ossf / criticality_score

Gives criticality score for an open source project
Apache License 2.0
1.31k stars 119 forks source link

Bump github/codeql-action from 3.24.3 to 3.24.9 #579

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps github/codeql-action from 3.24.3 to 3.24.9.

Commits
  • 1b1aada Merge pull request #2208 from github/update-v3.24.9-09d4101d2
  • 6505708 Update changelog for v3.24.9
  • 09d4101 Merge pull request #2203 from github/update-bundle/codeql-bundle-v2.16.5
  • a3ab02e Merge branch 'main' into update-bundle/codeql-bundle-v2.16.5
  • 9cf4574 Add changelog note
  • 964f5e7 Merge pull request #2207 from github/henrymercer/more-processing-error-catego...
  • 9c0c35b Merge pull request #2206 from github/henrymercer/improved-autobuild-error-wit...
  • c84e4c8 Mark some more processing errors as invalid SARIF upload requests
  • 4aca720 Improve error message when using build modes and autobuild fails
  • 7f375ae Wrap configuration errors for all CLI commands
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 5 months ago

Superseded by #584.