Skip to content

Commit

Permalink
⬆️ Update zgosalvez/github-actions-ensure-sha-pinned-actions action t…
Browse files Browse the repository at this point in the history
…o v3.0.4 (#52)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
|
[zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions)
| action | patch | `v3.0.3` -> `v3.0.4` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/badge)](https://securityscorecards.dev/viewer/?uri=github.com/zgosalvez/github-actions-ensure-sha-pinned-actions)
|

---

### Release Notes

<details>
<summary>zgosalvez/github-actions-ensure-sha-pinned-actions
(zgosalvez/github-actions-ensure-sha-pinned-actions)</summary>

###
[`v3.0.4`](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases/tag/v3.0.4)

[Compare
Source](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/compare/v3.0.3...v3.0.4)

#### What's Changed

- Update dependencies by
[@&#8203;zgosalvez](https://github.com/zgosalvez) in
[https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/146](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/146)
- Bump zgosalvez/github-actions-get-action-runs-using-version from 2.0.1
to 2.0.3 by [@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/138](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/138)
- Bump actions/setup-node from 4.0.0 to 4.0.2 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/143](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/143)
- Bump actions/checkout from 4.1.1 to 4.1.2 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/148](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/148)
- Bump actions/cache from 3.3.2 to 4.0.2 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/147](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/147)
- Bump eslint from 8.57.0 to 9.0.0 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/149](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/149)
- Bump yaml from 2.3.4 to 2.4.1 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/145](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/145)

**Full Changelog**:
zgosalvez/github-actions-ensure-sha-pinned-actions@v3.0.3...v3.0.4

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/chezmoi-sh/nex.rpi).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yOTMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjI5My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
  • Loading branch information
xunleii committed May 19, 2024
2 parents eaf4195 + 1e0147d commit e303c76
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .github/workflows/security.workflows.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -39,4 +39,4 @@ jobs:
./actionlint -color
- name: Ensure SHA pinned actions
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ba37328d4ea95eaf8b3bd6c6cef308f709a5f2ec # v3.0.3
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@19ebcb0babbd282ae1822a0b9c28f3f1f25cea45 # v3.0.4

0 comments on commit e303c76

Please sign in to comment.