Closed dependabot[bot] closed 4 months ago
VIOLATION DESCRIPTION | NUMBER OF VIOLATIONS |
---|---|
HIGH/CRITICAL SECURITY VULNERABILITIES | 0 |
MAJOR UPDATES AVAILABLE | 0 |
LICENSE REQUIRES REVIEW | 2 |
HIGH RISK LICENSES | 9 |
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY | 0 |
Integration Tests for 4a026dee1b4622715e4ca089e60f4d966731695b run with result: Success ✅!
Bumps the ci group with 2 updates: reproducible-containers/buildkit-cache-dance and sigstore/cosign-installer.
Updates
reproducible-containers/buildkit-cache-dance
from 2 to 3Release notes
Sourced from reproducible-containers/buildkit-cache-dance's releases.
... (truncated)
Commits
5de31fc
Merge pull request #28 from aminya/support-cache-props2a1e987
test: add tests for run functionsd2e9ac7
test: add unit tests for the opts functions969118a
fix: add defaults for the missing actions optionscfc6f5e
docs: update the version to v3.1.02df8be0
test: test the id option for var/cache/apt43a181d
feat: support arbitrary mount options for each cache8da9ff0
Merge pull request #27 from aminya/ignore-cleanupf182ab1
fix: ignore clean-up errors0fc239d
Merge pull request #25 from aminya/rewriteUpdates
sigstore/cosign-installer
from 3.4.0 to 3.5.0Release notes
Sourced from sigstore/cosign-installer's releases.
Commits
59acb62
bump default version to v2.2.4, prep for v3.5.0 release (#159)22be4ce
use go 1.22 now (#160)162dfdf
Bump actions/checkout from 4.1.1 to 4.1.2 (#157)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show