Skip to content

chore(deps): update github actions to v0.36.0, v1.2.6, v0.3.1, v1.7.0, v1.6.0, v1.4.0, v1.2.1, v0.13.0 - #39

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions

Conversation

@renovate

@renovate renovate Bot commented Sep 4, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
aquasecurity/trivy-action action minor 0.31.0 → v0.36.0
bcgov/action-crunchy action patch v1.2.1 → v1.2.6
bcgov/action-get-pr action minor v0.0.1 → v0.3.1
bcgov/action-oc-runner action minor v1.2.2 → v1.7.0
bcgov/action-test-and-analyse action minor v1.3.0 → v1.6.0
grafana/run-k6-action action minor v1.2.0 → v1.4.0 v1.5.0
grafana/setup-k6-action action minor v1.1.0 → v1.2.1 v1.2.2
zaproxy/action-full-scan action minor v0.12.0 → v0.13.0

Warnings (1)

Please correct - or verify that you can safely ignore - these warnings before you merge this PR.

  • aquasecurity/trivy-action: Could not determine new digest for update (github-tags package aquasecurity/trivy-action)


Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

aquasecurity/trivy-action (aquasecurity/trivy-action)

v0.36.0

Compare Source

What's Changed

New Contributors

Full Changelog: aquasecurity/trivy-action@v0.35.0...v0.36.0

v0.35.0: Release: v0.35.0

Compare Source

This release is a duplicate of 0.35.0 which was not compromised.

As part of our response to the recent supply chain attack, we have migrated all tags to use the v prefix (e.g., v0.35.0 instead of 0.35.0). Going forward, all new releases will use the v prefix convention.

We have intentionally kept the 0.35.0 tag intact to avoid breaking existing workflows that depend on it.

If you are currently using 0.35.0, your workflows are safe — no action is required.

v0.34.0: Release: v0.34.0

Compare Source

Full Changelog: aquasecurity/trivy-action@v0.33.1...v0.34.0

v0.33.1: Release: v0.33.1

Compare Source

What's Changed

Full Changelog: aquasecurity/trivy-action@v0.33.0...v0.33.1

v0.33.0: Release: v0.33.0

Compare Source

What's Changed
New Contributors

Full Changelog: aquasecurity/trivy-action@v0.32.0...v0.33.0

v0.32.0: Release: v0.32.0

Compare Source

What's Changed

Full Changelog: aquasecurity/trivy-action@v0.31.0...v0.32.0

bcgov/action-crunchy (bcgov/action-crunchy)

v1.2.6

Compare Source

What's Changed

Full Changelog: bcgov/action-crunchy@v1.2.5...v1.2.6

v1.2.5

Compare Source

What's Changed

Full Changelog: bcgov/action-crunchy@v1.2.4...v1.2.5

v1.2.4: Bug Fix : Handle Triggers

Compare Source

What's Changed

Full Changelog: bcgov/action-crunchy@v1.2.3...v1.2.4

v1.2.3: Template Updates with Limits and PgBouncer params

Compare Source

What's Changed

Full Changelog: bcgov/action-crunchy@v1.2.2...v1.2.3

v1.2.2: Concurrency with triggers

Compare Source

What's Changed

Full Changelog: bcgov/action-crunchy@v1.2.1...v1.2.2

bcgov/action-get-pr (bcgov/action-get-pr)

v0.3.1

Compare Source

What's Changed

New Contributors

Full Changelog: bcgov/action-get-pr@v0.3.0...v0.3.1

v0.3.0

Compare Source

What's Changed

Full Changelog: bcgov/action-get-pr@v0.2.0...v0.3.0

v0.2.1

Compare Source

What's Changed

Full Changelog: bcgov/action-get-pr@v0.1.1...v0.2.1

v0.2.0

Compare Source

What's Changed

Full Changelog: bcgov/action-get-pr@v0.1.1...v0.2.0

v0.1.1

Compare Source

Note: This action uses the GitHub API to detect the associated PR for release and push events, with git history as a fallback. For other events, PR info is taken from the event context.

What's Changed

Full Changelog: bcgov/action-get-pr@v0.1.0...v0.1.1

v0.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: bcgov/action-get-pr@v0.0.1...v0.1.0

bcgov/action-oc-runner (bcgov/action-oc-runner)

v1.7.0

Compare Source

What's Changed

Full Changelog: bcgov/action-oc-runner@v.1.7.0...v1.7.0

v1.6.0

Compare Source

What's Changed

Full Changelog: bcgov/action-oc-runner@v1.5.1...v1.6.0

v1.5.1

Compare Source

What's Changed

Full Changelog: bcgov/action-oc-runner@v1.5.0...v1.5.1

v1.5.0

Compare Source

What's Changed

Full Changelog: bcgov/action-oc-runner@v1.4.1...v1.5.0

v1.4.1

Compare Source

What's Changed

Full Changelog: bcgov/action-oc-runner@v1.4.0...v1.4.1

v1.4.0

Compare Source

What's Changed

Full Changelog: bcgov/action-oc-runner@v1.3.0...v1.4.0

v1.3.0

Compare Source

What's Changed

Full Changelog: bcgov/action-oc-runner@v1.2.3...v1.3.0

v1.2.3

Compare Source

What's Changed

Full Changelog: bcgov/action-oc-runner@v1.2.2...v1.2.3

bcgov/action-test-and-analyse (bcgov/action-test-and-analyse)

v1.6.0

Compare Source

What's New

New feature for detecting unused packages and imports. Run dep_scan: true to enable Knip scans. Please be aware that this will eventually default to enabled/true.

What's Changed

Full Changelog: bcgov/action-test-and-analyse@v1.5.0...v1.6.0

v1.5.0

Compare Source

New Feature

Supply chair attack detection using @​aikidosec/safe-chain has been added! Enable with parameter:
supply_scan: true

What's Changed

New Contributors

Full Changelog: bcgov/action-test-and-analyse@v1.4.0...v1.5.0

v1.4.0

Compare Source

What's Changed

Full Changelog: bcgov/action-test-and-analyse@v1.3.1...v1.4.0

v1.3.1

Compare Source

What's Changed
New Contributors

Full Changelog: bcgov/action-test-and-analyse@v1.3.0...v1.3.1

grafana/run-k6-action (grafana/run-k6-action)

v1.4.0

Compare Source

What's Changed

New Contributors

Full Changelog: grafana/run-k6-action@v1...v1.4.0

v1.3.1

Compare Source

What's Changed

Full Changelog: grafana/run-k6-action@v1.3.0...v1.3.1

v1.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: grafana/run-k6-action@v1...v1.3.0

grafana/setup-k6-action (grafana/setup-k6-action)

v1.2.1

Compare Source

What's Changed

Full Changelog: grafana/setup-k6-action@v1.2.0...v1.2.1

v1.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: grafana/setup-k6-action@v1...v1.2.0

zaproxy/action-full-scan (zaproxy/action-full-scan)

v0.13.0: Version 0.13.0

Compare Source

Changed
  • Update dependencies.
  • Run with node24.

Configuration

📅 Schedule: (in timezone America/Vancouver)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


Thanks for the PR!

Deployments, as required, will be available below:

Please create PRs in draft mode. Mark as ready to enable:

After merge, new images are deployed in:

@renovate
renovate Bot enabled auto-merge (squash) September 4, 2026 12:51
@renovate renovate Bot changed the title chore(deps): update github actions chore(deps): update github actions to v0.36.0, v1.2.6, v0.3.1, v1.7.0, v1.6.0, v1.4.0, v1.2.1, v0.13.0 Sep 21, 2026
@renovate
renovate Bot force-pushed the renovate/github-actions branch from a118935 to 1b5baa4 Compare September 25, 2026 00:43
@renovate renovate Bot changed the title chore(deps): update github actions to v0.36.0, v1.2.6, v0.3.1, v1.7.0, v1.6.0, v1.4.0, v1.2.1, v0.13.0 chore(deps): update github actions to v1.2.6, v0.3.1, v1.7.0, v1.6.0, v1.4.0, v1.2.1, v0.13.0 Sep 25, 2026
@renovate
renovate Bot force-pushed the renovate/github-actions branch from 1b5baa4 to 5683992 Compare September 25, 2026 13:53
@renovate renovate Bot changed the title chore(deps): update github actions to v1.2.6, v0.3.1, v1.7.0, v1.6.0, v1.4.0, v1.2.1, v0.13.0 chore(deps): update github actions to v0.36.0, v1.2.6, v0.3.1, v1.7.0, v1.6.0, v1.4.0, v1.2.1, v0.13.0 Sep 25, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants