sjinks / wp-two-factor-provider-webauthn

WebAuthn Provider for Two Factor plugin
https://wordpress.org/plugins/two-factor-provider-webauthn/
MIT License
15 stars 7 forks source link

chore(deps): update softprops/action-gh-release action to v2.1.0 #926

Closed renovate[bot] closed 2 weeks ago

renovate[bot] commented 3 weeks ago

This PR contains the following updates:

Package Type Update Change
softprops/action-gh-release action minor v2.0.8 -> v2.1.0

Release Notes

softprops/action-gh-release (softprops/action-gh-release) ### [`v2.1.0`](https://redirect.github.com/softprops/action-gh-release/releases/tag/v2.1.0) [Compare Source](https://redirect.github.com/softprops/action-gh-release/compare/v2.0.9...v2.1.0) #### What's Changed ##### Exciting New Features 🎉 - feat: add support for release assets with multiple spaces within the name by [@​dukhine](https://redirect.github.com/dukhine) in [https://github.com/softprops/action-gh-release/pull/518](https://redirect.github.com/softprops/action-gh-release/pull/518) - feat: preserve upload order by [@​richarddd](https://redirect.github.com/richarddd) in [https://github.com/softprops/action-gh-release/pull/500](https://redirect.github.com/softprops/action-gh-release/pull/500) ##### Other Changes 🔄 - chore(deps): bump [@​types/node](https://redirect.github.com/types/node) from 22.8.2 to 22.8.7 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/539](https://redirect.github.com/softprops/action-gh-release/pull/539) #### New Contributors - [@​dukhine](https://redirect.github.com/dukhine) made their first contribution in [https://github.com/softprops/action-gh-release/pull/518](https://redirect.github.com/softprops/action-gh-release/pull/518) - [@​richarddd](https://redirect.github.com/richarddd) made their first contribution in [https://github.com/softprops/action-gh-release/pull/500](https://redirect.github.com/softprops/action-gh-release/pull/500) **Full Changelog**: https://github.com/softprops/action-gh-release/compare/v2...v2.1.0 ### [`v2.0.9`](https://redirect.github.com/softprops/action-gh-release/releases/tag/v2.0.9) [Compare Source](https://redirect.github.com/softprops/action-gh-release/compare/v2.0.8...v2.0.9) #### What's Changed - maintenance release with updated dependencies #### New Contributors - [@​kbakdev](https://redirect.github.com/kbakdev) made their first contribution in [https://github.com/softprops/action-gh-release/pull/521](https://redirect.github.com/softprops/action-gh-release/pull/521) **Full Changelog**: https://github.com/softprops/action-gh-release/compare/v2...v2.0.9

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

github-actions[bot] commented 3 weeks ago

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/softprops/action-gh-release 01570a1f39cb168c169c802c3bceb9e93fb10974 :green_circle: 5.1
Details
CheckScoreReason
Maintained:green_circle: 1024 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review:warning: 2Found 1/4 approved changesets -- score normalized to 2
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Packaging:warning: -1packaging workflow not detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Branch-Protection:warning: 0branch protection not enabled on development/release branches
Pinned-Dependencies:green_circle: 10all dependencies are pinned
Fuzzing:warning: 0project is not fuzzed
Security-Policy:warning: 0security policy file not detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities:green_circle: 91 existing vulnerabilities detected

Scanned Files