chore(deps): update oras-project/setup-oras action to v2 #143

Merged
volker.raschek merged 1 commits from renovate/oras-project-setup-oras-2.x into master 2026-04-15 08:18:24 +02:00
Collaborator

This PR contains the following updates:

Package Type Update Change
oras-project/setup-oras action major v1.2.4 -> v2.0.0

⚠️ Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

oras-project/setup-oras (oras-project/setup-oras)

v2.0.0

Compare Source

Highlights

  • Support ORAS CLI v1.3.1
  • Migrate action runtime from node20 to node24 (#​153)
  • Pin undici to >=6.24.1 to address 5 CVEs: GHSA-f269-vfmq-vjvj, GHSA-2mjp-6q6p-2qxm, GHSA-vrm6-8vpv-qv8q, GHSA-v9p9-hfj2-hcw8, GHSA-4992-7rv2-5pvq
  • Bump @actions/core from ^2.x to ^3.0.0 (ESM-only)
  • Bump @actions/tool-cache from ^3.x to ^4.0.0 (ESM-only)
  • Replace @vercel/ncc with esbuild as the build bundler

What's Changed

Full Changelog: https://github.com/oras-project/setup-oras/compare/v1.2.4...v2.0.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [oras-project/setup-oras](https://github.com/oras-project/setup-oras) | action | major | `v1.2.4` -> `v2.0.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>oras-project/setup-oras (oras-project/setup-oras)</summary> ### [`v2.0.0`](https://github.com/oras-project/setup-oras/releases/tag/v2.0.0) [Compare Source](https://github.com/oras-project/setup-oras/compare/v1.2.4...v2.0.0) #### Highlights - Support [ORAS CLI v1.3.1](https://github.com/oras-project/oras/releases/tag/v1.3.1) - Migrate action runtime from node20 to node24 ([#&#8203;153](https://github.com/oras-project/setup-oras/issues/153)) - Pin `undici` to `>=6.24.1` to address 5 CVEs: GHSA-f269-vfmq-vjvj, GHSA-2mjp-6q6p-2qxm, GHSA-vrm6-8vpv-qv8q, GHSA-v9p9-hfj2-hcw8, GHSA-4992-7rv2-5pvq - Bump `@actions/core` from `^2.x` to `^3.0.0` (ESM-only) - Bump `@actions/tool-cache` from `^3.x` to `^4.0.0` (ESM-only) - Replace `@vercel/ncc` with `esbuild` as the build bundler #### What's Changed - Add version 1.3.1 with checksums ([#&#8203;150](https://github.com/oras-project/setup-oras/issues/150)) - feat: migrate action runtime from node20 to node24 ([#&#8203;153](https://github.com/oras-project/setup-oras/issues/153)) - fix: pin undici to >=6.24.1 to address CVEs ([#&#8203;157](https://github.com/oras-project/setup-oras/issues/157)) - chore(deps): bump [@&#8203;actions/core](https://github.com/actions/core) to 3.x and [@&#8203;actions/tool-cache](https://github.com/actions/tool-cache) to 4.x ([#&#8203;159](https://github.com/oras-project/setup-oras/issues/159)) - chore(deps): Bump [@&#8203;actions/core](https://github.com/actions/core) from 1.11.1 to 2.0.1 ([#&#8203;130](https://github.com/oras-project/setup-oras/issues/130)) - chore(deps): Bump typescript from 5.9.2 to 6.0.2 ([#&#8203;151](https://github.com/oras-project/setup-oras/issues/151)) - chore(deps): Bump actions/checkout from 5 to 6 ([#&#8203;128](https://github.com/oras-project/setup-oras/issues/128)) - chore(deps): Bump actions/setup-node from 5 to 6 ([#&#8203;123](https://github.com/oras-project/setup-oras/issues/123)) - chore(deps): Bump [@&#8203;types/node](https://github.com/types/node) from 24.12.0 to 25.5.2 (multiple PRs) **Full Changelog**: <https://github.com/oras-project/setup-oras/compare/v1.2.4...v2.0.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNDAuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE0MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
CSRBot requested review from volker.raschek 2026-04-14 13:23:32 +02:00
CSRBot added 1 commit 2026-04-14 17:30:49 +02:00
chore(deps): update oras-project/setup-oras action to v2
All checks were successful
Helm / helm-lint (push) Successful in 5s
Helm / helm-unittest (push) Successful in 12s
Helm / helm-lint (pull_request) Successful in 5s
Helm / helm-unittest (pull_request) Successful in 20s
1c7aca4465
CSRBot force-pushed renovate/oras-project-setup-oras-2.x from 555ba90493 to 1c7aca4465 2026-04-14 17:30:49 +02:00 Compare
volker.raschek merged commit 1c7405d3ff into master 2026-04-15 08:18:24 +02:00
volker.raschek deleted branch renovate/oras-project-setup-oras-2.x 2026-04-15 08:18:25 +02:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: volker.raschek/prometheus-postgres-exporter#143