Skip to content

Commit

Permalink
[Dependencies]: Bump actions/dependency-review-action from 3.1.4 to 3…
Browse files Browse the repository at this point in the history
….1.5 (#493)

Bumps
[actions/dependency-review-action](https://github.com/actions/dependency-review-action)
from 3.1.4 to 3.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/dependency-review-action/releases">actions/dependency-review-action's
releases</a>.</em></p>
<blockquote>
<h2>3.1.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Smaller <code>per_page</code> when requesting diff by <a
href="https://github.com/hmaurer"><code>@​hmaurer</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/649">actions/dependency-review-action#649</a></li>
<li>Update dependencies:
<ul>
<li>Bump <code>@​typescript-eslint/parser</code> from 6.10.0 to 6.13.1
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/630">actions/dependency-review-action#630</a></li>
<li>Bump prettier from 3.0.3 to 3.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/629">actions/dependency-review-action#629</a></li>
<li>Bump <code>@​types/jest</code> from 29.5.8 to 29.5.11 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/637">actions/dependency-review-action#637</a></li>
<li>Bump nodemon from 3.0.1 to 3.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/636">actions/dependency-review-action#636</a></li>
<li>Replace pip -&gt; pypi in PURL examples by <a
href="https://github.com/febuiles"><code>@​febuiles</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/638">actions/dependency-review-action#638</a></li>
<li>Bump <code>@​typescript-eslint/eslint-plugin</code> from 6.12.0 to
6.15.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/644">actions/dependency-review-action#644</a></li>
<li>Bump eslint from 8.53.0 to 8.56.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/640">actions/dependency-review-action#640</a></li>
<li>Bump <code>@​typescript-eslint/parser</code> from 6.13.1 to 6.16.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/645">actions/dependency-review-action#645</a></li>
<li>Bump prettier from 3.1.0 to 3.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/dependency-review-action/pull/646">actions/dependency-review-action#646</a></li>
</ul>
</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/dependency-review-action/compare/v3.1.4...v3.1.5">https://github.com/actions/dependency-review-action/compare/v3.1.4...v3.1.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/dependency-review-action/commit/c74b580d73376b7750d3d2a50bfb8adc2c937507"><code>c74b580</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/dependency-review-action/issues/651">#651</a>
from actions/release-3.1.5</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/cc4f6536e38d1126c5e3b0683d469a14f23bfea4"><code>cc4f653</code></a>
Release 3.1.5</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/d2ed7c0d190b25003699acf31b6506f94e400986"><code>d2ed7c0</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/dependency-review-action/issues/649">#649</a>
from actions/per-page</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/9e77cc7329c64e40042b2d702c9c8a6b98f5a75d"><code>9e77cc7</code></a>
npm run package</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/b383a9aa6e91aa37260ea83f782725aacfa250a0"><code>b383a9a</code></a>
Smaller per_page when requesting diff</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/8a498204319e56e4cb7831fce86d1f8d15719456"><code>8a49820</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/dependency-review-action/issues/646">#646</a>
from actions/dependabot/npm_and_yarn/prettier-3.1.1</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/a10a70d24c039f55359b9068dca08552a2bec65d"><code>a10a70d</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/dependency-review-action/issues/645">#645</a>
from actions/dependabot/npm_and_yarn/typescript-eslin...</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/0de163860f5425228b352a126000dede2dbbe5c7"><code>0de1638</code></a>
Bump prettier from 3.1.0 to 3.1.1</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/522f0218d0ccb97bcd7cda2111f1bd6514aa3334"><code>522f021</code></a>
Bump <code>@​typescript-eslint/parser</code> from 6.13.1 to 6.16.0</li>
<li><a
href="https://github.com/actions/dependency-review-action/commit/2597ca4eee464355688f51c375ba0d7f75ba29b3"><code>2597ca4</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/dependency-review-action/issues/640">#640</a>
from actions/dependabot/npm_and_yarn/eslint-8.56.0</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/dependency-review-action/compare/v3.1.4...v3.1.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/dependency-review-action&package-manager=github_actions&previous-version=3.1.4&new-version=3.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>
  • Loading branch information
credfeto committed Jan 5, 2024
2 parents dec7991 + a6459a7 commit 78ea9e3
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .github/workflows/pr-lint.yml
Original file line number Diff line number Diff line change
Expand Up @@ -253,7 +253,7 @@ jobs:
fetch-depth: 0
- name: 'Dependency Review'
if: steps.visibility.outputs.is_public == 'true'
uses: actions/dependency-review-action@v3.1.4
uses: actions/dependency-review-action@v3.1.5

no-merge-commits:
# Check that there are no merge commits in the PR
Expand Down

0 comments on commit 78ea9e3

Please sign in to comment.