Skip to content

chore(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.4 - #14

Merged
AdmilsonCossa merged 1 commit into
mainfrom
dependabot/github_actions/ossf/scorecard-action-2.4.3
Sep 28, 2026
Merged

AdmilsonCossa merged 1 commit into
mainfrom
dependabot/github_actions/ossf/scorecard-action-2.4.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 8, 2026 •

Copy link
Copy Markdown
Contributor

Bumps ossf/scorecard-action from 2.4.1 to 2.4.4.

Release notes

Sourced from ossf/scorecard-action's releases.

v2.4.4

What's Changed

This update bumps the Scorecard version to the v5.5.0 release. For a complete list of changes, please refer to the Scorecard v5.4.0 release notes and the Scorecard v5.5.0 release notes.

Full Changelog: ossf/scorecard-action@v2.4.3...v2.4.4

v2.4.3

What's Changed

This update bumps the Scorecard version to the v5.3.0 release. For a complete list of changes, please refer to the Scorecard v5.3.0 release notes.

Documentation

Other

New Contributors

Full Changelog: ossf/scorecard-action@v2.4.2...v2.4.3

v2.4.2

What's Changed

This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.

Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2

Commits
  • 2d11466 Bump action tag for v2.4.4 release (#1688)
  • 1bd3285 🌱 Bump the docker-images group across 1 directory with 2 updates (#1...
  • 913edce 🌱 Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 (#1671)
  • 0957b8f 🌱 Bump golang.org/x/net from 0.56.0 to 0.57.0 (#1680)
  • f0061eb 🌱 Bump google.golang.org/grpc from 1.81.1 to 1.82.1 (#1687)
  • 20ee732 🌱 Bump github.com/sigstore/cosign/v2 from 2.6.3 to 2.6.4 (#1685)
  • 9f295ef 🌱 Bump the github-actions group with 6 updates (#1686)
  • 69bf556 🌱 Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0 (#1681)
  • 94e8b96 🌱 Bump github.com/sigstore/rekor from 1.5.0 to 1.5.2 (#1673)
  • c7a1b37 🌱 Bump github.com/sigstore/fulcio from 1.8.5 to 1.8.6 (#1675)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github

dependabot Bot commented on behalf of github May 8, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, supply-chain. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from AdmilsonCossa as a code owner May 8, 2026 16:28
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ossf/scorecard-action-2.4.3 branch from 86ebd24 to 9addc20 Compare May 11, 2026 07:49
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ossf/scorecard-action-2.4.3 branch from 9addc20 to 7076dba Compare June 5, 2026 15:33
@AdmilsonCossa

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot dependabot Bot changed the title chore(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.3 chore(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.4 Sep 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ossf/scorecard-action-2.4.3 branch from 7076dba to 93168ba Compare September 28, 2026 11:57
@AdmilsonCossa

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ossf/scorecard-action-2.4.3 branch from 93168ba to 4e44724 Compare September 28, 2026 12:05
@AdmilsonCossa

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.1 to 2.4.4.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@f49aabe...2d11466)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ossf/scorecard-action-2.4.3 branch from 4e44724 to 9d6e9f2 Compare September 28, 2026 12:09
@AdmilsonCossa
AdmilsonCossa merged commit ceb80cd into main Sep 28, 2026
6 checks passed
@AdmilsonCossa
AdmilsonCossa deleted the dependabot/github_actions/ossf/scorecard-action-2.4.3 branch September 28, 2026 12:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant