Skip to content

chore(deps): update github actions - #200

Open
ferrlabs-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions
Open

chore(deps): update github actions#200
ferrlabs-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github-actions

Conversation

@ferrlabs-renovate

@ferrlabs-renovate ferrlabs-renovate Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending
FerrLabs/.github (changelog) action digest 4215a845d33e5b
FerrLabs/FerrFlow action minor v5.46.0v5.47.1 v5.48.0 (+3)
ossf/scorecard-action action patch v2.4.3v2.4.4

Release Notes

FerrLabs/FerrFlow (FerrLabs/FerrFlow)

v5.47.1

Compare Source

[5.47.1] - 2026-07-23

Bug Fixes
  • fix(ci): repair renovate-rebase.yml truncated by the pin sweep (#​761)

Performance

Binary
Fixture Tool check release-dry-run tag validate version Peak RSS
complex ferrflow 17.7ms 20.0ms 4.1ms (-2%) 3.5ms (-3%) 3.4ms (-3%) 14.9 MB
mono-100-1k ferrflow 16.7ms (-8%) 17.1ms (+6%) 5.3ms (+2%) 4.2ms 3.6ms 14.8 MB
mono-50-5k ferrflow 40.9ms (+14%) 39.3ms (+28%) 6.5ms (+27%) 4.0ms (+38%) 3.6ms (+33%) 14.6 MB
mono-large ferrflow 76.7ms (+19%) 74.5ms (+16%) 11.0ms (+38%) 6.0ms (+71%) 5.1ms (+46%) 14.8 MB
mono-medium ferrflow 13.4ms (+25%) 12.8ms (+31%) 4.6ms (+39%) 3.8ms (+41%) 3.4ms (+26%) 14.7 MB
mono-small ferrflow 9.4ms (+3%) 8.6ms 3.3ms (+3%) 3.0ms 2.9ms (-3%) 12.7 MB
single ferrflow 6.9ms (-7%) 6.6ms (-4%) 2.9ms (-3%) 2.7ms (-4%) 2.6ms (-4%) 12.8 MB

Note: every competitor is a Node.js package — none ship a native binary, so this section can only show ferrflow. Cross-tool comparisons live in the Npm section.

Docker
Fixture Tool check release-dry-run tag validate version Peak RSS
complex ferrflow 207.6ms (+3%) 205.4ms (+1%) 191.8ms (+3%) 193.6ms (+5%) 186.8ms 44.5 MB
mono-100-1k ferrflow 206.8ms (-1%) 205.5ms 192.8ms 194.5ms (+1%) 193.0ms (+1%) 43.0 MB
mono-50-5k ferrflow 246.2ms (-17%) 238.6ms (-31%) 208.5ms (-53%) 206.7ms (-39%) 198.6ms (-57%) 43.1 MB
mono-large ferrflow 267.9ms (+8%) 266.4ms (-27%) 204.8ms (-43%) 202.2ms (+33%) 192.9ms (-7%) 45.9 MB
mono-medium ferrflow 202.3ms (+17%) 203.9ms (+22%) 192.6ms (+19%) 197.8ms (+20%) 193.0ms (+19%) 43.6 MB
mono-small ferrflow 196.7ms (-3%) 199.0ms (-2%) 192.4ms (-3%) 190.3ms (-2%) 193.6ms (-3%) 42.9 MB
single ferrflow 189.1ms (-3%) 188.4ms (-4%) 185.3ms (-3%) 185.1ms (-3%) 184.9ms (-5%) 43.2 MB

Note: no competitor publishes a first-party Docker image that is comparable to ghcr.io/ferrlabs/ferrflow (a single static binary). Wrapping the Node tools in node:lts would only re-time node startup + npm + the tool already measured in the Npm section, so this section is intentionally limited to ferrflow.

Npm
Fixture Tool check release-dry-run tag validate version Peak RSS
complex changesets - 808.7ms (+5%) - - - 114.2 MB
complex commit-and-tag-version - 497.2ms (+2%) - - - 92.6 MB
complex ferrflow 300.2ms (+2%) 299.8ms (+2%) 285.5ms (+2%) 285.8ms (+2%) 284.8ms (+2%) 93.1 MB
complex semantic-release - 1600.8ms (+10%) - - - 140.7 MB
complex standard-version - 592.0ms (+6%) - - - 93.3 MB
mono-100-1k changesets - 960.2ms (+9%) - - - 110.4 MB
mono-100-1k commit-and-tag-version - 593.6ms (+1%) - - - 90.6 MB
mono-100-1k ferrflow 305.2ms (-1%) 303.1ms (-1%) 293.7ms (-1%) 289.9ms (-1%) 291.6ms 90.8 MB
mono-100-1k semantic-release - 1853.9ms (+3%) - - - 158.6 MB
mono-100-1k standard-version - 707.9ms (-1%) - - - 96.7 MB
mono-50-5k changesets - 872.7ms (+28%) - - - 110.4 MB
mono-50-5k commit-and-tag-version - 1023.7ms (+43%) - - - 106.7 MB
mono-50-5k ferrflow 339.5ms (+32%) 346.4ms (+35%) 308.6ms (+35%) 314.7ms (+39%) 306.3ms (+34%) 90.3 MB
mono-50-5k semantic-release - 2636.2ms (+38%) - - - 291.0 MB
mono-50-5k standard-version - 1277.8ms (+45%) - - - 125.4 MB
mono-large changesets - 1024.7ms (+33%) - - - 114.8 MB
mono-large commit-and-tag-version - 1478.4ms (+37%) - - - 127.6 MB
mono-large ferrflow 367.0ms (+34%) 367.8ms (+35%) 300.4ms (+41%) 301.5ms (+44%) 302.2ms (+45%) 92.5 MB
mono-large semantic-release - 3417.7ms (+38%) - - - 355.3 MB
mono-large standard-version - 1883.0ms (+43%) - - - 163.8 MB
mono-medium changesets - 814.7ms (+18%) - - - 112.4 MB
mono-medium commit-and-tag-version - 538.0ms (+33%) - - - 92.4 MB
mono-medium ferrflow 299.7ms (+30%) 300.8ms (+32%) 293.9ms (+31%) 292.2ms (+31%) 293.6ms (+31%) 92.4 MB
mono-medium semantic-release - 1611.8ms (+27%) - - - 141.3 MB
mono-medium standard-version - 623.6ms (+33%) - - - 93.6 MB
mono-small changesets - 775.9ms (-8%) - - - 111.0 MB
mono-small commit-and-tag-version - 481.0ms (-4%) - - - 92.3 MB
mono-small ferrflow 294.5ms (-3%) 293.6ms (-2%) 289.5ms (-1%) 290.6ms (-1%) 290.1ms (-1%) 92.6 MB
mono-small semantic-release - 1461.5ms (-9%) - - - 134.2 MB
mono-small standard-version - 540.8ms (-5%) - - - 92.3 MB
single changesets - 735.3ms (-4%) - - - 104.2 MB
single commit-and-tag-version - 469.0ms (-4%) - - - 91.2 MB
single ferrflow 287.8ms (-3%) 286.7ms (-4%) 285.7ms (-3%) 284.1ms (-5%) 284.3ms (-5%) 90.9 MB
single semantic-release - 1509.1ms (-4%) - - - 134.8 MB
single standard-version - 539.3ms (-4%) - - - 92.1 MB
Install footprint
Tool npm binary
changesets 26.0 MB
commit-and-tag-version 9.0 MB
ferrflow 8.0 MB 8.0 MB
release-please 95.0 MB
semantic-release 69.0 MB
standard-version 21.0 MB

v5.47.0

Compare Source

[5.47.0] - 2026-07-21

Features
  • feat: expose the crate version as ferrflow::VERSION (#​758)
  • feat(schema): expose the bundled JSON schema from the library (#​756)
  • feat(validate): expose the validation core without the cli feature (#​754)

