Merge pull request #37 from wneessen/dependabot/github_actions/actions/dependency-review-action-4.3.5

Bump actions/dependency-review-action from 4.3.4 to 4.3.5
2024-11-22 05:30:49 +01:00 · 2024-10-22 09:33:00 +02:00 · 2024-10-22 00:56:03 +00:00
1 changed files with 1 additions and 1 deletions
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@ -28,4 +28,4 @@ jobs:
      - name: 'Checkout Repository'
        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
      - name: 'Dependency Review'
-        uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4
+        uses: actions/dependency-review-action@a6993e2c61fd5dc440b409aa1d6904921c5e1894 # v4.3.5
Author	SHA1	Message	Date
Winni Neessen	d3ec660aa6	Merge pull request #37 from wneessen/dependabot/github_actions/actions/dependency-review-action-4.3.5 Some checks failed CodeQL / Analyze (push) Failing after 2s Details golangci-lint / lint (push) Failing after 2s Details Govulncheck Security Scan / test (push) Failing after 2s Details REUSE Compliance Check / test (push) Failing after 2s Details Scorecard supply-chain security / Scorecard analysis (push) Failing after 2s Details SonarQube / Build and analyze (push) Failing after 2s Details Bump actions/dependency-review-action from 4.3.4 to 4.3.5	2024-10-22 09:33:00 +02:00
dependabot[bot]	3aa951c317	Bump actions/dependency-review-action from 4.3.4 to 4.3.5 Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.3.4 to 4.3.5. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](`5a2ce3f5b9...a6993e2c61`) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2024-10-22 00:56:03 +00:00