dependabot[bot] 3e8363eb80 chore(deps): bump ossf/scorecard-action from 2.0.3 to 2.0.6 (#9170) ... Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.0.3 to 2.0.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ossf/scorecard-action/releases">ossf/scorecard-action's releases</a>.</em></p> <blockquote> <h2>v2.0.6</h2> <h2>What's Changed</h2> <ul> <li>Fix - Broken dockerfile by <a href="https://github.com/naveensrinivasan"><code>@​naveensrinivasan</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/979">ossf/scorecard-action#979</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ossf/scorecard-action/compare/v2.0.5...v2.0.6">https://github.com/ossf/scorecard-action/compare/v2.0.5...v2.0.6</a></p> <h2>v2.0.5</h2> <h2>What's Changed</h2> <ul> <li>Remove trailing space from example by <a href="https://github.com/jamacku"><code>@​jamacku</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/955">ossf/scorecard-action#955</a></li> <li>🌱 Bump actions/cache from 3.0.8 to 3.0.10 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/956">ossf/scorecard-action#956</a></li> <li>🌱 Bump github/codeql-action from 2.1.25 to 2.1.26 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/957">ossf/scorecard-action#957</a></li> <li>🌱 Bump step-security/harden-runner from 1.4.5 to 1.5.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/958">ossf/scorecard-action#958</a></li> <li>🌱 Bump debian from <code>5cf1d98</code> to <code>b46fc4e</code> by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/959">ossf/scorecard-action#959</a></li> <li>🌱 Bump github.com/sigstore/cosign from 1.12.1 to 1.13.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/962">ossf/scorecard-action#962</a></li> <li>🌱 Upgrade to go 1.19 by <a href="https://github.com/naveensrinivasan"><code>@​naveensrinivasan</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/961">ossf/scorecard-action#961</a></li> <li>🌱 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/967">ossf/scorecard-action#967</a></li> <li>🌱 Bump golang from <code>c2a98a5</code> to <code>b850621</code> by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/966">ossf/scorecard-action#966</a></li> <li>🌱 Bump golang from <code>b850621</code> to <code>25de7b6</code> by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/968">ossf/scorecard-action#968</a></li> <li>New release for Scorecard v4.8.0 by <a href="https://github.com/naveensrinivasan"><code>@​naveensrinivasan</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/969">ossf/scorecard-action#969</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jamacku"><code>@​jamacku</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/955">ossf/scorecard-action#955</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ossf/scorecard-action/compare/v2.0.4...v2.0.5">https://github.com/ossf/scorecard-action/compare/v2.0.4...v2.0.5</a></p> <h2>v2.0.4</h2> <p>Fixes <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/856">#856</a></p> <h2>What's Changed</h2> <ul> <li>🌱 Bump github.com/caarlos0/env/v6 from 6.10.0 to 6.10.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/934">ossf/scorecard-action#934</a></li> <li>feat: do not run signing on pull requests by <a href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/935">ossf/scorecard-action#935</a></li> <li>🌱 Bump debian from 11.4-slim to 11.5-slim by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/936">ossf/scorecard-action#936</a></li> <li>🌱 Bump github.com/sigstore/cosign from 1.11.1 to 1.12.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/938">ossf/scorecard-action#938</a></li> <li>🌱 Bump github/codeql-action from 2.1.22 to 2.1.24 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/941">ossf/scorecard-action#941</a></li> <li>🐛 Restore behavior of ignoring scorecard runtime errors by <a href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/948">ossf/scorecard-action#948</a></li> <li>🌱 Bump actions/dependency-review-action from 2.1.0 to 2.4.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/950">ossf/scorecard-action#950</a></li> <li>🌱 Bump github.com/sigstore/cosign from 1.12.0 to 1.12.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/947">ossf/scorecard-action#947</a></li> <li>🌱 Bump github/codeql-action from 2.1.24 to 2.1.25 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/949">ossf/scorecard-action#949</a></li> <li>🌱 Bump codecov/codecov-action from 3.1.0 to 3.1.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/942">ossf/scorecard-action#942</a></li> <li>Create v2.0.4 patch by <a href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a> in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/952">ossf/scorecard-action#952</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/spencerschrock"><code>@​spencerschrock</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/ossf/scorecard-action/pull/948">ossf/scorecard-action#948</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/ossf/scorecard-action/compare/v2.0.3...v2.0.4">https://github.com/ossf/scorecard-action/compare/v2.0.3...v2.0.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="99c53751e0"><code>99c5375</code></a> Fix - Broken dockerfile (<a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/979">#979</a>)</li> <li><a href="ff6221f234"><code>ff6221f</code></a> New release for Scorecard v4.8.0 (<a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/969">#969</a>)</li> <li><a href="608d088417"><code>608d088</code></a> 🌱 Bump golang from <code>b850621</code> to <code>25de7b6</code> (<a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/968">#968</a>)</li> <li><a href="5e97403151"><code>5e97403</code></a> 🌱 Bump golang from <code>c2a98a5</code> to <code>b850621</code> (<a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/966">#966</a>)</li> <li><a href="851b893ef5"><code>851b893</code></a> 🌱 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (<a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/967">#967</a>)</li> <li><a href="c9866174c7"><code>c986617</code></a> 🌱 Upgrade to go 1.19 (<a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/961">#961</a>)</li> <li><a href="c3d8fd9ebe"><code>c3d8fd9</code></a> 🌱 Bump github.com/sigstore/cosign from 1.12.1 to 1.13.0 (<a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/962">#962</a>)</li> <li><a href="6075f427dd"><code>6075f42</code></a> 🌱 Bump debian from <code>5cf1d98</code> to <code>b46fc4e</code> (<a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/959">#959</a>)</li> <li><a href="f3005530a0"><code>f300553</code></a> 🌱 Bump step-security/harden-runner from 1.4.5 to 1.5.0 (<a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/958">#958</a>)</li> <li><a href="de0b2c5459"><code>de0b2c5</code></a> 🌱 Bump github/codeql-action from 2.1.25 to 2.1.26 (<a href="https://github-redirect.dependabot.com/ossf/scorecard-action/issues/957">#957</a>)</li> <li>Additional commits viewable in <a href="865b409285...99c53751e0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>		2022-11-03 16:18:02 +00:00
..
ISSUE_TEMPLATE	docs: Fix broken link in issues (#9181)	2022-10-28 12:07:05 +02:00
workflows	chore(deps): bump ossf/scorecard-action from 2.0.3 to 2.0.6 (#9170)	2022-11-03 16:18:02 +00:00
dependabot.yml	chore: use dependabot for prod deps only (#8459)	2022-06-02 13:28:30 +02:00
PULL_REQUEST_TEMPLATE.md	chore: create PULL_REQUEST_TEMPLATE (#6988)	2021-09-23 08:58:39 +00:00
release-please.yml	chore: amend version freezes on release-please PRs	2022-05-31 14:41:22 +02:00
stale.yml	chore: Added Configuration to Bug Template (#9172)	2022-10-27 20:35:21 +02:00