[renovate]

This PR contains the following updates:

Package	Type	Update	Change
chainguard-dev/actions	action	minor	v1.6.41 → v1.8.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

chainguard-dev/actions

v1.8.1

Compare Source

What's Changed

• build(deps): bump zizmorcore/zizmor-action from 0.6.4 to 0.8.0 by @​cpanato in #​1134
• build(otel-export): migrate to OpenTelemetry JS 3.0 / 0.300 by @​cpanato in #​1135
• build(deps-dev): bump rollup from 4.65.1 to 4.67.3 in /otel-export by @​dependabot[bot] in #​1137
• build(deps-dev): bump eslint from 10.13.0 to 10.14.0 in /otel-export by @​dependabot[bot] in #​1138
• build(deps-dev): bump rollup from 4.67.3 to 4.67.4 in /otel-export by @​dependabot[bot] in #​1139
• build(deps): bump zizmorcore/zizmor-action from 0.8.0 to 0.8.1 in the actions group across 1 directory by @​dependabot[bot] in #​1140
• build(deps): bump chainguard-dev/actions/setup-kind from 1.7.2 to 1.8.0 by @​dependabot[bot] in #​1141
• build(deps): bump chainguard-dev/actions/git-tag from 1.7.2 to 1.8.0 by @​dependabot[bot] in #​1143
• build(deps): bump chainguard-dev/actions/setup-gitsign from 1.7.2 to 1.8.0 in /git-tag by @​dependabot[bot] in #​1144
• build(deps): bump chainguard-dev/actions/setup-gitsign from 1.7.2 to 1.8.0 in /release-notes by @​dependabot[bot] in #​1145
• setup-kind: mark local registry insecure for Docker 29+ by @​cpanato in #​1146
• build(deps): bump chainguard-dev/actions/kind-diag from 1.7.2 to 1.8.0 by @​dependabot[bot] in #​1142
• build(deps-dev): bump vitest from 5.0.5 to 5.1.0 in /otel-export by @​dependabot[bot] in #​1147
• build(deps): bump chainguard-dev/actions/nodiff from 1.7.2 to 1.8.0 in /gofmt by @​dependabot[bot] in #​1148
• build(deps): bump chainguard-dev/actions/nodiff from 1.7.2 to 1.8.0 in /goimports by @​dependabot[bot] in #​1149
• build(deps): bump chainguard-dev/actions/melange-build-pkg from 1.7.2 to 1.8.0 in /inky-build-pkg by @​dependabot[bot] in #​1150
• build(deps): bump chainguard-dev/actions/setup-melange from 1.7.2 to 1.8.0 in /melange-build by @​dependabot[bot] in #​1152
• build(deps): bump chainguard-dev/actions/melange-build-pkg from 1.7.2 to 1.8.0 in /wolfi-build-pkg by @​dependabot[bot] in #​1153
• build(deps): bump chainguard-dev/actions/melange-keygen from 1.7.2 to 1.8.0 in /melange-build by @​dependabot[bot] in #​1151
• build(deps): bump chainguard-dev/actions/melange-build-pkg from 1.7.2 to 1.8.0 in /melange-build by @​dependabot[bot] in #​1154

Full Changelog: chainguard-dev/actions@v1.8.0...v1.8.1

v1.8.0

Compare Source

What's Changed

• build(deps-dev): bump @​types/node from 26.6.5 to 26.6.6 in /otel-export by @​dependabot[bot] in #​1131
• build(deps): bump reviewdog/action-actionlint from 1.80.8 to 1.81.1 by @​dependabot[bot] in #​1132
• docs: update the chainguard-install docs link for the move to www.chainguard.dev/docs by @​matthewhelmke in #​1120
• fix(setup-melange): support Ubuntu 26.04 runners (ZD12592) by @​chainkuti in #​1130

New Contributors

• @​matthewhelmke made their first contribution in #​1120
• @​chainkuti made their first contribution in #​1130

