Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 24, 2025

Bumps google/osv-scanner-action from 119c605e0e6e6c491e092da25b0c752d109b0b43 to 98b584ee2ed2da3935ccce10e06739d54cdcd20b.

Commits
  • 98b584e Merge pull request #63 from renovate-bot/renovate/workflows
  • 256cd6a chore(deps): update github/codeql-action action to v3.28.11
  • 90fad54 Merge pull request #64 from google/update-to-v2.0.0
  • f9d9b03 Include git root
  • 6e516af Update unified workflow example to point to v2.0.0 reusable workflows
  • 4299e5f Update reusable workflows to point to v2.0.0 actions
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [google/osv-scanner-action](https://github.com/google/osv-scanner-action) from 119c605e0e6e6c491e092da25b0c752d109b0b43 to 98b584ee2ed2da3935ccce10e06739d54cdcd20b.
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](google/osv-scanner-action@119c605...98b584e)

---
updated-dependencies:
- dependency-name: google/osv-scanner-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added area/dependencies Involves packages or other software that qsim depends on area/devops Involves build systems, Make files, Bazel files, continuous integration, and or other DevOps topics labels Mar 24, 2025
@mhucka mhucka added this pull request to the merge queue Mar 25, 2025
Merged via the queue into master with commit 079d13c Mar 25, 2025
26 checks passed
@mhucka mhucka deleted the dependabot/github_actions/google/osv-scanner-action-98b584ee2ed2da3935ccce10e06739d54cdcd20b branch March 25, 2025 16:43
mhucka pushed a commit to mhucka/OpenFermion that referenced this pull request Sep 25, 2025
…09b0b43 to 98b584ee2ed2da3935ccce10e06739d54cdcd20b (quantumlib#1021)

Bumps
[google/osv-scanner-action](https://github.com/google/osv-scanner-action)
from 119c605e0e6e6c491e092da25b0c752d109b0b43 to
98b584ee2ed2da3935ccce10e06739d54cdcd20b.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/google/osv-scanner-action/commit/98b584ee2ed2da3935ccce10e06739d54cdcd20b"><code>98b584e</code></a>
Merge pull request <a
href="https://redirect.github.com/google/osv-scanner-action/issues/63">#63</a>
from renovate-bot/renovate/workflows</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/256cd6a9fe070e8cc443188861a7066e506f3eea"><code>256cd6a</code></a>
chore(deps): update github/codeql-action action to v3.28.11</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/90fad544eb4036129491f76db3161ffdc2956748"><code>90fad54</code></a>
Merge pull request <a
href="https://redirect.github.com/google/osv-scanner-action/issues/64">#64</a>
from google/update-to-v2.0.0</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/f9d9b03ebbfc80ebc41ce7c0fd09267184979008"><code>f9d9b03</code></a>
Include git root</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/6e516aff2e1c300b4c4880549bcfec528e300dfb"><code>6e516af</code></a>
Update unified workflow example to point to v2.0.0 reusable
workflows</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/4299e5fdcc642221d700a4211ac7af48b83353f1"><code>4299e5f</code></a>
Update reusable workflows to point to v2.0.0 actions</li>
<li>See full diff in <a
href="https://github.com/google/osv-scanner-action/compare/119c605e0e6e6c491e092da25b0c752d109b0b43...98b584ee2ed2da3935ccce10e06739d54cdcd20b">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependencies Involves packages or other software that qsim depends on area/devops Involves build systems, Make files, Bazel files, continuous integration, and or other DevOps topics

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant