Update product-os/flowzone action to v22.12.49#669
Merged
klutchell-renovate[bot] merged 1 commit intoJun 20, 2026
Conversation
klutchell-renovate
Bot
force-pushed
the
renovate/product-os-flowzone-22.12.x
branch
from
e24a203 to
ef9425c
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v22.12.43→v22.12.49Release Notes
product-os/flowzone (product-os/flowzone)
v22.12.49Compare Source
Update dependency node-26 to v26.3.1
Notable changes
98fbc89211] - (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) nodejs-private/node-private#878110840f2c7] - deps: update llhttp to 9.4.2 (Antoine du Hamel) nodejs-private/node-private#8908d36d522b2] - deps: update undici to 8.5.0 (Node.js GitHub Bot) #639032e6d03993a] - deps: update undici to 8.4.0 (Node.js GitHub Bot) #637795a17d5b07a] - deps: update archs files for openssl-3.5.7 (Node.js GitHub Bot) #63820362725d4e5] - deps: upgrade openssl sources to openssl-3.5.7 (Node.js GitHub Bot) #63820bd1214ab01] - (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) nodejs-private/node-private#868bc0b53813e] - (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) nodejs-private/node-private#84687d847bc70] - (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) nodejs-private/node-private#8559308084fcb] - (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) nodejs-private/node-private#867a67dd46891] - (CVE-2026-48936) permission: guard pipe open and chmod with net scope (RafaelGSS) nodejs-private/node-private#8857057c3f16c] - (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) nodejs-private/node-private#8736bc17a6b51] - (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) nodejs-private/node-private#870c8668beff8] - test: add session reuse host verification regressions (Matteo Collina) nodejs-private/node-private#854d1be630415] - (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) nodejs-private/node-private#854a14c158bb3] - (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) nodejs-private/node-private#857ebda73470d] - (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) nodejs-private/node-private#869nodejs/node (node-26)
v26.3.1: 2026-06-18, Version 26.3.1 (Current), @​aduh95Compare Source
This is a security release.
Notable Changes
Commits
98fbc89211] - (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) nodejs-private/node-private#878110840f2c7] - deps: update llhttp to 9.4.2 (Antoine du Hamel) nodejs-private/node-private#8908d36d522b2] - deps: update undici to 8.5.0 (Node.js GitHub Bot) #639032e6d03993a] - deps: update undici to 8.4.0 (Node.js GitHub Bot) #637795a17d5b07a] - deps: update archs files for openssl-3.5.7 (Node.js GitHub Bot) #63820362725d4e5] - deps: upgrade openssl sources to openssl-3.5.7 (Node.js GitHub Bot) #63820bd1214ab01] - (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) nodejs-private/node-private#868bc0b53813e] - (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) nodejs-private/node-private#84687d847bc70] - (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) nodejs-private/node-private#8559308084fcb] - (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) nodejs-private/node-private#867a67dd46891] - (CVE-2026-48936) permission: guard pipe open and chmod with net scope (RafaelGSS) nodejs-private/node-private#8857057c3f16c] - (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) nodejs-private/node-private#8736bc17a6b51] - (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) nodejs-private/node-private#870c8668beff8] - test: add session reuse host verification regressions (Matteo Collina) nodejs-private/node-private#854d1be630415] - (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) nodejs-private/node-private#854a14c158bb3] - (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) nodejs-private/node-private#857ebda73470d] - (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) nodejs-private/node-private#869List of commits
4d039b1(Update dependency node-26 to v26.3.1, 2026-06-18)v22.12.48Compare Source
Update dependency docker/buildx to v0.35.0
Notable changes
mode=deleteattribute for build and bake commands. This mode replaces the destination directory with the build result instead of merging it. Similar to the--deleteflag in rsync. For safety, this mode is only allowed if the destination directory is a subdirectory of the working directory. To export to other destinations,--allow=buildx.local.deleteneeds to be provided or the action confirmed by the user in the TUI. When exporting multi-platform results, this mode requires BuildKit v0.31.0+. #3883caps: { "exec.proxy": true }in the evaluation decision. After opting in, you can control what network requests are allowed to be made by the run steps with policy rules for regularinput.httpsources, similar to how this was done for direct HTTP build sources before. You can also opt in your whole builder with--buildkitd-flags '--proxy-network'inbuildx create. #3895--resourceflag inbuildand theresourcekey inbakecommands. This feature requires BuildKit v0.31.0+ and Dockerfile v0.25.0+. #3876 #3900a39d601->d5411a95d098a2a2aa163->0257b33404c0d5-> v0.1.1a2c0da2new6f92a3b->3dc84a46f92a3b->3dc84a4docker/buildx (docker/buildx)
v0.35.0Compare Source
buildx 0.35.0
Welcome to the v0.35.0 release of buildx!
Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.
Contributors
Notable Changes
mode=deleteattribute for build and bake commands. This mode replaces the destination directory with the build result instead of merging it. Similar to the--deleteflag in rsync. For safety, this mode is only allowed if the destination directory is a subdirectory of the working directory. To export to other destinations,--allow=buildx.local.deleteneeds to be provided or the action confirmed by the user in the TUI. When exporting multi-platform results, this mode requires BuildKit v0.31.0+. #3883caps: { "exec.proxy": true }in the evaluation decision. After opting in, you can control what network requests are allowed to be made by the run steps with policy rules for regularinput.httpsources, similar to how this was done for direct HTTP build sources before. You can also opt in your whole builder with--buildkitd-flags '--proxy-network'inbuildx create. #3895--resourceflag inbuildand theresourcekey inbakecommands. This feature requires BuildKit v0.31.0+ and Dockerfile v0.25.0+. #3876 #3900Dependency Changes
a39d601->d5411a95d098a2a2aa163->0257b33404c0d5-> v0.1.1a2c0da2new6f92a3b->3dc84a46f92a3b->3dc84a4Previous release can be found at v0.34.1
List of commits
962123c(Update dependency docker/buildx to v0.35.0, 2026-06-18)v22.12.47Compare Source
Update dependency helm/helm to v4.2.2
Notable changes
b05881c(George Jenkins)helm/helm (helm/helm)
v4.2.2: Helm v4.2.2Compare Source
Helm v4.2.2 is a patch release. Users are encouraged to upgrade for the best experience.
The community keeps growing, and we'd love to see you there!
Notable Changes
Installation and Upgrading
Download Helm v4.2.2. The common platform binaries are here:
This release was signed by @gjenkins8 with key BF88 8333 D96A 1C18 E268 2AAE D79D 67C9 EC01 6739, which can be found at https://keys.openpgp.org/vks/v1/by-fingerprint/BF888333D96A1C18E2682AAED79D67C9EC016739. Please use the attached signatures for verifying this release using gpg.
The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with
bash.What's Next
Changelog
b05881c(George Jenkins)Full Changelog: helm/helm@v4.2.1...v4.2.2
List of commits
7027efd(Update dependency helm/helm to v4.2.2, 2026-06-17)v22.12.46Compare Source
28dc745(Update zulip/github-actions-zulip digest tof675f2b, 2026-06-17)v22.12.45Compare Source
921fcd6(patch: Specify tool versions, 2026-06-16)v22.12.44Compare Source
Update balena-io/deploy-to-balena-action action to v2.3.1
Notable changes
balena-io/deploy-to-balena-action (balena-io/deploy-to-balena-action)
[
v2.3.1](https://redirect.github.com/balena-io/deploy-to-balena-action/blob/HEAD/CHANGELOG.md#v231List of commits
97c9768(Update balena-io/deploy-to-balena-action action to v2.3.1, 2026-06-16)Configuration
📅 Schedule: (in timezone America/New_York)
* * * * 0,6)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.