dependabot[bot]
|
0242d22132
|
chore(deps): Bump the all group with 5 updates (#11766)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2024-01-29 09:47:07 +00:00 |
|
dependabot[bot]
|
5cabbf1afd
|
chore(deps): Bump the all group with 1 update (#11704)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2024-01-22 13:51:03 +00:00 |
|
dependabot[bot]
|
4cb013000f
|
chore(deps): Bump the all group with 1 update (#11696)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2024-01-18 12:07:20 +00:00 |
|
dependabot[bot]
|
5b71a2f85f
|
chore(deps): Bump the all group with 1 update (#11681)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2024-01-15 12:34:16 +00:00 |
|
dependabot[bot]
|
6990571d25
|
chore(deps): Bump the all group with 1 update (#11655)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2024-01-09 11:37:22 +01:00 |
|
dependabot[bot]
|
4468ab21ed
|
chore(deps): Bump the all group with 1 update (#11581)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-12-28 02:06:45 +01:00 |
|
dependabot[bot]
|
2addb8842e
|
chore(deps): Bump the all group with 2 updates (#11557)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nikolay Vitkov <nvitkov@chromium.org>
|
2023-12-18 16:17:08 +01:00 |
|
dependabot[bot]
|
0d3421bb43
|
chore(deps): Bump the all group with 1 update (#11549)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-12-14 10:38:13 +01:00 |
|
dependabot[bot]
|
3a5e11da18
|
chore(deps): Bump the all group with 1 update (#11538)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-12-13 08:56:40 +01:00 |
|
dependabot[bot]
|
d22172b37d
|
chore(deps): Bump the all group with 1 update (#11519)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-12-08 07:52:19 +01:00 |
|
dependabot[bot]
|
4676abaac5
|
chore(deps): Bump the all group with 1 update (#11438)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-11-24 07:28:49 +01:00 |
|
dependabot[bot]
|
87da04f924
|
chore(deps): Bump the all group with 1 update (#11409)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-11-17 08:11:08 +01:00 |
|
dependabot[bot]
|
3d8b956d44
|
chore(deps): Bump the all group with 1 update (#11395)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-11-15 08:00:01 +01:00 |
|
dependabot[bot]
|
bec58dd81a
|
chore(deps): Bump the all group with 1 update (#11272)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-30 10:09:01 +01:00 |
|
dependabot[bot]
|
89bdec161b
|
chore(deps): Bump the all group with 2 updates (#11240)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-24 10:42:23 +02:00 |
|
dependabot[bot]
|
f43eaf068c
|
chore(deps): Bump the all group with 1 update (#11221)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-23 09:49:44 +02:00 |
|
dependabot[bot]
|
6d2f4ac3e2
|
chore(deps): Bump the all group with 1 update (#11187)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-19 11:46:32 +02:00 |
|
dependabot[bot]
|
78c335e611
|
chore(deps): Bump the all group with 1 update (#11163)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-16 09:36:59 +02:00 |
|
dependabot[bot]
|
0613ce1b83
|
chore(deps): Bump the all group with 1 update (#11148)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-13 08:09:00 +00:00 |
|
dependabot[bot]
|
1c5b2f8b23
|
chore(deps): Bump the all group with 2 updates (#11127)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-11 15:16:12 +02:00 |
|
dependabot[bot]
|
b1eee926cc
|
chore(deps): Bump ossf/scorecard-action from 2.2.0 to 2.3.0 (#11096)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-09 06:56:39 +00:00 |
|
dependabot[bot]
|
6e00fdbb86
|
chore(deps): Bump github/codeql-action from 2.21.9 to 2.22.0 (#11097)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-09 08:52:27 +02:00 |
|
dependabot[bot]
|
163394d735
|
chore(deps): Bump actions/checkout from 3.6.0 to 4.1.0 (#11063)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-04 18:16:10 +00:00 |
|
dependabot[bot]
|
54bc80cfc6
|
chore(deps): Bump github/codeql-action from 2.21.8 to 2.21.9 (#11064)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-10-04 16:33:37 +00:00 |
|
dependabot[bot]
|
4b130730ad
|
