dependabot[bot]
ee9d88b637
Bump crate-ci/typos from 1.20.9 to 1.20.10 ( #3757 )
...
Bumps [crate-ci/typos](https://github.com/crate-ci/typos ) from 1.20.9 to 1.20.10.
- [Release notes](https://github.com/crate-ci/typos/releases )
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crate-ci/typos/compare/v1.20.9...v1.20.10 )
---
updated-dependencies:
- dependency-name: crate-ci/typos
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-29 23:10:50 +09:00
dependabot[bot]
b86a967ee2
Bump crate-ci/typos from 1.19.0 to 1.20.9 ( #3749 )
...
Bumps [crate-ci/typos](https://github.com/crate-ci/typos ) from 1.19.0 to 1.20.9.
- [Release notes](https://github.com/crate-ci/typos/releases )
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crate-ci/typos/compare/v1.19.0...v1.20.9 )
---
updated-dependencies:
- dependency-name: crate-ci/typos
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-27 17:57:11 +09:00
LangLangBart
69b9d674a3
chore: Add new option in issue checklist and modify requirements ( #3715 )
2024-04-07 10:25:12 +09:00
Junegunn Choi
a575c0c54b
GitHub Actions: Use Go "1.20"
2024-04-02 01:47:24 +09:00
Junegunn Choi
77fe96ac0d
GitHub Actions: Use Go 1.20
2024-04-02 01:44:18 +09:00
LangLangBart
ec70acd0b9
chore: transition from markdown to YAML for issue template ( #3687 )
2024-03-21 08:33:28 +09:00
dependabot[bot]
507089d7b2
Bump actions/checkout from 3 to 4 ( #3428 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-05 11:48:46 +09:00
dependabot[bot]
2d6beb7813
Bump crate-ci/typos from 1.18.2 to 1.19.0 ( #3657 )
...
Bumps [crate-ci/typos](https://github.com/crate-ci/typos ) from 1.18.2 to 1.19.0.
- [Release notes](https://github.com/crate-ci/typos/releases )
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crate-ci/typos/compare/v1.18.2...v1.19.0 )
---
updated-dependencies:
- dependency-name: crate-ci/typos
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-05 11:04:17 +09:00
dependabot[bot]
f35a9da99a
Bump crate-ci/typos from 1.17.2 to 1.18.2 ( #3624 )
...
Bumps [crate-ci/typos](https://github.com/crate-ci/typos ) from 1.17.2 to 1.18.2.
- [Release notes](https://github.com/crate-ci/typos/releases )
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crate-ci/typos/compare/v1.17.2...v1.18.2 )
---
updated-dependencies:
- dependency-name: crate-ci/typos
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-02 18:40:13 +09:00
Junegunn Choi
2a1e5a9729
More test fixes for tcell on GitHub Actions
2024-02-01 17:39:18 +09:00
Junegunn Choi
413c66beba
Fix tests for tcell build
2024-02-01 16:25:53 +09:00
dependabot[bot]
62a916bc24
Bump crate-ci/typos from 1.16.4 to 1.17.2 ( #3595 )
...
Bumps [crate-ci/typos](https://github.com/crate-ci/typos ) from 1.16.4 to 1.17.2.
- [Release notes](https://github.com/crate-ci/typos/releases )
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crate-ci/typos/compare/v1.16.4...v1.17.2 )
---
updated-dependencies:
- dependency-name: crate-ci/typos
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-23 10:21:01 +09:00
dependabot[bot]
c47b833e7b
Bump actions/dependency-review-action from 3 to 4 ( #3594 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 3 to 4.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](https://github.com/actions/dependency-review-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-23 10:20:39 +09:00
dependabot[bot]
87fc1c84b8
Bump actions/setup-go from 4 to 5 ( #3537 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 4 to 5.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-19 10:50:47 +09:00
dependabot[bot]
d4b5f12383
Bump github/codeql-action from 2 to 3 ( #3544 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-19 09:59:59 +09:00
Junegunn Choi
c5e4b83de3
Update sponsor list once a week
2023-09-02 20:48:10 +09:00
Junegunn Choi
58835e40f3
Run GitHub Sponsors action once a day
2023-08-29 19:42:30 +09:00
sitiom
9d5392fb02
Change Winget Releaser job to ubuntu-latest
( #3403 )
2023-08-17 17:17:38 +09:00
dependabot[bot]
c280645671
Bump crate-ci/typos from 1.15.0 to 1.16.4 ( #3400 )
...
Bumps [crate-ci/typos](https://github.com/crate-ci/typos ) from 1.15.0 to 1.16.4.
