Commit Graph

44 Commits

Author SHA1 Message Date
dependabot[bot]
5a7547b68f
chore(deps): Bump actions/upload-artifact from 3.1.2 to 3.1.3 (#10875)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-13 10:23:15 +02:00
dependabot[bot]
eabaf6c605
chore(deps): Bump github/codeql-action from 2.21.4 to 2.21.5 (#10837)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-04 10:19:33 +02:00
dependabot[bot]
ad0c793662
chore(deps): Bump actions/checkout from 3.5.3 to 3.6.0 (#10789)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-28 10:18:28 +02:00
dependabot[bot]
b26275f9d6
chore(deps): Bump github/codeql-action from 2.21.3 to 2.21.4 (#10760)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-21 09:27:42 +02:00
dependabot[bot]
6bb3e452f8
chore(deps): Bump github/codeql-action from 2.21.2 to 2.21.3 (#10730)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-14 11:45:40 +02:00
dependabot[bot]
f09077d3bc
chore(deps): Bump github/codeql-action from 2.21.0 to 2.21.2 (#10664)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-31 09:42:01 +02:00
dependabot[bot]
1cf231de7f
chore(deps): Bump github/codeql-action from 2.20.4 to 2.21.0 (#10619)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-24 08:15:32 +00:00
dependabot[bot]
cdd310fe5e
chore(deps): Bump github/codeql-action from 2.20.3 to 2.20.4 (#10560)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-17 09:50:13 +02:00
dependabot[bot]
3f2679e53e
chore(deps): Bump github/codeql-action from 2.20.0 to 2.20.3 (#10528)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-10 09:04:01 +02:00
dependabot[bot]
fc8558408b
chore(deps): Bump ossf/scorecard-action from 2.1.3 to 2.2.0 (#10493)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-03 09:36:07 +02:00
dependabot[bot]
2a86aa2629
chore(deps): Bump actions/checkout from 3.5.2 to 3.5.3 (#10448)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 09:54:28 +00:00
dependabot[bot]
6a16f51f84
chore(deps): Bump github/codeql-action from 2.3.6 to 2.20.0 (#10409)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-19 11:33:48 +02:00
dependabot[bot]
0fd1738797
chore(deps): Bump github/codeql-action from 2.2.4 to 2.3.6 (#10310)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 09:16:51 +02:00
Nikolay Vitkov
78a5c0ad5c
chore: fix scorecards analysis (#10306) 2023-06-02 14:19:22 +02:00
Nikolay Vitkov
d20b4fb407
ci: pin dependencies to commit (#10296) 2023-06-02 09:52:21 +00:00
dependabot[bot]
3e8363eb80
chore(deps): bump ossf/scorecard-action from 2.0.3 to 2.0.6 (#9170)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action)
from 2.0.3 to 2.0.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ossf/scorecard-action/releases">ossf/scorecard-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix - Broken dockerfile by <a
href="https://github.com/naveensrinivasan"><code>@​naveensrinivasan</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/979">ossf/scorecard-action#979</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.0.5...v2.0.6">https://github.com/ossf/scorecard-action/compare/v2.0.5...v2.0.6</a></p>
<h2>v2.0.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Remove trailing space from example by <a
href="https://github.com/jamacku"><code>@​jamacku</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/955">ossf/scorecard-action#955</a></li>
<li>🌱 Bump actions/cache from 3.0.8 to 3.0.10 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/956">ossf/scorecard-action#956</a></li>
<li>🌱 Bump github/codeql-action from 2.1.25 to 2.1.26 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/957">ossf/scorecard-action#957</a></li>
<li>🌱 Bump step-security/harden-runner from 1.4.5 to 1.5.0 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/958">ossf/scorecard-action#958</a></li>
<li>🌱 Bump debian from <code>5cf1d98</code> to
<code>b46fc4e</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/959">ossf/scorecard-action#959</a></li>
<li>🌱 Bump github.com/sigstore/cosign from 1.12.1 to 1.13.0 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/962">ossf/scorecard-action#962</a></li>
<li>🌱 Upgrade to go 1.19 by <a
href="https://github.com/naveensrinivasan"><code>@​naveensrinivasan</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/961">ossf/scorecard-action#961</a></li>
<li>🌱 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/967">ossf/scorecard-action#967</a></li>
<li>🌱 Bump golang from <code>c2a98a5</code> to
<code>b850621</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/966">ossf/scorecard-action#966</a></li>
<li>🌱 Bump golang from <code>b850621</code> to
<code>25de7b6</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/968">ossf/scorecard-action#968</a></li>
<li>New release for Scorecard v4.8.0 by <a
href="https://github.com/naveensrinivasan"><code>@​naveensrinivasan</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/969">ossf/scorecard-action#969</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/jamacku"><code>@​jamacku</code></a> made
their first contribution in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/955">ossf/scorecard-action#955</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.0.4...v2.0.5">https://github.com/ossf/scorecard-action/compare/v2.0.4...v2.0.5</a></p>
<h2>v2.0.4</h2>
<p>Fixes <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/856">#856</a></p>
<h2>What's Changed</h2>
<ul>
<li>🌱 Bump github.com/caarlos0/env/v6 from 6.10.0 to 6.10.1 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/934">ossf/scorecard-action#934</a></li>
<li>feat: do not run signing on pull requests by <a
href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/935">ossf/scorecard-action#935</a></li>
