Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
build(deps): bump actions/dependency-review-action from 4.2.3 to 4.2.4 (
#199) Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.2.3 to 4.2.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/dependency-review-action/releases">actions/dependency-review-action's releases</a>.</em></p> <blockquote> <h2>v4.2.4</h2> <h2>What's Changed</h2> <p>Fixed a bug in the output of OpenSSF cards for GitHub Actions.</p> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/sporkmonger"><code>@sporkmonger</code></a> made their first contribution in <a href="https://redirect.github.com/actions/dependency-review-action/pull/721">actions/dependency-review-action#721</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/dependency-review-action/compare/v4.2.3...v4.2.4">https://github.com/actions/dependency-review-action/compare/v4.2.3...v4.2.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/dependency-review-action/commit/733dd5d4a5203f238c33806593ec0f5fc5343d8c"><code>733dd5d</code></a> bumping to 4.2.4</li> <li><a href="https://github.com/actions/dependency-review-action/commit/9093495859e9dc61f002c901f18ddcaf5701afaa"><code>9093495</code></a> Merge pull request <a href="https://redirect.github.com/actions/dependency-review-action/issues/725">#725</a> from actions/issue-718</li> <li><a href="https://github.com/actions/dependency-review-action/commit/35b83b4207bc4ddda40747432fc8891f896a61d9"><code>35b83b4</code></a> Fix prettier issues</li> <li><a href="https://github.com/actions/dependency-review-action/commit/e0570565948a376f7ea7dda0d5a76bf52db457b9"><code>e057056</code></a> Add packaged code update</li> <li><a href="https://github.com/actions/dependency-review-action/commit/d684d038b230308da1be23bdf8b21bd6c34cd0df"><code>d684d03</code></a> Add trailing slash to tests</li> <li><a href="https://github.com/actions/dependency-review-action/commit/2b0aaf16382d708aebc2f4549c1fb9019f9f7124"><code>2b0aaf1</code></a> Fix extra slash issue</li> <li><a href="https://github.com/actions/dependency-review-action/commit/d9209374afffa5b855ed654f9736290f72698ba6"><code>d920937</code></a> Fix repositoryUrl issues around GitHub Actions</li> <li><a href="https://github.com/actions/dependency-review-action/commit/02b13f6b52d162d8fe0578ed6382f582559ae49d"><code>02b13f6</code></a> Merge pull request <a href="https://redirect.github.com/actions/dependency-review-action/issues/721">#721</a> from sporkmonger/patch-1</li> <li><a href="https://github.com/actions/dependency-review-action/commit/6e0fa26ac35aa362fce85f66bc452a3ec6d4c421"><code>6e0fa26</code></a> Typo fixes</li> <li>See full diff in <a href="https://github.com/actions/dependency-review-action/compare/0fa40c3c10055986a88de3baa0d6ec17c5a894b3...733dd5d4a5203f238c33806593ec0f5fc5343d8c">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/dependency-review-action&package-manager=github_actions&previous-version=4.2.3&new-version=4.2.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information