[deps] DevOps: Update gh minor

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
Azure/login	action	minor	v1.4.7 -> v1.6.0
Azure/login	action	minor	v1.5.1 -> v1.6.0
act10ns/slack	action	minor	v2.0.0 -> v2.1.0
actions/checkout	action	patch	v4.1.1 -> v4.1.6
actions/checkout	action	patch	v4.1.0 -> v4.1.6
actions/setup-node	action	patch	v3.8.1 -> v3.8.2
azure/webapps-deploy	action	patch	v2.2.11 -> v2.2.12
checkmarx/ast-github-action	action	patch	2.0.23 -> 2.0.28
chrnorm/deployment-action	action	patch	v2.0.5 -> v2.0.7
chrnorm/deployment-status	action	patch	v2.0.1 -> v2.0.3
codecov/codecov-action	action	minor	v4.0.2 -> v4.4.1
crazy-max/ghaction-import-gpg	action	minor	v6.0.0 -> v6.1.0
dorny/test-reporter	action	minor	v1.6.0 -> v1.9.1
github/codeql-action	action	minor	v3.24.9 -> v3.25.7
github/codeql-action	action	minor	v3.23.2 -> v3.25.7
launchdarkly/find-code-references-in-pull-request	action	minor	v1.1.0 -> v1.3.0
ncipollo/release-action	action	minor	v1.13.0 -> v1.14.0
sonarsource/sonarcloud-github-action	action	minor	v2.1.1 -> v2.2.0

---

Release Notes

Azure/login (Azure/login)

v1.6.0: Azure Login Action v1.6.0

Compare Source

• Added pre: and post: action for cleaning up (#​384)

v1.5.1: Azure Login Action v1.5.1

Compare Source

• Fixed #​371: Allow optional subscriptionId in creds (#​373)
• Cleaned accounts before login (#​376, #​377)
• Updated actions-secret-parser from 1.0.2 to 1.0.4 (#​378)

v1.5.0: Azure Login Action v1.5.0

Compare Source

• Updated the versions of dependencies.
• Supported passwords to start with hyphen(-).
• Enabled OIDC for sovereign clouds.
• Supported Managed Identity Login.

act10ns/slack (act10ns/slack)

v2.1.0

Compare Source

What's Changed

• Bump decode-uri-component from 0.2.0 to 0.2.2 by @​dependabot in https://github.com/act10ns/slack/pull/255
• Drop confused warning about secret by @​pftg in https://github.com/act10ns/slack/pull/260
• Doc: Migrate to v2 by @​sue445 in https://github.com/act10ns/slack/pull/269
• Add matrix input by @​sue445 in https://github.com/act10ns/slack/pull/268
• Quote workflow names to fix workflows containing spaces by @​Jamesking56 in https://github.com/act10ns/slack/pull/271
• Bump node to version 20 by @​satterly in https://github.com/act10ns/slack/pull/273

New Contributors

• @​pftg made their first contribution in https://github.com/act10ns/slack/pull/260
• @​sue445 made their first contribution in https://github.com/act10ns/slack/pull/269
• @​Jamesking56 made their first contribution in https://github.com/act10ns/slack/pull/271

Full Changelog: act10ns/slack@v2.0.0...v2.1.0

actions/checkout (actions/checkout)

v4.1.6

Compare Source

• Check platform to set archive extension appropriately by @​cory-miller in https://github.com/actions/checkout/pull/1732

v4.1.5

Compare Source

What's Changed

• Update NPM dependencies by @​cory-miller in https://github.com/actions/checkout/pull/1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in https://github.com/actions/checkout/pull/1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in https://github.com/actions/checkout/pull/1707

Full Changelog: actions/checkout@v4.1.4...v4.1.5

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1692
• Add dependabot config by @​cory-miller in https://github.com/actions/checkout/pull/1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in https://github.com/actions/checkout/pull/1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in https://github.com/actions/checkout/pull/1643

v4.1.3

Compare Source

What's Changed

• Update actions/checkout version in update-main-version.yml by @​jww3 in https://github.com/actions/checkout/pull/1650
• Check git version before attempting to disable sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1656
• Add SSH user parameter by @​cory-miller in https://github.com/actions/checkout/pull/1685

Full Changelog: actions/checkout@v4.1.2...v4.1.3

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in https://github.com/actions/checkout/pull/1598

actions/setup-node (actions/setup-node)

v3.8.2

Compare Source

What's Changed

• Update semver by @​dmitry-shibanov in https://github.com/actions/setup-node/pull/861
• Update temp directory creation by @​nikolai-laevskii in https://github.com/actions/setup-node/pull/859
• Bump @​babel/traverse from 7.15.4 to 7.23.2 by @​dependabot in https://github.com/actions/setup-node/pull/870
• Add notice about binaries not being updated yet by @​nikolai-laevskii in https://github.com/actions/setup-node/pull/872
• Update toolkit cache and core by @​dmitry-shibanov and @​seongwon-privatenote in https://github.com/actions/setup-node/pull/875

Full Changelog: actions/setup-node@v3...v3.8.2

azure/webapps-deploy (azure/webapps-deploy)

v2.2.12: Node version updated to 20 in webapps_deploy@v2

Compare Source

Node version updated to 20 in webapps_deploy@v2

checkmarx/ast-github-action (checkmarx/ast-github-action)

v2.0.28

Compare Source

What's Changed

Other Changes

• Update CLI to 2.1.2 by @​OrShamirCM in https://github.com/Checkmarx/ast-github-action/pull/179

Full Changelog: Checkmarx/ast-github-action@2.0.27...2.0.28

v2.0.27

Compare Source

What's Changed

Dependencies Updates 🛠

• Bump checkmarx/ast-cli from 2.1.0 to 2.1.1 by @​dependabot in https://github.com/Checkmarx/ast-github-action/pull/178

Full Changelog: Checkmarx/ast-github-action@2.0.26...2.0.27

v2.0.26

Compare Source

What's Changed

Dependencies Updates 🛠

• Bump checkmarx/ast-cli from 2.0.74 to 2.1.0 by @​dependabot in https://github.com/Checkmarx/ast-github-action/pull/176

Full Changelog: Checkmarx/ast-github-action@2.0.25...2.0.26

v2.0.25

Compare Source

What's Changed

Other Changes

• Update CLI version to 2.0.74 by @​checkmarx-kobi-hagmi in https://github.com/Checkmarx/ast-github-action/pull/172

New Contributors

• @​checkmarx-kobi-hagmi made their first contribution in https://github.com/Checkmarx/ast-github-action/pull/172

Full Changelog: Checkmarx/ast-github-action@2.0.24...2.0.25

v2.0.24

Compare Source

What's Changed

Dependencies Updates 🛠

• Bump checkmarx/ast-cli from 2.0.66 to 2.0.67 by @​dependabot in https://github.com/Checkmarx/ast-github-action/pull/164
• Bump checkmarx/ast-cli from 2.0.67 to 2.0.69 by @​dependabot in https://github.com/Checkmarx/ast-github-action/pull/165

Other Changes

• Update Dockerfile with CLI version 2.0.72 by @​OrShamirCM in https://github.com/Checkmarx/ast-github-action/pull/169

New Contributors

• @​OrShamirCM made their first contribution in https://github.com/Checkmarx/ast-github-action/pull/169

Full Changelog: Checkmarx/ast-github-action@2.0.23...2.0.24

chrnorm/deployment-action (chrnorm/deployment-action)

v2.0.7

Compare Source

What's Changed

• Fix dist files CI by @​maks-oleksyuk in https://github.com/chrnorm/deployment-action/pull/86

New Contributors

• @​maks-oleksyuk made their first contribution in https://github.com/chrnorm/deployment-action/pull/86

Full Changelog: chrnorm/deployment-action@v2.0.6...v2.0.7

v2.0.6

Compare Source

chrnorm/deployment-status (chrnorm/deployment-status)

v2.0.3

Compare Source

What's Changed

• Bump up node version because node v16 will be deprecated by @​sho-he in https://github.com/chrnorm/deployment-status/pull/49