<li>🌱 Bump debian from 11.4-slim to 11.5-slim by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/936">ossf/scorecard-action#936</a></li>
<li>🌱 Bump github.com/sigstore/cosign from 1.11.1 to 1.12.0 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/938">ossf/scorecard-action#938</a></li>
<li>🌱 Bump github/codeql-action from 2.1.22 to 2.1.24 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/941">ossf/scorecard-action#941</a></li>
<li>🐛 Restore behavior of ignoring scorecard runtime errors by <a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/948">ossf/scorecard-action#948</a></li>
<li>🌱 Bump actions/dependency-review-action from 2.1.0 to 2.4.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/950">ossf/scorecard-action#950</a></li>
<li>🌱 Bump github.com/sigstore/cosign from 1.12.0 to 1.12.1 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/947">ossf/scorecard-action#947</a></li>
<li>🌱 Bump github/codeql-action from 2.1.24 to 2.1.25 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/949">ossf/scorecard-action#949</a></li>
<li>🌱 Bump codecov/codecov-action from 3.1.0 to 3.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/942">ossf/scorecard-action#942</a></li>
<li>Create v2.0.4 patch by <a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/952">ossf/scorecard-action#952</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/948">ossf/scorecard-action#948</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.0.3...v2.0.4">https://github.com/ossf/scorecard-action/compare/v2.0.3...v2.0.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="99c53751e0"><code>99c5375</code></a>
Fix - Broken dockerfile (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/979">#979</a>)</li>
<li><a
href="ff6221f234"><code>ff6221f</code></a>
New release for Scorecard v4.8.0 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/969">#969</a>)</li>
<li><a
href="608d088417"><code>608d088</code></a>
🌱 Bump golang from <code>b850621</code> to <code>25de7b6</code>
(<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/968">#968</a>)</li>
<li><a
href="5e97403151"><code>5e97403</code></a>
🌱 Bump golang from <code>c2a98a5</code> to <code>b850621</code>
(<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/966">#966</a>)</li>
<li><a
href="851b893ef5"><code>851b893</code></a>
🌱 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/967">#967</a>)</li>
<li><a
href="c9866174c7"><code>c986617</code></a>
🌱 Upgrade to go 1.19 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/961">#961</a>)</li>
<li><a
href="c3d8fd9ebe"><code>c3d8fd9</code></a>
🌱 Bump github.com/sigstore/cosign from 1.12.1 to 1.13.0 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/962">#962</a>)</li>
<li><a
href="6075f427dd"><code>6075f42</code></a>
🌱 Bump debian from <code>5cf1d98</code> to <code>b46fc4e</code>
(<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/959">#959</a>)</li>
<li><a
href="f3005530a0"><code>f300553</code></a>
🌱 Bump step-security/harden-runner from 1.4.5 to 1.5.0 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/958">#958</a>)</li>
<li><a
href="de0b2c5459"><code>de0b2c5</code></a>
🌱 Bump github/codeql-action from 2.1.25 to 2.1.26 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/957">#957</a>)</li>
<li>Additional commits viewable in <a
href="865b409285...99c53751e0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ossf/scorecard-action&package-manager=github_actions&previous-version=2.0.3&new-version=2.0.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-03 16:18:02 +00:00
jrandolf
2e3719cd7f
chore: pin checkout action (#9069) 2022-10-06 12:44:45 +02:00
Alex Rudenko
6f37eed91b
chore: add id-token permissions to scorecard-action (#8971)
See ossf/scorecard-action#900

Example failure with scorecard-action@2 https://github.com/puppeteer/puppeteer/actions/runs/3066712334/jobs/4952194627
2022-09-19 06:24:16 +00:00
dependabot[bot]
5a10de422a
chore(deps): bump ossf/scorecard-action from 1.1.2 to 2.0.3 (#8949)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.1.2 to 2.0.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ce330fde6b...865b409285)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-16 09:10:39 +00:00
dependabot[bot]
66d9c9521d
chore(deps): bump github/codeql-action from 2.1.21 to 2.1.23 (#8967)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.21 to 2.1.23.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](c7f292ea4f...6a38b7d4a1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-16 10:48:17 +02:00
dependabot[bot]
3eb4c2d2e0
chore(deps): bump github/codeql-action from 2.1.18 to 2.1.21 (#8849)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.18 to 2.1.21.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](2ca79b6fa8...c7f292ea4f)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-01 12:42:56 +02:00
dependabot[bot]
608dc6c408
chore(deps): bump github/codeql-action from 2.1.17 to 2.1.18 (#8779)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.17 to 2.1.18.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](0c670bbf04...2ca79b6fa8)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-12 13:30:39 +00:00
dependabot[bot]
6b35128e3e chore(deps): bump github/codeql-action from 2.1.12 to 2.1.17 (#8709)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.12 to 2.1.17.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](27ea8f8fe5...0c670bbf04)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-02 13:18:50 +00:00
dependabot[bot]
7a22f95fe7
chore(deps): bump ossf/scorecard-action from 1.1.1 to 1.1.2 (#8592)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.1.1 to 1.1.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](3e15ea8318...ce330fde6b)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-28 14:56:29 +02:00
