggyhead](https://togithub.com/eggyhead) in
[actions/download-artifact#324

**Full Changelog**:
actions/download-artifact@v4.1.5...v4.1.6

###
[`v4.1.5`](https://togithub.com/actions/download-artifact/releases/tag/v4.1.5)

[Compare
Source](https://togithub.com/actions/download-artifact/compare/v4.1.4...v4.1.5)

#### What's Changed

- Update readme with v3/v2/v1 deprecation notice by
[@&#8203;robherley](https://togithub.com/robherley) in
[actions/download-artifact#322
- Update dependencies `@actions/core` to v1.10.1 and `@actions/artifact`
to v2.1.5

**Full Changelog**:
actions/download-artifact@v4.1.4...v4.1.5

</details>

<details>
<summary>actions/setup-go (actions/setup-go)</summary>

###
[`v5.0.1`](https://togithub.com/actions/setup-go/releases/tag/v5.0.1)

[Compare
Source](https://togithub.com/actions/setup-go/compare/v5.0.0...v5.0.1)

#### What's Changed

- Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by
[@&#8203;dependabot](https://togithub.com/dependabot) ,
[@&#8203;HarithaVattikuti](https://togithub.com/HarithaVattikuti) in
[actions/setup-go#465
- Update documentation with latest V5 release notes by
[@&#8203;ab](https://togithub.com/ab) in
[actions/setup-go#459
- Update version documentation by
[@&#8203;178inaba](https://togithub.com/178inaba) in
[actions/setup-go#458
- Documentation update of `actions/setup-go` to v5 by
[@&#8203;chenrui333](https://togithub.com/chenrui333) in
[actions/setup-go#449

#### New Contributors

- [@&#8203;ab](https://togithub.com/ab) made their first contribution in
[actions/setup-go#459

**Full Changelog**:
actions/setup-go@v5.0.0...v5.0.1

</details>

<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>

###
[`v4.3.3`](https://togithub.com/actions/upload-artifact/releases/tag/v4.3.3)

[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v4.3.2...v4.3.3)

##### What's Changed

- updating `@actions/artifact` dependency to v2.1.6 by
[@&#8203;eggyhead](https://togithub.com/eggyhead) in
[actions/upload-artifact#565

**Full Changelog**:
actions/upload-artifact@v4.3.2...v4.3.3

###
[`v4.3.2`](https://togithub.com/actions/upload-artifact/releases/tag/v4.3.2)

[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v4.3.1...v4.3.2)

#### What's Changed

- Update release-new-action-version.yml by
[@&#8203;konradpabjan](https://togithub.com/konradpabjan) in
[actions/upload-artifact#516
- Minor fix to the migration readme by
[@&#8203;andrewakim](https://togithub.com/andrewakim) in
[actions/upload-artifact#523
- Update readme with v3/v2/v1 deprecation notice by
[@&#8203;robherley](https://togithub.com/robherley) in
[actions/upload-artifact#561
- updating `@actions/artifact` dependency to v2.1.5 and `@actions/core`
to v1.0.1 by [@&#8203;eggyhead](https://togithub.com/eggyhead) in
[actions/upload-artifact#562

#### New Contributors

- [@&#8203;andrewakim](https://togithub.com/andrewakim) made their first
contribution in
[actions/upload-artifact#523

**Full Changelog**:
actions/upload-artifact@v4.3.1...v4.3.2

</details>

<details>
<summary>codecov/codecov-action (codecov/codecov-action)</summary>

###
[`v4.3.1`](https://togithub.com/codecov/codecov-action/compare/v4.3.0...v4.3.1)

[Compare
Source](https://togithub.com/codecov/codecov-action/compare/v4.3.0...v4.3.1)

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.25.3`](https://togithub.com/github/codeql-action/compare/v3.25.2...v3.25.3)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.2...v3.25.3)

###
[`v3.25.2`](https://togithub.com/github/codeql-action/compare/v3.25.1...v3.25.2)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.1...v3.25.2)

###
[`v3.25.1`](https://togithub.com/github/codeql-action/compare/v3.25.0...v3.25.1)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.0...v3.25.1)

###
[`v3.25.0`](https://togithub.com/github/codeql-action/compare/v3.24.10...v3.25.0)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.24.10...v3.25.0)

</details>

<details>
<summary>golangci/golangci-lint-action
(golangci/golangci-lint-action)</summary>

###
[`v4.0.1`](https://togithub.com/golangci/golangci-lint-action/releases/tag/v4.0.1)

[Compare
Source](https://togithub.com/golangci/golangci-lint-action/compare/v4.0.0...v4.0.1)

<!-- Release notes generated using configuration in .github/release.yml
at v4.0.1 -->

#### What's Changed

##### Documentation

- docs: update the version of the action used in the README example by
[@&#8203;178inaba](https://togithub.com/178inaba) in
[golangci/golangci-lint-action#977

##### Dependencies

- build(deps): bump
[@&#8203;types/semver](https://togithub.com/types/semver) from 7.5.6 to
7.5.7 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#969
- build(deps-dev): bump
[@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser)
from 6.20.0 to 6.21.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#970
- build(deps-dev): bump eslint-plugin-simple-import-sort from 10.0.0 to
12.0.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#971
- build(deps-dev): bump
[@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin)
from 6.20.0 to 6.21.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#973
- build(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.11.16 to
20.11.17 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#972
- build(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.11.17 to
20.11.19 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#979
- build(deps-dev): bump
[@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin)
from 6.21.0 to 7.0.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#980
- build(deps): bump undici from 5.26.3 to 5.28.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#976
- build(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.11.19 to
20.11.20 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#985
- build(deps): bump
[@&#8203;types/semver](https://togithub.com/types/semver) from 7.5.7 to
7.5.8 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#986
- build(deps-dev): bump eslint from 8.56.0 to 8.57.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#987
- build(deps): bump tmp from 0.2.1 to 0.2.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#989
- build(deps-dev): bump
[@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser)
from 6.21.0 to 7.1.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#988
- build(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.11.20 to
20.11.24 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#990
- build(deps-dev): bump
[@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser)
from 7.1.0 to 7.1.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#991
- build(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.11.24 to
20.11.25 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#992
- build(deps-dev): bump typescript from 5.3.3 to 5.4.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#993
- build(deps-dev): bump
[@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin)
from 7.1.0 to 7.1.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#994
- build(deps): bump
[@&#8203;actions/http-client](https://togithub.com/actions/http-client)
from 2.2.0 to 2.2.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#995
- build(deps): bump google.golang.org/protobuf from 1.28.0 to 1.33.0 in
/sample-go-mod by [@&#8203;dependabot](https://togithub.com/dependabot)
in
[golangci/golangci-lint-action#997
- build(deps-dev): bump
[@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser)
from 7.1.1 to 7.2.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#998
- build(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.11.25 to
20.11.28 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1000
- build(deps-dev): bump
[@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin)
from 7.1.1 to 7.2.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#999
- build(deps-dev): bump
[@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin)
from 7.2.0 to 7.3.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1003
- build(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.11.28 to
20.11.30 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1004
- build(deps-dev): bump typescript from 5.4.2 to 5.4.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1005
- build(deps-dev): bump
[@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser)
from 7.2.0 to 7.3.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1006
- build(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.11.30 to
20.12.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1007
- build(deps-dev): bump
[@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin)
from 7.3.1 to 7.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1008
- build(deps-dev): bump
[@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser)
from 7.3.1 to 7.4.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1009
- build(deps): bump undici from 5.28.3 to 5.28.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1010
- build(deps-dev): bump typescript from 5.4.3 to 5.4.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1011
- build(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.12.2 to
20.12.5 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1012
- build(deps-dev): bump
[@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin)
from 7.4.0 to 7.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1013
- build(deps-dev): bump
[@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser)
from 7.4.0 to 7.5.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1014
- build(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.12.5 to
20.12.7 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1016
- build(deps-dev): bump typescript from 5.4.4 to 5.4.5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1017
- build(deps-dev): bump
[@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin)
from 7.5.0 to 7.6.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1019
- build(deps-dev): bump eslint-plugin-simple-import-sort from 12.0.0 to
12.1.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1018
- build(deps-dev): bump
[@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser)
from 7.5.0 to 7.7.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1022
- build(deps-dev): bump
[@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin)
from 7.6.0 to 7.7.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[golangci/golangci-lint-action#1023

#### New Contributors

- [@&#8203;178inaba](https://togithub.com/178inaba) made their first
contribution in
[golangci/golangci-lint-action#977

**Full Changelog**:
golangci/golangci-lint-action@v4.0.0...v4.0.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 6am on monday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/google/osv-scanner).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMTMuMSIsInVwZGF0ZWRJblZlciI6IjM3LjM0MC4xMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
xballoy added a commit to kumojin/go-uuid that referenced this pull request May 7, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-go](https://togithub.com/actions/setup-go) | action |
patch | `v5.0.0` -> `v5.0.1` |

---

### Release Notes

<details>
<summary>actions/setup-go (actions/setup-go)</summary>

###
[`v5.0.1`](https://togithub.com/actions/setup-go/releases/tag/v5.0.1)

[Compare
Source](https://togithub.com/actions/setup-go/compare/v5.0.0...v5.0.1)

#### What's Changed

- Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by
[@&#8203;dependabot](https://togithub.com/dependabot) ,
[@&#8203;HarithaVattikuti](https://togithub.com/HarithaVattikuti) in
[actions/setup-go#465
- Update documentation with latest V5 release notes by
[@&#8203;ab](https://togithub.com/ab) in
[actions/setup-go#459
- Update version documentation by
[@&#8203;178inaba](https://togithub.com/178inaba) in
[actions/setup-go#458
- Documentation update of `actions/setup-go` to v5 by
[@&#8203;chenrui333](https://togithub.com/chenrui333) in
[actions/setup-go#449

#### New Contributors

- [@&#8203;ab](https://togithub.com/ab) made their first contribution in
[actions/setup-go#459

**Full Changelog**:
actions/setup-go@v5.0.0...v5.0.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/kumojin/go-uuid).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNDAuMTAiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNDAuMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
bogdandrutu pushed a commit to open-telemetry/opentelemetry-collector that referenced this pull request May 8, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-go](https://togithub.com/actions/setup-go) | action |
patch | `v5.0.0` -> `v5.0.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>actions/setup-go (actions/setup-go)</summary>

###
[`v5.0.1`](https://togithub.com/actions/setup-go/releases/tag/v5.0.1)

[Compare
Source](https://togithub.com/actions/setup-go/compare/v5.0.0...v5.0.1)

#### What's Changed

- Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by
[@&#8203;dependabot](https://togithub.com/dependabot) ,
[@&#8203;HarithaVattikuti](https://togithub.com/HarithaVattikuti) in
[actions/setup-go#465
- Update documentation with latest V5 release notes by
[@&#8203;ab](https://togithub.com/ab) in
[actions/setup-go#459
- Update version documentation by
[@&#8203;178inaba](https://togithub.com/178inaba) in
[actions/setup-go#458
- Documentation update of `actions/setup-go` to v5 by
[@&#8203;chenrui333](https://togithub.com/chenrui333) in
[actions/setup-go#449

#### New Contributors

- [@&#8203;ab](https://togithub.com/ab) made their first contribution in
[actions/setup-go#459

**Full Changelog**:
actions/setup-go@v5.0.0...v5.0.1

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on tuesday" (UTC), Automerge - At any
time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/open-telemetry/opentelemetry-collector).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNDAuMTAiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNDAuMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsInJlbm92YXRlYm90Il19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Yang Song <songy23@users.noreply.github.com>
Racer159 pushed a commit to defenseunicorns/maru-runner that referenced this pull request May 22, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[actions/create-github-app-token](https://togithub.com/actions/create-github-app-token)
| action | minor | `v1.9.0` -> `v1.10.0` |
| [actions/setup-go](https://togithub.com/actions/setup-go) | action |
patch | `v5.0.0` -> `v5.0.1` |
| [anchore/sbom-action](https://togithub.com/anchore/sbom-action) |
action | minor | `v0.15.11` -> `v0.16.0` |
| [defenseunicorns/zarf](https://togithub.com/defenseunicorns/zarf) | |
minor | `v0.32.5` -> `v0.33.2` |
| [github/codeql-action](https://togithub.com/github/codeql-action) |
action | patch | `v3.25.3` -> `v3.25.6` |
|
[goreleaser/goreleaser-action](https://togithub.com/goreleaser/goreleaser-action)
| action | minor | `v5.0.0` -> `v5.1.0` |
| [ossf/scorecard-action](https://togithub.com/ossf/scorecard-action) |
action | patch | `v2.3.1` -> `v2.3.3` |

---

### Release Notes

<details>
<summary>actions/create-github-app-token
(actions/create-github-app-token)</summary>

###
[`v1.10.0`](https://togithub.com/actions/create-github-app-token/releases/tag/v1.10.0)

[Compare
Source](https://togithub.com/actions/create-github-app-token/compare/v1.9.3...v1.10.0)

##### Features

- **`private-key`:** escaped newlines will be replaced
([#&#8203;132](https://togithub.com/actions/create-github-app-token/issues/132))
([9d23fb9](https://togithub.com/actions/create-github-app-token/commit/9d23fb93dd620572046d85c7c1032b488c12514f))

###
[`v1.9.3`](https://togithub.com/actions/create-github-app-token/releases/tag/v1.9.3)

[Compare
Source](https://togithub.com/actions/create-github-app-token/compare/v1.9.2...v1.9.3)

##### Bug Fixes

- **deps:** bump undici from 6.10.2 to 6.11.1
([#&#8203;125](https://togithub.com/actions/create-github-app-token/issues/125))
([3c223c7](https://togithub.com/actions/create-github-app-token/commit/3c223c7336e276235eb843dd4e6ad42147199cbf)),
closes
[#&#8203;3024](https://togithub.com/actions/create-github-app-token/issues/3024)
[nodejs/undici#3044](https://togithub.com/nodejs/undici/issues/3044)
[#&#8203;3023](https://togithub.com/actions/create-github-app-token/issues/3023)
[nodejs/undici#3025](https://togithub.com/nodejs/undici/issues/3025)
[nodejs/undici#3024](https://togithub.com/nodejs/undici/issues/3024)
[nodejs/undici#3034](https://togithub.com/nodejs/undici/issues/3034)
[nodejs/undici#3038](https://togithub.com/nodejs/undici/issues/3038)
[nodejs/undici#2947](https://togithub.com/nodejs/undici/issues/2947)
[nodejs/undici#3040](https://togithub.com/nodejs/undici/issues/3040)
[nodejs/undici#3036](https://togithub.com/nodejs/undici/issues/3036)
[nodejs/undici#3041](https://togithub.com/nodejs/undici/issues/3041)
[#&#8203;3024](https://togithub.com/actions/create-github-app-token/issues/3024)
[#&#8203;3041](https://togithub.com/actions/create-github-app-token/issues/3041)
[#&#8203;3036](https://togithub.com/actions/create-github-app-token/issues/3036)

###
[`v1.9.2`](https://togithub.com/actions/create-github-app-token/releases/tag/v1.9.2)

[Compare
Source](https://togithub.com/actions/create-github-app-token/compare/v1.9.1...v1.9.2)

##### Bug Fixes

- **deps:** bump the production-dependencies group with 1 update
([#&#8203;123](https://togithub.com/actions/create-github-app-token/issues/123))
([beea7b8](https://togithub.com/actions/create-github-app-token/commit/beea7b860ac0b14ca14258aca701da842aa65e30)),
closes
[nodejs/undici#2978](https://togithub.com/nodejs/undici/issues/2978)
[nodejs/undici#2971](https://togithub.com/nodejs/undici/issues/2971)
[nodejs/undici#2980](https://togithub.com/nodejs/undici/issues/2980)
[#&#8203;2982](https://togithub.com/actions/create-github-app-token/issues/2982)
[nodejs/undici#2983](https://togithub.com/nodejs/undici/issues/2983)
[nodejs/undici#2987](https://togithub.com/nodejs/undici/issues/2987)
[nodejs/undici#2991](https://togithub.com/nodejs/undici/issues/2991)
[#&#8203;2986](https://togithub.com/actions/create-github-app-token/issues/2986)
[nodejs/undici#2992](https://togithub.com/nodejs/undici/issues/2992)
[nodejs/undici#2985](https://togithub.com/nodejs/undici/issues/2985)
[nodejs/undici#2993](https://togithub.com/nodejs/undici/issues/2993)
[nodejs/undici#2995](https://togithub.com/nodejs/undici/issues/2995)
[nodejs/undici#2998](https://togithub.com/nodejs/undici/issues/2998)
[#&#8203;2863](https://togithub.com/actions/create-github-app-token/issues/2863)
[nodejs/undici#2999](https://togithub.com/nodejs/undici/issues/2999)
[nodejs/undici#3001](https://togithub.com/nodejs/undici/issues/3001)
[nodejs/undici#2971](https://togithub.com/nodejs/undici/issues/2971)
[nodejs/undici#2980](https://togithub.com/nodejs/undici/issues/2980)
[nodejs/undici#2983](https://togithub.com/nodejs/undici/issues/2983)
[nodejs/undici#2987](https://togithub.com/nodejs/undici/issues/2987)
[nodejs/undici#2991](https://togithub.com/nodejs/undici/issues/2991)
[nodejs/undici#2985](https://togithub.com/nodejs/undici/issues/2985)
[nodejs/undici#2995](https://togithub.com/nodejs/undici/issues/2995)
[nodejs/undici#2960](https://togithub.com/nodejs/undici/issues/2960)
[nodejs/undici#2959](https://togithub.com/nodejs/undici/issues/2959)
[nodejs/undici#2969](https://togithub.com/nodejs/undici/issues/2969)
[nodejs/undici#2962](https://togithub.com/nodejs/undici/issues/2962)
[nodejs/undici#2974](https://togithub.com/nodejs/undici/issues/2974)
[nodejs/undici#2967](https://togithub.com/nodejs/undici/issues/2967)
[nodejs/undici#2966](https://togithub.com/nodejs/undici/issues/2966)
[nodejs/undici#2969](https://togithub.com/nodejs/undici/issues/2969)
[nodejs/undici#2962](https://togithub.com/nodejs/undici/issues/2962)
[nodejs/undici#2826](https://togithub.com/nodejs/undici/issues/2826)
[nodejs/undici#2952](https://togithub.com/nodejs/undici/issues/2952)
[#&#8203;3001](https://togithub.com/actions/create-github-app-token/issues/3001)
[#&#8203;2863](https://togithub.com/actions/create-github-app-token/issues/2863)
[#&#8203;2999](https://togithub.com/actions/create-github-app-token/issues/2999)
[#&#8203;2998](https://togithub.com/actions/create-github-app-token/issues/2998)
[#&#8203;2993](https://togithub.com/actions/create-github-app-token/issues/2993)
[#&#8203;2986](https://togithub.com/actions/create-github-app-token/issues/2986)
[#&#8203;2992](https://togithub.com/actions/create-github-app-token/issues/2992)
[#&#8203;2991](https://togithub.com/actions/create-github-app-token/issues/2991)
[#&#8203;2987](https://togithub.com/actions/create-github-app-token/issues/2987)

###
[`v1.9.1`](https://togithub.com/actions/create-github-app-token/releases/tag/v1.9.1)

[Compare
Source](https://togithub.com/actions/create-github-app-token/compare/v1.9.0...v1.9.1)

##### Bug Fixes

- clarify `owner` input description
([#&#8203;118](https://togithub.com/actions/create-github-app-token/issues/118))
([d9bc169](https://togithub.com/actions/create-github-app-token/commit/d9bc16919cdbdb07543eb732aa872437384e296f))

</details>

<details>
<summary>actions/setup-go (actions/setup-go)</summary>

###
[`v5.0.1`](https://togithub.com/actions/setup-go/releases/tag/v5.0.1)

[Compare
Source](https://togithub.com/actions/setup-go/compare/v5.0.0...v5.0.1)

#### What's Changed

- Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by
[@&#8203;dependabot](https://togithub.com/dependabot) ,
[@&#8203;HarithaVattikuti](https://togithub.com/HarithaVattikuti) in
[actions/setup-go#465
- Update documentation with latest V5 release notes by
[@&#8203;ab](https://togithub.com/ab) in
[actions/setup-go#459
- Update version documentation by
[@&#8203;178inaba](https://togithub.com/178inaba) in
[actions/setup-go#458
- Documentation update of `actions/setup-go` to v5 by
[@&#8203;chenrui333](https://togithub.com/chenrui333) in
[actions/setup-go#449

#### New Contributors

- [@&#8203;ab](https://togithub.com/ab) made their first contribution in
[actions/setup-go#459

**Full Changelog**:
actions/setup-go@v5.0.0...v5.0.1

</details>

<details>
<summary>anchore/sbom-action (anchore/sbom-action)</summary>

###
[`v0.16.0`](https://togithub.com/anchore/sbom-action/releases/tag/v0.16.0):
v0.16

[Compare
Source](https://togithub.com/anchore/sbom-action/compare/v0.15.11...v0.16.0)

#### Changes in v0.16.0

- Update Syft to v1.4.1
([#&#8203;465](https://togithub.com/anchore/sbom-action/issues/465))
- Update GitHub artifact client
([#&#8203;463](https://togithub.com/anchore/sbom-action/issues/463))
\[[kzantow](https://togithub.com/kzantow)]

</details>

<details>
<summary>defenseunicorns/zarf (defenseunicorns/zarf)</summary>

###
[`v0.33.2`](https://togithub.com/defenseunicorns/zarf/releases/tag/v0.33.2)

[Compare
Source](https://togithub.com/defenseunicorns/zarf/compare/v0.33.1...v0.33.2)

##### What's Changed

- fix: schema integration by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[defenseunicorns/zarf#2463
- docs: add contributor covenant code of conduct by
[@&#8203;salaxander](https://togithub.com/salaxander) in
[defenseunicorns/zarf#2462
- docs: fix casing on code of conduct badge by
[@&#8203;salaxander](https://togithub.com/salaxander) in
[defenseunicorns/zarf#2466
- fix(deps): update github.com/anchore/clio digest to
[`3c4abf8`](https://togithub.com/defenseunicorns/zarf/commit/3c4abf8) by
[@&#8203;renovate](https://togithub.com/renovate) in
[defenseunicorns/zarf#2424
- fix: update docker media type in registry by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[defenseunicorns/zarf#2476
- fix: adds GetVariableConfig function for packager by
[@&#8203;decleaver](https://togithub.com/decleaver) in
[defenseunicorns/zarf#2475
- test: add tests for remove copies from components to enable
refactoring by [@&#8203;phillebaba](https://togithub.com/phillebaba) in
[defenseunicorns/zarf#2473
- fix!: do not uninstall helm chart after failed install or upgrade by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2456
- feat: inspect --list-images by
[@&#8203;Noxsios](https://togithub.com/Noxsios) in
[defenseunicorns/zarf#2478
- refactor: remove copies from components to a filter by
[@&#8203;phillebaba](https://togithub.com/phillebaba) in
[defenseunicorns/zarf#2474
- chore: add support.md by
[@&#8203;schristoff](https://togithub.com/schristoff) in
[defenseunicorns/zarf#2480
- chore: add a check for go mod tidy by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2481
- fix: use correct sha256 checksum for arm64 injector binary by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2483
- fix: simplify go mod tidy check by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2482

##### New Contributors

- [@&#8203;salaxander](https://togithub.com/salaxander) made their first
contribution in
[defenseunicorns/zarf#2462
- [@&#8203;phillebaba](https://togithub.com/phillebaba) made their first
contribution in
[defenseunicorns/zarf#2473
- [@&#8203;schristoff](https://togithub.com/schristoff) made their first
contribution in
[defenseunicorns/zarf#2480

**Full Changelog**:
defenseunicorns/zarf@v0.33.1...v0.33.2

###
[`v0.33.1`](https://togithub.com/defenseunicorns/zarf/releases/tag/v0.33.1)

[Compare
Source](https://togithub.com/defenseunicorns/zarf/compare/v0.33.0...v0.33.1)

#### What's Changed

- fix: add redirect so old zarf base link is compatiable by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[defenseunicorns/zarf#2432
- ci: pin third-party gh actions by hash by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2433
- docs: add redirect for examples by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2438
- docs: update contributing and pre-commit by
[@&#8203;Noxsios](https://togithub.com/Noxsios) in
[defenseunicorns/zarf#2439
- ci: fix revive image ref in lint workflow by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2436
- fix: filter on running pods when finding an image for injector pod by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2415
- fix: readme dead links by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[defenseunicorns/zarf#2442
- fix: differential package create with non local sources by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[defenseunicorns/zarf#2444
- refactor: move variables into separate package by
[@&#8203;Racer159](https://togithub.com/Racer159) in
[defenseunicorns/zarf#2414
- ci: add top level workflow permission to commitlint by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2449
- ci: remove unused env var from codeql workflow by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2450
- chore: cleanup root level files and add SPDX check for Go files by
[@&#8203;Noxsios](https://togithub.com/Noxsios) in
[defenseunicorns/zarf#2431
- feat: config to enable resilient registry by
[@&#8203;Michael-Kruggel](https://togithub.com/Michael-Kruggel) in
[defenseunicorns/zarf#2440
- docs: init package clarity and cleanup by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[defenseunicorns/zarf#2447
- ci: compare cves to main by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[defenseunicorns/zarf#2448
- test: unpin version in bigbang extension test by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2459
- fix: broken schema from unexpanded embedded variables by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[defenseunicorns/zarf#2458
- fix: error on create if an index sha is used by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[defenseunicorns/zarf#2429

#### New Contributors

- [@&#8203;Michael-Kruggel](https://togithub.com/Michael-Kruggel) made
their first contribution in
[defenseunicorns/zarf#2440

**Full Changelog**:
defenseunicorns/zarf@v0.33.0...v0.33.1

###
[`v0.33.0`](https://togithub.com/defenseunicorns/zarf/releases/tag/v0.33.0)

[Compare
Source](https://togithub.com/defenseunicorns/zarf/compare/v0.32.6...v0.33.0)

