Bump ossf/scorecard-action from 1.0.3 to 1.1.1 #1207
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
requested review from
dthaler,
poornagmsft,
Alan-Jowett,
saxena-anurag and
shankarseal
as code owners
dependabot
bot
added
dependencies
Codecov Report
@@ Coverage Diff @@
## main #1207 +/- ##
==========================================
- Coverage 82.63% 82.59% -0.05%
==========================================
Files 116 116
Lines 19852 19852
==========================================
- Hits 16404 16396 -8
- Misses 3448 3456 +8
Continue to review full report at Codecov.
|
|
@dependabot ignore this minor version |
|
OK, I won't notify you about version 1.1.x again, unless you re-open this PR or update to a 1.1.x release yourself. |
dependabot
bot
deleted the
dependabot/github_actions/ossf/scorecard-action-1.1.1
branch
|
@dependabot recreate |
|
Looks like this PR is closed. If you re-open it I'll rebase it as long as no-one else has edited it (you can use |
|
@dependabot reopen |
dependabot
bot
restored the
dependabot/github_actions/ossf/scorecard-action-1.1.1
branch
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.0.3 to 1.1.1. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@b614d45...3e15ea8) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dthaler
force-pushed
the
dependabot/github_actions/ossf/scorecard-action-1.1.1
branch
from
9451c5e
to
06b5007
Compare
|
A newer version of ossf/scorecard-action exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged. |
|
@dependabot ignore this minor version ossf/scorecard-action#329 (comment) explains:
|
|
OK, I won't notify you about version 1.1.x again, unless you re-open this PR or update to a 1.1.x release yourself. |
dependabot
bot
deleted the
dependabot/github_actions/ossf/scorecard-action-1.1.1
branch
Bumps ossf/scorecard-action from 1.0.3 to 1.1.1.
Release notes
Sourced from ossf/scorecard-action's releases.
... (truncated)
Commits
3e15ea8✨ Bump container hash to use scorecard v4.3.1 (#324)6c071ac🌱 Bump actions/setup-go from 3.1.0 to 3.2.051fbe79🌱 Bump debian fromfbaacd5to06a93cbd8a25b2🌱 Bump github.com/caarlos0/env/v6 from 6.9.2 to 6.9.3cd3637bUpdate README.md (#319)77f5e34🌱 .github: Add dependency review action (#165)ef34fe9📖 docs/e2e: Add information about golang-staging branch tests (#170)1aa187d🌱 Bump github/codeql-action from 2.1.10 to 2.1.11 (#311)049eb0c🌱 Bump github.com/ossf/scorecard/v4 from 4.2.0 to 4.3.0 (#313)5c8bc69multi-repo-action: Cleanups (1/n) (#301)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)