Skip to content

chore(deps): update voidzero-dev/setup-vp action to v1.21.2 - #3434

Merged
setchy merged 1 commit into
mainfrom
renovate/voidzero-dev-setup-vp-1.x
Oct 16, 2026
Merged

setchy merged 1 commit into
mainfrom
renovate/voidzero-dev-setup-vp-1.x

Conversation

@renovate

@renovate renovate Bot commented Oct 16, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
voidzero-dev/setup-vp action patch v1.21.1 → v1.21.2

Release Notes

voidzero-dev/setup-vp

v1.21.2

Compare Source

This patch release fixes command injection in GitLab inputs and Azure setupRef. GitLab and Azure now validate refs before downloading bootstrap scripts or runtimes.

The installer also prevents executable planting during sfw lookup. All integrations use Socket Firewall Free v1.15.4.

Registry authentication now requires an explicit registry-url input (registryUrl in Azure) or an existing auth entry in .npmrc. Jobs that previously relied on automatic token entries from registry URLs in repository files must update their configuration.

This release also isolates bundle rebuilds from the GitHub App token, expands native operating system test coverage, and updates dependencies.

What's Changed

Full Changelog: voidzero-dev/setup-vp@v1.21.1...v1.21.2


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependency Dependency updates label Oct 16, 2026
@renovate renovate Bot added the dependency Dependency updates label Oct 16, 2026
@renovate
renovate Bot force-pushed the renovate/voidzero-dev-setup-vp-1.x branch from f9249fb to 1eaedaf Compare October 16, 2026 17:20
@renovate
renovate Bot force-pushed the renovate/voidzero-dev-setup-vp-1.x branch from 1eaedaf to 07593af Compare October 16, 2026 17:23
@setchy
setchy merged commit e868b4e into main Oct 16, 2026
13 checks passed
@setchy
setchy deleted the renovate/voidzero-dev-setup-vp-1.x branch October 16, 2026 17:28
@github-actions github-actions Bot added this to the Release 7.10.0 milestone Oct 16, 2026
@sonarqubecloud

Copy link
Copy Markdown

@github-actions

Copy link
Copy Markdown
Contributor

🎉 This pull request is included in Gitify v7.10.0! 🎉

Downloads for macOS, Windows, and Linux are available on the release page.

Thanks for helping make Gitify better!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependency Dependency updates

Development

Successfully merging this pull request may close these issues.

1 participant