Skip to content

ci: bump denoland/setup-deno from 2.0.3 to 2.0.4#102

Merged
motxx merged 1 commit intomainfrom
dependabot/github_actions/denoland/setup-deno-2.0.4
May 4, 2026
Merged

ci: bump denoland/setup-deno from 2.0.3 to 2.0.4#102
motxx merged 1 commit intomainfrom
dependabot/github_actions/denoland/setup-deno-2.0.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps denoland/setup-deno from 2.0.3 to 2.0.4.

Release notes

Sourced from denoland/setup-deno's releases.

v2.0.4

Full Changelog: denoland/setup-deno@v2.0.3...v2.0.4

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 27, 2026
@dependabot dependabot Bot requested a review from motxx as a code owner April 27, 2026 20:39
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 27, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 27, 2026

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/denoland/setup-deno 667a34cdef165d8d2b2e98dde39547c9daac7282 🟢 3.9
Details
CheckScoreReason
Maintained🟢 33 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 3
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review🟢 3Found 10/30 approved changesets -- score normalized to 3
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • .github/workflows/deploy-market.yml

@dependabot dependabot Bot force-pushed the dependabot/github_actions/denoland/setup-deno-2.0.4 branch from 461ef40 to a8a394f Compare April 28, 2026 00:36
@motxx
Copy link
Copy Markdown
Owner

motxx commented May 4, 2026

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/github_actions/denoland/setup-deno-2.0.4 branch from a8a394f to c3fe064 Compare May 4, 2026 05:54
@motxx
Copy link
Copy Markdown
Owner

motxx commented May 4, 2026

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/github_actions/denoland/setup-deno-2.0.4 branch from c3fe064 to 9fca117 Compare May 4, 2026 06:48
@motxx
Copy link
Copy Markdown
Owner

motxx commented May 4, 2026

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/github_actions/denoland/setup-deno-2.0.4 branch from 9fca117 to 383b51d Compare May 4, 2026 07:51
@motxx
Copy link
Copy Markdown
Owner

motxx commented May 4, 2026

@dependabot rebase

Bumps [denoland/setup-deno](https://github.com/denoland/setup-deno) from 2.0.3 to 2.0.4.
- [Release notes](https://github.com/denoland/setup-deno/releases)
- [Commits](denoland/setup-deno@v2.0.3...667a34c)

---
updated-dependencies:
- dependency-name: denoland/setup-deno
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/denoland/setup-deno-2.0.4 branch from 383b51d to 98eb923 Compare May 4, 2026 08:20
@motxx motxx merged commit f798b6f into main May 4, 2026
6 checks passed
@motxx motxx deleted the dependabot/github_actions/denoland/setup-deno-2.0.4 branch May 4, 2026 08:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant