Closed dependabot[bot] closed 1 month ago
VIOLATION DESCRIPTION | NUMBER OF VIOLATIONS |
---|---|
HIGH/CRITICAL SECURITY VULNERABILITIES | 3 |
MAJOR UPDATES AVAILABLE | 0 |
LICENSE REQUIRES REVIEW | 1 |
HIGH RISK LICENSES | 10 |
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY | 0 |
Integration Tests for 58304543654219e16b46ca283b661fed4b5b1ba5 run with result: Success ✅!
Superseded by #846.
Bumps the ci group with 4 updates in the / directory: docker/build-push-action, anchore/sbom-action, goreleaser/goreleaser-action and fsfe/reuse-action.
Updates
docker/build-push-action
from 5 to 6Release notes
Sourced from docker/build-push-action's releases.
Commits
1a16264
Merge pull request #1172 from crazy-max/build-export-disable9eea548
chore: update generated content11c2faa
rename DOCKER_BUILD_EXPORT_RETENTION_DAYS to DOCKER_BUILD_RECORD_RETENTION_DAYSde2365a
opt to disable build record uploadbca5082
Merge pull request #1173 from crazy-max/build-summary-env-changee7aab40
chore: update generated content63eb759
switch DOCKER_BUILD_SUMMARY_DISABLE to DOCKER_BUILD_SUMMARY53ec486
Merge pull request #1171 from docker/dependabot/npm_and_yarn/docker/actions-t...fe9d9f1
chore: update generated contentad37ba1
chore(deps): Bump@docker/actions-toolkit
from 0.30.0 to 0.31.0Updates
anchore/sbom-action
from 0.16.0 to 0.16.1Release notes
Sourced from anchore/sbom-action's releases.
Commits
95b086a
fix: workaround windows install script (#477)72370e1
fix: allow users to properly use the file input over the default path value (...e28bab5
chore(deps): update Syft to v1.5.0 (#470)2283abe
docs: notes for matrix and required permissions (#469)07e5b3a
chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#466)Updates
goreleaser/goreleaser-action
from 5 to 6Release notes
Sourced from goreleaser/goreleaser-action's releases.
Commits
286f3b1
ci: fix testsbeac410
ci: update workflow and .goreleaser.yml18bbabc
feat!: use "~> v2" as default (#463)Updates
fsfe/reuse-action
from 3 to 4Release notes
Sourced from fsfe/reuse-action's releases.
Commits
3ae3c6b
Merge pull request #32 from carmenbianca/bump-v4f807a9c
Bump to v400117e7
Merge pull request #29 from jsoref/spelling910515a
spelling: githubcfe1368
activate v3 workflow testDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show