Sourced from actions/dependency-review-action's releases.

v4.8.0

What's Changed

• Make Ruby Code Scannable by @​ljones140 in actions/dependency-review-action#978
• Batch some contributions for release by @​brrygrdn in actions/dependency-review-action#986
  • Make license lists collapsable by @​jasperkamerling
  • feat: add large summary handling with artifact upload by @​MattMencel

New Contributors

• @​ljones140 made their first contribution in actions/dependency-review-action#978
• @​jasperkamerling made their first contribution in actions/dependency-review-action#986
• @​MattMencel made their first contribution in actions/dependency-review-action#986

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4...v4.8.0

• 56339e5 Merge pull request #988 from actions/brrygrdn/rc-4.8.0
• 1688b74 Bump to a 4.8.0
• 31c9f17 Merge pull request #987 from actions/rc-4.7.4
• eacde78 Update version
• 8151009 Merge pull request #986 from actions/brrygrdn/rc-4.7.4
• b472ec9 Add a quick regression test for the artefact summary
• e0cedc5 feat: add large summary handling with artifact upload
• e3fdf0f This ensures large allow or deny lists don't create huge comments
• 6fad417 Merge pull request #978 from actions/ljones140/make-ruby-code-scannable
• e86e969 Update scripts/scan_pr_lib.rb
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)