New Contributors

• @​sho-he made their first contribution in https://github.com/chrnorm/deployment-status/pull/49

Full Changelog: chrnorm/deployment-status@v2.0.1...v2.0.3

v2.0.2

Compare Source

What's Changed

• Bump node version since node v12 is deprecated by @​richardsimko in https://github.com/chrnorm/deployment-status/pull/40

New Contributors

• @​richardsimko made their first contribution in https://github.com/chrnorm/deployment-status/pull/40

Full Changelog: chrnorm/deployment-status@v2.0.0...v2.0.2

codecov/codecov-action (codecov/codecov-action)

v4.4.1

Compare Source

What's Changed

• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.8.0 to 7.9.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1427
• fix: prevent xlarge from running on forks by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1432
• build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by @​dependabot in https://github.com/codecov/codecov-action/pull/1439
• build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @​dependabot in https://github.com/codecov/codecov-action/pull/1438
• fix: isPullRequestFromFork returns false for any PR by @​shahar-h in https://github.com/codecov/codecov-action/pull/1437
• chore(release): 4.4.1 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1441

New Contributors

• @​shahar-h made their first contribution in https://github.com/codecov/codecov-action/pull/1437

Full Changelog: codecov/codecov-action@v4.4.0...v4.4.1

What's Changed

• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.8.0 to 7.9.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1427
• fix: prevent xlarge from running on forks by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1432
• build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by @​dependabot in https://github.com/codecov/codecov-action/pull/1439
• build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @​dependabot in https://github.com/codecov/codecov-action/pull/1438
• fix: isPullRequestFromFork returns false for any PR by @​shahar-h in https://github.com/codecov/codecov-action/pull/1437
• chore(release): 4.4.1 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1441

New Contributors

• @​shahar-h made their first contribution in https://github.com/codecov/codecov-action/pull/1437

Full Changelog: codecov/codecov-action@v4.4.0...v4.4.1

v4.4.0

Compare Source

What's Changed

• chore: Clarify isPullRequestFromFork by @​jsoref in https://github.com/codecov/codecov-action/pull/1411
• build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @​dependabot in https://github.com/codecov/codecov-action/pull/1423
• build(deps): bump github/codeql-action from 3.25.3 to 3.25.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1421
• build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1420
• feat: remove GPG and run on spawn by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1426
• build(deps-dev): bump @​typescript-eslint/parser from 7.8.0 to 7.9.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1428
• chore(release): 4.4.0 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1430

Full Changelog: codecov/codecov-action@v4.3.1...v4.4.0

v4.3.1

Compare Source

v4.3.0

Compare Source

What's Changed

• fix: automatically detect if using GitHub enterprise by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1356
• build(deps-dev): bump typescript from 5.4.3 to 5.4.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1355
• build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by @​dependabot in https://github.com/codecov/codecov-action/pull/1360
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.5.0 to 7.6.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1364
• build(deps-dev): bump @​typescript-eslint/parser from 7.5.0 to 7.6.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1363
• feat: add network params by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1365
• build(deps): bump undici from 5.28.3 to 5.28.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1361
• chore(release): v4.3.0 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1366

Full Changelog: codecov/codecov-action@v4.2.0...v4.3.0

v4.2.0

Compare Source

What's Changed

• chore(deps): update deps by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1351
• feat: allow for authentication via OIDC token by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1330
• fix: use_oidc shoudl be required false by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1353

Full Changelog: codecov/codecov-action@v4.1.1...v4.2.0

v4.1.1

Compare Source

What's Changed

• build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by @​dependabot in https://github.com/codecov/codecov-action/pull/1315
• build(deps-dev): bump typescript from 5.3.3 to 5.4.2 by @​dependabot in https://github.com/codecov/codecov-action/pull/1319
• Removed mention of Mercurial by @​drazisil-codecov in https://github.com/codecov/codecov-action/pull/1325
• build(deps): bump github/codeql-action from 3.24.6 to 3.24.7 by @​dependabot in https://github.com/codecov/codecov-action/pull/1332
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @​dependabot in https://github.com/codecov/codecov-action/pull/1331
• fix: force version by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1329
• build(deps-dev): bump typescript from 5.4.2 to 5.4.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1334
• build(deps): bump undici from 5.28.2 to 5.28.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1338
• build(deps): bump github/codeql-action from 3.24.7 to 3.24.9 by @​dependabot in https://github.com/codecov/codecov-action/pull/1341
• fix: typo in disable_safe_directory by @​mkroening in https://github.com/codecov/codecov-action/pull/1343
• chore(release): 4.1.1 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1344

New Contributors

• @​mkroening made their first contribution in https://github.com/codecov/codecov-action/pull/1343

Full Changelog: codecov/codecov-action@v4.1.0...v4.1.1

v4.1.0

Compare Source

What's Changed

• fix: set safe directory by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1304
• build(deps): bump github/codeql-action from 3.24.3 to 3.24.5 by @​dependabot in https://github.com/codecov/codecov-action/pull/1306
• build(deps-dev): bump eslint from 8.56.0 to 8.57.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1305
• chore(release): v4.1.0 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1307

Full Changelog: codecov/codecov-action@v4.0.2...v4.1.0

crazy-max/ghaction-import-gpg (crazy-max/ghaction-import-gpg)

v6.1.0

Compare Source

• Bump @​actions/core from 1.10.0 to 1.10.1 in https://github.com/crazy-max/ghaction-import-gpg/pull/186
• Bump @​babel/traverse from 7.17.3 to 7.23.2 in https://github.com/crazy-max/ghaction-import-gpg/pull/191
• Bump debug from 4.1.1 to 4.3.4 in https://github.com/crazy-max/ghaction-import-gpg/pull/190
• Bump openpgp from 5.10.1 to 5.11.0 in https://github.com/crazy-max/ghaction-import-gpg/pull/192

Full Changelog: crazy-max/ghaction-import-gpg@v6.0.0...v6.1.0

dorny/test-reporter (dorny/test-reporter)

v1.9.1

Compare Source

What's Changed

• fix: reporting wrong number of tests in Dart by @​dominicmh in https://github.com/dorny/test-reporter/pull/426
• Fix problematic retransmission of authentication token (alternative solution) by @​JojOatXGME in https://github.com/dorny/test-reporter/pull/438
• Update development dependencies by @​jozefizso in https://github.com/dorny/test-reporter/pull/442

New Contributors

• @​dominicmh made their first contribution in https://github.com/dorny/test-reporter/pull/426
• @​JojOatXGME made their first contribution in https://github.com/dorny/test-reporter/pull/438

Full Changelog: dorny/test-reporter@v1.9.0...v1.9.1

v1.9.0

Compare Source

What's Changed

Features

• Add support for the rspec-json format #​398
• Updated packages #​405

Contributors

• @​oscarmampel made their contribution in #​398

Full Changelog: dorny/test-reporter@v1.8.0...v1.9.0

v1.8.0

Compare Source

What's Changed

• CHANGELOG.md by @​j-catania in https://github.com/dorny/test-reporter/pull/297
• Bump @​babel/traverse from 7.12.1 to 7.23.2 in /reports/jest by @​dependabot in https://github.com/dorny/test-reporter/pull/303
• Bump @​babel/traverse from 7.22.20 to 7.23.2 by @​dependabot in https://github.com/dorny/test-reporter/pull/304
• Add SwiftXunitParser class based on JavaJunitParser for swift-xunit reporter by @​jozefizso in https://github.com/dorny/test-reporter/pull/317
• Update to Node20 by @​j-catania in https://github.com/dorny/test-reporter/pull/315
• Fix build error by @​dorny in https://github.com/dorny/test-reporter/pull/331
• Use NodeJS 18 LTS as default runtime by @​jozefizso in https://github.com/dorny/test-reporter/pull/332
• Update all packages by @​jozefizso in https://github.com/dorny/test-reporter/pull/333
• Escape <> characters in suite name by @​wingyplus in https://github.com/dorny/test-reporter/pull/236
• Adding feature and bug template by @​j-catania in https://github.com/dorny/test-reporter/pull/341
• Update check title and remove icon by @​ldaneliukas in https://github.com/dorny/test-reporter/pull/144
• test-reporter release v1.8.0 by @​jozefizso in https://github.com/dorny/test-reporter/pull/370

New Contributors

• @​jozefizso made their first contribution in https://github.com/dorny/test-reporter/pull/317
• @​wingyplus made their first contribution in https://github.com/dorny/test-reporter/pull/236
• @​ldaneliukas made their first contribution in https://github.com/dorny/test-reporter/pull/144

Full Changelog: dorny/test-reporter@v1.7.0...v1.8.0

v1.7.0

Compare Source

What's Changed

• Fix #​199: Use ✅ instead of ✔️ for better cross platform look by @​petrdvorak in https://github.com/dorny/test-reporter/pull/200
• Verify content of dist/ folder matches build output by @​dorny in https://github.com/dorny/test-reporter/pull/207
• Gracefully handle empty nested testsuite elements for JUnit. by @​rvdlaarschot in https://github.com/dorny/test-reporter/pull/193
• Gracefully handle empty failure tags by @​haudren-woven in https://github.com/dorny/test-reporter/pull/213
• Fix #​208 - java-junit: show annotations on PR changed files by @​atsu85 in https://github.com/dorny/test-reporter/pull/209
• Only report failure if fail-on-error is set by @​trond-snekvik in https://github.com/dorny/test-reporter/pull/214
• Improve clarity on configuring for forkable repos by @​abelbraaksma in https://github.com/dorny/test-reporter/pull/211
• Suppress "Processing test results from" log by @​vasanthdharmaraj in https://github.com/dorny/test-reporter/pull/179
• Skip listing of files if error parsing is disabled by @​dorny in https://github.com/dorny/test-reporter/pull/216
• Correct typo in docs by @​tangowithfoxtrot in https://github.com/dorny/test-reporter/pull/254
• update dependencies by @​j-catania in https://github.com/dorny/test-reporter/pull/269
• Add permissions to example yml files by @​TurnrDev in https://github.com/dorny/test-reporter/pull/263
• add feature fail-on-empty by @​gdams in https://github.com/dorny/test-reporter/pull/243
• Add dependabot configuration by @​yeikel in https://github.com/dorny/test-reporter/pull/228
• Bump ws from 7.3.1 to 7.5.9 in /reports/jest by @​dependabot in https://github.com/dorny/test-reporter/pull/265
• Bump actions/checkout from 2 to 4 by @​dependabot in https://github.com/dorny/test-reporter/pull/279
• Add new output for url url html by @​luisito666 in https://github.com/dorny/test-reporter/pull/242
• Update README.md by @​IanMoroney in https://github.com/dorny/test-reporter/pull/158
• Update jest-Junit part of Readme by @​ryancasburn-KAI in https://github.com/dorny/test-reporter/pull/176
• fix: default-valued fields are not mandatory by @​TomerFi in https://github.com/dorny/test-reporter/pull/172
• Bump ansi-regex from 4.1.0 to 4.1.1 in /reports/jest by @​dependabot in https://github.com/dorny/test-reporter/pull/278
• Bump decode-uri-component from 0.2.0 to 0.2.2 in /reports/jest by @​dependabot in https://github.com/dorny/test-reporter/pull/276
• Bump minimist from 1.2.5 to 1.2.8 in /reports/jest by @​dependabot in https://github.com/dorny/test-reporter/pull/275
• Bump qs from 6.5.2 to 6.5.3 in /reports/jest by @​dependabot in https://github.com/dorny/test-reporter/pull/272
• Bump json5 from 2.1.3 to 2.2.3 in /reports/jest by @​dependabot in https://github.com/dorny/test-reporter/pull/271
• Bump ansi-regex from 3.0.0 to 3.0.1 in /reports/mocha by @​dependabot in https://github.com/dorny/test-reporter/pull/270
• declare 'url' and 'url_html' as action outputs by @​micha-one in https://github.com/dorny/test-reporter/pull/287
• Avoid split on undefined by @​cazou in https://github.com/dorny/test-reporter/pull/258

New Contributors

• @​petrdvorak made their first contribution in https://github.com/dorny/test-reporter/pull/200
• @​rvdlaarschot made their first contribution in https://github.com/dorny/test-reporter/pull/193
• @​haudren-woven made their first contribution in https://github.com/dorny/test-reporter/pull/213
• @​atsu85 made their first contribution in https://github.com/dorny/test-reporter/pull/209
• @​trond-snekvik made their first contribution in https://github.com/dorny/test-reporter/pull/214
• @​abelbraaksma made their first contribution in https://github.com/dorny/test-reporter/pull/211
• @​vasanthdharmaraj made their first contribution in https://github.com/dorny/test-reporter/pull/179
• @​tangowithfoxtrot made their first contribution in https://github.com/dorny/test-reporter/pull/254
• @​TurnrDev made their first contribution in https://github.com/dorny/test-reporter/pull/263
• @​gdams made their first contribution in https://github.com/dorny/test-reporter/pull/243
• @​yeikel made their first contribution in https://github.com/dorny/test-reporter/pull/228
• @​luisito666 made their first contribution in https://github.com/dorny/test-reporter/pull/242
• @​IanMoroney made their first contribution in https://github.com/dorny/test-reporter/pull/158
• @​ryancasburn-KAI made their first contribution in https://github.com/dorny/test-reporter/pull/176
• @​TomerFi made their first contribution in https://github.com/dorny/test-reporter/pull/172
• @​micha-one made their first contribution in https://github.com/dorny/test-reporter/pull/287
• @​cazou made their first contribution in https://github.com/dorny/test-reporter/pull/258

Full Changelog: dorny/test-reporter@v1.6.0...v1.7.0

github/codeql-action (github/codeql-action)

v3.25.7

Compare Source

v3.25.6

Compare Source

v3.25.5

Compare Source

v3.25.4

Compare Source

v3.25.3

Compare Source

v3.25.2

Compare Source

v3.25.1

Compare Source

v3.25.0

Compare Source

v3.24.11

Compare Source

v3.24.10

Compare Source

launchdarkly/find-code-references-in-pull-request (launchdarkly/find-code-references-in-pull-request)

v1.3.0

Compare Source

Added

• Add an info warning for changes flags that have been deprecated

Changed

• Update info message for removed, but not extinct flags
• Update dependencies

v1.2.0

Compare Source

Added

• Automatically create flag links for flags modified in the pull request

Changed

• Update dependencies

v1.1.1

Compare Source

Changed

• Update dependencies

Fixed

• Incorrect scanning for extinctions of removed flags led to false positives

ncipollo/release-action (ncipollo/release-action)

v1.14.0

Compare Source

What's Changed

• Bump semver from 6.3.0 to 6.3.1 by @​dependabot in https://github.com/ncipollo/release-action/pull/350
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/ncipollo/release-action/pull/364
• Bump glob from 10.3.1 to 10.3.4 by @​dependabot in https://github.com/ncipollo/release-action/pull/361
• Bump jest-circus from 29.5.0 to 29.6.4 by @​dependabot in https://github.com/ncipollo/release-action/pull/359
• Bump typescript from 5.1.6 to 5.2.2 by @​dependabot in https://github.com/ncipollo/release-action/pull/362
• Bump @​types/node from 20.3.3 to 20.6.0 by @​dependabot in https://github.com/ncipollo/release-action/pull/366
• Bump jest and @​types/jest by @​dependabot in https://github.com/ncipollo/release-action/pull/367
• Bump @​babel/traverse from 7.17.3 to 7.23.2 by @​dependabot in https://github.com/ncipollo/release-action/pull/378
• Bump jest and @​types/jest by @​dependabot in https://github.com/ncipollo/release-action/pull/377
• Bump jest-circus from 29.6.4 to 29.7.0 by @​dependabot in https://github.com/ncipollo/release-action/pull/376
• Bump @​types/node from 20.6.0 to 20.8.6 by @​dependabot in https://github.com/ncipollo/release-action/pull/379
• Bump @​actions/core from 1.10.0 to 1.10.1 by @​dependabot in https://github.com/ncipollo/release-action/pull/375
• Bump @​types/jest from 29.5.5 to 29.5.7 by @​dependabot in https://github.com/ncipollo/release-action/pull/386
• Bump actions/setup-node from 3 to 4 by @​dependabot in https://github.com/ncipollo/release-action/pull/381
• Bump @​types/node from 20.8.6 to 20.9.0 by @​dependabot in https://github.com/ncipollo/release-action/pull/390
• Bump typescript from 5.2.2 to 5.3.2 by @​dependabot in https://github.com/ncipollo/release-action/pull/396
• Bump @​types/node from 20.9.0 to 20.10.1 by @​dependabot in https://github.com/ncipollo/release-action/pull/395
• Bump @​types/jest from 29.5.7 to 29.5.11 by @​dependabot in https://github.com/ncipollo/release-action/pull/399
• Bump @​actions/github from 5.1.1 to 6.0.0 by @​dependabot in https://github.com/ncipollo/release-action/pull/385
• Bump typescript from 5.3.2 to 5.3.3 by @​dependabot in https://github.com/ncipollo/release-action/pull/403
• Bump @​types/node from 20.10.1 to 20.10.6 by @​dependabot in https://github.com/ncipollo/release-action/pull/402
• Upgrade to Node 20 by @​aovens-quantifi in https://github.com/ncipollo/release-action/pull/411

New Contributors

• @​aovens-quantifi made their first contribution in https://github.com/ncipollo/release-action/pull/411

Full Changelog: ncipollo/release-action@v1...v1.14.0

sonarsource/sonarcloud-github-action (sonarsource/sonarcloud-github-action)

v2.2.0

Compare Source

What's Changed

• docs: update checkout GitHub Action to the latest version by @​froblesmartin in https://github.com/SonarSource/sonarcloud-github-action/pull/61
• SC-12363 Improve the SonarCloud Intro in README.md by @​claire-villard-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/65
• Makes sonarsource/analysis-experience-squad the code owner by @​alexandre-odoux-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/66
• SCSCANGHA-3 Update the condition to detect "build.gradle.kts" files by @​leveretka in https://github.com/SonarSource/sonarcloud-github-action/pull/71
• SCSCANGHA-6 Add Github Actions tests by @​antoine-vinot-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/72
• SCSCANGHA-6 Fix main branch name in GitHub workflow by @​antoine-vinot-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/73
• SCSCANGHA-9 Enable Mend scan by @​antoine-vinot-sonarsource in https://github.com/SonarSource/sonarcloud-github-action/pull/75
• Enable debug logging when GitHub Actions debug logging is enabled by @​ari-becker in https://github.com/SonarSource/sonarcloud-github-action/pull/43
• SCSCANGHA-15 Add test for scanner debug logging by @​istvan-bodo-sonarsource in [https://github.com/SCSCANGHA-15 Add test for scanner debug logging SonarSource/sonarcloud-github-action#77](https://togithub.com/SonarSource/sonarcloud-gith

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[bitwarden-bot]

Checkmarx One – Scan Summary & Details – 955e99f9-1747-459b-b14a-3b0cddd67a82

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Unpinned Actions Full Length Commit SHA	/build.yml: 491	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build.yml: 566	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build.yml: 205	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build.yml: 458	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Fixed Issues

Severity	Issue	Source File / Package
	Unpinned Actions Full Length Commit SHA	/build.yml: 506
	Unpinned Actions Full Length Commit SHA	/build.yml: 220
	Unpinned Actions Full Length Commit SHA	/build.yml: 585
	Unpinned Actions Full Length Commit SHA	/build.yml: 473