Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v3.5.2
->v3.5.3
v2.3.5
->v2.20.1
v2.1.3
->v2.2.0
v1.8.6
->v1.8.7
Release Notes
actions/checkout (actions/checkout)
v3.5.3
Compare Source
github/codeql-action (github/codeql-action)
v2.20.1
Compare Source
v2.20.0
Compare Source
v2.3.6
Compare Source
ossf/scorecard-action (ossf/scorecard-action)
v2.2.0
Compare Source
What's Changed
Scorecard Result Viewer
Thanks to contributions from @cynthia-sg and @tegioz at CLOMonitor, there is a new Scorecard Result visualization page at
https://securityscorecards.dev/viewer/?uri=<project-url>
.As an example, you can see our own score visualized here
Checkout our README to learn how to link your README badge to the new visualization page.
Publishing Results
This release contains two fixes which will improve the user experience when
publish_results
istrue
Docs
New Contributors
Full Changelog: ossf/scorecard-action@v2.1.3...v2.2.0
pypa/gh-action-pypi-publish (pypa/gh-action-pypi-publish)
v1.8.7
Compare Source
💅 Cosmetic output impovements
}
from a non-OIDC log annotation in https://github.com/pypa/gh-action-pypi-publish/pull/161.🛠️ Internal dependencies
💪 New Contributors
🪞 Full Diff: pypa/gh-action-pypi-publish@v1.8.6...v1.8.7
Configuration
📅 Schedule: Branch creation - "before 6am on wednesday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.