Skip to content

Commit cbe3a93

Browse files
Bump zgosalvez/github-actions-ensure-sha-pinned-actions from 5.0.3 to 5.0.4 (#1245)
Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) from 5.0.3 to 5.0.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases">zgosalvez/github-actions-ensure-sha-pinned-actions's releases</a>.</em></p> <blockquote> <h2>v5.0.4</h2> <h2>What's Changed</h2> <ul> <li>Bump picomatch from 2.3.1 to 2.3.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/302">zgosalvez/github-actions-ensure-sha-pinned-actions#302</a></li> <li>Bump eslint from 10.0.3 to 10.1.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/301">zgosalvez/github-actions-ensure-sha-pinned-actions#301</a></li> <li>Bump brace-expansion by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/303">zgosalvez/github-actions-ensure-sha-pinned-actions#303</a></li> <li>Bump yaml from 2.8.2 to 2.8.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/300">zgosalvez/github-actions-ensure-sha-pinned-actions#300</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/compare/v5...v5.0.4">https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/compare/v5...v5.0.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/commit/ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066"><code>ca46236</code></a> Bump yaml from 2.8.2 to 2.8.3 (<a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/300">#300</a>)</li> <li><a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/commit/c1f725ea6930eb5426da0ac381b9511a0c8221ab"><code>c1f725e</code></a> Bump brace-expansion (<a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/303">#303</a>)</li> <li><a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/commit/2a0679d708c474c69a1bb5c56623035f30793eaa"><code>2a0679d</code></a> Bump eslint from 10.0.3 to 10.1.0 (<a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/301">#301</a>)</li> <li><a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/commit/4533f2e52a14fcf8f158fdb2db5fd749921d0005"><code>4533f2e</code></a> Bump picomatch from 2.3.1 to 2.3.2 (<a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/302">#302</a>)</li> <li>See full diff in <a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/compare/471d5ace1f08e3c4df1c4c2f7e6341aa75da434a...ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zgosalvez/github-actions-ensure-sha-pinned-actions&package-manager=github_actions&previous-version=5.0.3&new-version=5.0.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent da71212 commit cbe3a93

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/ci.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -563,7 +563,7 @@ jobs:
563563
# The next action simply fails if there are any unpinned actions.
564564
- name: Verify that all workflow actions have pinned versions
565565
# yamllint disable-line rule:line-length
566-
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@471d5ace1f08e3c4df1c4c2f7e6341aa75da434a # v5.0.3
566+
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066 # v5.0.4
567567

568568
# If we didn't fail the previous check, go on to more time-consuming ones.
569569
- name: Install actionlint

0 commit comments

Comments
 (0)