Skip to content

Update all non-major dependencies (minor) #870

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
maheichyk merged 3 commits into from
Jan 20, 2026
Merged

Update all non-major dependencies (minor) #870

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
f4c991f
Update all non-major dependencies
renovate[bot] Jan 20, 2026
477bdcd
Revert charts values.yaml changes
maheichyk Jan 20, 2026
8f816e2
Add changeset
maheichyk Jan 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .changeset/wide-weeks-build.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
---
'@nordeck/matrix-meetings-widget': patch
---

Update minor dependencies. Update `widget-server` to 1.2.1 for CVEs: `CVE-2024-56171`, `CVE-2025-49794`, `CVE-2025-49796`.
10 changes: 5 additions & 5 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -104,7 +104,7 @@ jobs:
if: ${{ success() && steps.dockerBuild.outputs.digest }}
env:
IMAGE_REF: ${{ env.DOCKER_IMAGE }}@${{ steps.dockerBuild.outputs.digest }}
uses: aquasecurity/trivy-action@0.31.0
uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
with:
scan-type: 'image'
scanners: 'license'
Expand Down Expand Up @@ -217,7 +217,7 @@ jobs:
if: ${{ success() && steps.dockerBuild.outputs.digest }}
env:
IMAGE_REF: ${{ env.DOCKER_IMAGE }}@${{ steps.dockerBuild.outputs.digest }}
uses: aquasecurity/trivy-action@0.31.0
uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
with:
scan-type: 'image'
scanners: 'license'
Expand Down Expand Up @@ -248,10 +248,10 @@ jobs:
uses: azure/setup-helm@v4
- uses: actions/setup-python@v5
with:
python-version: '3.12'
python-version: '3.14'
check-latest: true
- name: Set up chart-testing
uses: helm/chart-testing-action@v2.6.1
uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0
- name: Check if Helm charts updated (run chart-testing list-changed)
id: list-changed
run: |
Expand All @@ -265,7 +265,7 @@ jobs:
run: ct lint --validate-maintainers=false --target-branch ${{ github.event.repository.default_branch }}
- name: Create kind cluster
if: steps.list-changed.outputs.changed == 'true'
uses: helm/kind-action@v1.10.0
uses: helm/kind-action@92086f6be054225fa813e0a4b13787fc9088faab # v1.13.0
- name: Prepare k8s cluster
if: steps.list-changed.outputs.changed == 'true'
run: |
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/publish-release-bot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ jobs:
password: ${{ secrets.GITHUB_TOKEN }}

- name: Install Cosign
uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # @v3.7.0
uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
Expand All @@ -71,7 +71,7 @@ jobs:
- name: Run Trivy to get an SBOM report of the container
env:
IMAGE_REF: ${{ env.DOCKER_IMAGE }}@${{ steps.build_and_push.outputs.digest }}
uses: aquasecurity/trivy-action@0.31.0
uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
with:
scan-type: 'image'
scanners: 'license'
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/publish-release-widget.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,7 +53,7 @@ jobs:
password: ${{ secrets.GITHUB_TOKEN }}

- name: Install Cosign
uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # @v3.7.0
uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
Expand All @@ -71,7 +71,7 @@ jobs:
- name: Run Trivy to get an SBOM report of the container
env:
IMAGE_REF: ${{ env.DOCKER_IMAGE }}@${{ steps.build_and_push.outputs.digest }}
uses: aquasecurity/trivy-action@0.31.0
uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
with:
scan-type: 'image'
scanners: 'license'
Expand Down
2 changes: 1 addition & 1 deletion matrix-meetings-widget/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ FROM aquasec/trivy:latest AS scanner
COPY --from=root yarn.lock /tmp
RUN trivy fs --format spdx-json --scanners "license" /tmp/yarn.lock > /tmp/sbom.spdx.json

FROM ghcr.io/nordeck/matrix-widget-toolkit/widget-server:1.1.1@sha256:e20146b7f11dfb663874fed7a289e412ce6e8e623c6eb2261e35a220029ba042
FROM ghcr.io/nordeck/matrix-widget-toolkit/widget-server:1.2.1@sha256:4484168c740ecce8f6639d9d2c37b89077eae1a86555d59de4cfeef8a0a34b12

ADD --chown=nginx:nginx dist /usr/share/nginx/html/

Expand Down
Loading