Closed dependabot[bot] closed 10 months ago
All modified and coverable lines are covered by tests :white_check_mark:
Comparison is base (
bf4cac9
) 60.46% compared to head (3338abc
) 60.46%.
:exclamation: Your organization needs to install the Codecov GitHub app to enable full functionality.
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
Bumps ossf/scorecard-action from 2.3.0 to 2.3.1.
Release notes
Sourced from ossf/scorecard-action's releases.
Commits
0864cf1
:seedling: Bump docker tag to for v2.3.1 release (#1284)72df3bf
:seedling: Bump github.com/ossf/scorecard/v4 from v4.13.0 to v4.13.1 (#1282)0ea411f
:seedling: Bump the docker-images group with 1 update (#1281)dbfd042
:seedling: Bump the github-actions group with 1 update (#1280)2fa1e2f
:seedling: Bump golang.org/x/net from 0.16.0 to 0.17.0 (#1278)652ddd0
:seedling: Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 (#1277)28d0c92
:seedling: Group Dependabot updates for GitHub Actions and Dockerfiles (#1276)cb50491
:seedling: Bump distroless/base froma35b652
tob31a6e0
(#1275)87157ac
:seedling: Bump github/codeql-action from 2.21.9 to 2.22.1 (#1274)7c1648b
:seedling: Bump step-security/harden-runner from 2.5.1 to 2.6.0 (#1273)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show