An open index of dependabot pull requests across open source projects.

Bump actions/dependency-review-action from 67d4f4bd7a9b17a0db54d2a7519187c65e339de8 to d8f2df20d5605f0dd46db3bd283002c24e357724

Closed
Number: #41
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: May 13, 2025 at 02:49 PM UTC
(about 1 year ago)
Updated: May 14, 2025 at 02:42 PM UTC
(about 1 year ago)
Closed: May 14, 2025 at 02:42 PM UTC
(about 1 year ago)
Time to Close: about 24 hours
Labels:
dependencies github_actions
Description:

Bumps actions/dependency-review-action from 67d4f4bd7a9b17a0db54d2a7519187c65e339de8 to d8f2df20d5605f0dd46db3bd283002c24e357724.

Commits
  • d8f2df2 Merge pull request #932 from actions/907-disallow-expression
  • 6e9307a Discard allow list entries that are not SPDX IDs
  • 8805179 Merge pull request #930 from actions/889-allow-no-license
  • 014300b Update build
  • 34486f3 Check namespaces when excluding license checks
  • 9b155d6 Update build
  • f199659 Allowing dependencies works with no licenses
  • 38ecb5b Merge pull request #929 from actions/dangoor/4.7-release
  • 0e9e935 Version 4.7.0 release
  • 69d2faa Merge pull request #926 from dangoor/dangoor/replace-other
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Ecosystem:
actions
Version Change:
67d4f4bd7a9b17a0db54d2a7519187c65e339de8 → d8f2df20d5605f0dd46db3bd283002c24e357724
Technical Details
ID: 1036644
UUID: 3060348506
Node ID: PR_kwDOANsh3M6WBHdI
Host: GitHub
Repository: errbit/errbit_github_plugin