Skip to content

chore(deps): update grafana/xk6 action to v1.3.7#328

Open
renovate-sh-app[bot] wants to merge 1 commit intomasterfrom
renovate/grafana-xk6-1.x
Open

chore(deps): update grafana/xk6 action to v1.3.7#328
renovate-sh-app[bot] wants to merge 1 commit intomasterfrom
renovate/grafana-xk6-1.x

Conversation

@renovate-sh-app
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
grafana/xk6 action patch v1.3.6v1.3.7

Release Notes

grafana/xk6 (grafana/xk6)

v1.3.7

Compare Source

Grafana xk6 v1.3.7 is here! 🎉

This release switches the Docker base image to Chainguard to eliminate CVE vulnerabilities and significantly reduce ongoing maintenance burden (#​439).

  • Migrated from golang:alpine to cgr.dev/chainguard/go:latest-dev
  • Achieves zero known CVEs in the base image
  • Eliminates the continuous maintenance overhead of patching Alpine/Golang CVEs
  • Updated Go to version 1.26.x via Chainguard's latest stream
  • Security tools (gosec, govulncheck) are now installed from source during build

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

| datasource  | package     | from   | to     |
| ----------- | ----------- | ------ | ------ |
| github-tags | grafana/xk6 | v1.3.6 | v1.3.7 |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants