GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — meta: bump ossf/scorecard-action from 2.1.3 to 2.2.0 by dependabot[bot] · Pull Request #48628 · nodejs/node

Conversation

dependabot Bot commented on behalf of github Jul 1, 2023

Copy link

Copy Markdown

Contributor

Bumps ossf/scorecard-action from 2.1.3 to 2.2.0.

Release notes

Sourced from ossf/scorecard-action's releases.

v2.2.0

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 from v4.10.5 to v4.11.0 by @spencerschrock in ossf/scorecard-action#1192

Scorecard Result Viewer

Thanks to contributions from @cynthia-sg and @tegioz at CLOMonitor, there is a new Scorecard Result visualization page at https://securityscorecards.dev/viewer/?uri=<project-url>.

ossf/scorecard-webapp#406

ossf/scorecard-webapp#422

As an example, you can see our own score visualized here Checkout our README to learn how to link your README badge to the new visualization page.

Publishing Results

This release contains two fixes which will improve the user experience when publish_results is true

Runs that fail our workflow restrictions will fail with a 400 response indicating the problem, instead of a vague 500 status. (ossf/scorecard-action#1156, resolved ossf/scorecard-action#1150)

Scorecard action will retry when signing results and submitting them to our web API. This should help with flakiness from connection failures. (ossf/scorecard-action#1191)

Docs

📖 Update README to accept fine-grained tokens by @pnacht in ossf/scorecard-action#1175

📖 Update installation instructions to match current GitHub UI by @joycebrum in ossf/scorecard-action#1153

📖 Document the GitHub action workflow restrictions when publishing results. by @spencerschrock in

New Contributors

@bobcallaway made their first contribution in ossf/scorecard-action#1140

@pnacht made their first contribution in ossf/scorecard-action#1175

Full Changelog: ossf/scorecard-action@v2.1.3...v2.2.0

Commits

08b4669 🌱 Bump docker tag to for v2.2.0 release. (#1194)
3c7470f 📖 Update README badge link to use new uri param. (#1185)
a164dbc 🌱 Bump github.com/ossf/scorecard/v4 from v4.10.5 to v4.11.0 (#1192)
597960e 📖 Update README to accept fine-grained tokens (#1175)
8808ed2 🌱 Retry external network calls when publishing results (#1191)
0eed6cb 🌱 Bump golang.org/x/net from 0.10.0 to 0.11.0
6c6335c 🌱 Bump github/codeql-action from 2.3.6 to 2.20.0
7f1baf3 📖 Switch recommended badge link to the new viewer. (#1176)
df98bbc 🌱 Bump actions/checkout from 3.5.2 to 3.5.3
75886d4 🌱 Bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 (#1172)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions


          meta: bump ossf/scorecard-action from 2.1.3 to 2.2.0

2b1b932

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.3 to 2.2.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@80e868c...08b4669)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added the dependencies PRs that add, update, or configure Node.js dependencies. label

Jul 1, 2023

nodejs-github-bot commented Jul 1, 2023

Copy link

Copy Markdown

Collaborator

Review requested:

@nodejs/actions

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

nodejs-github-bot added the meta Issues and PRs related to the general management of the project. label

Jul 1, 2023

anonrig approved these changes

Jul 1, 2023

View reviewed changes

Mesteery approved these changes

Jul 1, 2023

View reviewed changes

MoLow approved these changes

Jul 2, 2023

View reviewed changes

MoLow added the commit-queue PRs queued for automated landing through the Commit Queue. label

Jul 2, 2023

aduh95 added the author ready PRs with CI started, the required approvals, and no outstanding review comments. label

Jul 2, 2023

nodejs-github-bot removed the commit-queue PRs queued for automated landing through the Commit Queue. label

Jul 3, 2023

nodejs-github-bot merged commit 329813d into main

Jul 3, 2023

nodejs-github-bot commented Jul 3, 2023

Copy link

Copy Markdown

Collaborator

Landed in 329813d

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

nodejs-github-bot deleted the dependabot/github_actions/ossf/scorecard-action-2.2.0 branch

July 3, 2023 18:33

juanarbol pushed a commit that referenced this pull request

Jul 13, 2023


          meta: bump ossf/scorecard-action from 2.1.3 to 2.2.0

332e480

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.3 to 2.2.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@80e868c...08b4669)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
PR-URL: #48628
Reviewed-By: Yagiz Nizipli <[email protected]>
Reviewed-By: Mestery <[email protected]>
Reviewed-By: Moshe Atlow <[email protected]>

juanarbol mentioned this pull request

Jul 13, 2023

V20.5.0 proposal #48761

Merged

Ceres6 pushed a commit to Ceres6/node that referenced this pull request

Aug 14, 2023


          meta: bump ossf/scorecard-action from 2.1.3 to 2.2.0

fefc476

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.3 to 2.2.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@80e868c...08b4669)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
PR-URL: nodejs#48628
Reviewed-By: Yagiz Nizipli <[email protected]>
Reviewed-By: Mestery <[email protected]>
Reviewed-By: Moshe Atlow <[email protected]>

Ceres6 pushed a commit to Ceres6/node that referenced this pull request

Aug 14, 2023


          meta: bump ossf/scorecard-action from 2.1.3 to 2.2.0

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.3 to 2.2.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@80e868c...08b4669)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
PR-URL: nodejs#48628
Reviewed-By: Yagiz Nizipli <[email protected]>
Reviewed-By: Mestery <[email protected]>
Reviewed-By: Moshe Atlow <[email protected]>

ruyadorno pushed a commit that referenced this pull request

Sep 11, 2023


          meta: bump ossf/scorecard-action from 2.1.3 to 2.2.0

c059b94

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.3 to 2.2.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@80e868c...08b4669)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
PR-URL: #48628
Reviewed-By: Yagiz Nizipli <[email protected]>
Reviewed-By: Mestery <[email protected]>
Reviewed-By: Moshe Atlow <[email protected]>

ruyadorno mentioned this pull request

Sep 11, 2023

v18.18.0 proposal #49220

Merged

ruyadorno pushed a commit that referenced this pull request

Sep 13, 2023


          meta: bump ossf/scorecard-action from 2.1.3 to 2.2.0

0b3fd8e

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.3 to 2.2.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@80e868c...08b4669)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
PR-URL: #48628
Reviewed-By: Yagiz Nizipli <[email protected]>
Reviewed-By: Mestery <[email protected]>
Reviewed-By: Moshe Atlow <[email protected]>

ruyadorno pushed a commit that referenced this pull request

Sep 17, 2023


          meta: bump ossf/scorecard-action from 2.1.3 to 2.2.0

34b8e98

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.3 to 2.2.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@80e868c...08b4669)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
PR-URL: #48628
Reviewed-By: Yagiz Nizipli <[email protected]>
Reviewed-By: Mestery <[email protected]>
Reviewed-By: Moshe Atlow <[email protected]>

Reviewers

anonrig

anonrig approved these changes

MoLow

MoLow approved these changes

+1 more reviewer

Mesteery

Mesteery approved these changes

Reviewers whose approvals may not affect merge requirements

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

author ready

PRs with CI started, the required approvals, and no outstanding review comments.

dependencies

PRs that add, update, or configure Node.js dependencies.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

5 participants

Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.