dependabot[bot]
802ad9ee2a
chore(deps): bump ossf/scorecard-action from 1.0.4 to 1.1.1 (#8458)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.0.4 to 1.1.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](c1aec4ac82...3e15ea8318)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-02 13:58:27 +02:00
dependabot[bot]
0451d175dd
chore(deps): bump github/codeql-action from 2.1.10 to 2.1.12 (#8461)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.10 to 2.1.12.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](2f58583a1b...27ea8f8fe5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-02 13:57:42 +02:00
dependabot[bot]
f67bfb7a6c
chore(deps): bump actions/upload-artifact from 3.0.0 to 3.1.0 (#8396)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](6673cd052c...3cea537223)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-31 15:52:18 +02:00
Randolf Jung
4ba9950cc5 chore: rename actions 2022-05-31 14:56:44 +02:00
dependabot[bot]
19bb407d4c
chore(deps): bump github/codeql-action (#8340)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 75b4f1c4669133dc294b06c2794e969efa2e5316 to 2.1.10. This release includes the previously tagged commit.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](75b4f1c466...2f58583a1b)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-20 05:31:37 +00:00
dependabot[bot]
791cb06945
chore(deps): bump github/codeql-action from 2.1.9 to 2.1.10 (#8333)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.9 to 2.1.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](7502d6e991...75b4f1c466)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-12 11:49:07 +02:00
dependabot[bot]
5911b95a65
chore(deps): bump github/codeql-action from 2.1.8 to 2.1.9 (#8291)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.8 to 2.1.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](1ed1437484...7502d6e991)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-02 15:59:21 +02:00
dependabot[bot]
95c9f392e2
chore(deps): bump github/codeql-action from 2.1.7 to 2.1.8 (#8220)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.7 to 2.1.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](0182a2c78c...1ed1437484)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-19 11:34:53 +00:00
dependabot[bot]
ef8f22a740
chore(deps): bump github/codeql-action from 2.1.6 to 2.1.7 (#8199)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.6 to 2.1.7.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](28eead2408...0182a2c78c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-06 13:42:33 +00:00
dependabot[bot]
b9754179db
chore(deps): bump github/codeql-action from 1.1.5 to 2.1.6 (#8178)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.1.5 to 2.1.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](8834766498...28eead2408)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-01 09:05:49 +00:00
dependabot[bot]
4fd0d9f110
chore(deps): bump github/codeql-action from 1.1.4 to 1.1.5 (#8139)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.1.4 to 1.1.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](f5d822707e...8834766498)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-17 06:49:13 +00:00
dependabot[bot]
6b52ae3580
chore(deps): bump github/codeql-action from 1.1.2 to 1.1.4 (#8115)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.1.2 to 1.1.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](d39d5d5c97...f5d822707e)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-08 07:51:57 +00:00
dependabot[bot]
136aab0ecb
chore(deps): bump actions/upload-artifact from 2.3.1 to 3 (#8098)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2.3.1 to 3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](82c141cc51...6673cd052c)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-04 09:04:25 +01:00
dependabot[bot]
608d944012
chore(deps): bump actions/checkout from 2 to 3 (#8089)
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-02 09:30:11 +01:00
dependabot[bot]
05f9009821
chore(deps): bump github/codeql-action from 1.1.0 to 1.1.2 (#8034)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.1.0 to 1.1.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](474bbf07f9...d39d5d5c97)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-18 08:21:36 +00:00
dependabot[bot]
05e5dfa9c0
chore(deps): bump ossf/scorecard-action from 1.0.3 to 1.0.4 (#8035)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.0.3 to 1.0.4.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Commits](b614d455ee...c1aec4ac82)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-18 07:57:09 +00:00
dependabot[bot]
7282fddb01
chore(deps): bump github/codeql-action from 1.0.26 to 1.1.0 (#8021)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1.0.26 to 1.1.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](5f53256358...474bbf07f9)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-15 09:39:23 +00:00
dependabot[bot]
6e6a00c2cb
chore(deps): bump ossf/scorecard-action from 1.0.2 to 1.0.3 (#8023)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.0.2 to 1.0.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Commits](c8416b0b2b...b614d455ee)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-15 08:26:38 +00:00
Nick Schonning
b2bf70fc3b
chore: update prettier globs and format files (#7856)
* chore: update prettier globs and format files

* fix: remove reference to Markdownlint
2022-02-11 20:29:43 +01:00
Mathias Bynens
2fefcc9185
chore: set up ossf/scorecard-action (#7953) 2022-02-01 08:55:58 +00:00