Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 4, 2024

Bumps advanced-security/maven-dependency-submission-action from 4.0.2 to 4.1.0.

Release notes

Sourced from advanced-security/maven-dependency-submission-action's releases.

v4.1.0

  • Adds the ability to change the detector details for the dependency snapshots via the optional input parameters:

    • detector-name
    • detector-url
    • detector-version

    If the detector-name is specified, then all three become mandatory as there are no sensible defaults that can be attributed to the values.

v4.0.3

  • Updating the build process and tooling for Node 20 support in the CLI executables which were introduced when the dependency-submission-toolkit transitioned in to an ESM module

  • Fixes #69 #61

Commits
  • bb3f733 chore: Updating release files
  • 747e676 4.1.0
  • 09cc6cf Merge pull request #82 from mario-campos/patch-1
  • 930cebc Adding detector settings into the CLI executables
  • 828a337 Fixing audit warnings on dependencies
  • 2219818 Merge pull request #86 from advanced-security/detector-input
  • 97fd7ee Input to set detector information
  • 1203a18 Merge pull request #85 from advanced-security/hmaurer-patch-1
  • cf49e89 Delete .github/workflows/sync-fork.yml
  • 5a174b1 Update sync-fork.yml
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [advanced-security/maven-dependency-submission-action](https://github.com/advanced-security/maven-dependency-submission-action) from 4.0.2 to 4.1.0.
- [Release notes](https://github.com/advanced-security/maven-dependency-submission-action/releases)
- [Commits](advanced-security/maven-dependency-submission-action@bfd2106...bb3f733)

---
updated-dependencies:
- dependency-name: advanced-security/maven-dependency-submission-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 4, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 8, 2024

Superseded by #57.

@dependabot dependabot bot closed this Aug 8, 2024
@dependabot dependabot bot deleted the dependabot/github_actions/advanced-security/maven-dependency-submission-action-4.1.0 branch August 8, 2024 02:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants