search

ossf / scorecard-action

Official GitHub Action for OpenSSF Scorecard.
Apache License 2.0
255 stars 70 forks source link

:seedling: Bump github.com/ossf/scorecard/v5 from 5.0.0-rc1 to 5.0.0-rc2 #1375

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps github.com/ossf/scorecard/v5 from 5.0.0-rc1 to 5.0.0-rc2.

Release notes

Sourced from github.com/ossf/scorecard/v5's releases.

v5.0.0-rc2

[!IMPORTANT]
This is a v5 prerelease candidate. There may be more breaking changes before the official v5.0.0 release.

What's Changed

Structured Results

Check Enhancements and Bug Fixes

  • Signed-Releases
    • :bug: Fixed a Signed-Releases bug where more releases were being analyzed than intended. (#4060, @​spencerschrock)
  • Code-Review

Breaking Changes

Docs

Other

New Contributors

Full Changelog: https://github.com/ossf/scorecard/compare/v5.0.0-rc1...v5.0.0-rc2

Commits
  • 6b5cb27 :seedling: Bump cloud.google.com/go/pubsub from 1.37.0 to 1.38.0 (#4088)
  • 13c7254 :seedling: Bump golang.org/x/text from 0.14.0 to 0.15.0 (#4089)
  • e6f5767 :seedling: Bump golang.org/x/oauth2 from 0.19.0 to 0.20.0 (#4087)
  • 2506905 :bug: Code-Review: change phabricator regex to allow URLs (#4086)
  • 81d239f :seedling: Bump actions/setup-go from 5.0.0 to 5.0.1 (#4083)
  • f3859fc :seedling: Bump the github-actions group across 1 directory with 2 updates (#...
  • 233741b :seedling: Bump google.golang.org/protobuf in /tools (#4084)
  • cad20c5 :seedling: Bump cloud.google.com/go/bigquery from 1.60.0 to 1.61.0 (#4069)
  • 16a88c3 :seedling: Bump github.com/onsi/ginkgo/v2 in /tools (#4076)
  • a788a38 🌱 Update Binary-Artifacts and License checks (#4079)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 5 months ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.