From 077df44ce59c6dd9a98b7824778c0c1b2137a722 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 29 Oct 2025 20:27:19 +0000 Subject: [PATCH] chore(deps): bump the non-major group across 1 directory with 2 updates Bumps the non-major group with 2 updates in the / directory: [ossf/scorecard-action](https://github.com/ossf/scorecard-action) and [JamesIves/github-pages-deploy-action](https://github.com/jamesives/github-pages-deploy-action). Updates `ossf/scorecard-action` from 2.4.0 to 2.4.3 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/62b2cac7ed8198b15735ed49ab1e5cf35480ba46...4eaacf0543bb3f2c246792bd56e8cdeffafb205a) Updates `JamesIves/github-pages-deploy-action` from 4.7.2 to 4.7.3 - [Release notes](https://github.com/jamesives/github-pages-deploy-action/releases) - [Commits](https://github.com/jamesives/github-pages-deploy-action/compare/15de0f09300eea763baee31dff6c6184995c5f6a...6c2d9db40f9296374acc17b90404b6e8864128c8) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-major - dependency-name: JamesIves/github-pages-deploy-action dependency-version: 4.7.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: non-major ... Signed-off-by: dependabot[bot] --- .github/workflows/scorecard.yml | 2 +- .github/workflows/website.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 7fd50bd0de8..7c4404027af 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -38,7 +38,7 @@ jobs: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0 + uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 with: results_file: results.sarif results_format: sarif diff --git a/.github/workflows/website.yml b/.github/workflows/website.yml index a405f164dcc..f66122d46ba 100644 --- a/.github/workflows/website.yml +++ b/.github/workflows/website.yml @@ -50,7 +50,7 @@ jobs: run: (cd website && yarn build) - name: Deploy - uses: JamesIves/github-pages-deploy-action@15de0f09300eea763baee31dff6c6184995c5f6a # 4.7.2 + uses: JamesIves/github-pages-deploy-action@6c2d9db40f9296374acc17b90404b6e8864128c8 # 4.7.3 with: token: ${{ secrets.WEBSITE_DEPLOY_TOKEN }} branch: gh-pages