chore(deps): Bump github/codeql-action from 2.21.7 to 2.21.8 (#11018)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-09-25 07:36:31 +00:00 |
|
dependabot[bot]
|
1bac89e284
|
chore(deps): Bump github/codeql-action from 2.21.5 to 2.21.7 (#10924)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-09-18 08:37:19 +00:00 |
|
dependabot[bot]
|
5a7547b68f
|
chore(deps): Bump actions/upload-artifact from 3.1.2 to 3.1.3 (#10875)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-09-13 10:23:15 +02:00 |
|
dependabot[bot]
|
eabaf6c605
|
chore(deps): Bump github/codeql-action from 2.21.4 to 2.21.5 (#10837)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-09-04 10:19:33 +02:00 |
|
dependabot[bot]
|
ad0c793662
|
chore(deps): Bump actions/checkout from 3.5.3 to 3.6.0 (#10789)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-08-28 10:18:28 +02:00 |
|
dependabot[bot]
|
b26275f9d6
|
chore(deps): Bump github/codeql-action from 2.21.3 to 2.21.4 (#10760)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-08-21 09:27:42 +02:00 |
|
dependabot[bot]
|
6bb3e452f8
|
chore(deps): Bump github/codeql-action from 2.21.2 to 2.21.3 (#10730)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-08-14 11:45:40 +02:00 |
|
dependabot[bot]
|
f09077d3bc
|
chore(deps): Bump github/codeql-action from 2.21.0 to 2.21.2 (#10664)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-07-31 09:42:01 +02:00 |
|
dependabot[bot]
|
1cf231de7f
|
chore(deps): Bump github/codeql-action from 2.20.4 to 2.21.0 (#10619)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-07-24 08:15:32 +00:00 |
|
dependabot[bot]
|
cdd310fe5e
|
chore(deps): Bump github/codeql-action from 2.20.3 to 2.20.4 (#10560)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-07-17 09:50:13 +02:00 |
|
dependabot[bot]
|
3f2679e53e
|
chore(deps): Bump github/codeql-action from 2.20.0 to 2.20.3 (#10528)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-07-10 09:04:01 +02:00 |
|
dependabot[bot]
|
fc8558408b
|
chore(deps): Bump ossf/scorecard-action from 2.1.3 to 2.2.0 (#10493)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-07-03 09:36:07 +02:00 |
|
dependabot[bot]
|
2a86aa2629
|
chore(deps): Bump actions/checkout from 3.5.2 to 3.5.3 (#10448)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-26 09:54:28 +00:00 |
|
dependabot[bot]
|
6a16f51f84
|
chore(deps): Bump github/codeql-action from 2.3.6 to 2.20.0 (#10409)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-19 11:33:48 +02:00 |
|
dependabot[bot]
|
0fd1738797
|
chore(deps): Bump github/codeql-action from 2.2.4 to 2.3.6 (#10310)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2023-06-05 09:16:51 +02:00 |
|
Nikolay Vitkov
|
78a5c0ad5c
|
chore: fix scorecards analysis (#10306)
|
2023-06-02 14:19:22 +02:00 |
|
Nikolay Vitkov
|
d20b4fb407
|
ci: pin dependencies to commit (#10296)
|
2023-06-02 09:52:21 +00:00 |
|
dependabot[bot]
|
3e8363eb80
|
chore(deps): bump ossf/scorecard-action from 2.0.3 to 2.0.6 (#9170)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action)
from 2.0.3 to 2.0.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ossf/scorecard-action/releases">ossf/scorecard-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix - Broken dockerfile by <a
href="https://github.com/naveensrinivasan"><code>@naveensrinivasan</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/979">ossf/scorecard-action#979</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.0.5...v2.0.6">https://github.com/ossf/scorecard-action/compare/v2.0.5...v2.0.6</a></p>
<h2>v2.0.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Remove trailing space from example by <a
href="https://github.com/jamacku"><code>@jamacku</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/955">ossf/scorecard-action#955</a></li>
<li>🌱 Bump actions/cache from 3.0.8 to 3.0.10 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/956">ossf/scorecard-action#956</a></li>
<li>🌱 Bump github/codeql-action from 2.1.25 to 2.1.26 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/957">ossf/scorecard-action#957</a></li>
<li>🌱 Bump step-security/harden-runner from 1.4.5 to 1.5.0 by
