volker.raschek/dcmerge
1
0
Fork 0
Code Issues Pull Requests 3 Actions Packages Projects Releases 9 Wiki Activity

chore(deps): update oras-project/setup-oras action to v2 #155

Open
CSRBot wants to merge 1 commits from renovate/oras-project-setup-oras-2.x into master
pull from: renovate/oras-project-setup-oras-2.x
merge into: volker.raschek:master
Conversation 0 Commits 1 Files Changed 1 +1 -1
CSRBot commented 2026-04-14 12:55:55 +02:00
Collaborator
Copy Link

This PR contains the following updates:

Package Type Update Change
oras-project/setup-oras action major v1.2.4 → v2.0.0

Release Notes

oras-project/setup-oras (oras-project/setup-oras)

v2.0.0

Compare Source

Highlights

  • Support ORAS CLI v1.3.1
  • Migrate action runtime from node20 to node24 (#​153)
  • Pin undici to >=6.24.1 to address 5 CVEs: GHSA-f269-vfmq-vjvj, GHSA-2mjp-6q6p-2qxm, GHSA-vrm6-8vpv-qv8q, GHSA-v9p9-hfj2-hcw8, GHSA-4992-7rv2-5pvq
  • Bump @actions/core from ^2.x to ^3.0.0 (ESM-only)
  • Bump @actions/tool-cache from ^3.x to ^4.0.0 (ESM-only)
  • Replace @vercel/ncc with esbuild as the build bundler

What's Changed

Full Changelog: https://github.com/oras-project/setup-oras/compare/v1.2.4...v2.0.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [oras-project/setup-oras](https://github.com/oras-project/setup-oras) | action | major | `v1.2.4` → `v2.0.0` | --- ### Release Notes <details> <summary>oras-project/setup-oras (oras-project/setup-oras)</summary> ### [`v2.0.0`](https://github.com/oras-project/setup-oras/releases/tag/v2.0.0) [Compare Source](https://github.com/oras-project/setup-oras/compare/v1.2.4...v2.0.0) #### Highlights - Support [ORAS CLI v1.3.1](https://github.com/oras-project/oras/releases/tag/v1.3.1) - Migrate action runtime from node20 to node24 ([#&#8203;153](https://github.com/oras-project/setup-oras/issues/153)) - Pin `undici` to `>=6.24.1` to address 5 CVEs: GHSA-f269-vfmq-vjvj, GHSA-2mjp-6q6p-2qxm, GHSA-vrm6-8vpv-qv8q, GHSA-v9p9-hfj2-hcw8, GHSA-4992-7rv2-5pvq - Bump `@actions/core` from `^2.x` to `^3.0.0` (ESM-only) - Bump `@actions/tool-cache` from `^3.x` to `^4.0.0` (ESM-only) - Replace `@vercel/ncc` with `esbuild` as the build bundler #### What's Changed - Add version 1.3.1 with checksums ([#&#8203;150](https://github.com/oras-project/setup-oras/issues/150)) - feat: migrate action runtime from node20 to node24 ([#&#8203;153](https://github.com/oras-project/setup-oras/issues/153)) - fix: pin undici to >=6.24.1 to address CVEs ([#&#8203;157](https://github.com/oras-project/setup-oras/issues/157)) - chore(deps): bump [@&#8203;actions/core](https://github.com/actions/core) to 3.x and [@&#8203;actions/tool-cache](https://github.com/actions/tool-cache) to 4.x ([#&#8203;159](https://github.com/oras-project/setup-oras/issues/159)) - chore(deps): Bump [@&#8203;actions/core](https://github.com/actions/core) from 1.11.1 to 2.0.1 ([#&#8203;130](https://github.com/oras-project/setup-oras/issues/130)) - chore(deps): Bump typescript from 5.9.2 to 6.0.2 ([#&#8203;151](https://github.com/oras-project/setup-oras/issues/151)) - chore(deps): Bump actions/checkout from 5 to 6 ([#&#8203;128](https://github.com/oras-project/setup-oras/issues/128)) - chore(deps): Bump actions/setup-node from 5 to 6 ([#&#8203;123](https://github.com/oras-project/setup-oras/issues/123)) - chore(deps): Bump [@&#8203;types/node](https://github.com/types/node) from 24.12.0 to 25.5.2 (multiple PRs) **Full Changelog**: <https://github.com/oras-project/setup-oras/compare/v1.2.4...v2.0.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNDAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEzNi4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
CSRBot added 1 commit 2026-04-21 17:04:35 +02:00
chore(deps): update oras-project/setup-oras action to v2
All checks were successful
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 13s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 9s
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 14s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 12s
Details
Lint Markdown files / Run markdown linter (pull_request) Successful in 6s
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 32s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 21s
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 31s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 23s
Details
a9a4962766
CSRBot force-pushed renovate/oras-project-setup-oras-2.x from 627b810581 to a9a4962766 2026-04-21 17:04:35 +02:00 Compare
All checks were successful
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 13s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 9s
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 14s
Required
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 12s
Required
Details
Lint Markdown files / Run markdown linter (pull_request) Successful in 6s
Required
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 32s
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 21s
Details
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 31s
Required
Details
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 23s
Required
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/oras-project-setup-oras-2.x:renovate/oras-project-setup-oras-2.x
git checkout renovate/oras-project-setup-oras-2.x
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
CSRBot volker.raschek
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: volker.raschek/dcmerge#155
Delete Branch "renovate/oras-project-setup-oras-2.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?