 dependabot[bot]
|
86a8825103
|
chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 (#974)
|
2026-08-20 00:31:50 -07:00 |
|
|
dependabot[bot]
|
47f532fe78
|
chore(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 (#935)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-08-07 14:48:58 -07:00 |
|
|
Trevin Chow
|
2e8dcaf746
|
Merge branch 'main' into dependabot/github_actions/zizmorcore/zizmor-action-0.6.0
|
2026-07-26 14:49:14 -07:00 |
|
|
dependabot[bot]
|
0c0c51f1fe
|
chore(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.5.7 to 0.6.0.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/192e21d79ab29983730a13d1382995c2307fbcaa...6599ee8b7a49aef6a770f63d261d214911a7ce02)
---
updated-dependencies:
- dependency-name: zizmorcore/zizmor-action
dependency-version: 0.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-26 18:43:59 +00:00 |
|
|
dependabot[bot]
|
eda1ffe668
|
chore(deps): bump actions/checkout from 7.0.0 to 7.0.1
Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-26 18:43:50 +00:00 |
|
|
dependabot[bot]
|
729c2a5a47
|
chore(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.5.6 to 0.5.7.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/5f14fd08f7cf1cb1609c1e344975f152c7ee938d...192e21d79ab29983730a13d1382995c2307fbcaa)
---
updated-dependencies:
- dependency-name: zizmorcore/zizmor-action
dependency-version: 0.5.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-19 19:26:00 +00:00 |
|
|
dependabot[bot]
|
db8a2ad5ab
|
chore(deps): bump actions/checkout from 6.0.3 to 7.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-06-25 01:33:02 +00:00 |
|
|
dependabot[bot]
|
d31f26eb17
|
chore(deps): bump actions/checkout from 4 to 6 (#587)
* chore(deps): bump actions/checkout from 4 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
* fix(ci): pin actions/checkout in scorecard workflow to v6.0.3 SHA
Resolves the zizmor unpinned-action security alert on PR #587 by matching
the hash-pinned reference used in the other workflow files.
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Trevin Chow <trevin@trevinchow.com>
|
2026-06-17 15:38:21 -07:00 |
|
|
Shaan Majid
|
b7e92d49c0
|
ci: harden GitHub Actions supply chain (#472)
* ci: harden existing workflows
* ci: add zizmor workflow
* ci: create releases with gh cli
---------
Co-authored-by: Trevin Chow <trevin@trevinchow.com>
|
2026-06-17 12:45:33 -07:00 |
|