#### What's Changed

- fix: update deprecated syft packages command to syft scan by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2399
- chore: move helpers to defenseunicorns/pkg by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[defenseunicorns/zarf#2402
- fix(deps): update github.com/anchore/clio digest to
[`fb5fc4c`](https://togithub.com/defenseunicorns/zarf/commit/fb5fc4c) by
[@&#8203;renovate](https://togithub.com/renovate) in
[defenseunicorns/zarf#2366
- feat(tools): add yq by
[@&#8203;zachariahmiller](https://togithub.com/zachariahmiller) in
[defenseunicorns/zarf#2406
- chore: switch to use oci lib in defenseunicorns/pkg by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[defenseunicorns/zarf#2404
- fix(deps): update module github.com/defenseunicorns/pkg/helpers to v1
by [@&#8203;renovate](https://togithub.com/renovate) in
[defenseunicorns/zarf#2411
- fix: use env var for PR title in commitlint workflow to prevent
untrusted script injection by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2418
- fix: use default GITHUB_TOKEN for ossf/scorecard-action by
[@&#8203;bburky](https://togithub.com/bburky) in
[defenseunicorns/zarf#2416
- fix: remove duplicate logic for writing image layers to disk
concurrently by [@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2409
- feat: add option to skip cosign lookup during find images by
[@&#8203;Racer159](https://togithub.com/Racer159) in
[defenseunicorns/zarf#2427
- feat: allow chart deploy overrides ALPHA by
[@&#8203;naveensrinivasan](https://togithub.com/naveensrinivasan) in
[defenseunicorns/zarf#2403
- chore: update pull_request_template.md by
[@&#8203;Noxsios](https://togithub.com/Noxsios) in
[defenseunicorns/zarf#2428
- ci: pin k3s image version in k3d github action by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[defenseunicorns/zarf#2430
- feat(docs): port docs to starlight by
[@&#8203;Noxsios](https://togithub.com/Noxsios) in
[defenseunicorns/zarf#2315

#### New Contributors

- [@&#8203;zachariahmiller](https://togithub.com/zachariahmiller) made
their first contribution in
[defenseunicorns/zarf#2406
- [@&#8203;bburky](https://togithub.com/bburky) made their first
contribution in
[defenseunicorns/zarf#2416

**Full Changelog**:
defenseunicorns/zarf@v0.32.6...v0.33.0

###
[`v0.32.6`](https://togithub.com/defenseunicorns/zarf/releases/tag/v0.32.6)

[Compare
Source](https://togithub.com/defenseunicorns/zarf/compare/v0.32.5...v0.32.6)

#### \[0.32.6] - 2024-03-22

> trying out some different release note generators, formatting may vary
for a few releases while we figure out what works best
~[@&#8203;Noxsios](https://togithub.com/Noxsios)

##### 🚀 Features

- \[**ALPHA**] feat: package generation ALPHA by
[@&#8203;andrewg-xyz](https://togithub.com/andrewg-xyz) in
[#&#8203;2269](https://togithub.com/defenseunicorns/zarf/pull/2269)
- *(lib)* feat(lib): configurable log file location by
[@&#8203;Noxsios](https://togithub.com/Noxsios) in
[#&#8203;2380](https://togithub.com/defenseunicorns/zarf/pull/2380)
- \[**BREAKING**] feat!: filter package components with strategy
interface by [@&#8203;Noxsios](https://togithub.com/Noxsios) in
[#&#8203;2321](https://togithub.com/defenseunicorns/zarf/pull/2321)

##### 🐛 Bug Fixes

- fix: refactor create stages into separate lib by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[#&#8203;2223](https://togithub.com/defenseunicorns/zarf/pull/2223)
- fix: handle registry caBundle as a multiline string by
[@&#8203;AbrohamLincoln](https://togithub.com/AbrohamLincoln) in
[#&#8203;2381](https://togithub.com/defenseunicorns/zarf/pull/2381)
- *(regression)* fix: populate `p.sbomViewFiles` on `deploy` and
`mirror` by [@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[#&#8203;2386](https://togithub.com/defenseunicorns/zarf/pull/2386)
- fix: allow absolute paths for differential packages by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[#&#8203;2397](https://togithub.com/defenseunicorns/zarf/pull/2397)
- fix: hotfix skeleton publish by
[@&#8203;Noxsios](https://togithub.com/Noxsios) in
[#&#8203;2398](https://togithub.com/defenseunicorns/zarf/pull/2398)

##### 🚜 Refactor

- refactor: split helpers/exec libs by
[@&#8203;Racer159](https://togithub.com/Racer159) in
[#&#8203;2379](https://togithub.com/defenseunicorns/zarf/pull/2379)

##### 🧪 Testing

- test: data injection flake by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[#&#8203;2361](https://togithub.com/defenseunicorns/zarf/pull/2361)

##### ⚙️ Miscellaneous Tasks

- ci: add commitlint workflow and update contributing guide by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[#&#8203;2391](https://togithub.com/defenseunicorns/zarf/pull/2391)

##### 🛡️ Security

- *(release)* build: create PRs on `homebrew-tap` by
[@&#8203;Noxsios](https://togithub.com/Noxsios) in
[#&#8203;2385](https://togithub.com/defenseunicorns/zarf/pull/2385)

**Full Changelog**:
defenseunicorns/zarf@v0.32.5...v0.32.6

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.25.6`](https://togithub.com/github/codeql-action/compare/v3.25.5...v3.25.6)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.5...v3.25.6)

###
[`v3.25.5`](https://togithub.com/github/codeql-action/compare/v3.25.4...v3.25.5)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.4...v3.25.5)

###
[`v3.25.4`](https://togithub.com/github/codeql-action/compare/v3.25.3...v3.25.4)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.3...v3.25.4)

</details>

<details>
<summary>goreleaser/goreleaser-action
(goreleaser/goreleaser-action)</summary>

###
[`v5.1.0`](https://togithub.com/goreleaser/goreleaser-action/releases/tag/v5.1.0)

[Compare
Source](https://togithub.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0)

#### Important

This version changes the default behavior of `latest` to `~> v1`.

The next major of this action (v6), will change this to `~> v2`, and
will be launched together with GoReleaser v2.

#### What's Changed

- docs: bump actions to latest major by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[goreleaser/goreleaser-action#435
- chore(deps): bump docker/bake-action from 3 to 4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#436
- chore(deps): bump codecov/codecov-action from 3 to 4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#437
- chore(deps): bump actions/setup-go from 4 to 5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#443
- chore(deps): bump actions/upload-artifact from 3 to 4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#444
- Delete .kodiak.toml by
[@&#8203;vedantmgoyal9](https://togithub.com/vedantmgoyal9) in
[goreleaser/goreleaser-action#446
- chore(deps): bump codecov/codecov-action from 3 to 4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#448
- chore(deps): bump ip from 2.0.0 to 2.0.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#450
- Upgrade setup-go action version in README by
[@&#8203;kishaningithub](https://togithub.com/kishaningithub) in
[goreleaser/goreleaser-action#455
- chore(deps): bump tar from 6.1.14 to 6.2.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#456
- chore: use corepack to install yarn by
[@&#8203;crazy-max](https://togithub.com/crazy-max) in
[goreleaser/goreleaser-action#458
- feat: lock this major version of the action to use '~> v1' as 'latest'
by [@&#8203;caarlos0](https://togithub.com/caarlos0) in
[goreleaser/goreleaser-action#461
- chore(deps): bump semver from 7.6.0 to 7.6.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#462
- chore(deps): bump
[@&#8203;actions/http-client](https://togithub.com/actions/http-client)
from 2.2.0 to 2.2.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#451

#### New Contributors

- [@&#8203;vedantmgoyal9](https://togithub.com/vedantmgoyal9) made their
first contribution in
[goreleaser/goreleaser-action#446

**Full Changelog**:
goreleaser/goreleaser-action@v5.0.0...v5.1.0

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.3.3`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.3.3)

[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.3.2...v2.3.3)

> \[!NOTE]\
> There is no v2.3.2 release as a step was skipped in the release
process. This was fixed and re-released under the v2.3.3 tag

#### What's Changed

- 🌱 Bump github.com/ossf/scorecard/v4 (v4.13.1) to
github.com/ossf/scorecard/v5 (v5.0.0-rc1) by
[@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[ossf/scorecard-action#1366
- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc1 to
v5.0.0-rc2 by
[@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[ossf/scorecard-action#1374
- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to
v5.0.0-rc2.0.20240509182734-7ce860946928 by
[@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[ossf/scorecard-action#1377

For a full changelist of what these include, see the
[v5.0.0-rc1](https://togithub.com/ossf/scorecard/releases/tag/v5.0.0-rc1)
and
[v5.0.0-rc2](https://togithub.com/ossf/scorecard/releases/tag/v5.0.0-rc2)
release notes.

##### Documentation

- 📖 Move token discussion out of main README. by
[@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[ossf/scorecard-action#1279
- 📖 link to `ossf/scorecard` workflow instead of maintaining an
example by [@&#8203;spencerschrock](https://togithub.com/spencerschrock)
in
[ossf/scorecard-action#1352
- 📖 update api links to new scorecard.dev site by
[@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[ossf/scorecard-action#1376

**Full Changelog**:
ossf/scorecard-action@v2.3.1...v2.3.3

###
[`v2.3.2`](https://togithub.com/ossf/scorecard-action/compare/v2.3.1...v2.3.2)

[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.3.1...v2.3.2)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 12pm every weekday,before 11am
every weekday" in timezone America/New_York, Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/defenseunicorns/maru-runner).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInN1cHBvcnQtZGVwcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Inaccurate description of version in go.mod
7 participants