gsadmin/renovate
1
0
Fork 0
mirror of https://github.com/renovatebot/renovate.git synced 2026-10-25 23:11:31 +00:00
Code Issues Packages Projects Releases Wiki Activity
26,905 Commits 295 Branches 12,580 Tags
cfb2a76354499c1f0daabf7b5df875e007521aa1
Commit Graph

73 Commits

Author SHA1 Message Date
renovate[bot] 2b56b52933 chore(deps): update pnpm/setup action to v2.1.0 (main) (#45543) 
chore(deps): update pnpm/setup action to v2.1.0

| datasource  | package    | from   | to     |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v2.0.2 | v2.1.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-08-29 00:28:18 +00:00
Jamie Tanna 34c7bcb7a5 ci: never restore caches into the release job 
When running the Release job, we restore our `node_modules` cache via
`setup-node`. This leads to `semantic-release` executing - with
`contents: write`, `packages: write`, `id-token: write` and Docker Hub
credentials - the release process.

If we were to have a poisoned cache, this could lead to backdoored npm
packages and Docker images.

Although not currently exploitable, we should further harden this by:

- never using the cache for `release` jobs
- requiring a full `pnpm install --frozen-lockfile` on release jobs
- increasing the build time slightly on release jobs

This ensures that we don't leave ourselves vulnerable to cache poisoning
in the future.

It appears that zizmor's `cache-poisoning` audit covers this pattern,
but doesn't recognise a branch-push `semantic-release` job as a release
workflow, so won't flag regressions here.

Co-authored-by: Claude Fable 5 <jamie.tanna+claude-code@mend.io>
 2026-08-18 11:04:13 +01:00
renovate[bot] 30cd3d8b8c chore(deps): update pnpm/setup action to v2.0.2 (main) (#45178) 
chore(deps): update pnpm/setup action to v2.0.2

| datasource  | package    | from   | to     |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v2.0.1 | v2.0.2 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-08-09 23:25:51 +00:00
renovate[bot] ed81456807 chore(deps): update pnpm/setup action to v2.0.1 (main) (#45129) 
chore(deps): update pnpm/setup action to v2.0.1

| datasource  | package    | from   | to     |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v2.0.0 | v2.0.1 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-08-07 11:29:42 +00:00
renovate[bot] ec7aadbca9 chore(deps): update actions/cache action to v6 (main) (#45104) 
chore(deps): update actions/cache action to v6

| datasource  | package       | from   | to     |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.1.0 | v6.1.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-08-06 08:03:38 +00:00
renovate[bot] da0534a932 chore(deps): update pnpm/setup action to v2 (main) (#45102) 
chore(deps): update pnpm/setup action to v2

| datasource  | package    | from   | to     |
| ----------- | ---------- | ------ | ------ |
| github-tags | pnpm/setup | v1.0.0 | v2.0.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-08-06 06:28:50 +00:00
Jamie Tanna 144ba373a4 ci: migrate to pnpm/setup (#45035) 
* ci: migrate to `pnpm/setup`

As part of ongoing issues we're seeing related to
https://github.com/pnpm/action-setup/issues/277, we've fixed this
upstream. However, while investigating, the README notes that the
`pnpm/setup` Action should be used for pnpm 11+.

Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io>

* fixup! ci: migrate to `pnpm/setup`

---------

Co-authored-by: Claude Sonnet 5 <jamie.tanna+claude-code@mend.io>
 2026-08-05 14:41:20 +00:00
renovate[bot] 87ee522cae chore(deps): update pnpm/action-setup action to v6.0.10 (main) (#45038) 
chore(deps): update pnpm/action-setup action to v6.0.10

| datasource  | package           | from   | to      |
| ----------- | ----------------- | ------ | ------- |
| github-tags | pnpm/action-setup | v6.0.9 | v6.0.10 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-08-03 12:36:26 +00:00
renovate[bot] a283ebabd0 chore(deps): update actions/setup-node action to v6.5.0 (main) (#44547) 
chore(deps): update actions/setup-node action to v6.5.0

| datasource  | package            | from   | to     |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.4.0 | v6.5.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-07-14 03:27:57 +00:00
renovate[bot] 0daf9ed1bd chore(deps): update actions/cache action to v5.1.0 (main) (#44264) 
chore(deps): update actions/cache action to v5.1.0

