dependabot[bot]
95485e3144
build(deps): bump actions/dependency-review-action from 4.0.0 to 4.1.3 ( #6545 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 4.0.0 to 4.1.3.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](4901385134...9129d7d40bsupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-11 14:22:11 -04:00
dependabot[bot]
7678b576df
build(deps): bump actions/dependency-review-action from 3.1.5 to 4.0.0 ( #6472 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 3.1.5 to 4.0.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](c74b580d73...4901385134support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-29 08:32:11 -05:00
dependabot[bot]
3715e3549c
build(deps): bump actions/dependency-review-action from 3.1.4 to 3.1.5 ( #6452 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 3.1.4 to 3.1.5.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](01bc87099b...c74b580d73support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-08 21:08:25 +01:00
dependabot[bot]
435a4b86bf
build(deps): bump actions/dependency-review-action from 3.1.2 to 3.1.4 ( #6424 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 3.1.2 to 3.1.4.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](fde92acd08...01bc87099bsupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-08 09:24:33 -05:00
dependabot[bot]
ab76600204
build(deps): bump actions/dependency-review-action from 3.1.1 to 3.1.2 ( #6403 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 3.1.1 to 3.1.2.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](9f45b2463b...fde92acd08support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-13 09:21:11 -05:00
dependabot[bot]
5bbb7905f5
build(deps): bump actions/dependency-review-action from 3.1.0 to 3.1.1 ( #6386 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](6c5ccdad46...9f45b2463bsupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 09:58:16 -08:00
dependabot[bot]
21f6336f6b
build(deps): bump actions/dependency-review-action from 3.0.8 to 3.1.0 ( #6312 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 3.0.8 to 3.1.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](f6fff72a32...6c5ccdad46support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-11 07:39:22 -07:00
dependabot[bot]
96d3e09c7d
build(deps): bump actions/checkout from 3 to 4 ( #6302 )
2023-09-04 06:56:23 -07:00
dependabot[bot]
d9b7402020
build(deps): bump actions/dependency-review-action from 3.0.7 to 3.0.8 ( #6284 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 3.0.7 to 3.0.8.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](7d90b4f05f...f6fff72a32support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-21 09:32:00 -07:00
dependabot[bot]
eec26e59c6
build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.7 ( #6269 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 3.0.6 to 3.0.7.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](1360a344cc...7d90b4f05fsupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-14 09:19:51 -07:00
Ben Kochie
7e6d3bb533
Update workflow versioning ( #6165 )
...
* Use major version pinning for actions to reduce dependeabot churn.
* Use tilde matching for Go versions to use the latest patch release.
* Checkout before installing Go to fix go module caching.
Signed-off-by: SuperQ <superq@gmail.com >
2023-06-18 11:23:25 +02:00
dependabot[bot]
e0c1aa95a5
build(deps): bump actions/dependency-review-action from 3.0.4 to 3.0.6 ( #6144 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-10 12:09:09 +02:00
dependabot[bot]
07e97651d1
build(deps): bump actions/dependency-review-action from 3.0.3 to 3.0.4 ( #5977 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](c090f4e553...f46c48ed6dsupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-22 11:38:46 -04:00
dependabot[bot]
dce9d00789
build(deps): bump actions/dependency-review-action from 3.0.2 to 3.0.3 ( #5837 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](0ff3da6f81...c090f4e553support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-09 10:09:07 -05:00
dependabot[bot]
b2ed4bac77
build(deps): bump actions/dependency-review-action from 3.0.1 to 3.0.2 ( #5813 )
2022-12-20 05:54:08 -08:00
dependabot[bot]
c4dd9d50f1
build(deps): bump actions/dependency-review-action from 2.5.1 to 3.0.1 ( #5772 )
2022-11-21 05:27:26 -08:00
dependabot[bot]
1d96b29db4
build(deps): bump actions/dependency-review-action from 2.5.0 to 2.5.1 ( #5719 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 2.5.0 to 2.5.1.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](fd675ced9c...0efb1d1d84support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-25 11:37:29 -04:00
dependabot[bot]
adecc42394
build(deps): bump actions/dependency-review-action from 2.4.0 to 2.5.0 ( #5697 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 2.4.0 to 2.5.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](375c537008...fd675ced9csupport@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-17 11:09:31 -04:00
dependabot[bot]
8d7ce0c155
build(deps): bump actions/checkout from 3 to 3.1.0 ( #5677 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-10 10:02:36 -04:00
dependabot[bot]
4ba4969fa9
build(deps): bump actions/dependency-review-action from 2.1.0 to 2.4.0 ( #5653 )
2022-09-26 16:50:06 +01:00
dependabot[bot]
0dd211a971
build(deps): bump actions/dependency-review-action from 2.0.4 to 2.1.0 ( #5582 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-22 16:06:26 +02:00
dependabot[bot]
b7d9189abe
build(deps): bump actions/dependency-review-action from 2.0.2 to 2.0.4 ( #5523 )
2022-07-18 06:33:37 -07:00
dependabot[bot]
f08feea60a
build(deps): bump actions/dependency-review-action from 1.0.2 to 2.0.2 ( #5449 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 1.0.2 to 2.0.2.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](a9c83d3af6...1c59cdf2a9support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-06-20 07:05:24 -07:00
dependabot[bot]
0a75e7ca05
build(deps): bump actions/dependency-review-action from 1.0.1 to 1.0.2 ( #5419 )
2022-05-30 07:29:49 -07:00
dependabot[bot]
3a02f268b7
build(deps): bump actions/dependency-review-action from 1.0.0 to 1.0.1 ( #5396 )
2022-05-23 15:31:30 +02:00
Naveen
c1d6386a2d
chore(deps): Included dependency review ( #5378 )
...
> Dependency Review GitHub Action in your repository to enforce dependency
> reviews on your pull requests.
> The action scans for vulnerable versions of dependencies introduced by package version
> changes in pull requests,
> and warns you about the associated security vulnerabilities.
> This gives you better visibility of what's changing in a pull request,
> and helps prevent vulnerabilities being added to your repository.
https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com >
2022-05-16 09:52:26 -07:00
