Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update actions/cache action from v4.1.2 to v4.2.0 (.github/workflows/gh-pages.yml) #11410

Merged
merged 1 commit into from
Dec 12, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Dec 11, 2024

This PR contains the following updates:

Package Type Update Change
actions/cache action minor v4.1.2 -> v4.2.0

Release Notes

actions/cache (actions/cache)

v4.2.0

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

Full Changelog: actions/cache@v4...v4.2.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Dec 11, 2024
Copy link

DryRun Security Summary

The pull request updates the version of the actions/cache GitHub Action in the gh-pages workflow for the DefectDojo project, which is a routine update with no significant security implications.

Expand for full summary

Summary:

The provided code change is related to the GitHub Actions workflow for building and deploying the GitHub Pages (gh-pages) site for the DefectDojo project. The changes include an update to the version of the actions/cache GitHub Action used for caching the project's dependencies, which is a routine update to ensure the use of the most secure and feature-rich version of the action. The rest of the workflow steps, such as checking out the repository, building the website, and deploying to GitHub Pages, are standard practices for this type of deployment workflow. From an application security perspective, there are no obvious security concerns or red flags introduced by these changes.

Files Changed:

  • .github/workflows/gh-pages.yml: This file contains the GitHub Actions workflow for building and deploying the project's documentation website to GitHub Pages. The changes in this pull request update the version of the actions/cache GitHub Action used for caching dependencies, which is a routine update to ensure the use of the most secure and feature-rich version of the action. The rest of the workflow steps, such as checking out the repository, building the website, and deploying to GitHub Pages, are standard practices for this type of deployment workflow and do not introduce any significant security concerns.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

Copy link
Contributor

@mtesauro mtesauro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@mtesauro mtesauro merged commit 5a66da9 into dev Dec 12, 2024
73 checks passed
@renovate renovate bot deleted the renovate/actions-cache-4.x branch January 6, 2025 14:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants