Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release 2.8.0 #416

Merged
merged 3 commits into from
May 22, 2024
Merged

Release 2.8.0 #416

merged 3 commits into from
May 22, 2024

Conversation

varunsh-coder
Copy link
Member

Update agent to enable

  • Viewing the name and path of every file written during the build process
  • Viewing process names and arguments

Copy link

github-actions bot commented May 21, 2024

Test Results

7 tests  ±0   7 ✔️ ±0   14s ⏱️ ±0s
4 suites ±0   0 💤 ±0 
1 files   ±0   0 ±0 

Results for commit b9c325d. ± Comparison against base commit 9ff9d14.

♻️ This comment has been updated with latest results.

@varunsh-coder varunsh-coder merged commit f086349 into main May 22, 2024
6 checks passed
github-merge-queue bot referenced this pull request in Tuhura-Tech/wiki May 22, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[step-security/harden-runner](https://togithub.com/step-security/harden-runner)
| action | minor | `v2.7.1` -> `v2.8.0` |

---

### Release Notes

<details>
<summary>step-security/harden-runner
(step-security/harden-runner)</summary>

###
[`v2.8.0`](https://togithub.com/step-security/harden-runner/releases/tag/v2.8.0)

[Compare
Source](https://togithub.com/step-security/harden-runner/compare/v2.7.1...v2.8.0)

#### What's Changed

Release v2.8.0 by [@&#8203;h0x0er](https://togithub.com/h0x0er) and
[@&#8203;varunsh-coder](https://togithub.com/varunsh-coder) in
[https://github.com/step-security/harden-runner/pull/416](https://togithub.com/step-security/harden-runner/pull/416)
This release includes:

- File Monitoring Enhancements: Adds the capability to view the name and
path of every file written during the build process.
- Process Tracking Enhancements: Adds the capability to view process
names and arguments of processes run during the build process.

These enhancements are based on insights from the XZ Utils incident,
aimed at improving observability and detections during the build
process.

**Full Changelog**:
step-security/harden-runner@v2...v2.8.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/Tuhura-Tech/wiki).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Racer159 referenced this pull request in defenseunicorns/uds-package-mattermost May 22, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action |
patch | `v4.1.4` -> `v4.1.6` |
| [defenseunicorns/zarf](https://togithub.com/defenseunicorns/zarf) | |
patch | `v0.33.1` -> `v0.33.2` |
| [github/codeql-action](https://togithub.com/github/codeql-action) |
action | patch | `v3.25.3` -> `v3.25.6` |
| [golangci/golangci-lint](https://togithub.com/golangci/golangci-lint)
| repository | patch | `v1.58.0` -> `v1.58.2` |
|
[google-github-actions/release-please-action](https://togithub.com/google-github-actions/release-please-action)
| action | patch | `v4.1.0` -> `v4.1.1` |
| [ossf/scorecard-action](https://togithub.com/ossf/scorecard-action) |
action | patch | `v2.3.1` -> `v2.3.3` |
|
[python-jsonschema/check-jsonschema](https://togithub.com/python-jsonschema/check-jsonschema)
| repository | patch | `0.28.2` -> `0.28.4` |
|
[renovatebot/pre-commit-hooks](https://togithub.com/renovatebot/pre-commit-hooks)
| repository | minor | `37.342.1` -> `37.374.3` |
|
[step-security/harden-runner](https://togithub.com/step-security/harden-runner)
| action | minor | `v2.7.1` -> `v2.8.0` |

Note: The `pre-commit` manager in Renovate is not supported by the
`pre-commit` maintainers or community. Please do not report any problems
there, instead [create a Discussion in the Renovate
repository](https://togithub.com/renovatebot/renovate/discussions/new)
if you have any questions.

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

###
[`v4.1.6`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416)

[Compare
Source](https://togithub.com/actions/checkout/compare/v4.1.5...v4.1.6)

- Check platform to set archive extension appropriately by
[@&#8203;cory-miller](https://togithub.com/cory-miller) in
[https://github.com/actions/checkout/pull/1732](https://togithub.com/actions/checkout/pull/1732)

###
[`v4.1.5`](https://togithub.com/actions/checkout/releases/tag/v4.1.5)

[Compare
Source](https://togithub.com/actions/checkout/compare/v4.1.4...v4.1.5)

#### What's Changed

- Update NPM dependencies by
[@&#8203;cory-miller](https://togithub.com/cory-miller) in
[https://github.com/actions/checkout/pull/1703](https://togithub.com/actions/checkout/pull/1703)
- Bump github/codeql-action from 2 to 3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/actions/checkout/pull/1694](https://togithub.com/actions/checkout/pull/1694)
- Bump actions/setup-node from 1 to 4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/actions/checkout/pull/1696](https://togithub.com/actions/checkout/pull/1696)
- Bump actions/upload-artifact from 2 to 4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/actions/checkout/pull/1695](https://togithub.com/actions/checkout/pull/1695)
- README: Suggest `user.email` to be
`41898282+github-actions[bot]@&#8203;users.noreply.github.com` by
[@&#8203;cory-miller](https://togithub.com/cory-miller) in
[https://github.com/actions/checkout/pull/1707](https://togithub.com/actions/checkout/pull/1707)

**Full Changelog**:
actions/checkout@v4.1.4...v4.1.5

</details>

<details>
<summary>defenseunicorns/zarf (defenseunicorns/zarf)</summary>

###
[`v0.33.2`](https://togithub.com/defenseunicorns/zarf/releases/tag/v0.33.2)

[Compare
Source](https://togithub.com/defenseunicorns/zarf/compare/v0.33.1...v0.33.2)

##### What's Changed

- fix: schema integration by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[https://github.com/defenseunicorns/zarf/pull/2463](https://togithub.com/defenseunicorns/zarf/pull/2463)
- docs: add contributor covenant code of conduct by
[@&#8203;salaxander](https://togithub.com/salaxander) in
[https://github.com/defenseunicorns/zarf/pull/2462](https://togithub.com/defenseunicorns/zarf/pull/2462)
- docs: fix casing on code of conduct badge by
[@&#8203;salaxander](https://togithub.com/salaxander) in
[https://github.com/defenseunicorns/zarf/pull/2466](https://togithub.com/defenseunicorns/zarf/pull/2466)
- fix(deps): update github.com/anchore/clio digest to
[`3c4abf8`](https://togithub.com/defenseunicorns/zarf/commit/3c4abf8) by
[@&#8203;renovate](https://togithub.com/renovate) in
[https://github.com/defenseunicorns/zarf/pull/2424](https://togithub.com/defenseunicorns/zarf/pull/2424)
- fix: update docker media type in registry by
[@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in
[https://github.com/defenseunicorns/zarf/pull/2476](https://togithub.com/defenseunicorns/zarf/pull/2476)
- fix: adds GetVariableConfig function for packager by
[@&#8203;decleaver](https://togithub.com/decleaver) in
[https://github.com/defenseunicorns/zarf/pull/2475](https://togithub.com/defenseunicorns/zarf/pull/2475)
- test: add tests for remove copies from components to enable
refactoring by [@&#8203;phillebaba](https://togithub.com/phillebaba) in
[https://github.com/defenseunicorns/zarf/pull/2473](https://togithub.com/defenseunicorns/zarf/pull/2473)
- fix!: do not uninstall helm chart after failed install or upgrade by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[https://github.com/defenseunicorns/zarf/pull/2456](https://togithub.com/defenseunicorns/zarf/pull/2456)
- feat: inspect --list-images by
[@&#8203;Noxsios](https://togithub.com/Noxsios) in
[https://github.com/defenseunicorns/zarf/pull/2478](https://togithub.com/defenseunicorns/zarf/pull/2478)
- refactor: remove copies from components to a filter by
[@&#8203;phillebaba](https://togithub.com/phillebaba) in
[https://github.com/defenseunicorns/zarf/pull/2474](https://togithub.com/defenseunicorns/zarf/pull/2474)
- chore: add support.md by
[@&#8203;schristoff](https://togithub.com/schristoff) in
[https://github.com/defenseunicorns/zarf/pull/2480](https://togithub.com/defenseunicorns/zarf/pull/2480)
- chore: add a check for go mod tidy by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[https://github.com/defenseunicorns/zarf/pull/2481](https://togithub.com/defenseunicorns/zarf/pull/2481)
- fix: use correct sha256 checksum for arm64 injector binary by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[https://github.com/defenseunicorns/zarf/pull/2483](https://togithub.com/defenseunicorns/zarf/pull/2483)
- fix: simplify go mod tidy check by
[@&#8203;lucasrod16](https://togithub.com/lucasrod16) in
[https://github.com/defenseunicorns/zarf/pull/2482](https://togithub.com/defenseunicorns/zarf/pull/2482)