Full Changelog: chainguard-dev/actions@v1.7.3...v1.8.0

v1.7.3

Compare Source

What's Changed

• build(deps): bump chainguard-dev/actions/git-tag from 1.6.42 to 1.7.1 by @​dependabot[bot] in #​1112
• build(deps): bump chainguard-dev/actions/setup-kind from 1.6.42 to 1.7.1 by @​dependabot[bot] in #​1111
• build(deps): bump reviewdog/action-actionlint from 1.80.4 to 1.80.6 in the actions group across 1 directory by @​dependabot[bot] in #​1109
• build(deps): bump step-security/harden-runner from 2.21.1 to 2.22.2 by @​dependabot[bot] in #​1105
• build(deps-dev): bump rollup from 4.64.0 to 4.65.0 in /otel-export by @​dependabot[bot] in #​1108
• build(deps): bump chainguard-dev/actions/setup-gitsign from 1.6.41 to 1.7.2 in /git-tag by @​dependabot[bot] in #​1116
• build(deps): bump chainguard-dev/actions/nodiff from 1.6.41 to 1.7.2 in /goimports by @​dependabot[bot] in #​1119
• build(deps-dev): bump eslint from 10.12.0 to 10.13.0 in /otel-export by @​dependabot[bot] in #​1102
• build(deps): bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​1114
• build(deps): bump chainguard-dev/actions/kind-diag from 1.6.42 to 1.7.2 by @​dependabot[bot] in #​1115
• build(deps-dev): bump vitest from 5.0.3 to 5.0.5 in /otel-export by @​dependabot[bot] in #​1100
• build(deps): bump chainguard-dev/actions/nodiff from 1.6.41 to 1.7.2 in /gofmt by @​dependabot[bot] in #​1117
• build(deps): bump chainguard-dev/actions/setup-gitsign from 1.6.41 to 1.7.2 in /release-notes by @​dependabot[bot] in #​1118
• build(deps-dev): bump @​types/node from 26.6.4 to 26.6.5 in /otel-export by @​dependabot[bot] in #​1101
• build(deps): bump chainguard-dev/actions/melange-build-pkg from 1.6.41 to 1.7.2 in /wolfi-build-pkg by @​dependabot[bot] in #​1129
• build(deps): bump chainguard-dev/actions/melange-build-pkg from 1.6.41 to 1.7.2 in /melange-build by @​dependabot[bot] in #​1128
• build(deps): bump chainguard-dev/actions/setup-melange from 1.6.41 to 1.7.2 in /melange-build by @​dependabot[bot] in #​1126
• build(deps): bump chainguard-dev/actions/melange-keygen from 1.6.41 to 1.7.2 in /melange-build by @​dependabot[bot] in #​1127
• build(deps): bump chainguard-dev/actions/melange-build-pkg from 1.6.41 to 1.7.2 in /inky-build-pkg by @​dependabot[bot] in #​1125
• build(deps): bump the actions group across 1 directory with 2 updates by @​dependabot[bot] in #​1124
• build(deps-dev): bump rollup from 4.65.0 to 4.65.1 in /otel-export by @​dependabot[bot] in #​1123

Full Changelog: chainguard-dev/actions@v1.7.2...v1.7.3

v1.7.2

Compare Source

What's Changed

• feat(setup-kind): default to k8s 1.36.x by @​cpanato in #​1097
• git-tag: fix garbled tagger and stop rewriting global git config by @​cpanato in #​1095
• git-tag: make prerelease bumps sort after the release they follow by @​cpanato in #​1096
• feat(setup-monitoring): bump kube-prometheus-stack to 92.11.0 by @​cpanato in #​1098
• feat(setup-spdx): default to SPDX tools-java 2.0.7 by @​cpanato in #​1099

Full Changelog: chainguard-dev/actions@v1.7.1...v1.7.2

v1.7.1

Compare Source

What's Changed

• Fix failing Dependabot PRs: apt-faster DEP-11 test and otel-export OTel bump by @​cpanato in #​1092
• build(deps-dev): bump vite from 8.3.2 to 8.3.5 in /otel-export in the npm_and_yarn group across 1 directory by @​dependabot[bot] in #​1089
• fix(otel-export): isolate job telemetry and capture revisions by @​joshrwolf in #​1093
• build(deps): bump step-security/harden-runner from 2.21.1 to 2.22.2 by @​dependabot[bot] in #​1079
• chore: bump pinned tool default versions by @​cpanato in #​1094

Full Changelog: chainguard-dev/actions@v1.7.0...v1.7.1

v1.7.0

Compare Source

What's Changed

• build(deps): bump the actions group across 1 directory with 4 updates by @​dependabot[bot] in #​1090
• feat(setup-kind): support k8s 1.37.x, drop 1.33.x, bump kind to v0.33.0 by @​cpanato in #​1091

Full Changelog: chainguard-dev/actions@v1.6.42...v1.7.0

v1.6.42

Compare Source

What's Changed

• build(deps): bump actions/setup-node from 7.0.0 to 7.1.0 in /githubapp-token by @​dependabot[bot] in #​1082
• build(deps): bump actions/setup-node from 7.0.0 to 7.1.0 by @​dependabot[bot] in #​1078
• build(deps): bump the actions group across 4 directories with 1 update by @​dependabot[bot] in #​1077
• build(deps): bump reviewdog/action-actionlint from 1.78.1 to 1.80.0 by @​dependabot[bot] in #​1080
• build(deps): bump the actions group across 8 directories with 8 updates by @​dependabot[bot] in #​1087

Full Changelog: chainguard-dev/actions@v1.6.41...v1.6.42

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[rm3l]

/hold — code freeze active for 2.1.0.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud