-
Notifications
You must be signed in to change notification settings - Fork 262
Bump chainguard-dev/actions from 1.5.9 to 1.5.10 #2663
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump chainguard-dev/actions from 1.5.9 to 1.5.10 #2663
Conversation
Bumps [chainguard-dev/actions](https://github.com/chainguard-dev/actions) from 1.5.9 to 1.5.10. - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Changelog](https://github.com/chainguard-dev/actions/blob/main/.goreleaser.yml) - [Commits](chainguard-dev/actions@b479012...3e8a2a2) --- updated-dependencies: - dependency-name: chainguard-dev/actions dependency-version: 1.5.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
vdemeester
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: vdemeester The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
#2661 | [dependabot[bot]] Bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 | 2025/11/24-14:56 #2662 | [dependabot[bot]] Bump actions/setup-go from 6.0.0 to 6.1.0 | 2025/11/24-15:00 #2663 | [dependabot[bot]] Bump chainguard-dev/actions from 1.5.9 to 1.5.10 | 2025/11/24-15:02 #2664 | [dependabot[bot]] Bump github/codeql-action from 4.31.3 to 4.31.5 | 2025/11/24-15:04 #2666 | [shverma] Update goreleaser version to v.12.0 | 2025/11/26-08:48 #2666 | [shverma] Update README and choco with latest release | 2025/11/26-08:48 #2665 | [dependabot[bot]] Bump github.com/docker/cli in the go-docker-dependencies group | 2025/11/26-09:00 #2660 | [dependabot[bot]] Bump actions/checkout from 5.0.0 to 6.0.0 | 2025/11/28-13:02 #2659 | [dependabot[bot]] Bump github.com/tektoncd/hub from 1.23.1 to 1.23.2 | 2025/11/28-13:10 #2671 | [dependabot[bot]] Bump github.com/golangci/golangci-lint/v2 from 2.6.2 to 2.7.0 in /tools | 2025/12/05-06:00 null | [dependabot[bot]] Bump go.uber.org/zap from 1.27.0 to 1.27.1 | 2025/12/05-06:02 null | [dependabot[bot]] Bump github.com/golangci/golangci-lint/v2 from 2.7.0 to 2.7.2 in /tools | 2025/12/09-14:42 null | [dependabot[bot]] Bump step-security/harden-runner from 2.13.2 to 2.13.3 | 2025/12/09-14:44 null | [dependabot[bot]] Bump actions/checkout from 6.0.0 to 6.0.1 | 2025/12/09-14:46 null | [dependabot[bot]] Bump github.com/spf13/cobra from 1.10.1 to 1.10.2 | 2025/12/09-15:44 null | [dependabot[bot]] Bump github.com/docker/cli in the go-docker-dependencies group | 2025/12/15-15:12 null | [dependabot[bot]] Bump github.com/tektoncd/hub from 1.23.2 to 1.23.4 | 2025/12/15-15:14 null | [dependabot[bot]] Bump actions/upload-artifact from 5.0.0 to 6.0.0 | 2025/12/15-15:16 null | [dependabot[bot]] Bump step-security/harden-runner from 2.13.3 to 2.14.0 | 2025/12/16-07:26 null | [dependabot[bot]] Bump github/codeql-action from 4.31.5 to 4.31.8 | 2025/12/16-14:12 null | [dependabot[bot]] Bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 | 2025/12/16-14:38 null | [dependabot[bot]] Bump the go-k8s-dependencies group with 3 updates | 2025/12/18-06:10 null | [dependabot[bot]] Bump github/codeql-action from 4.31.8 to 4.31.9 | 2025/12/22-15:12 null | [dependabot[bot]] Bump github.com/docker/cli in the go-docker-dependencies group | 2026/01/05-05:15 null | [dependabot[bot]] Bump golang.org/x/term from 0.37.0 to 0.38.0 | 2026/01/05-11:11 null | [dependabot[bot]] Bump github.com/golangci/golangci-lint/v2 from 2.7.2 to 2.8.0 in /tools | 2026/01/12-09:11 null | [dependabot[bot]] Bump github.com/tektoncd/hub from 1.23.4 to 1.23.6 | 2026/01/12-09:23 null | [dependabot[bot]] Bump github.com/tektoncd/pipeline from 1.6.0 to 1.7.0 | 2026/01/12-10:05 Signed-off-by: shverma <[email protected]>
Bumps chainguard-dev/actions from 1.5.9 to 1.5.10.
Release notes
Sourced from chainguard-dev/actions's releases.
Commits
3e8a2a2Bump actions/setup-go from 6.0.0 to 6.1.0 in /setup-melange (#662)729e62eBump actions/setup-go from 6.0.0 to 6.1.0 in /boilerplate (#661)9f06767Bump actions/setup-go from 6.0.0 to 6.1.0 (#660)e7d70cbBump actions/checkout from 5.0.1 to 6.0.0 (#659)c088192setup-knative: Avoid GitHub API when possible (#656)1816224Bump reviewdog/action-setup from 1.4.0 to 1.5.0 in /donotsubmit (#652)b143ceaBump reviewdog/action-setup from 1.4.0 to 1.5.0 in /eof-newline (#653)50ec231Bump reviewdog/action-setup from 1.4.0 to 1.5.0 in /boilerplate (#651)0a0d87bBump reviewdog/action-setup from 1.4.0 to 1.5.0 in /trailing-space (#654)0727032Bump chainguard-dev/actions from 1.5.8 to 1.5.9 (#645)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)