pgxtutorial
pgxtutorial copied to clipboard
chore(deps): bump google/osv-scanner-action from 1.8.1 to 1.8.3
Bumps google/osv-scanner-action from 1.8.1 to 1.8.3.
Release notes
Sourced from google/osv-scanner-action's releases.
v1.8.3
What's Changed
- Now uses OSV-Scanner v1.8.3, see https://github.com/google/osv-scanner/blob/main/CHANGELOG.md for full changelog.
New Contributors
@hogo6002made their first contribution in google/osv-scanner-action#37Full Changelog: https://github.com/google/osv-scanner-action/compare/v1.8.2...v1.8.3
v1.8.2
What's Changed
- Now uses OSV-Scanner v1.8.2, see https://github.com/google/osv-scanner/blob/main/CHANGELOG.md for full changelog.
- Call analysis is now done by default for golang.
Commits
c615bb5Merge pull request #37 from google/update-to-v1.8.348885beUpdate unified workflow example to point to v1.8.3 reusable workflows6bd271cUpdate reusable workflows to point to v1.8.3 actions01ff5d1Update actions to use v1.8.3 osv-scanner image7ac94f9Merge pull request #32 from google/update-to-v1.8.2da0991fUpdate unified workflow example to point to v1.8.2 reusable workflowsf1f90c4Update reusable workflows to point to v1.8.2 actionsf8af522Update actions to use v1.8.2 osv-scanner image4847de9Merge pull request #31 from renovate-bot/renovate/workflowsb7d4e6eUpdate actions/upload-artifact action to v4.3.4- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)