functions-framework-php chore(deps): update actions/dependency-review-action action to v4

chore(deps): update actions/dependency-review-action action to v4

Open renovate-bot opened this issue 1 year ago • 0 comments

This PR contains the following updates:

Package	Type	Update	Change
actions/dependency-review-action	action	major	`v3.1.5` -> `v4.3.3`

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.3.2...v4.3.3

`v4.3.2`

Compare Source

What's Changed

Fix package-url parsing for allow-dependencies-licenses by @juxtin in https://github.com/actions/dependency-review-action/pull/761

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.3.1...v4.3.2

`v4.3.1`

Compare Source

What's Changed

This release fixes some bugs related to package-url parsing that were introduced in 4.3.0. See https://github.com/actions/dependency-review-action/pull/753.

Full Changelog: https://github.com/actions/dependency-review-action/compare/V4.3.0...v4.3.1

`v4.3.0`

Compare Source

New Features

The deny-packages option can now be used without a version number to exclude all versions of a package.

What's Changed

Fix action variable name for scorecard by @lukehinds in https://github.com/actions/dependency-review-action/pull/735
Fix extra https:// in summary by @jhutchings1 in https://github.com/actions/dependency-review-action/pull/748
Bump typescript from 5.3.3 to 5.4.5 by @dependabot in https://github.com/actions/dependency-review-action/pull/744
Bump eslint-plugin-github from 4.10.1 to 4.10.2 by @dependabot in https://github.com/actions/dependency-review-action/pull/737
Show denied packages with red X by @juxtin in https://github.com/actions/dependency-review-action/pull/750
deny-packages configuration option can deny specified version or all packages by @febuiles and @bteng22 in https://github.com/actions/dependency-review-action/pull/733

New Contributors

@bteng22 made their first contribution in https://github.com/actions/dependency-review-action/pull/733
@lukehinds made their first contribution in https://github.com/actions/dependency-review-action/pull/735

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.2.5...V4.3.0

`v4.2.5`: 4.2.5

Compare Source

What's Changed

Fixed a bug where some configuration options in external files were not being properly picked up -- https://github.com/actions/dependency-review-action/pull/722
Bump eslint from 8.56.0 to 8.57.0

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.2.4...v4.2.5

`v4.2.4`

Compare Source

What's Changed

Fixed a bug in the output of OpenSSF cards for GitHub Actions.

New Contributors

@sporkmonger made their first contribution in https://github.com/actions/dependency-review-action/pull/721

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.2.3...v4.2.4

`v4.2.3`: 4.2.3

Compare Source

What's Changed

Set comment as output by @jsoref in https://github.com/actions/dependency-review-action/pull/698
Add support for calculating OpenSSF Scorecards by @jhutchings1 in https://github.com/actions/dependency-review-action/pull/709
Add outputs for the changes data by @laughedelic in https://github.com/actions/dependency-review-action/pull/707

New Contributors

@jhutchings1 made their first contribution in https://github.com/actions/dependency-review-action/pull/709
@laughedelic made their first contribution in https://github.com/actions/dependency-review-action/pull/707

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.1.3...v4.2.3

`v4.1.3`: 4.1.3

Compare Source

Fixes a bug in 4.1.2 that would introduce comments in every pull request, regardless of the user's configuration (see https://github.com/actions/dependency-review-action/issues/697).

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.1.2...v4.1.3