- [Release notes](https://github.com/crate-ci/typos/releases )
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crate-ci/typos/compare/v1.15.0...v1.16.4 )
---
updated-dependencies:
- dependency-name: crate-ci/typos
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-17 11:51:31 +09:00
dependabot[bot]
45f92e6b38
Bump actions/checkout from 2 to 3 ( #3399 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-17 11:51:13 +09:00
Junegunn Choi
6509f09961
Set up GitHub Sponsors Readme Action ( #3398 )
2023-08-14 16:39:39 +09:00
dependabot[bot]
b876b8af11
Bump crate-ci/typos from 1.14.10 to 1.15.0 ( #3331 )
...
Bumps [crate-ci/typos](https://github.com/crate-ci/typos ) from 1.14.10 to 1.15.0.
- [Release notes](https://github.com/crate-ci/typos/releases )
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crate-ci/typos/compare/v1.14.10...v1.15.0 )
---
updated-dependencies:
- dependency-name: crate-ci/typos
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-21 13:40:48 +09:00
dependabot[bot]
5620f70f9a
Bump crate-ci/typos from 1.13.16 to 1.14.10 ( #3306 )
...
Bumps [crate-ci/typos](https://github.com/crate-ci/typos ) from 1.13.16 to 1.14.10.
- [Release notes](https://github.com/crate-ci/typos/releases )
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crate-ci/typos/compare/v1.13.16...v1.14.10 )
---
updated-dependencies:
- dependency-name: crate-ci/typos
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 23:55:34 +09:00
dependabot[bot]
1913b95227
Bump actions/setup-go from 3 to 4 ( #3216 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 3 to 4.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-21 16:13:02 +09:00
dependabot[bot]
63cf9d04de
Bump crate-ci/typos from 1.13.10 to 1.13.16 ( #3194 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Junegunn Choi <junegunn.c@gmail.com>
2023-03-07 01:21:23 +09:00
Zhizhen He
3364d4d147
Add spell check workflow ( #3183 )
2023-02-23 00:36:04 +09:00
sitiom
9e9c0ceaf4
Add Winget Releaser workflow ( #3164 )
2023-02-15 16:47:12 +09:00
Junegunn Choi
77874b473c
Update Rubocop dependencies
2023-01-12 23:37:23 +09:00
dependabot[bot]
06b02ba46e
Bump actions/dependency-review-action from 2 to 3 ( #3046 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 2 to 3.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](https://github.com/actions/dependency-review-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-18 10:22:08 +09:00
dependabot[bot]
170fc517d0
Use actions/setup-go v3 ( #3021 )
...
* Bump actions/setup-go from 3.3.0 to 3.3.1
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 3.3.0 to 3.3.1.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](268d8c0ca0...c4a742cab1
)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* Apply suggestions from code review
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Junegunn Choi <junegunn.c@gmail.com>
2022-10-25 15:54:44 +09:00
Naveen
0fbf1c7c71
Add dependency review ( #2817 )
...
* chore(deps): Included dependency review
> Dependency Review GitHub Action in your repository to enforce dependency
> reviews on your pull requests.
> The action scans for vulnerable versions of dependencies introduced by package version
> changes in pull requests,
> and warns you about the associated security vulnerabilities.
> This gives you better visibility of what's changing in a pull request,
> and helps prevent vulnerabilities being added to your repository.
https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
* Update .github/workflows/depsreview.yaml
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
Co-authored-by: Junegunn Choi <junegunn.c@gmail.com>
2022-10-25 09:34:58 +09:00
dependabot[bot]
694be39c71
Use ruby/setup-ruby v1 ( #3012 )
...
* Bump ruby/setup-ruby from 1.117.0 to 1.118.0
Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby ) from 1.117.0 to 1.118.0.
- [Release notes](https://github.com/ruby/setup-ruby/releases )
- [Commits](3068fa83f9...eae47962ba
)
---
updated-dependencies:
- dependency-name: ruby/setup-ruby
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* Apply suggestions from code review
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Junegunn Choi <junegunn.c@gmail.com>
2022-10-24 20:07:31 +09:00
dependabot[bot]
dad26d81df
Use github/codeql-action@v2 ( #2998 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Junegunn Choi <junegunn.c@gmail.com>
2022-10-16 22:36:59 +09:00
dependabot[bot]
bcaea097ea
Bump actions/checkout from 61b9e3751b92087fd0b06925ba6dd6314e06f089 to v3 ( #2997 )
...
* Bump actions/checkout
Bumps [actions/checkout](https://github.com/actions/checkout ) from 61b9e3751b92087fd0b06925ba6dd6314e06f089 to 3.1.0. This release includes the previously tagged commit.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](61b9e3751b...93ea575cb5
)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* Apply suggestions from code review
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Junegunn Choi <junegunn.c@gmail.com>
2022-10-16 22:33:49 +09:00
dependabot[bot]
4530abe8df
Bump ruby/setup-ruby from 1.101.0 to 1.117.0 ( #2974 )
...
Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby ) from 1.101.0 to 1.117.0.
- [Release notes](https://github.com/ruby/setup-ruby/releases )
- [Commits](ebaea52cb2...3068fa83f9
)
---
updated-dependencies:
- dependency-name: ruby/setup-ruby
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-28 16:55:35 +09:00
dependabot[bot]
586020b8b6
Bump actions/checkout from 629c2de402a417ea7690ca6ce3f33229e27606a5 to 61b9e3751b92087fd0b06925ba6dd6314e06f089 ( #2965 )
...
* Bump actions/checkout
Bumps [actions/checkout](https://github.com/actions/checkout ) from 629c2de402a417ea7690ca6ce3f33229e27606a5 to 61b9e3751b92087fd0b06925ba6dd6314e06f089.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](629c2de402...61b9e3751b
)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* Update .github/workflows/codeql-analysis.yml
* Update .github/workflows/macos.yml
* Update .github/workflows/linux.yml
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Junegunn Choi <junegunn.c@gmail.com>
2022-09-28 16:55:13 +09:00
dependabot[bot]
a6e483a434
Bump actions/setup-go from 3.0.0 to 3.3.0 ( #2946 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 3.0.0 to 3.3.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](f6164bd8c8...268d8c0ca0
)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-28 16:53:04 +09:00
dependabot[bot]
6a942e56b1
Bump github/codeql-action from 2.1.8 to 2.1.25 ( #2985 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.1.8 to 2.1.25.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](1ed1437484...86f3159a69
)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-28 16:50:36 +09:00
Junegunn Choi
b5efc68737
Revert "Add Sponsor Labels action"
...
This reverts commit 845034c81c
.
2022-09-13 09:43:11 +09:00
Junegunn Choi
845034c81c
Add Sponsor Labels action
2022-09-10 11:25:32 +09:00
Junegunn Choi
f4fd53211a
Reformat comments adhere to gofmt
2022-08-12 22:11:15 +09:00
Junegunn Choi
3a7447dcb6
Update FUNDING.yml
2022-07-30 19:35:41 +09:00
dependabot[bot]
a91a67668e
Bump github/codeql-action from 2.1.6 to 2.1.8 ( #2787 )
...
* Bump github/codeql-action from 2.1.6 to 2.1.8
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2.1.6 to 2.1.8.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](28eead2408...1ed1437484
)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* Delete incorrect comments
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Junegunn Choi <junegunn.c@gmail.com>
2022-04-22 22:36:56 +09:00
dependabot[bot]
220a908118
Bump ruby/setup-ruby from 1.100.0 to 1.101.0 ( #2795 )
...
* Bump ruby/setup-ruby from 1.100.0 to 1.101.0
Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby ) from 1.100.0 to 1.101.0.
- [Release notes](https://github.com/ruby/setup-ruby/releases )
- [Commits](bd94d6a504...ebaea52cb2
)
---
updated-dependencies:
- dependency-name: ruby/setup-ruby
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* Delete incorrect comments
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Junegunn Choi <junegunn.c@gmail.com>
2022-04-22 22:35:51 +09:00
dependabot[bot]
707f4f5816
Bump github/codeql-action from 1.1.5 to 2.1.6 ( #2782 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 1.1.5 to 2.1.6.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](8834766498...28eead2408
)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-04 22:44:10 +09:00
Junegunn Choi
b88eb72ac2
Modernize build tags
2022-03-29 21:23:45 +09:00
dependabot[bot]
32847f7254
Bump actions/setup-go from 2.2.0 to 3 ( #2776 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 2.2.0 to 3.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](bfdd3570ce...f6164bd8c8
)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-29 21:17:44 +09:00
dependabot[bot]
71df93b534
Bump ruby/setup-ruby from 1.62.0 to 1.100.0 ( #2775 )
...
Bumps [ruby/setup-ruby](https://github.com/ruby/setup-ruby ) from 1.62.0 to 1.100.0.
- [Release notes](https://github.com/ruby/setup-ruby/releases )
- [Commits](5aaa89ff0d...bd94d6a504
)
---
updated-dependencies:
- dependency-name: ruby/setup-ruby
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-03-29 21:17:29 +09:00
Naveen
bb028191f8
Set up dependabot for GitHub actions ( #2764 )
2022-03-29 21:08:41 +09:00
Naveen
19af8fc7d8
Pin actions to a full length commit SHA ( #2765 )
...
- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
>Pin actions to a full length commit SHA
>Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload.
https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
Also, dependabot supports upgrade based on SHA.
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>s
2022-03-29 21:08:01 +09:00