Performance

Binary
Fixture Tool check release-dry-run tag validate version Peak RSS
complex ferrflow 17.7ms (-1%) 20.1ms (-1%) 4.2ms (-11%) 3.6ms (-8%) 3.5ms (-8%) 14.8 MB
mono-100-1k ferrflow 18.1ms (-1%) 16.1ms (+5%) 5.2ms (+2%) 4.2ms 3.6ms 14.6 MB
mono-50-5k ferrflow 35.8ms (-13%) 30.8ms (-22%) 5.1ms (-16%) 2.9ms (-24%) 2.7ms (-23%) 14.9 MB
mono-large ferrflow 64.6ms (-15%) 64.2ms (-13%) 8.0ms (-23%) 3.5ms (-41%) 3.5ms (-30%) 14.9 MB
mono-medium ferrflow 10.7ms (-10%) 9.8ms (-16%) 3.3ms (-21%) 2.7ms (-27%) 2.7ms (-21%) 15.0 MB
mono-small ferrflow 9.1ms (-5%) 8.6ms (+1%) 3.2ms (-9%) 3.0ms (-6%) 3.0ms (-3%) 12.8 MB
single ferrflow 7.4ms (-5%) 6.9ms (-4%) 3.0ms (-3%) 2.8ms 2.7ms (-4%) 12.8 MB

Note: every competitor is a Node.js package — none ship a native binary, so this section can only show ferrflow. Cross-tool comparisons live in the Npm section.

Docker
Fixture Tool check release-dry-run tag validate version Peak RSS
complex ferrflow 201.7ms (-8%) 202.6ms (-6%) 186.5ms (-9%) 184.0ms (-12%) 186.6ms (-8%) 42.9 MB
mono-100-1k ferrflow 208.0ms (+1%) 205.1ms (+1%) 192.4ms 192.0ms 192.0ms (+1%) 45.4 MB
mono-50-5k ferrflow 297.1ms (+26%) 344.9ms (+44%) 441.8ms (+117%) 341.6ms (+74%) 464.4ms (+135%) 45.7 MB
mono-large ferrflow 248.2ms (-5%) 364.6ms (+40%) 361.4ms (+86%) 151.6ms (-22%) 208.3ms (+11%) 46.3 MB
mono-medium ferrflow 172.6ms (-16%) 167.6ms (-18%) 162.0ms (-20%) 165.0ms (-17%) 161.8ms (-18%) 48.1 MB
mono-small ferrflow 202.1ms (-2%) 202.1ms (-2%) 197.8ms (-2%) 194.7ms (-4%) 198.8ms 43.3 MB
single ferrflow 194.3ms (+1%) 196.3ms (+3%) 191.3ms (+2%) 190.8ms (+2%) 194.3ms (+4%) 45.3 MB

Note: no competitor publishes a first-party Docker image that is comparable to ghcr.io/ferrlabs/ferrflow (a single static binary). Wrapping the Node tools in node:lts would only re-time node startup + npm + the tool already measured in the Npm section, so this section is intentionally limited to ferrflow.

Npm
Fixture Tool check release-dry-run tag validate version Peak RSS
complex changesets - 768.5ms (-11%) - - - 110.8 MB
complex commit-and-tag-version - 486.6ms (-7%) - - - 90.1 MB
complex ferrflow 294.9ms (-5%) 294.4ms (-6%) 280.8ms (-7%) 280.7ms (-6%) 280.2ms (-7%) 90.1 MB
complex semantic-release - 1454.6ms (-12%) - - - 140.2 MB
complex standard-version - 560.8ms (-8%) - - - 93.9 MB
mono-100-1k changesets - 879.9ms (-3%) - - - 112.1 MB
mono-100-1k commit-and-tag-version - 589.0ms (+1%) - - - 92.7 MB
mono-100-1k ferrflow 309.2ms (+3%) 307.1ms (+2%) 295.3ms (+2%) 293.9ms (+2%) 292.6ms (+1%) 92.4 MB
mono-100-1k semantic-release - 1794.0ms (+1%) - - - 158.7 MB
mono-100-1k standard-version - 713.2ms (+2%) - - - 95.8 MB
mono-50-5k changesets - 684.0ms (-22%) - - - 114.1 MB
mono-50-5k commit-and-tag-version - 715.5ms (-29%) - - - 107.1 MB
mono-50-5k ferrflow 257.6ms (-23%) 256.9ms (-23%) 229.1ms (-24%) 226.8ms (-24%) 228.2ms (-24%) 93.0 MB
mono-50-5k semantic-release - 1908.4ms (-26%) - - - 316.1 MB
mono-50-5k standard-version - 880.5ms (-27%) - - - 125.2 MB
mono-large changesets - 770.2ms (-18%) - - - 118.9 MB
mono-large commit-and-tag-version - 1082.5ms (-20%) - - - 129.9 MB
mono-large ferrflow 273.9ms (-23%) 272.1ms (-24%) 213.0ms (-28%) 209.0ms (-27%) 208.9ms (-28%) 92.5 MB
mono-large semantic-release - 2476.8ms (-21%) - - - 400.7 MB
mono-large standard-version - 1320.9ms (-21%) - - - 168.3 MB
mono-medium changesets - 690.8ms (-19%) - - - 113.6 MB
mono-medium commit-and-tag-version - 405.2ms (-25%) - - - 93.6 MB
mono-medium ferrflow 230.6ms (-27%) 228.5ms (-27%) 224.6ms (-25%) 222.7ms (-24%) 224.3ms (-25%) 92.4 MB
mono-medium semantic-release - 1271.9ms (-24%) - - - 141.3 MB
mono-medium standard-version - 468.3ms (-26%) - - - 93.8 MB
mono-small changesets - 841.8ms (+3%) - - - 106.4 MB
mono-small commit-and-tag-version - 500.3ms (-3%) - - - 90.3 MB
mono-small ferrflow 302.6ms (-1%) 300.4ms (-2%) 292.7ms (-4%) 293.9ms (-3%) 293.0ms (-2%) 90.5 MB
mono-small semantic-release - 1606.1ms (+1%) - - - 132.9 MB
mono-small standard-version - 566.5ms (+1%) - - - 93.7 MB
single changesets - 762.4ms (+5%) - - - 103.6 MB
single commit-and-tag-version - 489.8ms (+4%) - - - 89.7 MB
single ferrflow 297.9ms (+2%) 299.9ms (+1%) 295.9ms (-1%) 298.5ms (+3%) 300.1ms (+1%) 89.9 MB
single semantic-release - 1576.4ms (+8%) - - - 134.0 MB
single standard-version - 560.3ms (+3%) - - - 93.5 MB
Install footprint
Tool npm binary
changesets 26.0 MB
commit-and-tag-version 9.0 MB
ferrflow 8.0 MB 8.0 MB
release-please 95.0 MB
semantic-release 69.0 MB
standard-version 21.0 MB
ossf/scorecard-action (ossf/scorecard-action)

v2.4.4

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.5.0 release. For a complete list of changes, please refer to the Scorecard v5.4.0 release notes and the Scorecard v5.5.0 release notes.

Full Changelog: ossf/scorecard-action@v2.4.3...v2.4.4


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 6am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@ferrlabs-renovate
ferrlabs-renovate Bot enabled auto-merge (squash) July 27, 2026 03:49
Comment thread .github/workflows/ci.yml
ci:
name: CI
uses: FerrLabs/.github/.github/workflows/reusable-ci-go.yml@4215a840974a9eb611b05f1496ec99d7ba0492c0 # main
uses: FerrLabs/.github/.github/workflows/reusable-ci-go.yml@5d33e5b2108483ee8769a57b1105a612fd8a9e67 # main
sbom:
name: SBOM → Dependency-Track
uses: FerrLabs/.github/.github/workflows/reusable-sbom-track.yml@4215a840974a9eb611b05f1496ec99d7ba0492c0 # main
uses: FerrLabs/.github/.github/workflows/reusable-sbom-track.yml@5d33e5b2108483ee8769a57b1105a612fd8a9e67 # main
scan:
name: Secrets + CVE
uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@4215a840974a9eb611b05f1496ec99d7ba0492c0 # main
uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@5d33e5b2108483ee8769a57b1105a612fd8a9e67 # main
@ferrlabs-renovate
ferrlabs-renovate Bot force-pushed the renovate/github-actions branch from 09b0eae to b8642da Compare July 27, 2026 10:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant