This is an automated email from the ASF dual-hosted git repository.
ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-jci.git
The following commit(s) were added to refs/heads/master by this push:
new c997fa5 Bump actions/dependency-review-action from 4.6.0 to 4.7.0
(#195)
c997fa5 is described below
commit c997fa53c71e4e632f8d430f3078d58803602cf6
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Fri May 9 02:22:07 2025 -0400
Bump actions/dependency-review-action from 4.6.0 to 4.7.0 (#195)
Bumps
[actions/dependency-review-action](https://github.com/actions/dependency-review-action)
from 4.6.0 to 4.7.0.
- [Release
notes](https://github.com/actions/dependency-review-action/releases)
-
[Commits](https://github.com/actions/dependency-review-action/compare/ce3cf9537a52e8119d91fd484ab5b8a807627bf8...38ecb5b593bf0eb19e335c03f97670f792489a8b)
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-version: 4.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <supp...@github.com>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/dependency-review.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/dependency-review.yml
b/.github/workflows/dependency-review.yml
index f2e2e05..066d2c3 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -28,4 +28,4 @@ jobs:
- name: 'Checkout Repository'
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #
v4.2.2
- name: 'Dependency Review PR'
- uses:
actions/dependency-review-action@ce3cf9537a52e8119d91fd484ab5b8a807627bf8 #
v4.6.0
+ uses:
actions/dependency-review-action@38ecb5b593bf0eb19e335c03f97670f792489a8b #
v4.7.0
