Closed dependabot[bot] closed 1 month ago
VIOLATION DESCRIPTION | NUMBER OF VIOLATIONS |
---|---|
HIGH/CRITICAL SECURITY VULNERABILITIES | 3 |
MAJOR UPDATES AVAILABLE | 0 |
LICENSE REQUIRES REVIEW | 1 |
HIGH RISK LICENSES | 10 |
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY | 0 |
Integration Tests for 0cec0c21c2d7e38bc08f4f75c685fce779c7a119 run with result: Success ✅!
Integration Tests for 3d4c539c928fe7ae50b0e85e3c3613b933935c6e run with result: Success ✅!
Bumps the ci group with 5 updates in the / directory:
12
13
5
6
0.16.0
0.17.0
5
6
3
4
Updates
DeterminateSystems/nix-installer-action
from 12 to 13Release notes
Sourced from DeterminateSystems/nix-installer-action's releases.
Commits
ab6bcb2
Share /lib64 into the container (#109)0d82cb0
README: correct the source-url parameter docs (#108)2a2ecc1
Merge pull request #104 from detsys-pr-bot/detsys-ts-update-bc45b6c0a6318ae30...9e19e84
Regenerate distdc89725
Updatedetsys-ts
for: `Merge pull request #103 from detsys-pr-bot/detsys-ts...7ad5c49
Regenerate dist17a448a
Merge pull request #103 from detsys-pr-bot/detsys-ts-update-515d00bc192ae4460...45cb2f8
Updatedetsys-ts
for: `` (bc45b6c0a6318ae30192c4bf23a73dc879bdb632
)47dc486
Update detsys-ts for: Merge pull request #51 from DeterminateSystems/add-miss...4b8e190
Update detsys-ts (#102)Updates
docker/build-push-action
from 5 to 6Release notes
Sourced from docker/build-push-action's releases.
Commits
5176d81
Merge pull request #1191 from docker/dependabot/npm_and_yarn/docker/actions-t...ec10ae8
chore: update generated content597e8fc
chore(deps): Bump@docker/actions-toolkit
from 0.34.0 to 0.35.0e050dfa
Merge pull request #1186 from docker/dependabot/npm_and_yarn/docker/actions-t...d1fcdb6
chore: update generated contenta6067b9
chore(deps): Bump@docker/actions-toolkit
from 0.33.0 to 0.34.01ca370b
Merge pull request #1183 from crazy-max/revert-gha-cache-to2c95ebe
chore: update generated contentd189d0e
Revert "set repository and ghtoken attributes for gha cache type"a254f8c
Merge pull request #1179 from docker/dependabot/npm_and_yarn/docker/actions-t...Updates
anchore/sbom-action
from 0.16.0 to 0.17.0Release notes
Sourced from anchore/sbom-action's releases.
Commits
d94f46e
chore(deps): update Syft to v1.9.0 (#479)ee41e6a
chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 (#474)23e0b38
chore(deps): bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 (#475)f4035cd
chore: serialize tests to prevent install race (#478)f3253ca
chore(deps): update Syft to v1.8.0 (#473)95b086a
fix: workaround windows install script (#477)72370e1
fix: allow users to properly use the file input over the default path value (...e28bab5
chore(deps): update Syft to v1.5.0 (#470)2283abe
docs: notes for matrix and required permissions (#469)07e5b3a
chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#466)Updates
goreleaser/goreleaser-action
from 5 to 6Release notes
Sourced from goreleaser/goreleaser-action's releases.
Commits
286f3b1
ci: fix testsbeac410
ci: update workflow and .goreleaser.yml18bbabc
feat!: use "~> v2" as default (#463)Updates
fsfe/reuse-action
from 3 to 4Release notes
Sourced from fsfe/reuse-action's releases.
Commits
3ae3c6b
Merge pull request #32 from carmenbianca/bump-v4f807a9c
Bump to v400117e7
Merge pull request #29 from jsoref/spelling910515a
spelling: githubcfe1368
activate v3 workflow testDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show