chore(deps): pin dependencies by renovate

[truecharts-admin]

This PR contains the following updates:

Package	Type	Update	Change
EndBug/label-sync	action	pinDigest	-> 5207415
actions/cache	action	digest	0c45773 -> 2cdf405
actions/checkout	action	digest	692973e -> eef6144
actions/checkout	action	digest	ac59398 -> f43a0e5
actions/checkout	action	minor	v3.3.0 -> v3.6.0
actions/checkout	action	pinDigest	-> ee0669b
actions/checkout	action	pinDigest	-> 50fbc62
actions/setup-python	action	digest	d27e3f3 -> 65d7f2d
actions/setup-python	action	pinDigest	-> 0f07f7f
actions/stale	action	pinDigest	-> f7176fd
actions/upload-artifact	action	pinDigest	-> 3446296
anchore/sbom-action	action	minor	v0.14.3 -> v0.17.2
azohra/shell-linter	action	minor	v0.3.0 -> v0.6.0
docker/build-push-action	action	digest	0565240 -> ca052bb
docker/build-push-action	action	pinDigest	-> ac9327e
docker/login-action	action	digest	343f7c4 -> 9780b0c
docker/login-action	action	pinDigest	-> dd4fa06
docker/metadata-action	action	digest	96383f4 -> 8e5442c
docker/setup-buildx-action	action	digest	f95db51 -> c47758b
docker/setup-buildx-action	action	pinDigest	-> f211e3e
docker/setup-qemu-action	action	digest	6882732 -> 49b3bc8
docker/setup-qemu-action	action	pinDigest	-> 27d0a4f
ghcr.io/truenas/middleware	container	pinDigest	-> f6d1c7a
ixsystems/catalog_validation	container	pinDigest	-> ec05445
pascalgn/size-label-action	action	minor	v0.4.3 -> v0.5.4
peaceiris/actions-label-commenter	action	pinDigest	-> f0dbbef
peter-evans/create-pull-request	action	pinDigest	-> 18f7dc0
pre-commit/action	action	patch	v3.0.0 -> v3.0.1
tccr.io/truecharts/catalog_validation	container	pinDigest	-> 35d6b97

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/checkout (actions/checkout)

v3.6.0

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

v3.5.3

Compare Source

• Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in
• Fix typos found by codespell
• Add support for sparse checkouts

v3.5.2

Compare Source

• Fix api endpoint for GHES

v3.5.1

Compare Source

• Fix slow checkout on Windows

v3.5.0

Compare Source

• Add new public key for known_hosts

v3.4.0

Compare Source

• Upgrade codeql actions to v2
• Upgrade dependencies
• Upgrade @​actions/io

anchore/sbom-action (anchore/sbom-action)

v0.17.2

Compare Source

Changes in v0.17.2

• Update Syft to v1.11.1 (#​485) [anchore-actions-token-generator]

v0.17.1

Compare Source

Changes in v0.17.1

• chore(deps): update Syft to v1.11.0 (#​483) [anchore-actions-token-generator]

v0.17.0

Compare Source

Changes in v0.17.0

• chore(deps): update Syft to v1.9.0 (#​479) [anchore-actions-token-generator]

v0.16.1

Compare Source

Changes in v0.16.1

• fix: workaround windows install issue (#​477) [willmurphyscode]
• fix: allow users to properly use the file input over the default path value (#​471) [komish]
• chore(deps): update Syft to v1.5.0 (#​470) [anchore-actions-token-generator]
• docs: notes for matrix and required permissions (#​469) [kzantow]
• chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#​466) [dependabot]

v0.16.0: v0.16

Compare Source

Changes in v0.16.0

• Update Syft to v1.4.1 (#​465)
• Update GitHub artifact client (#​463) [kzantow]

NOTE: if you are using this action within a matrix build and see failures attempting to upload artifacts with duplicate names, you will need to set the artifact-name to be unique based on the matrix properties (an example here). This is due to a change to use a newer GitHub API which no longer allows artifacts with duplicate names.

v0.15.11

Compare Source

Changes in v0.15.11

• chore(deps): update Syft to v1.3.0 (#​456) [anchore-actions-token-generator]
• chore: remove outdated snapshot workflow (#​457) [spiffcs]
• fix: don't pass in a separate env. This makes it impossible to pass env vars via the action context to syft. (#​455) [iNoahNothing]

v0.15.10

Compare Source

Changes in v0.15.10

• Update Syft to v1.1.0 (#​454)
• Bump Node to v20 on download-syft/publish-sbom actions (#​448) [ViacheslavKudinov]

v0.15.9

Compare Source

Changes in v0.15.9

• reduce syft debug level (#​446) [kzantow]
• update Syft to v0.105.0 (#​442) [anchore-actions-token-generator]

v0.15.8

Compare Source

Changes in v0.15.8

• Update Syft to v0.103.1 (#​441) [anchore-actions-token-generator]

v0.15.7

Compare Source

Changes in v0.15.7

• chore: migrate action to use node v20.11.0 (Iron) FROM node v16.x.x (#​440) [spiffcs]

v0.15.6

Compare Source

Changes in v0.15.6

• chore(deps): update Syft to v0.102.0 (#​438) [anchore-actions-token-generator]

v0.15.5

Compare Source

Changes in v0.15.5

• chore(deps): update Syft to v0.101.1 (#​437) [anchore-actions-token-generator]

v0.15.4

Compare Source

Changes in v0.15.4

• chore(deps): update Syft to v0.101.0 (#​436) [anchore-actions-token-generator]

v0.15.3

Compare Source

Changes in v0.15.3

• chore(deps): update Syft to v0.100.0 (#​435) [anchore-actions-token-generator]

v0.15.2

Compare Source

Changes in v0.15.2

• chore(deps): update Syft to v0.99.0 (#​432) [anchore-actions-token-generator]
• chore: fix github-script invocation in update-snapshots workflow (#​433) [willmurphyscode]

v0.15.1

Compare Source

Changes in v0.15.1

• chore(deps): update Syft to v0.98.0 (#​431) [anchore-actions-token-generator]
• Add config input (#​430) [eyakubovich]
• chore: pin and upgrade gh actions (#​429) [willmurphyscode]

v0.15.0

Compare Source

Changes in v0.14.4

Breaking Changes

• Previously, running on Windows required WSL. Now, running on Windows expects to be run on native windows (#​426) [willmurphyscode].

Other Changes

• pin and upgrade actions/checkout (#​428) [willmurphyscode]
• chore(deps): update Syft to v0.97.1 (#​427) [anchore-actions-token-generator]
• add oss community board auto-add workflow (#​421) [wagoodman]

azohra/shell-linter (azohra/shell-linter)

v0.6.0: Shell Linter v0.6.0

Compare Source

• Added support for excluding files and folders from Shellcheck scan
• Upgraded the Shellcheck version used in the Shell-linter action to v0.7.2 to support the updated error/warning codes
• Improved performance by adding -x to shellcheck to follow sourced files that are not specified as input

v0.5.0: Shell Linter v0.5.0

Compare Source

• Improved performance by only scanning the Shellcheck-supported scripts (sh/bash/dsh/ksh)
• Added templates for bug reports, feature requests and pull requests
• Improved code coverage by adding more unit tests and integration tests

v0.4.0: Shell Linter v0.4.0

Compare Source

• Added support for ShellCheck severity mode
  • The default behavior is set to style which considers errors with all severity levels
• Improved tagging
  • The latest stable version can be fetched by using @latest

pascalgn/size-label-action (pascalgn/size-label-action)

v0.5.4: Release 0.5.4

Compare Source

What's Changed

• Add HTTPS proxy support by @​donovanmuller in https://github.com/pascalgn/size-label-action/pull/28

New Contributors

• @​donovanmuller made their first contribution in https://github.com/pascalgn/size-label-action/pull/28

Full Changelog: pascalgn/size-label-action@v0.5.3...v0.5.4

v0.5.3: Release 0.5.3

Compare Source

What's Changed

• fix: Use list pull request files api by @​levsa in https://github.com/pascalgn/size-label-action/pull/54

New Contributors

• @​levsa made their first contribution in https://github.com/pascalgn/size-label-action/pull/54

Full Changelog: pascalgn/size-label-action@v0.5.2...v0.5.3

v0.5.2: Release 0.5.2

Compare Source

What's Changed

• feat: use GITHUB_API_URL as baseUrl for octokit by @​fty4 in https://github.com/pascalgn/size-label-action/pull/43
• feat: add sizeLabel GITHUB_OUTPUT for further reuse in other jobs by @​mat3e in https://github.com/pascalgn/size-label-action/pull/44

New Contributors

• @​fty4 made their first contribution in https://github.com/pascalgn/size-label-action/pull/43
• @​mat3e made their first contribution in https://github.com/pascalgn/size-label-action/pull/44

Full Changelog: pascalgn/size-label-action@v0.5.1...v0.5.2

v0.5.1: Release 0.5.1

Compare Source

Switched to Node 20

v0.5.0: Release 0.5.0

Compare Source

pre-commit/action (pre-commit/action)

v3.0.1: pre-commit/[email protected]

Compare Source

Misc

• Update actions/cache to v4
  • #​190 PR by @​SukiCZ.
  • #​189 issue by @​bakerkj.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[truecharts-admin]

This PR is locked to prevent necro-posting on closed PRs. Please create a issue or contact staff on discord if you want to further discuss this