Bump actions/dependency-review-action from 4.3.2 to 4.3.3 in the github-actions group

[dependabot[bot]]

Bumps the github-actions group with 1 update: actions/dependency-review-action.

Updates actions/dependency-review-action from 4.3.2 to 4.3.3

Release notes

Sourced from actions/dependency-review-action's releases.

Notes for v4.3.3

What's Changed

• Allow slashes in purl package names by @​juxtin in actions/dependency-review-action#765
• use the v3 version of the deps.dev API by @​josieang in actions/dependency-review-action#741
• PR with suggestions - [Improvement]: Help streamline / simplify dependency review action README by @​am-stead in actions/dependency-review-action#773
• fix show-openssf-scorecard-levels input by @​ramann in actions/dependency-review-action#776
• Updates to the contribution guidelines by @​jonjanego in actions/dependency-review-action#778
• Create issue templates by @​jonjanego in actions/dependency-review-action#777
• Fix the max comment length issue by @​jhutchings1 and @​elireisman in actions/dependency-review-action#767
• Bump project version to 4.3.3 in prep for a release by @​elireisman in actions/dependency-review-action#781

New Contributors

• @​josieang made their first contribution in actions/dependency-review-action#741
• @​am-stead made their first contribution in actions/dependency-review-action#773
• @​ramann made their first contribution in actions/dependency-review-action#776

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.3.2...v4.3.3

Commits

• 72eb03d Merge pull request #781 from actions/release-v4.3.3
• 137d8b4 bump to version v4.3.3
• e6b618e Merge pull request #767 from actions/max-comment-length
• 3c42649 fix ws for linter
• 8e6ea8d update packaging
• 1b3d277 post-review: add PR comment full summary test case
• 220872c Update src/main.ts
• 087d0f8 repackage to update dist
• 4531204 whitespace
• df1ca89 appease linter
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

[github-actions[bot]]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/actions/dependency-review-action	72eb03d02c7872a771aacd928f3123ac62ad6d3a	:green_circle: 7.1	Details Check Score Reason Code-Review :green_circle: 10 all changesets reviewed Maintained :green_circle: 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases :warning: -1 no releases found Security-Policy :green_circle: 9 security policy file detected Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Packaging :warning: -1 packaging workflow not detected Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies :warning: 1 dependency not pinned by hash detected -- score normalized to 1 Fuzzing :warning: 0 project is not fuzzed SAST :green_circle: 10 SAST tool is run on all commits Vulnerabilities :green_circle: 9 1 existing vulnerabilities detected
actions/actions/dependency-review-action	0c155c5e8556a497adf53f2c18edabf945ed8e70	:green_circle: 7.1	Details Check Score Reason Code-Review :green_circle: 10 all changesets reviewed Maintained :green_circle: 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases :warning: -1 no releases found Security-Policy :green_circle: 9 security policy file detected Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Binary-Artifacts :green_circle: 10 no binaries found in the repo Packaging :warning: -1 packaging workflow not detected Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies :warning: 1 dependency not pinned by hash detected -- score normalized to 1 Fuzzing :warning: 0 project is not fuzzed SAST :green_circle: 10 SAST tool is run on all commits Vulnerabilities :green_circle: 9 1 existing vulnerabilities detected

Scanned Manifest Files

.github/workflows/dependency_review.yml

• actions/dependency-review-action@72eb03d02c7872a771aacd928f3123ac62ad6d3a
• actions/dependency-review-action@0c155c5e8556a497adf53f2c18edabf945ed8e70

[sonarcloud[bot]]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[dependabot[bot]]

Looks like actions/dependency-review-action is no longer updatable, so this is no longer needed.