fix(actions): Update dependency webgrip/workflows ( v1.6.0 ➔ v1.11.3 ) #21

Merged

renovate merged 1 commit from renovate/webgrip-workflows-1.x into development 2026-09-19 14:46:12 +00:00

Conversation 0 Commits 1 Files changed 1 +2 -2

renovate commented 2026-09-19 12:46:44 +00:00

Member

Copy link

This PR contains the following updates:

Package	Type	Update	Change	Released	Age (d)
webgrip/workflows	action	minor	v1.6.0 → v1.11.3	2026-08-26T10:18:54.000Z	24d

---

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Merge Confidence badges are included where supported — low or neutral confidence warrants a manual impact check before merge.

Released is the upstream publish time. — means this datasource reports no release timestamp — normal for ghcr.io, quay.io and private/proxy registries — so minimumReleaseAge cannot hold the update back and it is eligible as soon as checks pass. A real date means the soak is enforced: add this update type's minimumReleaseAge to Released to get the eligibility moment.

---

Release Notes

webgrip/workflows (webgrip/workflows)

v1.11.3

Compare Source

1.11.3 (2026-08-26)

• Merge pull request 'fix(forgejo-distribute): mirror cosign's accessories, not just the image' (#​56) (6e42c28), closes #​56
• fix(forgejo-distribute): mirror cosign's accessories, not just the image (79b1204)

v1.11.2

Compare Source

1.11.2 (2026-08-26)

• Merge pull request 'fix(cosign): prefer preinstalled cosign and syft over downloading them' (#​55) fr (7bdad7e), closes #​55
• fix(cosign): prefer preinstalled cosign and syft over downloading them (1102722)

v1.11.1

Compare Source

1.11.1 (2026-08-26)

• Merge pull request 'fix(github): reference cosign-installer by absolute URL' (#​54) from fix/cosign-i (d7c2a6a), closes #​54
• fix(github): reference cosign-installer by absolute URL (d546935)

v1.11.0

Compare Source

1.11.0 (2026-08-26)

• Merge pull request 'feat(oci): index annotations and cosign accessory mirroring' (#​53) from feat/oci (7ddac0f), closes #​53
• feat(oci): index annotations and cosign accessory mirroring (c1dc50d)

v1.10.0

Compare Source

1.10.0 (2026-08-25)

• Merge pull request 'feat(github): publish the Helm chart to GHCR; skip immutable re-pushes' (#​52) fr (54de5ed), closes #​52
• feat(github): publish the OCI Helm chart to GHCR (ac958e9)
• fix(helm): skip the push when the chart version is already published (0ccd348)

v1.9.2

Compare Source

1.9.2 (2026-08-25)

• Merge pull request 'fix(github): create the release over the REST API; drop GitHub-only annotations' (173b598), closes #​51
• fix(github): create the release over the REST API, not the gh CLI (0f2c5a5)
• chore(forgejo): drop GitHub-only annotation commands from the .forgejo tree (a5c5b5f)

v1.9.1

Compare Source

1.9.1 (2026-08-25)

• Merge pull request 'fix(github): fail fast on a dead GH_TOKEN instead of hanging the mirror' (#​50) f (14b5825), closes #​50
• fix(github): fail fast on a dead GH_TOKEN instead of hanging the mirror (2e2d49e)

v1.9.0

Compare Source

1.9.0 (2026-08-24)

• Merge pull request 'feat(github): github-distribute reusable — repo mirror, GitHub Release, GHCR dig (a1b8b76), closes #​48
• feat(github): github-distribute reusable — repo mirror, GitHub Release, GHCR digest-copy (773726f)

v1.8.0

Compare Source

1.8.0 (2026-08-12)

• feat(docs): publish to own docs-workflows bucket (estate #​2) (1d40681), closes #​2

v1.7.0

Compare Source

1.7.0 (2026-08-12)

• feat(docs): flip strict link validation on — links verified clean (estate item #​17) (b3705fc), closes #​17
• chore(docs): bump reusables — backup-dir trash-net + pagefind estate-search index (estate items 1+4) (f2e235e)

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "after 3am and before 7am every weekday,every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | Released | Age (d) | |---|---|---|---|---|---| | [webgrip/workflows](https://forgejo.webgrip.dev/webgrip/workflows) | action | minor | `v1.6.0` → `v1.11.3` | 2026-08-26T10:18:54.000Z | 24d | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. Merge Confidence badges are included where supported — low or neutral confidence warrants a manual impact check before merge. `Released` is the upstream publish time. `—` means this datasource reports no release timestamp — normal for ghcr.io, quay.io and private/proxy registries — so `minimumReleaseAge` cannot hold the update back and it is eligible as soon as checks pass. A real date means the soak is enforced: add this update type's `minimumReleaseAge` to `Released` to get the eligibility moment. --- ### Release Notes <details> <summary>webgrip/workflows (webgrip/workflows)</summary> ### [`v1.11.3`](https://forgejo.webgrip.dev/webgrip/workflows/releases/tag/v1.11.3) [Compare Source](https://forgejo.webgrip.dev/webgrip/workflows/compare/v1.11.2...v1.11.3) ##### <small>1.11.3 (2026-08-26)</small> - Merge pull request 'fix(forgejo-distribute): mirror cosign's accessories, not just the image' ([#&#8203;56](https://github.com/webgrip/workflows/issues/56)) ([6e42c28](https://forgejo.webgrip.dev/webgrip/workflows/commit/6e42c28)), closes [#&#8203;56](https://forgejo.webgrip.dev/webgrip/workflows/issues/56) - fix(forgejo-distribute): mirror cosign's accessories, not just the image ([79b1204](https://forgejo.webgrip.dev/webgrip/workflows/commit/79b1204)) ### [`v1.11.2`](https://forgejo.webgrip.dev/webgrip/workflows/releases/tag/v1.11.2) [Compare Source](https://forgejo.webgrip.dev/webgrip/workflows/compare/v1.11.1...v1.11.2) ##### <small>1.11.2 (2026-08-26)</small> - Merge pull request 'fix(cosign): prefer preinstalled cosign and syft over downloading them' ([#&#8203;55](https://github.com/webgrip/workflows/issues/55)) fr ([7bdad7e](https://forgejo.webgrip.dev/webgrip/workflows/commit/7bdad7e)), closes [#&#8203;55](https://forgejo.webgrip.dev/webgrip/workflows/issues/55) - fix(cosign): prefer preinstalled cosign and syft over downloading them ([1102722](https://forgejo.webgrip.dev/webgrip/workflows/commit/1102722)) ### [`v1.11.1`](https://forgejo.webgrip.dev/webgrip/workflows/releases/tag/v1.11.1) [Compare Source](https://forgejo.webgrip.dev/webgrip/workflows/compare/v1.11.0...v1.11.1) ##### <small>1.11.1 (2026-08-26)</small> - Merge pull request 'fix(github): reference cosign-installer by absolute URL' ([#&#8203;54](https://github.com/webgrip/workflows/issues/54)) from fix/cosign-i ([d7c2a6a](https://forgejo.webgrip.dev/webgrip/workflows/commit/d7c2a6a)), closes [#&#8203;54](https://forgejo.webgrip.dev/webgrip/workflows/issues/54) - fix(github): reference cosign-installer by absolute URL ([d546935](https://forgejo.webgrip.dev/webgrip/workflows/commit/d546935)) ### [`v1.11.0`](https://forgejo.webgrip.dev/webgrip/workflows/releases/tag/v1.11.0) [Compare Source](https://forgejo.webgrip.dev/webgrip/workflows/compare/v1.10.0...v1.11.0) ##### 1.11.0 (2026-08-26) - Merge pull request 'feat(oci): index annotations and cosign accessory mirroring' ([#&#8203;53](https://github.com/webgrip/workflows/issues/53)) from feat/oci ([7ddac0f](https://forgejo.webgrip.dev/webgrip/workflows/commit/7ddac0f)), closes [#&#8203;53](https://forgejo.webgrip.dev/webgrip/workflows/issues/53) - feat(oci): index annotations and cosign accessory mirroring ([c1dc50d](https://forgejo.webgrip.dev/webgrip/workflows/commit/c1dc50d)) ### [`v1.10.0`](https://forgejo.webgrip.dev/webgrip/workflows/releases/tag/v1.10.0) [Compare Source](https://forgejo.webgrip.dev/webgrip/workflows/compare/v1.9.2...v1.10.0) ##### 1.10.0 (2026-08-25) - Merge pull request 'feat(github): publish the Helm chart to GHCR; skip immutable re-pushes' ([#&#8203;52](https://github.com/webgrip/workflows/issues/52)) fr ([54de5ed](https://forgejo.webgrip.dev/webgrip/workflows/commit/54de5ed)), closes [#&#8203;52](https://forgejo.webgrip.dev/webgrip/workflows/issues/52) - feat(github): publish the OCI Helm chart to GHCR ([ac958e9](https://forgejo.webgrip.dev/webgrip/workflows/commit/ac958e9)) - fix(helm): skip the push when the chart version is already published ([0ccd348](https://forgejo.webgrip.dev/webgrip/workflows/commit/0ccd348)) ### [`v1.9.2`](https://forgejo.webgrip.dev/webgrip/workflows/releases/tag/v1.9.2) [Compare Source](https://forgejo.webgrip.dev/webgrip/workflows/compare/v1.9.1...v1.9.2) ##### <small>1.9.2 (2026-08-25)</small> - Merge pull request 'fix(github): create the release over the REST API; drop GitHub-only annotations' ([173b598](https://forgejo.webgrip.dev/webgrip/workflows/commit/173b598)), closes [#&#8203;51](https://forgejo.webgrip.dev/webgrip/workflows/issues/51) - fix(github): create the release over the REST API, not the gh CLI ([0f2c5a5](https://forgejo.webgrip.dev/webgrip/workflows/commit/0f2c5a5)) - chore(forgejo): drop GitHub-only annotation commands from the .forgejo tree ([a5c5b5f](https://forgejo.webgrip.dev/webgrip/workflows/commit/a5c5b5f)) ### [`v1.9.1`](https://forgejo.webgrip.dev/webgrip/workflows/releases/tag/v1.9.1) [Compare Source](https://forgejo.webgrip.dev/webgrip/workflows/compare/v1.9.0...v1.9.1) ##### <small>1.9.1 (2026-08-25)</small> - Merge pull request 'fix(github): fail fast on a dead GH\_TOKEN instead of hanging the mirror' ([#&#8203;50](https://github.com/webgrip/workflows/issues/50)) f ([14b5825](https://forgejo.webgrip.dev/webgrip/workflows/commit/14b5825)), closes [#&#8203;50](https://forgejo.webgrip.dev/webgrip/workflows/issues/50) - fix(github): fail fast on a dead GH\_TOKEN instead of hanging the mirror ([2e2d49e](https://forgejo.webgrip.dev/webgrip/workflows/commit/2e2d49e)) ### [`v1.9.0`](https://forgejo.webgrip.dev/webgrip/workflows/releases/tag/v1.9.0) [Compare Source](https://forgejo.webgrip.dev/webgrip/workflows/compare/v1.8.0...v1.9.0) ##### 1.9.0 (2026-08-24) - Merge pull request 'feat(github): github-distribute reusable — repo mirror, GitHub Release, GHCR dig ([a1b8b76](https://forgejo.webgrip.dev/webgrip/workflows/commit/a1b8b76)), closes [#&#8203;48](https://forgejo.webgrip.dev/webgrip/workflows/issues/48) - feat(github): github-distribute reusable — repo mirror, GitHub Release, GHCR digest-copy ([773726f](https://forgejo.webgrip.dev/webgrip/workflows/commit/773726f)) ### [`v1.8.0`](https://forgejo.webgrip.dev/webgrip/workflows/releases/tag/v1.8.0) [Compare Source](https://forgejo.webgrip.dev/webgrip/workflows/compare/v1.7.0...v1.8.0) ##### 1.8.0 (2026-08-12) - feat(docs): publish to own docs-workflows bucket (estate [#&#8203;2](https://github.com/webgrip/workflows/issues/2)) ([1d40681](https://forgejo.webgrip.dev/webgrip/workflows/commit/1d40681)), closes [#&#8203;2](https://forgejo.webgrip.dev/webgrip/workflows/issues/2) ### [`v1.7.0`](https://forgejo.webgrip.dev/webgrip/workflows/releases/tag/v1.7.0) [Compare Source](https://forgejo.webgrip.dev/webgrip/workflows/compare/v1.6.0...v1.7.0) ##### 1.7.0 (2026-08-12) - feat(docs): flip strict link validation on — links verified clean (estate item [#&#8203;17](https://github.com/webgrip/workflows/issues/17)) ([b3705fc](https://forgejo.webgrip.dev/webgrip/workflows/commit/b3705fc)), closes [#&#8203;17](https://forgejo.webgrip.dev/webgrip/workflows/issues/17) - chore(docs): bump reusables — backup-dir trash-net + pagefind estate-search index (estate items 1+4) ([f2e235e](https://forgejo.webgrip.dev/webgrip/workflows/commit/f2e235e)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - "after 3am and before 7am every weekday,every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzEuMyIsInVwZGF0ZWRJblZlciI6IjQzLjI3MS4zIiwidGFyZ2V0QnJhbmNoIjoiZGV2ZWxvcG1lbnQiLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiZGVwZW5kZW5jaWVzIiwiZ2l0aHViLWFjdGlvbnMiLCJyZW5vdmF0ZSIsInR5cGUvbWlub3IiXX0=-->

renovate added 1 commit 2026-09-19 12:46:44 +00:00

fix(actions): Update dependency webgrip/workflows ( v1.6.0 ➔ v1.11.3 ) 670d921233

renovate requested review from ryangr0 2026-09-19 12:46:44 +00:00

renovate force-pushed renovate/webgrip-workflows-1.x from 670d921233 to 3de0c4ecba 2026-09-19 13:46:03 +00:00 Compare

renovate merged commit 3de0c4ecba into development 2026-09-19 14:46:12 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

ryangr0

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

webgrip/twente.dev!21

No description provided.