<a href="https://github.com/dependabot"><code>@dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/958">ossf/scorecard-action#958</a></li>
<li>🌱 Bump debian from <code>5cf1d98</code> to
<code>b46fc4e</code> by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/959">ossf/scorecard-action#959</a></li>
<li>🌱 Bump github.com/sigstore/cosign from 1.12.1 to 1.13.0 by
<a href="https://github.com/dependabot"><code>@dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/962">ossf/scorecard-action#962</a></li>
<li>🌱 Upgrade to go 1.19 by <a
href="https://github.com/naveensrinivasan"><code>@naveensrinivasan</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/961">ossf/scorecard-action#961</a></li>
<li>🌱 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/967">ossf/scorecard-action#967</a></li>
<li>🌱 Bump golang from <code>c2a98a5</code> to
<code>b850621</code> by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/966">ossf/scorecard-action#966</a></li>
<li>🌱 Bump golang from <code>b850621</code> to
<code>25de7b6</code> by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/968">ossf/scorecard-action#968</a></li>
<li>New release for Scorecard v4.8.0 by <a
href="https://github.com/naveensrinivasan"><code>@naveensrinivasan</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/969">ossf/scorecard-action#969</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/jamacku"><code>@jamacku</code></a> made
their first contribution in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/955">ossf/scorecard-action#955</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.0.4...v2.0.5">https://github.com/ossf/scorecard-action/compare/v2.0.4...v2.0.5</a></p>
<h2>v2.0.4</h2>
<p>Fixes <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/856">#856</a></p>
<h2>What's Changed</h2>
<ul>
<li>🌱 Bump github.com/caarlos0/env/v6 from 6.10.0 to 6.10.1 by
<a href="https://github.com/dependabot"><code>@dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/934">ossf/scorecard-action#934</a></li>
<li>feat: do not run signing on pull requests by <a
href="https://github.com/laurentsimon"><code>@laurentsimon</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/935">ossf/scorecard-action#935</a></li>
<li>🌱 Bump debian from 11.4-slim to 11.5-slim by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/936">ossf/scorecard-action#936</a></li>
<li>🌱 Bump github.com/sigstore/cosign from 1.11.1 to 1.12.0 by
<a href="https://github.com/dependabot"><code>@dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/938">ossf/scorecard-action#938</a></li>
<li>🌱 Bump github/codeql-action from 2.1.22 to 2.1.24 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/941">ossf/scorecard-action#941</a></li>
<li>🐛 Restore behavior of ignoring scorecard runtime errors by <a
href="https://github.com/spencerschrock"><code>@spencerschrock</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/948">ossf/scorecard-action#948</a></li>
<li>🌱 Bump actions/dependency-review-action from 2.1.0 to 2.4.0
by <a href="https://github.com/dependabot"><code>@dependabot</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/950">ossf/scorecard-action#950</a></li>
<li>🌱 Bump github.com/sigstore/cosign from 1.12.0 to 1.12.1 by
<a href="https://github.com/dependabot"><code>@dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/947">ossf/scorecard-action#947</a></li>
<li>🌱 Bump github/codeql-action from 2.1.24 to 2.1.25 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/949">ossf/scorecard-action#949</a></li>
<li>🌱 Bump codecov/codecov-action from 3.1.0 to 3.1.1 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/942">ossf/scorecard-action#942</a></li>
<li>Create v2.0.4 patch by <a
href="https://github.com/spencerschrock"><code>@spencerschrock</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/952">ossf/scorecard-action#952</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/spencerschrock"><code>@spencerschrock</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/948">ossf/scorecard-action#948</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.0.3...v2.0.4">https://github.com/ossf/scorecard-action/compare/v2.0.3...v2.0.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="99c53751e0"><code>99c5375</code></a>
Fix - Broken dockerfile (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/979">#979</a>)</li>
<li><a
href="ff6221f234"><code>ff6221f</code></a>
New release for Scorecard v4.8.0 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/969">#969</a>)</li>
<li><a
href="608d088417"><code>608d088</code></a>
🌱 Bump golang from <code>b850621</code> to <code>25de7b6</code>
(<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/968">#968</a>)</li>
<li><a
href="5e97403151"><code>5e97403</code></a>
🌱 Bump golang from <code>c2a98a5</code> to <code>b850621</code>
(<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/966">#966</a>)</li>
<li><a
href="851b893ef5"><code>851b893</code></a>
🌱 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/967">#967</a>)</li>
<li><a
href="c9866174c7"><code>c986617</code></a>
🌱 Upgrade to go 1.19 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/961">#961</a>)</li>
<li><a
href="c3d8fd9ebe"><code>c3d8fd9</code></a>
🌱 Bump github.com/sigstore/cosign from 1.12.1 to 1.13.0 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/962">#962</a>)</li>
<li><a
href="6075f427dd"><code>6075f42</code></a>
🌱 Bump debian from <code>5cf1d98</code> to <code>b46fc4e</code>
(<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/959">#959</a>)</li>
<li><a
href="f3005530a0"><code>f300553</code></a>
🌱 Bump step-security/harden-runner from 1.4.5 to 1.5.0 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/958">#958</a>)</li>
<li><a
href="de0b2c5459"><code>de0b2c5</code></a>
🌱 Bump github/codeql-action from 2.1.25 to 2.1.26 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/957">#957</a>)</li>
<li>Additional commits viewable in <a
href="865b409285...99c53751e0">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-11-03 16:18:02 +00:00 |
|
jrandolf
|
2e3719cd7f
|
chore: pin checkout action (#9069)
|
2022-10-06 12:44:45 +02:00 |
|
Alex Rudenko
|
6f37eed91b
|
chore: add id-token permissions to scorecard-action (#8971)
See ossf/scorecard-action#900
Example failure with scorecard-action@2 https://github.com/puppeteer/puppeteer/actions/runs/3066712334/jobs/4952194627
|
2022-09-19 06:24:16 +00:00 |
|
dependabot[bot]
|
5a10de422a
|
chore(deps): bump ossf/scorecard-action from 1.1.2 to 2.0.3 (#8949)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.1.2 to 2.0.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ce330fde6b...865b409285)
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-09-16 09:10:39 +00:00 |
|
dependabot[bot]
|
66d9c9521d
|
chore(deps): bump github/codeql-action from 2.1.21 to 2.1.23 (#8967)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.21 to 2.1.23.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](c7f292ea4f...6a38b7d4a1)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-09-16 10:48:17 +02:00 |
|
dependabot[bot]
|
3eb4c2d2e0
|
chore(deps): bump github/codeql-action from 2.1.18 to 2.1.21 (#8849)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.18 to 2.1.21.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](2ca79b6fa8...c7f292ea4f)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-09-01 12:42:56 +02:00 |
|
dependabot[bot]
|
608dc6c408
|
chore(deps): bump github/codeql-action from 2.1.17 to 2.1.18 (#8779)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.17 to 2.1.18.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](0c670bbf04...2ca79b6fa8)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-08-12 13:30:39 +00:00 |
|
dependabot[bot]
|
6b35128e3e
|
chore(deps): bump github/codeql-action from 2.1.12 to 2.1.17 (#8709)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.12 to 2.1.17.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](27ea8f8fe5...0c670bbf04)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-08-02 13:18:50 +00:00 |
|
dependabot[bot]
|
7a22f95fe7
|
chore(deps): bump ossf/scorecard-action from 1.1.1 to 1.1.2 (#8592)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.1.1 to 1.1.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](3e15ea8318...ce330fde6b)
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-06-28 14:56:29 +02:00 |
|