| datasource  | package       | from   | to     |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.0.5 | v5.1.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-07-01 14:31:33 +00:00
renovate[bot] e6a624ea15 chore(deps): update pnpm/action-setup action to v6.0.9 (main) (#44008) 
chore(deps): update pnpm/action-setup action to v6.0.9

| datasource  | package           | from   | to     |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v6.0.8 | v6.0.9 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-06-15 12:39:41 +00:00
renovate[bot] 52f44047e4 chore(deps): update pnpm/action-setup action to v6.0.8 (main) (#43277) 
chore(deps): update pnpm/action-setup action to v6.0.8

| datasource  | package           | from   | to     |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v6.0.7 | v6.0.8 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-12 13:23:55 +00:00
renovate[bot] 8c89181b37 chore(deps): update pnpm/action-setup action to v6 (main) (#42618) 
chore(deps): update pnpm/action-setup action to v6

| datasource  | package           | from   | to     |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v5.0.0 | v6.0.7 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-12 12:21:28 +00:00
renovate[bot] 970113cfb8 chore(deps): update actions/setup-node action to v6.4.0 (main) (#42756) 
chore(deps): update actions/setup-node action to v6.4.0

| datasource  | package            | from   | to     |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.3.0 | v6.4.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-20 04:28:40 +00:00
renovate[bot] 7eee33834b chore(deps): update nick-fields/retry action to v4 (main) (#42617) 
chore(deps): update nick-fields/retry action to v4

| datasource  | package           | from   | to     |
| ----------- | ----------------- | ------ | ------ |
| github-tags | nick-fields/retry | v3.0.2 | v4.0.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-14 10:01:45 +00:00
renovate[bot] a808338132 chore(deps): update actions/cache action to v5.0.5 (main) (#42598) 
chore(deps): update actions/cache action to v5.0.5

| datasource  | package       | from   | to     |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.0.4 | v5.0.5 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-13 16:30:03 +00:00
renovate[bot] e19e094603 chore(deps): update actions/cache action to v5.0.4 (main) (#41991) 
chore(deps): update actions/cache action to v5.0.4

| datasource  | package       | from   | to     |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v5.0.3 | v5.0.4 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-18 15:34:30 +00:00
renovate[bot] fcab80fcf3 chore(deps): update pnpm/action-setup action to v5 (main) (#41988) 
chore(deps): update pnpm/action-setup action to v5

| datasource  | package           | from   | to     |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v4.4.0 | v5.0.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-18 12:52:07 +00:00
renovate[bot] 447ec1a4ac chore(deps): update pnpm/action-setup action to v4.4.0 (main) (#41888) 
chore(deps): update pnpm/action-setup action to v4.4.0

| datasource  | package           | from   | to     |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v4.3.0 | v4.4.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-13 11:29:36 +00:00
renovate[bot] 58f20c25bc chore(deps): update pnpm/action-setup action to v4.3.0 (main) (#41821) 
chore(deps): update pnpm/action-setup action to v4.3.0

| datasource  | package           | from   | to     |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v4.2.0 | v4.3.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-11 15:32:08 +00:00
renovate[bot] 48b2f40d94 chore(deps): update actions/setup-node action to v6.3.0 (main) (#41643) 
chore(deps): update actions/setup-node action to v6.3.0

| datasource  | package            | from   | to     |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.2.0 | v6.3.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-04 03:38:14 +00:00
Jamie Tanna 8a11937150 ci: don't allow empty node-version or os (#41290) 
As found in #41288 and #41289, it turns out that even when a parameter
is marked as `required: true`, it can be provided as the empty string.

To make sure this can never happen, we can add additional validation
before we start `setup-node` to make sure the parameters are set.

Co-authored-by: gpt-4.1 <jamie.tanna+github-copilot@mend.io>
 2026-02-18 11:00:33 +00:00
renovate[bot] eb7d33ce6f chore(deps): update actions/cache action to v5 (main) (#40820) 
chore(deps): update actions/cache action to v5

| datasource  | package       | from   | to     |
| ----------- | ------------- | ------ | ------ |
| github-tags | actions/cache | v4.3.0 | v5.0.3 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-30 21:05:57 +00:00
renovate[bot] 678656c8ae chore(deps): update actions/setup-node action to v6.2.0 (main) (#40436) 
chore(deps): update actions/setup-node action to v6.2.0

| datasource  | package            | from   | to     |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.1.0 | v6.2.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-01-15 03:28:00 +00:00
renovate[bot] 62ea35062a chore(deps): update actions/setup-node action to v6.1.0 (main) (#39721) 
chore(deps): update actions/setup-node action to v6.1.0

