github-actions[bot]
commented
4 months ago Dependency Review
✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.
OpenSSF Scorecard
| Package | Version | Score | Details | ||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| actions/softprops/action-gh-release | c062e08bd532815e2082a85e87e3ef29c3e6d191 | :green_circle: 5.1 | Details
|
Scanned Manifest Files
.github/workflows/push-tag.yml
- softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191
- softprops/action-gh-release@a74c6b72af54cfa997e81df42d94703d6313a2d0
This PR contains the following updates:
v2.0.6->v2.0.8Release Notes
softprops/action-gh-release (softprops/action-gh-release)
### [`v2.0.8`](https://togithub.com/softprops/action-gh-release/releases/tag/v2.0.8) [Compare Source](https://togithub.com/softprops/action-gh-release/compare/v2.0.7...v2.0.8) #### What's Changed ##### Other Changes 🔄 - chore(deps): bump prettier from 2.8.0 to 3.3.3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/480](https://togithub.com/softprops/action-gh-release/pull/480) - chore(deps): bump [@types/node](https://togithub.com/types/node) from 20.14.9 to 20.14.11 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/483](https://togithub.com/softprops/action-gh-release/pull/483) - chore(deps): bump [@octokit/plugin-throttling](https://togithub.com/octokit/plugin-throttling) from 9.3.0 to 9.3.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/484](https://togithub.com/softprops/action-gh-release/pull/484) - chore(deps): bump glob from 10.4.2 to 11.0.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/477](https://togithub.com/softprops/action-gh-release/pull/477) - refactor: write jest config in ts by [@chenrui333](https://togithub.com/chenrui333) in [https://github.com/softprops/action-gh-release/pull/485](https://togithub.com/softprops/action-gh-release/pull/485) - chore(deps): bump [@actions/github](https://togithub.com/actions/github) from 5.1.1 to 6.0.0 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/470](https://togithub.com/softprops/action-gh-release/pull/470) **Full Changelog**: https://github.com/softprops/action-gh-release/compare/v2...v2.0.8 ### [`v2.0.7`](https://togithub.com/softprops/action-gh-release/releases/tag/v2.0.7) [Compare Source](https://togithub.com/softprops/action-gh-release/compare/v2.0.6...v2.0.7) #### What's Changed ##### Bug fixes 🐛 - Fix missing update release body by [@FirelightFlagboy](https://togithub.com/FirelightFlagboy) in [https://github.com/softprops/action-gh-release/pull/365](https://togithub.com/softprops/action-gh-release/pull/365) ##### Other Changes 🔄 - Bump [@octokit/plugin-retry](https://togithub.com/octokit/plugin-retry) from 4.0.3 to 7.1.1 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/443](https://togithub.com/softprops/action-gh-release/pull/443) - Bump typescript from 4.9.5 to 5.5.2 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/467](https://togithub.com/softprops/action-gh-release/pull/467) - Bump [@types/node](https://togithub.com/types/node) from 20.14.6 to 20.14.8 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/469](https://togithub.com/softprops/action-gh-release/pull/469) - Bump [@types/node](https://togithub.com/types/node) from 20.14.8 to 20.14.9 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/473](https://togithub.com/softprops/action-gh-release/pull/473) - Bump typescript from 5.5.2 to 5.5.3 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/472](https://togithub.com/softprops/action-gh-release/pull/472) - Bump ts-jest from 29.1.5 to 29.2.2 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/479](https://togithub.com/softprops/action-gh-release/pull/479) - docs: document that existing releases are updated by [@jvanbruegge](https://togithub.com/jvanbruegge) in [https://github.com/softprops/action-gh-release/pull/474](https://togithub.com/softprops/action-gh-release/pull/474) #### New Contributors - [@jvanbruegge](https://togithub.com/jvanbruegge) made their first contribution in [https://github.com/softprops/action-gh-release/pull/474](https://togithub.com/softprops/action-gh-release/pull/474) - [@FirelightFlagboy](https://togithub.com/FirelightFlagboy) made their first contribution in [https://github.com/softprops/action-gh-release/pull/365](https://togithub.com/softprops/action-gh-release/pull/365) **Full Changelog**: https://github.com/softprops/action-gh-release/compare/v2.0.6...v2.0.7Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.