Merge pull request #40 from wneessen/dependabot/github_actions/actions/dependency-review-action-4.4.0

Bump actions/dependency-review-action from 4.3.5 to 4.4.0
2024-11-22 05:30:49 +01:00 · 2024-10-29 09:11:57 +01:00 · 2024-10-29 00:39:38 +00:00
1 changed files with 1 additions and 1 deletions
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@ -28,4 +28,4 @@ jobs:
      - name: 'Checkout Repository'
        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
      - name: 'Dependency Review'
-        uses: actions/dependency-review-action@a6993e2c61fd5dc440b409aa1d6904921c5e1894 # v4.3.5
+        uses: actions/dependency-review-action@4081bf99e2866ebe428fc0477b69eb4fcda7220a # v4.4.0
Author	SHA1	Message	Date
Winni Neessen	97aaefaf28	Merge pull request #40 from wneessen/dependabot/github_actions/actions/dependency-review-action-4.4.0 Some checks failed CodeQL / Analyze (push) Failing after 2s Details golangci-lint / lint (push) Failing after 2s Details Govulncheck Security Scan / test (push) Failing after 2s Details REUSE Compliance Check / test (push) Failing after 2s Details Scorecard supply-chain security / Scorecard analysis (push) Failing after 1s Details SonarQube / Build and analyze (push) Failing after 1s Details Bump actions/dependency-review-action from 4.3.5 to 4.4.0	2024-10-29 09:11:57 +01:00
dependabot[bot]	211421aa0e	Bump actions/dependency-review-action from 4.3.5 to 4.4.0 Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.3.5 to 4.4.0. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](`a6993e2c61...4081bf99e2`) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2024-10-29 00:39:38 +00:00