An open index of dependabot pull requests across open source projects.

Bump advanced-security/maven-dependency-submission-action from 4.1.2 to 4.1.3

Open
Number: #201
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: May 20, 2025 at 02:27 AM UTC
(about 1 year ago)
Updated: May 20, 2025 at 02:29 AM UTC
(about 1 year ago)
Labels:
dependencies github_actions
Description:

Bumps advanced-security/maven-dependency-submission-action from 4.1.2 to 4.1.3.

Release notes

Sourced from advanced-security/maven-dependency-submission-action's releases.

v4.1.3

The release bumps dependency versions to stay up-to-date.

Commits
  • fe8d4d6 Merge pull request #113 from advanced-security/dangoor/413
  • 05a8a34 Bump version number to 4.1.3
  • 5d79031 Merge pull request #112 from advanced-security/workflow-permissions
  • 6681269 Set workflow permissions
  • 4b6fc92 Merge pull request #111 from advanced-security/dependabot/npm_and_yarn/npm_an...
  • a82c977 Bump the npm_and_yarn group across 1 directory with 4 updates
  • fd44dd7 Merge pull request #101 from advanced-security/dependabot/npm_and_yarn/octoki...
  • b08977e Merge pull request #100 from advanced-security/dependabot/npm_and_yarn/octoki...
  • 0fdf861 Merge pull request #98 from advanced-security/dependabot/npm_and_yarn/octokit...
  • dc41d4a Merge pull request #97 from advanced-security/dependabot/npm_and_yarn/tar-fs-...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Ecosystem:
actions
Version Change:
4.1.2 → 4.1.3
Update Type:
Patch
Technical Details
ID: 506978
UUID: 3075438383
Node ID: PR_kwDOAuA-lc6Wzwer
Host: GitHub
Repository: common-workflow-language/cwljava