Closed dependabot[bot] closed 2 weeks ago
Hey there and thank you for opening this pull request! 👋🏼
We require pull request titles to follow the Conventional Commits specification and it looks like your proposed title needs to be adjusted.
Details:
No release type found in pull request title "Bump the dependencies group across 1 directory with 4 updates". Add a prefix to indicate what kind of release this pull request corresponds to. For reference, see https://www.conventionalcommits.org/
Available types:
- feat: A new feature
- fix: A bug fix
- docs: Documentation only changes
- style: Changes that do not affect the meaning of the code (white-space, formatting, missing semi-colons, etc)
- refactor: A code change that neither fixes a bug nor adds a feature
- perf: A code change that improves performance
- test: Adding missing tests or correcting existing tests
- build: Changes that affect the build system or external dependencies (example scopes: gulp, broccoli, npm)
- ci: Changes to our CI configuration files and scripts (example scopes: Travis, Circle, BrowserStack, SauceLabs)
- chore: Other changes that don't modify src or test files
- revert: Reverts a previous commit
Superseded by #348.
Bumps the dependencies group with 4 updates in the / directory: actions/checkout, checkmarx/kics-github-action, github/codeql-action and aquasecurity/trivy-action.
Updates
actions/checkout
from 4.1.6 to 4.1.7Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
692973e
Prepare 4.1.7 release (#1775)6ccd57f
Pin actions/checkout's own workflows to a known, good, stable version. (#1776)b17fe1e
Handle hidden refs (#1774)b80ff79
Bump actions/checkout from 3 to 4 (#1697)b1ec302
Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1739)Updates
checkmarx/kics-github-action
from 2.0.0 to 2.1.0Release notes
Sourced from checkmarx/kics-github-action's releases.
Commits
aacf8e8
Merge pull request #113 from Checkmarx/gabriel-cx-patch-1435a0fa
Update Dockerfileadf128a
Merge pull request #111 from Checkmarx/gabriel-cx-patch-1d9c401a
Update CODEOWNERS4f52eb4
Update CODEOWNERS2d85b70
Create CODEOWNERSda9de25
Merge pull request #110 from Checkmarx/gabriel-cx-patch-15956760
Update README.mdUpdates
github/codeql-action
from 3.25.6 to 3.25.10Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
23acc5c
Merge pull request #2337 from github/update-v3.25.10-5bf6dad359b72dbd
Update changelog for v3.25.105bf6dad
Merge pull request #2329 from github/henrymercer/csharp-buildless-rollback-me...feec81c
Merge branch 'main' into henrymercer/csharp-buildless-rollback-mechanism789b5f8
Merge pull request #2328 from github/henrymercer/direct-tracing-fixc36b5fc
Merge pull request #2327 from github/update-bundle/codeql-bundle-v2.17.5b3642aa
Merge branch 'main' into update-bundle/codeql-bundle-v2.17.51fc6e20
Merge pull request #2335 from github/mergeback/v3.25.9-to-main-530d4fea356bee4
Update checked-in dependencies385808c
Update changelog and version after v3.25.9Updates
aquasecurity/trivy-action
from 0.21.0 to 0.22.0Release notes
Sourced from aquasecurity/trivy-action's releases.
Commits
595be6a
Upgrade trivy to v0.52.0 (#364)841fb37
chore(docs): Reference the use of a pinned version (#356)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show