| datasource  | package            | from   | to     |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v6.0.0 | v6.1.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-12-03 04:25:30 +00:00
renovate[bot] dfe4b20432 chore(deps): update actions/setup-node action to v6 (main) (#39098) 
chore(deps): update actions/setup-node action to v6

| datasource  | package            | from   | to     |
| ----------- | ------------------ | ------ | ------ |
| github-tags | actions/setup-node | v4.4.0 | v6.0.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-11-05 11:29:20 +00:00
renovate[bot] 409f8c50ec chore(deps): update pnpm/action-setup action to v4.2.0 (main) (#38458) 
chore(deps): update pnpm/action-setup action to v4.2.0

| datasource  | package           | from   | to     |
| ----------- | ----------------- | ------ | ------ |
| github-tags | pnpm/action-setup | v4.1.0 | v4.2.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-10-08 09:29:48 +00:00
renovate[bot] f1cca44592 chore(deps): update actions/cache action to v4.3.0 (main) (#38205) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-09-24 14:23:14 +00:00
renovate[bot] f7a171394d chore(deps): update actions/cache action to v4.2.4 (main) (#37368) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-08-07 13:25:18 +00:00
renovate[bot] 316e68da38 chore(deps): update actions/setup-node action to v4.4.0 (main) (#35359) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-04-14 04:09:49 +00:00
renovate[bot] c753c52356 chore(deps): update actions/cache action to v4.2.3 (main) (#34916) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-03-19 19:19:09 +00:00
renovate[bot] 803a5f5f48 chore(deps): update actions/setup-node action to v4.3.0 (main) (#34848) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-03-17 03:20:18 +00:00
renovate[bot] 08307f550a chore(deps): update actions/cache action to v4.2.2 (main) (#34534) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-02-27 16:23:17 +00:00
renovate[bot] 64e5973496 chore(deps): update nick-fields/retry action to v3.0.2 (main) (#34479) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-02-26 01:22:49 +00:00
renovate[bot] 69ef5219fb chore(deps): update actions/cache action to v4.2.1 (#34293) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-02-18 18:21:22 +00:00
renovate[bot] 5c33660ec2 chore(deps): update nick-fields/retry action to v3.0.1 (#34271) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-02-17 21:13:45 +00:00
renovate[bot] f7feca4bca chore(deps): update pnpm/action-setup action to v4.1.0 (#34073) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-02-06 22:21:08 +00:00
renovate[bot] 1838dea3fa chore(deps): update actions/setup-node action to v4.2.0 (#33861) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2025-01-27 04:20:12 +00:00
renovate[bot] 2b17eea5f4 chore(deps): update actions/cache action to v4.2.0 (#32931) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-12-05 20:28:22 +00:00
renovate[bot] 5ce7f7649c chore(deps): update actions/setup-node action to v4.1.0 (#32127) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-10-24 16:02:39 +00:00
renovate[bot] 41afec3a3d chore(deps): update actions/cache action to v4.1.2 (#32086) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-10-22 16:48:58 +00:00
renovate[bot] 866bdfab3b chore(deps): update actions/cache action to v4.1.1 (#31861) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-10-08 18:16:13 +00:00
renovate[bot] d2526b9d3c chore(deps): update actions/cache action to v4.1.0 (#31804) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-10-04 22:02:52 +00:00
renovate[bot] fdcbcb82bd chore(deps): update actions/setup-node action to v4.0.4 (#31484) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-09-19 15:05:39 +00:00
renovate[bot] 2695ca9fc5 chore(deps): update actions/setup-node action to v4.0.3 (#30103) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-07-09 15:42:18 +00:00
Michael Kriese a0c447a82b ci(setup-node): fix steps order (#29965) 2024-07-01 13:37:43 +00:00
Michael Kriese 174b1bf54e ci: fix cache keys (#29962) 2024-07-01 12:51:37 +00:00
renovate[bot] 5169215c7e chore(deps): update pnpm/action-setup action to v4 (#29891) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-06-27 09:35:06 +00:00
Michael Kriese e0c60b625b ci: use pnpm/action-setup action (#28685) 2024-04-26 11:58:01 +00:00
renovate[bot] 5d4f190629 chore(deps): update actions/cache action to v4.0.2 (#28026) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2024-03-19 16:45:50 +00:00