mirror of
https://github.com/flutter/flutter.git
synced 2026-02-20 02:29:02 +08:00
Bump google/osv-scanner-action from 1.8.3 to 1.8.4 (flutter/engine#54797)
Bumps [google/osv-scanner-action](https://github.com/google/osv-scanner-action) from 1.8.3 to 1.8.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/osv-scanner-action/releases">google/osv-scanner-action's releases</a>.</em></p> <blockquote> <h2>v1.8.4</h2> <p>Bump OSV-Scanner version <a href="https://github.com/google/osv-scanner/releases/tag/v1.8.4">https://github.com/google/osv-scanner/releases/tag/v1.8.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="678a866dcb"><code>678a866</code></a> Merge pull request <a href="https://redirect.github.com/google/osv-scanner-action/issues/39">#39</a> from google/update-to-v1.8.4</li> <li><a href="6a315dbacc"><code>6a315db</code></a> Update unified workflow example to point to v1.8.4 reusable workflows</li> <li><a href="712a57b5f0"><code>712a57b</code></a> Update reusable workflows to point to v1.8.4 actions</li> <li><a href="fa6b699964"><code>fa6b699</code></a> Update actions to use v1.8.4 osv-scanner image</li> <li><a href="b756d11dcf"><code>b756d11</code></a> Merge pull request <a href="https://redirect.github.com/google/osv-scanner-action/issues/30">#30</a> from google/update-script</li> <li><a href="c63eeb74bc"><code>c63eeb7</code></a> Big multiline string</li> <li><a href="dd8ff8fe0e"><code>dd8ff8f</code></a> Fix string format</li> <li><a href="336764a25a"><code>336764a</code></a> Merge pull request <a href="https://redirect.github.com/google/osv-scanner-action/issues/38">#38</a> from google/renovate_ignore</li> <li><a href="ff89c57971"><code>ff89c57</code></a> Update package name</li> <li><a href="12abe438b3"><code>12abe43</code></a> chore: disable renovate bot updating osv-scanner-action package.</li> <li>Additional commits viewable in <a href="https://github.com/google/osv-scanner-action/compare/v1.8.3...v1.8.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
This commit is contained in:
parent
d63aaac043
commit
754ff458f0
@ -41,7 +41,7 @@ jobs:
|
||||
name: Vulnerability scanning
|
||||
needs:
|
||||
extract-deps
|
||||
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.8.3"
|
||||
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.8.4"
|
||||
with:
|
||||
# Download the artifact uploaded in extract-deps step
|
||||
download-artifact: osv-lockfile-${{github.sha}}
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user