chore(deps): bump actions/dependency-review-action from 3.0.3 to 3.0.6

[dependabot[bot]]

Bumps actions/dependency-review-action from 3.0.3 to 3.0.6.

Release notes

Sourced from actions/dependency-review-action's releases.

3.0.6

Fixes a bug introduced in 3.0.5 where we raised PURL errors when Dependency Graph returns an empty package_url.

3.0.5

What's Changed

Thanks to @​theztefan, we now have a new allow-dependencies-licenses option that takes a list of dependencies that will be excluded from license checks. See the configuration options for more information on how to use it.

• Exclude dependencies from license checks by @​theztefan in actions/dependency-review-action#423
• Documentation examples by @​theztefan in actions/dependency-review-action#423
• Show snapshot warnings in the summary by @​juxtin in actions/dependency-review-action#439
• Fix default values for fail-on-severity by @​febuiles in actions/dependency-review-action#451
• Updated dependencies.

New Contributors

• @​juxtin made their first contribution in actions/dependency-review-action#439
• @​theztefan made their first contribution in actions/dependency-review-action#423

Full Changelog: https://github.com/actions/dependency-review-action/compare/v3...v3.0.5

3.0.4

What's New?

The Action can now publish a comment in the pull request if the comment-summary-in-pr option is set. More information can be found in the README.

New Contributors

• @​davelosert made their first contribution in actions/dependency-review-action#393

Changelog

• Write Summary as comment to the pull request by @​davelosert in actions/dependency-review-action#393
• Adjust summary format by @​davelosert in actions/dependency-review-action#416
• Security updates.

Full Changelog: https://github.com/actions/dependency-review-action/compare/v3...v3.0.4

Commits

• 1360a34 Merge pull request #494 from actions/fix-purl-bug
• 123b587 bumping to 3.0.6
• cd559bc adding dist
• 70f8094 adding a test for empty PURLs
• 0b306ae Don't try to create PURLs from empty strings.
• 554aaf5 Merge pull request #423 from theztefan/allow-list-dependencies
• c6e94c1 External config files should use underscores, not dashes
• 88d6af3 latest build
• f1c8401 resolve merge conflicts
• ef8ebf0 rebuild
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[3ware-release[bot]]

This PR is included in version 1.9.17