Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build: update scorecard action dependencies #47385

Closed

Conversation

angular-robot
Copy link
Collaborator

@angular-robot angular-robot commented Sep 8, 2022

This PR contains the following updates:

Package Type Update Change
actions/checkout action minor v3.0.2 -> v3.1.0
github/codeql-action action patch v2.1.22 -> v2.1.27
ossf/scorecard-action action major v1.1.2 -> v2.0.4

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.


Release Notes

actions/checkout

v3.1.0

Compare Source

github/codeql-action

v2.1.27

Compare Source

v2.1.26

Compare Source

v2.1.25

Compare Source

v2.1.24

Compare Source

v2.1.23

Compare Source

ossf/scorecard-action

v2.0.4

Compare Source

Fixes #​856

What's Changed

New Contributors

Full Changelog: ossf/scorecard-action@v2.0.3...v2.0.4

v2.0.3

Compare Source

Patch for fix in #​898

v2.0.2

Compare Source

Fixes https://github.com/ossf/scorecard-action/issues/895

v2.0.1

Compare Source

Fix for #​856

v2.0.0

Compare Source

What's Changed

New Contributors

Full Changelog: ossf/scorecard-action@v1.1.2...v2.0.0


Configuration

📅 Schedule: Branch creation - "after 10:00pm on monday,before 04:00am on tuesday" in timezone America/Tijuana, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by Renovate Bot.

@angular-robot angular-robot added action: review The PR is still awaiting reviews from at least one requested reviewer area: build & ci Related the build and CI infrastructure of the project target: patch This PR is targeted for the next patch release labels Sep 8, 2022
@ngbot ngbot bot added this to the Backlog milestone Sep 8, 2022
@angular-robot angular-robot force-pushed the ng-renovate/scorecard-action branch 3 times, most recently from 19bff71 to dccc33e Compare September 12, 2022 15:39
@angular-robot angular-robot changed the title build: update ossf/scorecard-action action to v2 build: update scorecard action dependencies Sep 15, 2022
@angular-robot angular-robot force-pushed the ng-renovate/scorecard-action branch 3 times, most recently from 2978745 to 083c885 Compare September 21, 2022 19:06
@angular-robot angular-robot force-pushed the ng-renovate/scorecard-action branch 3 times, most recently from bafb79b to c08fd85 Compare October 4, 2022 10:03
See associated pull request for more information.
Copy link
Member

@josephperrott josephperrott left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@josephperrott josephperrott added action: merge The PR is ready for merge by the caretaker and removed action: review The PR is still awaiting reviews from at least one requested reviewer labels Oct 10, 2022
@jessicajaniuk
Copy link
Contributor

This PR was merged into the repository by commit f467c9e.

jessicajaniuk pushed a commit that referenced this pull request Oct 10, 2022
See associated pull request for more information.

PR Close #47385
@angular-robot angular-robot deleted the ng-renovate/scorecard-action branch October 10, 2022 20:39
@angular-automatic-lock-bot
Copy link

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

This action has been performed automatically by a bot.

@angular-automatic-lock-bot angular-automatic-lock-bot bot locked and limited conversation to collaborators Nov 10, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: patch This PR is targeted for the next patch release
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants