Skip to content

Update github action changes#28

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-action-changes
Open

Update github action changes#28
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-action-changes

Conversation

@renovate

@renovate renovate Bot commented May 6, 2025

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
SonarSource/sonarqube-scan-action action major v4v8
actions/checkout action major v4v7
actions/checkout action major v3v7
docker/build-push-action action major v3v7
docker/login-action action major v2v4
docker/metadata-action action major v4v6
docker/setup-buildx-action action major v2v4
docker/setup-qemu-action action major v1v4

Release Notes

SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)

v8.2.0

Compare Source

What's Changed

  • SQSCANGHA-149 Add scannerBinariesAuthHeader input by @​henryju in #​246
  • SQSCANGHA-88 Deprecate the SONARCLOUD_URL env variable support by @​henryju in #​249
  • SQSCANGHA-84 Remove outdated wget/curl references by @​henryju in #​248
  • SQSCANGHA-135 Fix scanner binaries always re-downloaded due to incompatible 4-part version by @​henryju in #​250
  • SQSCANGHA-127 Rename downloaded file to .zip before extraction on Windows by @​henryju in #​251

Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.2.0

v8.2

Compare Source

v8.1.0

Compare Source

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.1.0

v8.1

Compare Source

v8.0.0

Compare Source

What's Changed

Breaking change

Full Changelog: SonarSource/sonarqube-scan-action@v7...v8.0.0

v8.0

Compare Source

v8

Compare Source

v7.2.1

Compare Source

What's Changed

  • SQSCANGHA-140 Set skipSignatureVerification default value to true to avoid breaking change by @​gmmcal in #​240

Full Changelog: SonarSource/sonarqube-scan-action@v7...v7.2.1

v7.2.0

Compare Source

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v7...v7.2.0

v7.2

Compare Source

v7.1.0

Compare Source

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v7...v7.1.0

v7.1

Compare Source

v7.0.0

Compare Source

What's Changed

New Contributors

Full Changelog: SonarSource/sonarqube-scan-action@v6.0.0...v7.0.0

v7.0

Compare Source

v7

Compare Source

v6.0.0

Compare Source

BREAKING CHANGE!

In order to prevent command-line injection, the actions has been rewritten from Bash to JS, and the args input is now parsed differently. When updating to v6, you might have to update your workflow to change how arguments are quoted.
For example, if you were previously passing:

- uses: SonarSource/sonarqube-scan-action@<action version>
  with:
    args: >
      -Dsonar.projectName="My Project"

you should now pass:

- uses: SonarSource/sonarqube-scan-action@<action version>
  with:
    args: >
      "-Dsonar.projectName=My Project"

For more args passing examples, please refer to the README file

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v5.3.1...v6.0.0

v6.0

Compare Source

v6

Compare Source

v5.3.2

Compare Source

Full Changelog: SonarSource/sonarqube-scan-action@v5.3.1...v5.3.2

v5.3.1

Compare Source

OVERLOOKED BREAKING CHANGE!

In order to prevent command-line injection, the way to parse the args input has been changed, but this is possibly a breaking change regarding support of quotes.

For example, if you were previously passing:

- uses: SonarSource/sonarqube-scan-action@<action version>
  with:
    args: >
      -Dsonar.projectName="My Project"

you should now pass:

- uses: SonarSource/sonarqube-scan-action@<action version>
  with:
    args: >
      "-Dsonar.projectName=My Project"

Edit: We have now released v6 that more accurately reflect this breaking change.

What's Changed

New Contributors

Full Changelog: SonarSource/sonarqube-scan-action@v5...v5.3.1

v5.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: SonarSource/sonarqube-scan-action@v5.2.0...v5.3.0

v5.3

Compare Source

v5.2.0

Compare Source

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v5...v5.2.0

v5.2

Compare Source

v5.1.0

Compare Source

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v5.0.0...v5.1.0

v5.1

Compare Source

v5.0.0

Compare Source

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v4...v5.0.0

v5.0

Compare Source

v5

Compare Source

actions/checkout (actions/checkout)

v7.0.0

Compare Source

v7

Compare Source

v6.0.3

Compare Source

v6.0.2

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

v6

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

v5

Compare Source

docker/build-push-action (docker/build-push-action)

v7.2.0

Compare Source

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

v7.1.0

Compare Source

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

v7.0.0

Compare Source

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

v7

Compare Source

v6.19.2

Compare Source

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

v6.19.1

Compare Source

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

v6.19.0

Compare Source

  • Scope default git auth token to github.com by @​crazy-max in #​1451
  • Bump brace-expansion from 1.1.11 to 1.1.12 in #​1396
  • Bump form-data from 2.5.1 to 2.5.5 in #​1391
  • Bump js-yaml from 3.14.1 to 3.14.2 in #​1429
  • Bump lodash from 4.17.21 to 4.17.23 in #​1446
  • Bump tmp from 0.2.3 to 0.2.4 in #​1398
  • Bump undici from 5.28.4 to 5.29.0 in #​1397

Full Changelog: docker/build-push-action@v6.18.0...v6.19.0

v6.18.0

Compare Source

[!NOTE]
Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

v6.17.0

Compare Source

[!NOTE]
Build record is now exported using the buildx history export command instead of the legacy export-build tool.

Full Changelog: docker/build-push-action@v6.16.0...v6.17.0

v6.16.0

Compare Source

Full Changelog: docker/build-push-action@v6.15.0...v6.16.0

v6.15.0

Compare Source

Full Changelog: docker/build-push-action@v6.14.0...v6.15.0

v6.14.0

Compare Source

Full Changelog: docker/build-push-action@v6.13.0...v6.14.0

v6.13.0

Compare Source

Full Changelog: docker/build-push-action@v6.12.0...v6.13.0

v6.12.0

Compare Source

Full Changelog: docker/build-push-action@v6.11.0...v6.12.0

v6.11.0

Compare Source

Full Changelog: docker/build-push-action@v6.10.0...v6.11.0

v6.10.0

Compare Source

Full Changelog: docker/build-push-action@v6.9.0...v6.10.0

v6.9.0

Compare Source

Full Changelog: docker/build-push-action@v6.8.0...v6.9.0

v6.8.0

Compare Source

Full Changelog: docker/build-push-action@v6.7.0...v6.8.0

v6.7.0

Compare Source

Full Changelog: docker/build-push-action@v6.6.1...v6.7.0

v6.6.1

Compare Source

Full Changelog: docker/build-push-action@v6.6.0...v6.6.1

v6.6.0

Compare Source

Full Changelog: docker/build-push-action@v6.5.0...v6.6.0

v6.5.0

Compare Source

Full Changelog: docker/build-push-action@v6.4.1...v6.5.0

v6.4.1

Compare Source

Full Changelog: docker/build-push-action@v6.4.0...v6.4.1

v6.4.0

Compare Source

Full Changelog: docker/build-push-action@v6.3.0...v6.4.0

v6.3.0

Compare Source

Full Changelog: docker/build-push-action@v6.2.0...v6.3.0

v6.2.0

Compare Source

Full Changelog: docker/build-push-action@v6.1.0...v6.2.0

v6.1.0

Compare Source

Full Changelog: docker/build-push-action@v6.0.2...v6.1.0

v6.0.2

Compare Source

Full Changelog: docker/build-push-action@v6.0.1...v6.0.2

v6.0.1

Compare Source

Full Changelog: docker/build-push-action@v6.0.0...v6.0.1

v6.0.0

Compare Source

[!NOTE]
This major release adds support for generating Build summary and exporting build record for your build. You can disable this feature by setting DOCKER_BUILD_SUMMARY: false environment variable in your workflow.

Full Changelog: docker/build-push-action@v5.4.0...v6.0.0

v6

Compare Source

v5.4.0

Compare Source

Full Changelog: docker/build-push-action@v5.3.0...v5.4.0

v5.3.0

Compare Source

Full Changelog: docker/build-push-action@v5.2.0...v5.3.0

v5.2.0

Compare Source

Full Changelog: docker/build-push-action@v5.1.0...v5.2.0

v5.1.0

Compare Source

Full Changelog: docker/build-push-action@v5.0.0...v5.1.0

v5.0.0

Compare Source

Full Changelog: docker/build-push-action@v4.2.1...v5.0.0

v5

Compare Source

v4.2.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

Full Changelog: docker/build-push-action@v4.2.0...v4.2.1

v4.2.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

Full Changelog: docker/build-push-action@v4.1.1...v4.2.0

v4.1.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

Full Changelog: docker/build-push-action@v4.1.0...v4.1.1

v4.1.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@sonarqubecloud

sonarqubecloud Bot commented May 6, 2025

Copy link
Copy Markdown

@renovate renovate Bot force-pushed the renovate/github-action-changes branch from 888a00d to 23a1d0e Compare August 11, 2025 14:05
@renovate renovate Bot force-pushed the renovate/github-action-changes branch from 23a1d0e to 32c9f02 Compare September 18, 2025 12:34
@renovate renovate Bot force-pushed the renovate/github-action-changes branch from 32c9f02 to b11df43 Compare November 20, 2025 17:09
@renovate renovate Bot force-pushed the renovate/github-action-changes branch from b11df43 to 6341d2a Compare December 9, 2025 09:08
@renovate renovate Bot force-pushed the renovate/github-action-changes branch 4 times, most recently from dabe9da to ba2264b Compare March 5, 2026 22:57
@renovate renovate Bot force-pushed the renovate/github-action-changes branch from ba2264b to f6a9fe5 Compare April 29, 2026 15:53
@renovate renovate Bot force-pushed the renovate/github-action-changes branch from f6a9fe5 to e908041 Compare June 18, 2026 14:15
@renovate renovate Bot force-pushed the renovate/github-action-changes branch from e908041 to 09ba2f0 Compare June 18, 2026 22:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants