Skip to content

chore(deps): update wetransform/gha-workflows action to v4.2.1#254

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/wetransform-gha-workflows-4.x
Open

chore(deps): update wetransform/gha-workflows action to v4.2.1#254
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/wetransform-gha-workflows-4.x

Conversation

@renovate

@renovate renovate Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
wetransform/gha-workflows action minor v4.1.5v4.2.1 OpenSSF Scorecard

Release Notes

wetransform/gha-workflows (wetransform/gha-workflows)

v4.2.1

Compare Source

Bug Fixes
  • deps: update wetransform/gha-trivy action to v2.7.0 (06a154d)

v4.2.0

Compare Source

Features
  • log in to Docker Hardened Images (c64dd65)

v4.1.6

Compare Source

Features
  • deps: update wetransform/gha-trivy action to v2 (fffeaac)
  • scan-images: include SBOM of scanned images and merge them (e001ea3)
  • scan-images: remove individual SBOM and HTML report artifacts (f804d9f)
Bug Fixes
  • deps: pin jaxxstorm/action-install-gh-release action to 25d5e2d (7de1fbc)
  • deps: update actions/checkout action to v4.1.6 (2e2eaa7)
  • deps: update all non-major dependencies (7b16a5f)
  • deps: update all non-major dependencies (4345049)
  • deps: update all non-major dependencies (7af9039)
  • deps: update docker/build-push-action action to v5.4.0 (15e42be)
  • deps: update docker/build-push-action action to v6 (2622b71)
  • deps: update wetransform/gha-gradle-semantic-release action to v2.1.0 (8caa0d2)
  • scan-images: fix typo (a9c893a)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown

Vulnerability summary (fs) — latest: run #562

Critical High Medium Low Unknown
0 0 3 1 0

Change since last run: no change

Grype (risk-based)

⚠️ 1 at/above risk threshold 40

Critical High Medium Low Negligible Unknown
1 0 3 1 0 0

Top by risk

Vulnerability Package Sev Risk EPSS KEV
GHSA-xm6r-4466-mr74 orientdb-core 1.5.1 Critical 68.7 0.73
GHSA-j288-q9x7-2f5v commons-lang 2.6 Medium 1.2 0.02
GHSA-w33c-445m-f8w7 okio 1.6.0 Medium 0.6 0.01
GHSA-pvp8-3xj6-8c6x commons-configuration 1.6 Low 0.5 0.02
GHSA-8wh2-6qhj-h7j9 snappy 0.3 Medium 0.3 0.00

Links: workflow run · HTML report · SBOM · Grype report

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown

Vulnerability summary (docker.io/wetransform/hale-cli:latest) — latest: run #562

Critical High Medium Low Unknown
0 0 34 25 0

Change since last run: no change

Grype (risk-based)

⚠️ 2 at/above risk threshold 40

Critical High Medium Low Negligible Unknown
2 0 128 62 9 0

Top by risk

Vulnerability Package Sev Risk EPSS KEV
GHSA-xm6r-4466-mr74 orientdb-core 1.5.1 Critical 68.7 0.73
GHSA-xm6r-4466-mr74 orientdb-core 1.5.1 Critical 68.7 0.73
GHSA-j288-q9x7-2f5v commons-lang 2.6 Medium 1.2 0.02
GHSA-j288-q9x7-2f5v commons-lang 2.6 Medium 1.2 0.02
CVE-2023-31486 perl-base 5.34.0-3ubuntu1.7 Medium 0.9 0.02
CVE-2025-59375 libexpat1 2.4.7-1ubuntu0.7 Medium 0.6 0.01
GHSA-w33c-445m-f8w7 okio 1.6.0 Medium 0.6 0.01
GHSA-w33c-445m-f8w7 okio 1.6.0 Medium 0.6 0.01
CVE-2021-31879 wget 1.21.2-2ubuntu1.1 Medium 0.6 0.01
CVE-2021-45346 libsqlite3-0 3.37.2-2ubuntu0.6 Low 0.5 0.02

Links: workflow run · HTML report · SBOM · Grype report

@renovate renovate Bot force-pushed the renovate/wetransform-gha-workflows-4.x branch 2 times, most recently from 01fd734 to 9bc90b3 Compare July 9, 2026 14:23
@renovate renovate Bot changed the title chore(deps): update wetransform/gha-workflows action to v4.1.6 chore(deps): update wetransform/gha-workflows action to v4.2.0 Jul 9, 2026
@renovate renovate Bot force-pushed the renovate/wetransform-gha-workflows-4.x branch from 9bc90b3 to 429b842 Compare July 9, 2026 15:25
@renovate renovate Bot force-pushed the renovate/wetransform-gha-workflows-4.x branch from 429b842 to fd498e6 Compare July 9, 2026 23:39
@renovate renovate Bot changed the title chore(deps): update wetransform/gha-workflows action to v4.2.0 chore(deps): update wetransform/gha-workflows action to v4.2.1 Jul 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants