Skip to content

build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 - #455

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/ossf/scorecard-action-2.4.3
Open

build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3#455
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/ossf/scorecard-action-2.4.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Copy link
Copy Markdown

Bumps ossf/scorecard-action from 2.4.2 to 2.4.3.

Release notes

Sourced from ossf/scorecard-action's releases.

v2.4.3

What's Changed

This update bumps the Scorecard version to the v5.3.0 release. For a complete list of changes, please refer to the Scorecard v5.3.0 release notes.

Documentation

Other

New Contributors

Full Changelog: ossf/scorecard-action@v2.4.2...v2.4.3

Commits
  • 4eaacf0 bump docker to ghcr v2.4.3 (#1587)
  • 42e3a01 🌱 Bump the github-actions group with 3 updates (#1585)
  • 88c07ac 🌱 Bump github.com/sigstore/cosign/v2 from 2.5.2 to 2.6.0 (#1579)
  • 6c690f2 Bump github.com/ossf/scorecard/v5 from v5.2.1 to v5.3.0 (#1586)
  • 92083b5 📖 Fix recommended command to test the image in development (#1583)
  • 7975ea6 🌱 Bump the docker-images group across 1 directory with 2 updates (#1...
  • 0d1a743 🌱 Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (#1575)
  • 46e6e0c 🌱 Bump the github-actions group with 2 updates (#1580)
  • c3f1350 🌱 Improve printing options (#1584)
  • 43e475b 🌱 Bump golang.org/x/net from 0.42.0 to 0.44.0 (#1578)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github

dependabot Bot commented on behalf of github May 1, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from thesyncim as a code owner May 1, 2026 21:21
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ossf/scorecard-action-2.4.3 branch 2 times, most recently from 2271e7d to 743d27b Compare May 5, 2026 17:19
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ossf/scorecard-action-2.4.3 branch 21 times, most recently from b605f72 to fd1d678 Compare May 25, 2026 15:27
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ossf/scorecard-action-2.4.3 branch 2 times, most recently from 4fa6f30 to ce02dde Compare May 27, 2026 01:05
@dependabot dependabot Bot changed the title Bump ossf/scorecard-action from 2.4.2 to 2.4.3 build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 May 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ossf/scorecard-action-2.4.3 branch 2 times, most recently from 14b35dc to 829e317 Compare May 30, 2026 12:03
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ossf/scorecard-action-2.4.3 branch from 829e317 to 787c41d Compare May 30, 2026 13:10
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.2 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@v2.4.2...v2.4.3)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ossf/scorecard-action-2.4.3 branch from 787c41d to 7b57f8c Compare May 30, 2026 16:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants