Gary Gregory
|
1c12b555da
|
Fix dependency-review.yml for PR only
|
2024-11-08 07:19:28 -05:00 |
dependabot[bot]
|
f3a60360e4
|
Bump actions/dependency-review-action from 4.3.5 to 4.4.0
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.3.5 to 4.4.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](a6993e2c61...4081bf99e2 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-11-01 12:12:16 +00:00 |
Gary Gregory
|
b866c25f61
|
Only run actions/dependency-review-action on pull_request
|
2024-11-01 07:31:28 -04:00 |
Gary Gregory
|
2e5b9645ff
|
Merge pull request #499 from apache/dependabot/github_actions/actions/checkout-4.2.2
Bump actions/checkout from 4.2.1 to 4.2.2
|
2024-10-25 08:20:35 -04:00 |
dependabot[bot]
|
32d98e6fe2
|
Bump actions/dependency-review-action from 4.3.4 to 4.3.5
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.3.4 to 4.3.5.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](5a2ce3f5b9...a6993e2c61 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-10-25 12:19:23 +00:00 |
dependabot[bot]
|
da647b7f1e
|
Bump actions/checkout from 4.2.1 to 4.2.2
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.1 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](eef61447b9...11bd71901b )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-10-25 12:19:20 +00:00 |
dependabot[bot]
|
0174fe7c43
|
Bump actions/checkout from 4.2.0 to 4.2.1
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](d632683dd7...eef61447b9 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-10-11 12:47:55 +00:00 |
dependabot[bot]
|
78064189d3
|
Bump actions/checkout from 4.1.7 to 4.2.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.7 to 4.2.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](692973e3d9...d632683dd7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-10-04 12:26:02 +00:00 |
Gary Gregory
|
55b824d4ff
|
Pin GitHub action versions
|
2024-09-28 16:19:59 -04:00 |
Gary Gregory
|
cab22bb697
|
Also run DR on push
|
2024-09-23 09:28:00 -04:00 |
Gary Gregory
|
113147f1e7
|
Add dependency-review.yml to GitHub CI
|
2024-09-20 19:58:24 -04:00 |