##### New Contributors

- [@&#8203;salaxander](https://togithub.com/salaxander) made their first
contribution in
[https://github.com/defenseunicorns/zarf/pull/2462](https://togithub.com/defenseunicorns/zarf/pull/2462)
- [@&#8203;phillebaba](https://togithub.com/phillebaba) made their first
contribution in
[https://github.com/defenseunicorns/zarf/pull/2473](https://togithub.com/defenseunicorns/zarf/pull/2473)
- [@&#8203;schristoff](https://togithub.com/schristoff) made their first
contribution in
[https://github.com/defenseunicorns/zarf/pull/2480](https://togithub.com/defenseunicorns/zarf/pull/2480)

**Full Changelog**:
zarf-dev/zarf@v0.33.1...v0.33.2

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.25.6`](https://togithub.com/github/codeql-action/compare/v3.25.5...v3.25.6)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.5...v3.25.6)

###
[`v3.25.5`](https://togithub.com/github/codeql-action/compare/v3.25.4...v3.25.5)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.4...v3.25.5)

###
[`v3.25.4`](https://togithub.com/github/codeql-action/compare/v3.25.3...v3.25.4)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.3...v3.25.4)

</details>

<details>
<summary>golangci/golangci-lint (golangci/golangci-lint)</summary>

###
[`v1.58.2`](https://togithub.com/golangci/golangci-lint/compare/v1.58.1...v1.58.2)

[Compare
Source](https://togithub.com/golangci/golangci-lint/compare/v1.58.1...v1.58.2)

###
[`v1.58.1`](https://togithub.com/golangci/golangci-lint/compare/v1.58.0...v1.58.1)

[Compare
Source](https://togithub.com/golangci/golangci-lint/compare/v1.58.0...v1.58.1)

</details>

<details>
<summary>google-github-actions/release-please-action
(google-github-actions/release-please-action)</summary>

###
[`v4.1.1`](https://togithub.com/google-github-actions/release-please-action/releases/tag/v4.1.1)

[Compare
Source](https://togithub.com/google-github-actions/release-please-action/compare/v4.1.0...v4.1.1)

##### Bug Fixes

- add deprecation warning to workflow run
([#&#8203;1](https://togithub.com/google-github-actions/release-please-action/issues/1))
([edb78cf](https://togithub.com/google-github-actions/release-please-action/commit/edb78cf884d22d5d991d94144d031fce49cadbea))

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.3.3`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.3.3)

[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.3.2...v2.3.3)

> \[!NOTE]\
> There is no v2.3.2 release as a step was skipped in the release
process. This was fixed and re-released under the v2.3.3 tag

#### What's Changed

- 🌱 Bump github.com/ossf/scorecard/v4 (v4.13.1) to
github.com/ossf/scorecard/v5 (v5.0.0-rc1) by
[@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1366](https://togithub.com/ossf/scorecard-action/pull/1366)
- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc1 to
v5.0.0-rc2 by
[@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1374](https://togithub.com/ossf/scorecard-action/pull/1374)
- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to
v5.0.0-rc2.0.20240509182734-7ce860946928 by
[@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1377](https://togithub.com/ossf/scorecard-action/pull/1377)

For a full changelist of what these include, see the
[v5.0.0-rc1](https://togithub.com/ossf/scorecard/releases/tag/v5.0.0-rc1)
and
[v5.0.0-rc2](https://togithub.com/ossf/scorecard/releases/tag/v5.0.0-rc2)
release notes.

##### Documentation

- 📖 Move token discussion out of main README. by
[@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1279](https://togithub.com/ossf/scorecard-action/pull/1279)
- 📖 link to `ossf/scorecard` workflow instead of maintaining an
example by [@&#8203;spencerschrock](https://togithub.com/spencerschrock)
in
[https://github.com/ossf/scorecard-action/pull/1352](https://togithub.com/ossf/scorecard-action/pull/1352)
- 📖 update api links to new scorecard.dev site by
[@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1376](https://togithub.com/ossf/scorecard-action/pull/1376)

**Full Changelog**:
ossf/scorecard-action@v2.3.1...v2.3.3

###
[`v2.3.2`](https://togithub.com/ossf/scorecard-action/compare/v2.3.1...v2.3.2)

[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.3.1...v2.3.2)

</details>

<details>
<summary>python-jsonschema/check-jsonschema
(python-jsonschema/check-jsonschema)</summary>

###
[`v0.28.4`](https://togithub.com/python-jsonschema/check-jsonschema/blob/HEAD/CHANGELOG.rst#0284)

[Compare
Source](https://togithub.com/python-jsonschema/check-jsonschema/compare/0.28.3...0.28.4)

- Update vendored schemas: buildkite, github-workflows, gitlab-ci,
renovate,
    taskfile, woodpecker-ci (2024-05-19)

###
[`v0.28.3`](https://togithub.com/python-jsonschema/check-jsonschema/blob/HEAD/CHANGELOG.rst#0283)

[Compare
Source](https://togithub.com/python-jsonschema/check-jsonschema/compare/0.28.2...0.28.3)

- Update vendored schemas: dependabot, github-workflows, gitlab-ci,
renovate,
    woodpecker-ci (2024-05-05)
- Update Cloud Build pre-commit hook to support JSON Cloud Build config.
Thanks
    :user:`jrdnbradford`! (:pr:`427`)

</details>

<details>
<summary>renovatebot/pre-commit-hooks
(renovatebot/pre-commit-hooks)</summary>

###
[`v37.374.3`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.374.3)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.374.0...37.374.3)

See https://github.com/renovatebot/renovate/releases/tag/37.374.3 for
more changes

###
[`v37.374.0`](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.373.0...37.374.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.373.0...37.374.0)

###
[`v37.373.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.373.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.371.1...37.373.0)

See https://github.com/renovatebot/renovate/releases/tag/37.373.0 for
more changes

###
[`v37.371.1`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.371.1)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.371.0...37.371.1)

See https://github.com/renovatebot/renovate/releases/tag/37.371.1 for
more changes

###
[`v37.371.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.371.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.368.10...37.371.0)

See https://github.com/renovatebot/renovate/releases/tag/37.371.0 for
more changes

###
[`v37.368.10`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.368.10)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.368.9...37.368.10)

See https://github.com/renovatebot/renovate/releases/tag/37.368.10 for
more changes

###
[`v37.368.9`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.368.9)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.368.8...37.368.9)

See https://github.com/renovatebot/renovate/releases/tag/37.368.9 for
more changes

###
[`v37.368.8`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.368.8)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.368.7...37.368.8)

See https://github.com/renovatebot/renovate/releases/tag/37.368.8 for
more changes

###
[`v37.368.7`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.368.7)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.368.6...37.368.7)

See https://github.com/renovatebot/renovate/releases/tag/37.368.7 for
more changes

###
[`v37.368.6`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.368.6)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.368.5...37.368.6)

See https://github.com/renovatebot/renovate/releases/tag/37.368.6 for
more changes

###
[`v37.368.5`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.368.5)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.368.4...37.368.5)

See https://github.com/renovatebot/renovate/releases/tag/37.368.5 for
more changes

###
[`v37.368.4`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.368.4)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.368.3...37.368.4)

See https://github.com/renovatebot/renovate/releases/tag/37.368.4 for
more changes

###
[`v37.368.3`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.368.3)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.368.2...37.368.3)

See https://github.com/renovatebot/renovate/releases/tag/37.368.3 for
more changes

###
[`v37.368.2`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.368.2)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.368.0...37.368.2)

See https://github.com/renovatebot/renovate/releases/tag/37.368.2 for
more changes

###
[`v37.368.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.368.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.366.1...37.368.0)

See https://github.com/renovatebot/renovate/releases/tag/37.368.0 for
more changes

###
[`v37.366.1`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.366.1)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.363.9...37.366.1)

See https://github.com/renovatebot/renovate/releases/tag/37.366.1 for
more changes

###
[`v37.363.9`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.363.9)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.363.6...37.363.9)

See https://github.com/renovatebot/renovate/releases/tag/37.363.9 for
more changes

###
[`v37.363.6`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.363.6)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.363.4...37.363.6)

See https://github.com/renovatebot/renovate/releases/tag/37.363.6 for
more changes

###
[`v37.363.4`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.363.4)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.363.3...37.363.4)

See https://github.com/renovatebot/renovate/releases/tag/37.363.4 for
more changes

###
[`v37.363.3`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.363.3)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.363.1...37.363.3)

See https://github.com/renovatebot/renovate/releases/tag/37.363.3 for
more changes

###
[`v37.363.1`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.363.1)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.359.0...37.363.1)

See https://github.com/renovatebot/renovate/releases/tag/37.363.1 for
more changes

###
[`v37.359.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.359.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.358.2...37.359.0)

See https://github.com/renovatebot/renovate/releases/tag/37.359.0 for
more changes

###
[`v37.358.2`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.358.2)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.358.1...37.358.2)

See https://github.com/renovatebot/renovate/releases/tag/37.358.2 for
more changes

###
[`v37.358.1`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.358.1)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.358.0...37.358.1)

See https://github.com/renovatebot/renovate/releases/tag/37.358.1 for
more changes

###
[`v37.358.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.358.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.356.1...37.358.0)

See https://github.com/renovatebot/renovate/releases/tag/37.358.0 for
more changes

###
[`v37.356.1`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.356.1)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.356.0...37.356.1)

See https://github.com/renovatebot/renovate/releases/tag/37.356.1 for
more changes

###
[`v37.356.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.356.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.355.1...37.356.0)

See https://github.com/renovatebot/renovate/releases/tag/37.356.0 for
more changes

###
[`v37.355.1`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.355.1)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.354.6...37.355.1)

See https://github.com/renovatebot/renovate/releases/tag/37.355.1 for
more changes

###
[`v37.354.6`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.354.6)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.354.5...37.354.6)

See https://github.com/renovatebot/renovate/releases/tag/37.354.6 for
more changes

###
[`v37.354.5`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.354.5)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.354.4...37.354.5)

See https://github.com/renovatebot/renovate/releases/tag/37.354.5 for
more changes

###
[`v37.354.4`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.354.4)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.354.3...37.354.4)

See https://github.com/renovatebot/renovate/releases/tag/37.354.4 for
more changes

###
[`v37.354.3`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.354.3)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.354.2...37.354.3)

See https://github.com/renovatebot/renovate/releases/tag/37.354.3 for
more changes

###
[`v37.354.2`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.354.2)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.354.1...37.354.2)

See https://github.com/renovatebot/renovate/releases/tag/37.354.2 for
more changes

###
[`v37.354.1`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.354.1)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.353.1...37.354.1)

See https://github.com/renovatebot/renovate/releases/tag/37.354.1 for
more changes

###
[`v37.353.1`](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.353.0...37.353.1)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.353.0...37.353.1)

###
[`v37.353.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.353.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.352.0...37.353.0)

See https://github.com/renovatebot/renovate/releases/tag/37.353.0 for
more changes

###
[`v37.352.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.352.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.351.4...37.352.0)

See https://github.com/renovatebot/renovate/releases/tag/37.352.0 for
more changes

###
[`v37.351.4`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.351.4)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.351.2...37.351.4)

See https://github.com/renovatebot/renovate/releases/tag/37.351.4 for
more changes

###
[`v37.351.2`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.351.2)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.351.1...37.351.2)

See https://github.com/renovatebot/renovate/releases/tag/37.351.2 for
more changes

###
[`v37.351.1`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.351.1)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.351.0...37.351.1)

See https://github.com/renovatebot/renovate/releases/tag/37.351.1 for
more changes

###
[`v37.351.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.351.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.349.3...37.351.0)

See https://github.com/renovatebot/renovate/releases/tag/37.351.0 for
more changes

###
[`v37.349.3`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.349.3)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.349.2...37.349.3)

See https://github.com/renovatebot/renovate/releases/tag/37.349.3 for
more changes

###
[`v37.349.2`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.349.2)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.349.0...37.349.2)

See https://github.com/renovatebot/renovate/releases/tag/37.349.2 for
more changes

###
[`v37.349.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.349.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.347.2...37.349.0)

See https://github.com/renovatebot/renovate/releases/tag/37.349.0 for
more changes

###
[`v37.347.2`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.347.2)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.347.0...37.347.2)

See https://github.com/renovatebot/renovate/releases/tag/37.347.2 for
more changes

###
[`v37.347.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.347.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.345.0...37.347.0)

See https://github.com/renovatebot/renovate/releases/tag/37.347.0 for
more changes

###
[`v37.345.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.345.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.344.0...37.345.0)

See https://github.com/renovatebot/renovate/releases/tag/37.345.0 for
more changes

###
[`v37.344.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/37.344.0)

[Compare
Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/37.342.1...37.344.0)

See https://github.com/renovatebot/renovate/releases/tag/37.344.0 for
more changes

</details>

<details>
<summary>step-security/harden-runner
(step-security/harden-runner)</summary>

###
[`v2.8.0`](https://togithub.com/step-security/harden-runner/releases/tag/v2.8.0)

[Compare
Source](https://togithub.com/step-security/harden-runner/compare/v2.7.1...v2.8.0)

#### What's Changed

Release v2.8.0 by [@&#8203;h0x0er](https://togithub.com/h0x0er) and
[@&#8203;varunsh-coder](https://togithub.com/varunsh-coder) in
[https://github.com/step-security/harden-runner/pull/416](https://togithub.com/step-security/harden-runner/pull/416)
This release includes:

- File Monitoring Enhancements: Adds the capability to view the name and
path of every file written during the build process.
- Process Tracking Enhancements: Adds the capability to view process
names and arguments of processes run during the build process.

These enhancements are based on insights from the XZ Utils incident,
aimed at improving observability and detections during the build
process.

**Full Changelog**:
step-security/harden-runner@v2...v2.8.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/defenseunicorns/uds-package-mattermost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNDAuMTAiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInN1cHBvcnQtZGVwcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Release-As: v9.8.0-uds.0
karfau referenced this pull request in xmldom/xmldom Jun 7, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[step-security/harden-runner](https://togithub.com/step-security/harden-runner)
| action | minor | `v2.7.1` -> `v2.8.0` |

---

### Release Notes

<details>
<summary>step-security/harden-runner
(step-security/harden-runner)</summary>

###
[`v2.8.0`](https://togithub.com/step-security/harden-runner/releases/tag/v2.8.0)

[Compare
Source](https://togithub.com/step-security/harden-runner/compare/v2.7.1...v2.8.0)

#### What's Changed

Release v2.8.0 by [@&#8203;h0x0er](https://togithub.com/h0x0er) and
[@&#8203;varunsh-coder](https://togithub.com/varunsh-coder) in
[https://github.com/step-security/harden-runner/pull/416](https://togithub.com/step-security/harden-runner/pull/416)
This release includes:

- File Monitoring Enhancements: Adds the capability to view the name and
path of every file written during the build process.
- Process Tracking Enhancements: Adds the capability to view process
names and arguments of processes run during the build process.

These enhancements are based on insights from the XZ Utils incident,
aimed at improving observability and detections during the build
process.

**Full Changelog**:
step-security/harden-runner@v2...v2.8.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/xmldom/xmldom).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants