GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — Bump ossf/scorecard-action from 2.4.3 to 2.4.4 by dependabot[bot] · Pull Request #28124 · PowerShell/PowerShell

Conversation

dependabot Bot commented on behalf of github Sep 29, 2026

Copy link

Copy Markdown

Contributor

Bumps ossf/scorecard-action from 2.4.3 to 2.4.4.

Release notes

Sourced from ossf/scorecard-action's releases.

v2.4.4

What's Changed

This update bumps the Scorecard version to the v5.5.0 release. For a complete list of changes, please refer to the Scorecard v5.4.0 release notes and the Scorecard v5.5.0 release notes.

log POST failures instead of failing entire action by @spencerschrock in ossf/scorecard-action#1625

Full Changelog: ossf/scorecard-action@v2.4.3...v2.4.4

Commits

2d11466 Bump action tag for v2.4.4 release (#1688)
1bd3285 🌱 Bump the docker-images group across 1 directory with 2 updates (#1...
913edce 🌱 Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 (#1671)
0957b8f 🌱 Bump golang.org/x/net from 0.56.0 to 0.57.0 (#1680)
f0061eb 🌱 Bump google.golang.org/grpc from 1.81.1 to 1.82.1 (#1687)
20ee732 🌱 Bump github.com/sigstore/cosign/v2 from 2.6.3 to 2.6.4 (#1685)
9f295ef 🌱 Bump the github-actions group with 6 updates (#1686)
69bf556 🌱 Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0 (#1681)
94e8b96 🌱 Bump github.com/sigstore/rekor from 1.5.0 to 1.5.2 (#1673)
c7a1b37 🌱 Bump github.com/sigstore/fulcio from 1.8.5 to 1.8.6 (#1675)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions


          Bump ossf/scorecard-action from 2.4.3 to 2.4.4

1ffc7ad

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.3 to 2.4.4.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@4eaacf0...2d11466)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added the CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log label

Sep 29, 2026

Copilot AI balanced review requested due to automatic review settings

September 29, 2026 07:33

dependabot Bot requested review from a team and Justin Chung (jshigetomi) as code owners

September 29, 2026 07:33

dependabot Bot added the CL-BuildPackaging Indicates that a PR should be marked as a build or packaging change in the Change Log label

Sep 29, 2026

azure-pipelines Bot commented Sep 29, 2026

Copy link

Copy Markdown

Azure Pipelines: There may be pipelines that require an authorized user to comment /azp run to run.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

microsoft-github-policy-service Bot added Backport-7.4.x-Consider Backport-7.5.x-Consider Backport-7.6.x-Consider labels

Sep 29, 2026

Copilot started reviewing

September 29, 2026 07:35

View session

Copilot AI reviewed

Sep 29, 2026

View reviewed changes

Copilot AI left a comment

Copy link

Copy Markdown

Contributor

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The pinned SHA and version comment are updated consistently with the documented release.

Review effort: Balanced
Findings: None

What changed in this PR

Updates the pinned OpenSSF Scorecard action to v2.4.4.

Changes:

Replaces the v2.4.3 commit SHA with the v2.4.4 SHA.

File	Description
`.github/workflows/scorecards.yml`	Updates the Scorecard analysis action.

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions

microsoft-github-policy-service Bot added the Review - Needed The PR is being reviewed label

Oct 6, 2026

microsoft-github-policy-service Bot commented Oct 6, 2026

Copy link

Copy Markdown

Contributor

This pull request has been automatically marked as Review Needed because it has been there has not been any activity for 7 days.
Maintainer, please provide feedback and/or mark it as Waiting on Author

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

Patrick Meinecke (SeeminglyScience) approved these changes

Oct 6, 2026

View reviewed changes

Patrick Meinecke (SeeminglyScience) merged commit 7da5376 into master

Oct 6, 2026

43 checks passed

Uh oh!

There was an error while loading. Please reload this page.

dependabot Bot deleted the dependabot/github_actions/ossf/scorecard-action-2.4.4 branch

October 6, 2026 19:39

Patrick Meinecke (SeeminglyScience) added Backport-7.4.x-Approved Backport-7.5.x-Approved Backport-7.6.x-Approved and removed Backport-7.4.x-Consider Backport-7.5.x-Consider Backport-7.6.x-Consider labels

Oct 6, 2026

Patrick Meinecke (SeeminglyScience) mentioned this pull request

Oct 7, 2026

[release/v7.4.21] Bump ossf/scorecard-action from 2.4.3 to 2.4.4 #28146

Merged

3 of 9 tasks

Patrick Meinecke (SeeminglyScience) added Backport-7.4.x-Migrated and removed Backport-7.4.x-Approved labels

Oct 7, 2026

Patrick Meinecke (SeeminglyScience) mentioned this pull request

Oct 7, 2026

[release/v7.5.12] Bump ossf/scorecard-action from 2.4.3 to 2.4.4 #28151

Merged

3 of 9 tasks

Patrick Meinecke (SeeminglyScience) added Backport-7.5.x-Migrated and removed Backport-7.5.x-Approved labels

Oct 7, 2026

Patrick Meinecke (SeeminglyScience) mentioned this pull request

Oct 7, 2026

[release/v7.6.7] Bump ossf/scorecard-action from 2.4.3 to 2.4.4 #28157

Merged

3 of 9 tasks

Patrick Meinecke (SeeminglyScience) added Backport-7.6.x-Migrated and removed Backport-7.6.x-Approved labels

Oct 7, 2026

Reviewers

Copilot code review Copilot

Copilot review effort

Applies to this pull request for everyone.Learn more about Copilot code review.

Copilot left review comments

Patrick Meinecke (SeeminglyScience)

SeeminglyScience approved these changes

Justin Chung (jshigetomi)

Awaiting requested review from jshigetomi

jshigetomi is a code owner

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

Backport-7.4.x-Migrated Backport-7.5.x-Migrated Backport-7.6.x-Migrated CL-BuildPackaging

Indicates that a PR should be marked as a build or packaging change in the Change Log

Review - Needed

The PR is being reviewed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

2 participants

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.