Commit Graph

65 Commits

Author SHA1 Message Date
dependabot[bot]
4468ab21ed
chore(deps): Bump the all group with 1 update (#11581)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-28 02:06:45 +01:00
dependabot[bot]
2addb8842e
chore(deps): Bump the all group with 2 updates (#11557)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nikolay Vitkov <nvitkov@chromium.org>
2023-12-18 16:17:08 +01:00
dependabot[bot]
0d3421bb43
chore(deps): Bump the all group with 1 update (#11549)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-14 10:38:13 +01:00
dependabot[bot]
3a5e11da18
chore(deps): Bump the all group with 1 update (#11538)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 08:56:40 +01:00
dependabot[bot]
d22172b37d
chore(deps): Bump the all group with 1 update (#11519)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-08 07:52:19 +01:00
dependabot[bot]
4676abaac5
chore(deps): Bump the all group with 1 update (#11438)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-24 07:28:49 +01:00
dependabot[bot]
87da04f924
chore(deps): Bump the all group with 1 update (#11409)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-17 08:11:08 +01:00
dependabot[bot]
3d8b956d44
chore(deps): Bump the all group with 1 update (#11395)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-15 08:00:01 +01:00
dependabot[bot]
bec58dd81a
chore(deps): Bump the all group with 1 update (#11272)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-30 10:09:01 +01:00
dependabot[bot]
89bdec161b
chore(deps): Bump the all group with 2 updates (#11240)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-24 10:42:23 +02:00
dependabot[bot]
f43eaf068c
chore(deps): Bump the all group with 1 update (#11221)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-23 09:49:44 +02:00
dependabot[bot]
6d2f4ac3e2
chore(deps): Bump the all group with 1 update (#11187)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-19 11:46:32 +02:00
dependabot[bot]
78c335e611
chore(deps): Bump the all group with 1 update (#11163)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-16 09:36:59 +02:00
dependabot[bot]
0613ce1b83
chore(deps): Bump the all group with 1 update (#11148)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-13 08:09:00 +00:00
dependabot[bot]
1c5b2f8b23
chore(deps): Bump the all group with 2 updates (#11127)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-11 15:16:12 +02:00
dependabot[bot]
b1eee926cc
chore(deps): Bump ossf/scorecard-action from 2.2.0 to 2.3.0 (#11096)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-09 06:56:39 +00:00
dependabot[bot]
6e00fdbb86
chore(deps): Bump github/codeql-action from 2.21.9 to 2.22.0 (#11097)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-09 08:52:27 +02:00
dependabot[bot]
163394d735
chore(deps): Bump actions/checkout from 3.6.0 to 4.1.0 (#11063)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-04 18:16:10 +00:00
dependabot[bot]
54bc80cfc6
chore(deps): Bump github/codeql-action from 2.21.8 to 2.21.9 (#11064)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-04 16:33:37 +00:00
dependabot[bot]
4b130730ad
chore(deps): Bump github/codeql-action from 2.21.7 to 2.21.8 (#11018)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-25 07:36:31 +00:00
dependabot[bot]
1bac89e284
chore(deps): Bump github/codeql-action from 2.21.5 to 2.21.7 (#10924)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-18 08:37:19 +00:00
dependabot[bot]
5a7547b68f
chore(deps): Bump actions/upload-artifact from 3.1.2 to 3.1.3 (#10875)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-13 10:23:15 +02:00
dependabot[bot]
eabaf6c605
chore(deps): Bump github/codeql-action from 2.21.4 to 2.21.5 (#10837)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-04 10:19:33 +02:00
dependabot[bot]
ad0c793662
chore(deps): Bump actions/checkout from 3.5.3 to 3.6.0 (#10789)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-28 10:18:28 +02:00
dependabot[bot]
b26275f9d6
chore(deps): Bump github/codeql-action from 2.21.3 to 2.21.4 (#10760)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-21 09:27:42 +02:00
dependabot[bot]
6bb3e452f8
chore(deps): Bump github/codeql-action from 2.21.2 to 2.21.3 (#10730)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-14 11:45:40 +02:00
dependabot[bot]
f09077d3bc
chore(deps): Bump github/codeql-action from 2.21.0 to 2.21.2 (#10664)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-31 09:42:01 +02:00
dependabot[bot]
1cf231de7f
chore(deps): Bump github/codeql-action from 2.20.4 to 2.21.0 (#10619)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-24 08:15:32 +00:00
dependabot[bot]
cdd310fe5e
chore(deps): Bump github/codeql-action from 2.20.3 to 2.20.4 (#10560)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-17 09:50:13 +02:00
dependabot[bot]
3f2679e53e
chore(deps): Bump github/codeql-action from 2.20.0 to 2.20.3 (#10528)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-10 09:04:01 +02:00
dependabot[bot]
fc8558408b
chore(deps): Bump ossf/scorecard-action from 2.1.3 to 2.2.0 (#10493)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-03 09:36:07 +02:00
dependabot[bot]
2a86aa2629
chore(deps): Bump actions/checkout from 3.5.2 to 3.5.3 (#10448)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 09:54:28 +00:00
dependabot[bot]
6a16f51f84
chore(deps): Bump github/codeql-action from 2.3.6 to 2.20.0 (#10409)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-19 11:33:48 +02:00
dependabot[bot]
0fd1738797
chore(deps): Bump github/codeql-action from 2.2.4 to 2.3.6 (#10310)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 09:16:51 +02:00
Nikolay Vitkov
78a5c0ad5c
chore: fix scorecards analysis (#10306) 2023-06-02 14:19:22 +02:00
Nikolay Vitkov
d20b4fb407
ci: pin dependencies to commit (#10296) 2023-06-02 09:52:21 +00:00
dependabot[bot]
3e8363eb80
chore(deps): bump ossf/scorecard-action from 2.0.3 to 2.0.6 (#9170)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action)
from 2.0.3 to 2.0.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/ossf/scorecard-action/releases">ossf/scorecard-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix - Broken dockerfile by <a
href="https://github.com/naveensrinivasan"><code>@​naveensrinivasan</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/979">ossf/scorecard-action#979</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.0.5...v2.0.6">https://github.com/ossf/scorecard-action/compare/v2.0.5...v2.0.6</a></p>
<h2>v2.0.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Remove trailing space from example by <a
href="https://github.com/jamacku"><code>@​jamacku</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/955">ossf/scorecard-action#955</a></li>
<li>🌱 Bump actions/cache from 3.0.8 to 3.0.10 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/956">ossf/scorecard-action#956</a></li>
<li>🌱 Bump github/codeql-action from 2.1.25 to 2.1.26 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/957">ossf/scorecard-action#957</a></li>
<li>🌱 Bump step-security/harden-runner from 1.4.5 to 1.5.0 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/958">ossf/scorecard-action#958</a></li>
<li>🌱 Bump debian from <code>5cf1d98</code> to
<code>b46fc4e</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/959">ossf/scorecard-action#959</a></li>
<li>🌱 Bump github.com/sigstore/cosign from 1.12.1 to 1.13.0 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/962">ossf/scorecard-action#962</a></li>
<li>🌱 Upgrade to go 1.19 by <a
href="https://github.com/naveensrinivasan"><code>@​naveensrinivasan</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/961">ossf/scorecard-action#961</a></li>
<li>🌱 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/967">ossf/scorecard-action#967</a></li>
<li>🌱 Bump golang from <code>c2a98a5</code> to
<code>b850621</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/966">ossf/scorecard-action#966</a></li>
<li>🌱 Bump golang from <code>b850621</code> to
<code>25de7b6</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/968">ossf/scorecard-action#968</a></li>
<li>New release for Scorecard v4.8.0 by <a
href="https://github.com/naveensrinivasan"><code>@​naveensrinivasan</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/969">ossf/scorecard-action#969</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/jamacku"><code>@​jamacku</code></a> made
their first contribution in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/955">ossf/scorecard-action#955</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.0.4...v2.0.5">https://github.com/ossf/scorecard-action/compare/v2.0.4...v2.0.5</a></p>
<h2>v2.0.4</h2>
<p>Fixes <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/856">#856</a></p>
<h2>What's Changed</h2>
<ul>
<li>🌱 Bump github.com/caarlos0/env/v6 from 6.10.0 to 6.10.1 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/934">ossf/scorecard-action#934</a></li>
<li>feat: do not run signing on pull requests by <a
href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/935">ossf/scorecard-action#935</a></li>
<li>🌱 Bump debian from 11.4-slim to 11.5-slim by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/936">ossf/scorecard-action#936</a></li>
<li>🌱 Bump github.com/sigstore/cosign from 1.11.1 to 1.12.0 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/938">ossf/scorecard-action#938</a></li>
<li>🌱 Bump github/codeql-action from 2.1.22 to 2.1.24 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/941">ossf/scorecard-action#941</a></li>
<li>🐛 Restore behavior of ignoring scorecard runtime errors by <a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/948">ossf/scorecard-action#948</a></li>
<li>🌱 Bump actions/dependency-review-action from 2.1.0 to 2.4.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/950">ossf/scorecard-action#950</a></li>
<li>🌱 Bump github.com/sigstore/cosign from 1.12.0 to 1.12.1 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/947">ossf/scorecard-action#947</a></li>
<li>🌱 Bump github/codeql-action from 2.1.24 to 2.1.25 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/949">ossf/scorecard-action#949</a></li>
<li>🌱 Bump codecov/codecov-action from 3.1.0 to 3.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/942">ossf/scorecard-action#942</a></li>
<li>Create v2.0.4 patch by <a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/952">ossf/scorecard-action#952</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/948">ossf/scorecard-action#948</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ossf/scorecard-action/compare/v2.0.3...v2.0.4">https://github.com/ossf/scorecard-action/compare/v2.0.3...v2.0.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="99c53751e0"><code>99c5375</code></a>
Fix - Broken dockerfile (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/979">#979</a>)</li>
<li><a
href="ff6221f234"><code>ff6221f</code></a>
New release for Scorecard v4.8.0 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/969">#969</a>)</li>
<li><a
href="608d088417"><code>608d088</code></a>
🌱 Bump golang from <code>b850621</code> to <code>25de7b6</code>
(<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/968">#968</a>)</li>
<li><a
href="5e97403151"><code>5e97403</code></a>
🌱 Bump golang from <code>c2a98a5</code> to <code>b850621</code>
(<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/966">#966</a>)</li>
<li><a
href="851b893ef5"><code>851b893</code></a>
🌱 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/967">#967</a>)</li>
<li><a
href="c9866174c7"><code>c986617</code></a>
🌱 Upgrade to go 1.19 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/961">#961</a>)</li>
<li><a
href="c3d8fd9ebe"><code>c3d8fd9</code></a>
🌱 Bump github.com/sigstore/cosign from 1.12.1 to 1.13.0 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/962">#962</a>)</li>
<li><a
href="6075f427dd"><code>6075f42</code></a>
🌱 Bump debian from <code>5cf1d98</code> to <code>b46fc4e</code>
(<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/959">#959</a>)</li>
<li><a
href="f3005530a0"><code>f300553</code></a>
🌱 Bump step-security/harden-runner from 1.4.5 to 1.5.0 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/958">#958</a>)</li>
<li><a
href="de0b2c5459"><code>de0b2c5</code></a>
🌱 Bump github/codeql-action from 2.1.25 to 2.1.26 (<a
href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/957">#957</a>)</li>
<li>Additional commits viewable in <a
href="865b409285...99c53751e0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ossf/scorecard-action&package-manager=github_actions&previous-version=2.0.3&new-version=2.0.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-03 16:18:02 +00:00
jrandolf
2e3719cd7f
chore: pin checkout action (#9069) 2022-10-06 12:44:45 +02:00
Alex Rudenko
6f37eed91b
chore: add id-token permissions to scorecard-action (#8971)
See ossf/scorecard-action#900

Example failure with scorecard-action@2 https://github.com/puppeteer/puppeteer/actions/runs/3066712334/jobs/4952194627
2022-09-19 06:24:16 +00:00
dependabot[bot]
5a10de422a
chore(deps): bump ossf/scorecard-action from 1.1.2 to 2.0.3 (#8949)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.1.2 to 2.0.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ce330fde6b...865b409285)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-16 09:10:39 +00:00
dependabot[bot]
66d9c9521d
chore(deps): bump github/codeql-action from 2.1.21 to 2.1.23 (#8967)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.21 to 2.1.23.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](c7f292ea4f...6a38b7d4a1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-16 10:48:17 +02:00
dependabot[bot]
3eb4c2d2e0
chore(deps): bump github/codeql-action from 2.1.18 to 2.1.21 (#8849)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.18 to 2.1.21.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](2ca79b6fa8...c7f292ea4f)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-01 12:42:56 +02:00
dependabot[bot]
608dc6c408
chore(deps): bump github/codeql-action from 2.1.17 to 2.1.18 (#8779)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.17 to 2.1.18.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](0c670bbf04...2ca79b6fa8)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-12 13:30:39 +00:00
dependabot[bot]
6b35128e3e chore(deps): bump github/codeql-action from 2.1.12 to 2.1.17 (#8709)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.12 to 2.1.17.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](27ea8f8fe5...0c670bbf04)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-02 13:18:50 +00:00
dependabot[bot]
7a22f95fe7
chore(deps): bump ossf/scorecard-action from 1.1.1 to 1.1.2 (#8592)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.1.1 to 1.1.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](3e15ea8318...ce330fde6b)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-28 14:56:29 +02:00
dependabot[bot]
802ad9ee2a
chore(deps): bump ossf/scorecard-action from 1.0.4 to 1.1.1 (#8458)
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.0.4 to 1.1.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](c1aec4ac82...3e15ea8318)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-02 13:58:27 +02:00
dependabot[bot]
0451d175dd
chore(deps): bump github/codeql-action from 2.1.10 to 2.1.12 (#8461)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.10 to 2.1.12.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](2f58583a1b...27ea8f8fe5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-02 13:57:42 +02:00
dependabot[bot]
f67bfb7a6c
chore(deps): bump actions/upload-artifact from 3.0.0 to 3.1.0 (#8396)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](6673cd052c...3cea537223)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-31 15:52:18 +02:00
Randolf Jung
4ba9950cc5 chore: rename actions 2022-05-31 14:56:44 +02:00
dependabot[bot]
19bb407d4c
chore(deps): bump github/codeql-action (#8340)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 75b4f1c4669133dc294b06c2794e969efa2e5316 to 2.1.10. This release includes the previously tagged commit.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](75b4f1c466...2f58583a1b)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-20 05:31:37 +00:00