Picnic-DevPla-Bot
13f1fa3167
Upgrade ossf/scorecard-action v2.3.3 -> v2.4.0 ( #1403 )
...
See:
- https://github.com/ossf/scorecard-action/releases/tag/v2.4.0
- https://github.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0
2024-11-11 07:44:12 +01:00
Picnic-DevPla-Bot
7599b0f22f
Upgrade step-security/harden-runner v2.8.0 -> v2.10.1 ( #1404 )
...
See:
- https://github.com/step-security/harden-runner/releases/tag/v2.10.1
- https://github.com/step-security/harden-runner/releases/tag/v2.10.0
- https://github.com/step-security/harden-runner/releases/tag/v2.9.1
- https://github.com/step-security/harden-runner/releases/tag/v2.9.0
- https://github.com/step-security/harden-runner/releases/tag/v2.8.1
2024-11-10 21:33:56 +01:00
Stephan Schroevers
89f918c23e
Update step-security/harden-runner configuration ( #1411 )
...
By allowing Docker Hub and Maven Central access.
2024-11-10 18:26:40 +01:00
Picnic-DevPla-Bot
99aa656a1e
Upgrade s4u/setup-maven-action v1.13.0 -> v1.16.0 ( #1400 )
...
See:
- https://github.com/s4u/setup-maven-action/releases/tag/v1.16.0
- https://github.com/s4u/setup-maven-action/releases/tag/v1.15.0
- https://github.com/s4u/setup-maven-action/releases/tag/v1.14.0
2024-11-09 10:27:57 +01:00
Picnic-DevPla-Bot
4f46eb30d2
Upgrade actions/upload-artifact v4.3.3 -> v4.4.3 ( #1402 )
...
See:
- https://github.com/actions/upload-artifact/releases/tag/v4.4.3
- https://github.com/actions/upload-artifact/releases/tag/v4.4.2
- https://github.com/actions/upload-artifact/releases/tag/v4.4.1
- https://github.com/actions/upload-artifact/releases/tag/v4.4.0
- https://github.com/actions/upload-artifact/releases/tag/v4.3.6
- https://github.com/actions/upload-artifact/releases/tag/v4.3.5
- https://github.com/actions/upload-artifact/releases/tag/v4.3.4
2024-11-07 16:39:05 +01:00
Stephan Schroevers
9390b6f571
Run GitHub Actions workflows on ubuntu-24.04 ( #1391 )
...
See https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2404-Readme.md
2024-11-03 18:36:54 +01:00
Stephan Schroevers
176a833d89
Upgrade ruby/setup-ruby v1.174.0 -> v1.199.0 ( #1392 )
...
See:
- https://github.com/ruby/setup-ruby/releases/tag/v1.175.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.176.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.177.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.178.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.179.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.180.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.181.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.182.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.183.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.184.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.185.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.186.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.187.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.188.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.189.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.190.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.191.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.192.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.193.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.194.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.195.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.196.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.197.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.198.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.199.0
- https://github.com/ruby/setup-ruby/compare/v1.174.0...v1.199.0
2024-11-03 18:17:38 +01:00
Stephan Schroevers
507d759d02
Upgrade JDKs used by GitHub Actions builds ( #1329 )
...
Summary of changes:
- Use JDK 17.0.13 instead of 17.0.10.
- Use JDK 21.0.5 instead of 21.0.2.
- Use JDK 23.0.1 instead of 22.0.2.
- Have GitHub issue template reference more recent version numbers.
See:
- https://adoptium.net/temurin/release-notes/?version=jdk-17.0.11+9
- https://adoptium.net/temurin/release-notes/?version=jdk-17.0.12+7
- https://adoptium.net/temurin/release-notes/?version=jdk-17.0.13+11
- https://adoptium.net/temurin/release-notes/?version=jdk-21.0.3+9
- https://adoptium.net/temurin/release-notes/?version=jdk-21.0.4+7
- https://adoptium.net/temurin/release-notes/?version=jdk-21.0.5+11
- https://adoptium.net/temurin/release-notes/?version=jdk-23+37
- https://adoptium.net/temurin/release-notes/?version=jdk-23.0.1+11
2024-10-29 10:26:04 +01:00
Picnic-DevPla-Bot
ea60241782
Upgrade Maven 3.9.8 -> 3.9.9 ( #1295 )
...
See:
- https://maven.apache.org/release-notes-all.html
- https://github.com/apache/maven/compare/maven-3.9.8...maven-3.9.9
2024-09-03 15:26:41 +02:00
Picnic-Bot
552ddf6a7d
Upgrade Maven API 3.9.5 -> 3.9.8 ( #701 )
...
See:
- https://maven.apache.org/release-notes-all.html
- https://github.com/apache/maven/releases/tag/maven-3.9.6
- https://github.com/apache/maven/releases/tag/maven-3.9.7
- https://github.com/apache/maven/releases/tag/maven-3.9.8
- https://github.com/apache/maven/compare/maven-3.9.5...maven-3.9.8
2024-08-12 16:14:46 +02:00
Stephan Schroevers
fdf9bb5d25
Make the build JDK 22-compatible ( #1277 )
...
And verify the build with JDK 22.0.2.
2024-08-10 23:13:23 +02:00
Stephan Schroevers
1005d93b7e
Update step-security/harden-runner configuration ( #1271 )
...
While apparently the build doesn't fail without this, it is reasonable
for SonarCloud analysis to access the two additional domains.
While there, introduce subdomain wildcards for `sigstore.dev` and
`sonarcloud.io`.
2024-08-05 09:31:25 +02:00
Stephan Schroevers
8daedccaea
Update step-security/harden-runner configuration ( #1246 )
...
While apparently the build doesn't fail without this, it is reasonable
for SonarCloud analysis to access the `api.sonarcloud.io` domain.
2024-07-14 14:11:41 +02:00
Stephan Schroevers
5219fd8f6c
Allow OpenSSF Scorecard analysis to access api.scorecard.dev ( #1193 )
2024-05-25 19:02:02 +02:00
Picnic-Bot
43303e770a
Upgrade actions/checkout v4.1.4 -> v4.1.6 ( #1184 )
...
See:
- https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416
- https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v415
2024-05-23 10:36:32 +02:00
Picnic-Bot
cfadbca32a
Upgrade ossf/scorecard-action v2.3.1 -> v2.3.3 ( #1185 )
...
See:
- https://github.com/ossf/scorecard-action/releases/tag/v2.3.3
- https://github.com/ossf/scorecard-action/compare/v2.3.1...v2.3.2
2024-05-23 09:05:16 +02:00
Picnic-Bot
e7ca4a5325
Upgrade s4u/setup-maven-action v1.12.0 -> v1.13.0 ( #1187 )
...
See:
- https://github.com/s4u/setup-maven-action/releases/tag/v1.13.0
2024-05-22 10:23:23 +02:00
Picnic-Bot
7bab1eb7fd
Upgrade step-security/harden-runner v2.7.1 -> v2.8.0 ( #1188 )
...
See:
- https://github.com/step-security/harden-runner/releases/tag/v2.8.0
2024-05-22 08:36:34 +02:00
Stephan Schroevers
8a8290587a
Update step-security/harden-runner configuration ( #1177 )
...
This resolves recent build failures by ensuring that JDKs can be
downloaded.
2024-05-19 14:14:20 +02:00
Picnic-Bot
e7d50c247d
Upgrade step-security/harden-runner v2.7.0 -> v2.7.1 ( #1160 )
...
See:
- https://github.com/step-security/harden-runner/releases/tag/v2.7.1
2024-04-30 10:02:09 +02:00
Picnic-Bot
32778edc74
Upgrade actions/checkout v4.1.3 -> v4.1.4 ( #1154 )
...
See:
- https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414
2024-04-26 10:10:52 +02:00
Picnic-Bot
72c5a42feb
Upgrade actions/upload-artifact v4.3.2 -> v4.3.3 ( #1150 )
...
See:
- https://github.com/actions/upload-artifact/releases/tag/v4.3.3
2024-04-23 11:24:02 +02:00
Picnic-Bot
271e01a02c
Upgrade actions/checkout v4.1.1 -> v4.1.3 ( #1149 )
...
See:
- https://github.com/actions/checkout/releases/tag/v4.1.3
- https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412
2024-04-23 10:48:35 +02:00
Picnic-Bot
85cb7ffdb1
Upgrade CodeQL v3.24.9 -> v3.25.1 ( #1147 )
...
See:
- https://github.com/github/codeql-action/blob/main/CHANGELOG.md
- https://github.com/github/codeql-action/compare/v3.25.0...v3.25.1
- https://github.com/github/codeql-action/compare/v3.24.10...v3.25.0
- https://github.com/github/codeql-action/compare/v3.24.9...v3.24.10
2024-04-22 07:44:09 +02:00
Picnic-Bot
0367037f0a
Upgrade ruby/setup-ruby v1.173.0 -> v1.174.0 ( #1148 )
...
See:
- https://github.com/ruby/setup-ruby/releases/tag/v1.174.0
2024-04-22 07:30:17 +02:00
Picnic-Bot
eb36c1e493
Upgrade actions/upload-artifact v4.3.1 -> v4.3.2 ( #1143 )
...
See:
- https://github.com/actions/upload-artifact/releases/tag/v4.3.2
2024-04-19 10:14:36 +02:00
Picnic-Bot
111b7d04f2
Upgrade actions/configure-pages v4.0.0 -> v5.0.0 ( #1117 )
...
See:
- https://github.com/actions/configure-pages/releases/tag/v5.0.0
2024-03-30 13:53:38 +01:00
Rick Ossendrijver
9d8a5af44a
Start release notes with "Update considerations and deprecations" section ( #1105 )
2024-03-25 14:19:31 +01:00
Picnic-Bot
b551f90d38
Upgrade dawidd6/action-download-artifact v3.1.2 -> v3.1.4 ( #1109 )
...
See:
- https://github.com/dawidd6/action-download-artifact/releases/tag/v3.1.4
- https://github.com/dawidd6/action-download-artifact/releases/tag/v3.1.3
2024-03-25 10:12:27 +01:00
Picnic-Bot
13e35338af
Upgrade ruby/setup-ruby v1.172.0 -> v1.173.0 ( #1110 )
...
See https://github.com/ruby/setup-ruby/releases/tag/v1.173.0
2024-03-25 09:43:35 +01:00
Picnic-Bot
e40df7e1b8
Upgrade CodeQL v3.24.5 -> v3.24.9 ( #1108 )
...
See:
- https://github.com/github/codeql-action/blob/main/CHANGELOG.md
- https://github.com/github/codeql-action/compare/v3.24.8...v3.24.9
- https://github.com/github/codeql-action/compare/v3.24.7...v3.24.8
- https://github.com/github/codeql-action/compare/v3.24.6...v3.24.7
- https://github.com/github/codeql-action/compare/v3.24.5...v3.24.6
2024-03-25 08:42:59 +01:00
Picnic-Bot
b9e8186159
Upgrade actions/deploy-pages v4.0.4 -> v4.0.5 ( #1094 )
...
See:
- https://github.com/actions/deploy-pages/releases/tag/v4.0.5
2024-03-19 10:55:56 +01:00
Stephan Schroevers
c806f4044d
Update step-security/harden-runner configuration ( #1083 )
2024-03-13 14:29:56 +01:00
Stephan Schroevers
df701d3d3c
Have step-security/harden-runner audit the OpenSSF Scorecard update workflow ( #1076 )
...
When executed on `master` this workflow requires additional permissions;
let's find out what they are.
2024-03-12 08:07:16 +01:00
Stephan Schroevers
3b005b0edc
Introduce GitHub Actions step-security/harden-runner step ( #1063 )
2024-03-11 21:43:54 +01:00
Picnic-Bot
424f96878f
Upgrade CodeQL v3.23.2 -> v3.24.5 ( #1054 )
...
See:
- https://github.com/github/codeql-action/blob/main/CHANGELOG.md
- https://github.com/github/codeql-action/compare/v3.23.2...v3.24.5
2024-02-26 07:50:01 +01:00
Picnic-Bot
3c211bdf60
Upgrade dawidd6/action-download-artifact v3.1.1 -> v3.1.2 ( #1053 )
...
See:
- https://github.com/dawidd6/action-download-artifact/releases/tag/v3.1.2
2024-02-26 07:32:01 +01:00
Picnic-Bot
219254813e
Upgrade ruby/setup-ruby v1.170.0 -> v1.172.0 ( #1055 )
...
See:
- https://github.com/ruby/setup-ruby/releases/tag/v1.172.0
- https://github.com/ruby/setup-ruby/releases/tag/v1.171.0
2024-02-26 07:12:13 +01:00
Picnic-Bot
1f83eada44
Upgrade dawidd6/action-download-artifact v3.1.0 -> v3.1.1 ( #1039 )
...
See:
- https://github.com/dawidd6/action-download-artifact/releases/tag/v3.1.1
2024-02-19 09:27:12 +01:00
Stephan Schroevers
b39e322a67
Upgrade JDKs used by GitHub Actions builds ( #1043 )
...
Summary of changes:
- Use JDK 17.0.10 instead of 17.0.8.
- Use JDK 21.0.2 instead of 21.0.0.
- Have GitHub issue template reference more recent version numbers.
See:
- https://adoptium.net/temurin/release-notes/?version=jdk-17.0.9+9
- https://adoptium.net/temurin/release-notes/?version=jdk-17.0.10+7
- https://adoptium.net/temurin/release-notes/?version=jdk-21.0.1+12
- https://adoptium.net/temurin/release-notes/?version=jdk-21.0.2+13
2024-02-18 16:51:54 +01:00
Picnic-Bot
98b6b7ec0c
Upgrade dawidd6/action-download-artifact v3.0.0 -> v3.1.0 ( #1037 )
...
See:
- https://github.com/dawidd6/action-download-artifact/releases/tag/v3.1.0
2024-02-16 09:42:32 +01:00
Picnic-Bot
cce897ed4a
Upgrade s4u/setup-maven-action v1.11.0 -> v1.12.0 ( #1030 )
...
See:
- https://github.com/s4u/setup-maven-action/releases/tag/v1.12.0
2024-02-13 08:08:36 +01:00
Stephan Schroevers
1fe67677b4
Re-enable SonarCloud analysis on default branch ( #1029 )
...
This analysis was accidentally disabled by
ff3be8ae3f .
2024-02-12 08:46:45 +01:00
Stephan Schroevers
433b8b90c0
Require JDK 17 rather than JDK 11 ( #603 )
...
By raising this baseline the project can now use Java 17 language features such
as text blocks, switch expressions and `instanceof` pattern matching. The code
has been updated to make use of these constructs.
Note that the project can still be used by builds that target an older version
of Java, as long as those builds are executed using JDK 17+.
2024-02-11 16:57:13 +01:00
Picnic-Bot
a01e5e4cf1
Upgrade actions/upload-artifact v4.3.0 -> v4.3.1 ( #1017 )
...
See:
- https://github.com/actions/upload-artifact/releases/tag/v4.3.1
2024-02-10 11:24:34 +01:00
Picnic-Bot
0ba806432d
Upgrade actions/upload-pages-artifact v3.0.0 -> v3.0.1 ( #1022 )
...
See:
- https://github.com/actions/upload-pages-artifact/releases/tag/v3.0.1
2024-02-09 13:53:34 +01:00
Picnic-Bot
0a3537669a
Upgrade actions/deploy-pages v4.0.3 -> v4.0.4 ( #1016 )
...
See:
- https://github.com/actions/deploy-pages/releases/tag/v4.0.4
2024-02-09 12:52:50 +01:00
Stephan Schroevers
79ac13809f
Run builds on macOS 14 rather than macOS 12 ( #1011 )
...
See https://github.blog/changelog/2024-01-30-github-actions-introducing-the-new-m1-macos-runner-available-to-open-source/
2024-01-31 08:43:47 +01:00
Stephan Schroevers
90066f87d1
Sync Checkstyle integration test ( #999 )
...
Summary of changes:
- Update the set of expected changes for compatibility with the latest
features, except for the `ErrorProneRuntimeClasspath` check.
- Test against version 10.12.7 rather than 10.13.0.
- Omit the targeted tag from file names, so that similar upgrade PRs can be
tested using an `/integration-test` GitHub comment.
2024-01-30 15:18:18 +01:00
Picnic-Bot
ba27fc588d
Upgrade CodeQL v3.22.12 -> v3.23.2 ( #1004 )
...
See:
- https://github.com/github/codeql-action/blob/main/CHANGELOG.md
- https://github.com/github/codeql-action/compare/v3.22.12...v3.23.2
2024-01-29 07:40:12 +01:00