Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

fix typo and remove unintentional(?) word #518

Merged
merged 2 commits into from
Jul 31, 2023

Conversation

CyberFlameGO
Copy link
Contributor

Description:
Fix typo and remove description: as it does not match the format of the surrounding text

Related issue:
N/A

Check list:

  • Mark if documentation changes are required.
  • Mark if tests were added or updated to cover the changes.

@CyberFlameGO CyberFlameGO requested a review from a team as a code owner July 27, 2023 02:16
@IvanZosimov
Copy link
Contributor

Hi, @CyberFlameGO 👋 Thanks for the PR, I fixed another one typo in the README.md file and pushed it into the PR branch.

@IvanZosimov IvanZosimov merged commit b943a4e into actions:main Jul 31, 2023
3 checks passed
ianlewis referenced this pull request in slsa-framework/slsa-github-generator Oct 23, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| actions/checkout | action | digest | `96f5310` -> `b4ffde6` |
| [actions/checkout](https://github.com/actions/checkout) | action |
minor | `v4.0.0` -> `v4.1.1` |
| [actions/setup-go](https://github.com/actions/setup-go) | action |
minor | `v4.0.1` -> `v4.1.0` |
| [actions/setup-java](https://github.com/actions/setup-java) | action
| minor | `v3.12.0` -> `v3.13.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | action
| minor | `v3.7.0` -> `v3.8.1` |
| [actions/setup-node](https://github.com/actions/setup-node) | action
| digest | `e33196f` -> `5e21ff4` |
|
[actions/upload-artifact](https://github.com/actions/upload-artifact)
| action | patch | `v3.1.2` -> `v3.1.3` |
| [github/codeql-action](https://github.com/github/codeql-action) |
action | minor | `v2.21.2` -> `v2.22.4` |
|
[gradle/gradle-build-action](https://github.com/gradle/gradle-build-action)
| action | minor | `v2.7.0` -> `v2.9.0` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) |
action | minor | `v2.2.0` -> `v2.3.0` |
|
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer)
| action | patch | `v3.1.1` -> `v3.1.2` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

###
[`v4.1.1`](https://github.com/actions/checkout/releases/tag/v4.1.1)

[Compare
Source](https://github.com/actions/checkout/compare/v4.1.0...v4.1.1)

##### What's Changed

- Update CODEOWNERS to Launch team by
[@&#8203;joshmgross](https://github.com/joshmgross) in
[https://github.com/actions/checkout/pull/1510](https://github.com/actions/checkout/pull/1510)
- Correct link to GitHub Docs by
[@&#8203;peterbe](https://github.com/peterbe) in
[https://github.com/actions/checkout/pull/1511](https://github.com/actions/checkout/pull/1511)
- Link to release page from what's new section by
[@&#8203;cory-miller](https://github.com/cory-miller) in
[https://github.com/actions/checkout/pull/1514](https://github.com/actions/checkout/pull/1514)

##### New Contributors

- [@&#8203;joshmgross](https://github.com/joshmgross) made their first
contribution in
[https://github.com/actions/checkout/pull/1510](https://github.com/actions/checkout/pull/1510)
- [@&#8203;peterbe](https://github.com/peterbe) made their first
contribution in
[https://github.com/actions/checkout/pull/1511](https://github.com/actions/checkout/pull/1511)

**Full Changelog**:
actions/checkout@v4...v4.1.1

###
[`v4.1.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v410)

[Compare
Source](https://github.com/actions/checkout/compare/v4.0.0...v4.1.0)

- [Add support for partial checkout
filters](https://github.com/actions/checkout/pull/1396)

</details>

<details>
<summary>actions/setup-go (actions/setup-go)</summary>

###
[`v4.1.0`](https://github.com/actions/setup-go/releases/tag/v4.1.0)

[Compare
Source](https://github.com/actions/setup-go/compare/v4.0.1...v4.1.0)

#### What's Changed

In scope of this release, slow installation on Windows was fixed by
[@&#8203;dsame](https://github.com/dsame) in
[https://github.com/actions/setup-go/pull/393](https://github.com/actions/setup-go/pull/393)
and OS version was added to `primaryKey` for Ubuntu runners to avoid
conflicts
([https://github.com/actions/setup-go/pull/383](https://github.com/actions/setup-go/pull/383))

This release also includes the following changes:

- Remove implicit dependencies by
[@&#8203;nikolai-laevskii](https://github.com/nikolai-laevskii) in
[https://github.com/actions/setup-go/pull/378](https://github.com/actions/setup-go/pull/378)
- Update action.yml by [@&#8203;mkelly](https://github.com/mkelly) in
[https://github.com/actions/setup-go/pull/379](https://github.com/actions/setup-go/pull/379)
- Added a description that go-version should be specified as a string
type by [@&#8203;n3xem](https://github.com/n3xem) in
[https://github.com/actions/setup-go/pull/367](https://github.com/actions/setup-go/pull/367)
- Add note about YAML parsing versions by
[@&#8203;dmitry-shibanov](https://github.com/dmitry-shibanov) in
[https://github.com/actions/setup-go/pull/382](https://github.com/actions/setup-go/pull/382)
- Automatic update of configuration files from 05/23/2023 by
[@&#8203;github-actions](https://github.com/github-actions) in
[https://github.com/actions/setup-go/pull/377](https://github.com/actions/setup-go/pull/377)
- Bump tough-cookie and
[@&#8203;azure/ms-rest-js](https://github.com/azure/ms-rest-js) by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/actions/setup-go/pull/392](https://github.com/actions/setup-go/pull/392)
- Bump word-wrap from 1.2.3 to 1.2.4 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/actions/setup-go/pull/397](https://github.com/actions/setup-go/pull/397)
- Bump semver from 6.3.0 to 6.3.1 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/actions/setup-go/pull/396](https://github.com/actions/setup-go/pull/396)

#### New Contributors

- [@&#8203;mkelly](https://github.com/mkelly) made their first
contribution in
[https://github.com/actions/setup-go/pull/379](https://github.com/actions/setup-go/pull/379)
- [@&#8203;n3xem](https://github.com/n3xem) made their first
contribution in
[https://github.com/actions/setup-go/pull/367](https://github.com/actions/setup-go/pull/367)

**Full Changelog**:
actions/setup-go@v4...v4.1.0

</details>

<details>
<summary>actions/setup-java (actions/setup-java)</summary>

###
[`v3.13.0`](https://github.com/actions/setup-java/releases/tag/v3.13.0)

[Compare
Source](https://github.com/actions/setup-java/compare/v3.12.0...v3.13.0)

##### What's changed

In the scope of this release, support for Dragonwell JDK was added by
[@&#8203;Accelerator1996](https://github.com/Accelerator1996) in
[https://github.com/actions/setup-java/pull/532](https://github.com/actions/setup-java/pull/532)

```yaml
steps:
 - name: Checkout
   uses: actions/checkout@v3
 - name: Setup-java
   uses: actions/setup-java@v3
   with:
     distribution: 'dragonwell'
     java-version: '17'
```

Several inaccuracies were also fixed:

- Fix XML namespaces wrongly using https by
[@&#8203;gnodet](https://github.com/gnodet) in
[https://github.com/actions/setup-java/pull/503](https://github.com/actions/setup-java/pull/503)
- Fix typo and remove unintentional(?) word by
[@&#8203;CyberFlameGO](https://github.com/CyberFlameGO) in
[https://github.com/actions/setup-java/pull/518](https://github.com/actions/setup-java/pull/518)
- Fix usage link within the README.md file by
[@&#8203;dassiorleando](https://github.com/dassiorleando) in
[https://github.com/actions/setup-java/pull/525](https://github.com/actions/setup-java/pull/525)

##### New Contributors

- [@&#8203;CyberFlameGO](https://github.com/CyberFlameGO) made their
first contribution in
[https://github.com/actions/setup-java/pull/518](https://github.com/actions/setup-java/pull/518)
- [@&#8203;dassiorleando](https://github.com/dassiorleando) made their
first contribution in
[https://github.com/actions/setup-java/pull/525](https://github.com/actions/setup-java/pull/525)
- [@&#8203;gnodet](https://github.com/gnodet) made their first
contribution in
[https://github.com/actions/setup-java/pull/503](https://github.com/actions/setup-java/pull/503)
- [@&#8203;Accelerator1996](https://github.com/Accelerator1996) made
their first contribution in
[https://github.com/actions/setup-java/pull/532](https://github.com/actions/setup-java/pull/532)

**Full Changelog**:
actions/setup-java@v3...v3.13.0

</details>

<details>
<summary>actions/setup-node (actions/setup-node)</summary>

###
[`v3.8.1`](https://github.com/actions/setup-node/releases/tag/v3.8.1)

[Compare
Source](https://github.com/actions/setup-node/compare/v3.8.0...v3.8.1)

#### What's Changed

In scope of this release, the filter was removed within the cache-save
step by [@&#8203;dmitry-shibanov](https://github.com/dmitry-shibanov)
in
[https://github.com/actions/setup-node/pull/831](https://github.com/actions/setup-node/pull/831).
It is filtered and checked in the toolkit/cache library.

**Full Changelog**:
actions/setup-node@v3...v3.8.1

###
[`v3.8.0`](https://github.com/actions/setup-node/releases/tag/v3.8.0)

[Compare
Source](https://github.com/actions/setup-node/compare/v3.7.0...v3.8.0)

##### What's Changed

##### Bug fixes:

- Add check for existing paths by
[@&#8203;dmitry-shibanov](https://github.com/dmitry-shibanov) in
[https://github.com/actions/setup-node/pull/803](https://github.com/actions/setup-node/pull/803)
- Resolve SymbolicLink by
[@&#8203;dmitry-shibanov](https://github.com/dmitry-shibanov) in
[https://github.com/actions/setup-node/pull/809](https://github.com/actions/setup-node/pull/809)
- Change passing logic for cache input by
[@&#8203;dmitry-shibanov](https://github.com/dmitry-shibanov) in
[https://github.com/actions/setup-node/pull/816](https://github.com/actions/setup-node/pull/816)
- Fix armv7 cache issue by
[@&#8203;louislam](https://github.com/louislam) in
[https://github.com/actions/setup-node/pull/794](https://github.com/actions/setup-node/pull/794)
- Update check-dist workflow name by
[@&#8203;sinchang](https://github.com/sinchang) in
[https://github.com/actions/setup-node/pull/710](https://github.com/actions/setup-node/pull/710)

##### Feature implementations:

- feat: handling the case where "node" is used for tool-versions file.
by [@&#8203;xytis](https://github.com/xytis) in
[https://github.com/actions/setup-node/pull/812](https://github.com/actions/setup-node/pull/812)

##### Documentation changes:

- Refer to semver package name in README.md by
[@&#8203;olleolleolle](https://github.com/olleolleolle) in
[https://github.com/actions/setup-node/pull/808](https://github.com/actions/setup-node/pull/808)

##### Update dependencies:

- Update toolkit cache to fix zstd by
[@&#8203;dmitry-shibanov](https://github.com/dmitry-shibanov) in
[https://github.com/actions/setup-node/pull/804](https://github.com/actions/setup-node/pull/804)
- Bump tough-cookie and
[@&#8203;azure/ms-rest-js](https://github.com/azure/ms-rest-js) by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/actions/setup-node/pull/802](https://github.com/actions/setup-node/pull/802)
- Bump semver from 6.1.2 to 6.3.1 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/actions/setup-node/pull/807](https://github.com/actions/setup-node/pull/807)
- Bump word-wrap from 1.2.3 to 1.2.4 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/actions/setup-node/pull/815](https://github.com/actions/setup-node/pull/815)

##### New Contributors

- [@&#8203;olleolleolle](https://github.com/olleolleolle) made their
first contribution in
[https://github.com/actions/setup-node/pull/808](https://github.com/actions/setup-node/pull/808)
- [@&#8203;louislam](https://github.com/louislam) made their first
contribution in
[https://github.com/actions/setup-node/pull/794](https://github.com/actions/setup-node/pull/794)
- [@&#8203;sinchang](https://github.com/sinchang) made their first
contribution in
[https://github.com/actions/setup-node/pull/710](https://github.com/actions/setup-node/pull/710)
- [@&#8203;xytis](https://github.com/xytis) made their first
contribution in
[https://github.com/actions/setup-node/pull/812](https://github.com/actions/setup-node/pull/812)

**Full Changelog**:
actions/setup-node@v3...v3.8.0

</details>

<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>

###
[`v3.1.3`](https://github.com/actions/upload-artifact/releases/tag/v3.1.3)

[Compare
Source](https://github.com/actions/upload-artifact/compare/v3.1.2...v3.1.3)

#### What's Changed

- chore(github): remove trailing whitespaces by
[@&#8203;ljmf00](https://github.com/ljmf00) in
[https://github.com/actions/upload-artifact/pull/313](https://github.com/actions/upload-artifact/pull/313)
- Bump [@&#8203;actions/artifact](https://github.com/actions/artifact)
version to v1.1.2 by
[@&#8203;bethanyj28](https://github.com/bethanyj28) in
[https://github.com/actions/upload-artifact/pull/436](https://github.com/actions/upload-artifact/pull/436)

**Full Changelog**:
actions/upload-artifact@v3...v3.1.3

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v2.22.4`](https://github.com/github/codeql-action/compare/v2.22.3...v2.22.4)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.22.3...v2.22.4)

###
[`v2.22.3`](https://github.com/github/codeql-action/compare/v2.22.2...v2.22.3)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.22.2...v2.22.3)

###
[`v2.22.2`](https://github.com/github/codeql-action/compare/v2.22.1...v2.22.2)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.22.1...v2.22.2)

###
[`v2.22.1`](https://github.com/github/codeql-action/compare/v2.22.0...v2.22.1)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.22.0...v2.22.1)

###
[`v2.22.0`](https://github.com/github/codeql-action/compare/v2.21.9...v2.22.0)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.21.9...v2.22.0)

###
[`v2.21.9`](https://github.com/github/codeql-action/compare/v2.21.8...v2.21.9)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.21.8...v2.21.9)

###
[`v2.21.8`](https://github.com/github/codeql-action/compare/v2.21.7...v2.21.8)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.21.7...v2.21.8)

###
[`v2.21.7`](https://github.com/github/codeql-action/compare/v2.21.6...v2.21.7)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.21.6...v2.21.7)

###
[`v2.21.6`](https://github.com/github/codeql-action/compare/v2.21.5...v2.21.6)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.21.5...v2.21.6)

###
[`v2.21.5`](https://github.com/github/codeql-action/compare/v2.21.4...v2.21.5)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.21.4...v2.21.5)

###
[`v2.21.4`](https://github.com/github/codeql-action/compare/v2.21.3...v2.21.4)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.21.3...v2.21.4)

###
[`v2.21.3`](https://github.com/github/codeql-action/compare/v2.21.2...v2.21.3)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.21.2...v2.21.3)

</details>

<details>
<summary>gradle/gradle-build-action
(gradle/gradle-build-action)</summary>

###
[`v2.9.0`](https://github.com/gradle/gradle-build-action/releases/tag/v2.9.0)

[Compare
Source](https://github.com/gradle/gradle-build-action/compare/v2.8.1...v2.9.0)

The GitHub
[dependency-review-action](https://github.com/actions/dependency-review-action)
helps you understand dependency changes (and the security impact of
these changes) for a pull request. This release updates the GItHub
Dependency Graph support to be compatible with the
`dependency-review-action`.

See [the
documentation](https://github.com/gradle/gradle-build-action#integrating-the-dependency-review-action)
for detailed examples.

##### Changelog

- \[FIX] Use correct SHA for `pull-request` events
[#&#8203;882](https://github.com/gradle/gradle-build-action/issues/882)
- \[FIX] Avoid generating dependency graph during cache cleanup
[#&#8203;905](https://github.com/gradle/gradle-build-action/issues/905)
-   \[NEW] Improve warning on failure to submit dependency graph
- \[NEW] Compatibility with GitHub `dependency-review-action`
[#&#8203;879](https://github.com/gradle/gradle-build-action/issues/879)

**Full-changelog**:
gradle/gradle-build-action@v2.8.1...v2.9.0

###
[`v2.8.1`](https://github.com/gradle/gradle-build-action/releases/tag/v2.8.1)

[Compare
Source](https://github.com/gradle/gradle-build-action/compare/v2.8.0...v2.8.1)

Fixes an issue that prevented Dependency Graph submission when running
on GitHub Enterprise Server.

##### Fixes

- Incorrect endpoint used to submit Dependency Graph on GitHub
Enterprise
[#&#8203;885](https://github.com/gradle/gradle-build-action/issues/885)

##### Changelog

###
[`v2.8.0`](https://github.com/gradle/gradle-build-action/releases/tag/v2.8.0)

[Compare
Source](https://github.com/gradle/gradle-build-action/compare/v2.7.1...v2.8.0)

The `v2.8.0` release of the `gradle-build-action` introduces an easy
mechanism to connect to Gradle Enterprise, as well improved support for
self-hosted GitHub Actions runners.

##### Automatic injection of Gradle Enterprise connectivity

It is now possible to connect a Gradle build to Gradle Enterprise
without changing any of the Gradle project sources. This is achieved
through Gradle Enterprise injection, where an init-script will apply the
Gradle Enterprise plugin and associated configuration.

This feature can be useful to easily trial Gradle Enterprise on a
project, or to centralize Gradle Enterprise configuration for all GitHub
Actions workflows in an organization.

See [Gradle Enterprise injection in the
README](https://github.com/gradle/gradle-build-action/blob/v2.8.0/README.md#gradle-enterprise-plugin-injection)
for more info.

##### Restore Gradle User Home when directory already exists

Previously, the Gradle User Home would not be restored if the directory
already exists. This wasn't normally an issue with GitHub-hosted
runners, but limited the usefulness of the action for persistent,
self-hosted runners.

This behaviour has been improved in this release:

- The Job Summary now includes a useful error message when Gradle User
Home was not restored because the directory already exists.
- The action can now be configured to restore the Gradle User Home when
the directory already exists, overwriting existing content with content
from the GitHub Actions cache. See
https://github.com/gradle/gradle-build-action#overwriting-an-existing-gradle-user-home
for more details.

##### Changes

**Issues fixed**:
https://github.com/gradle/gradle-build-action/issues?q=milestone%3A2.8.0+is%3Aclosed
**Full changelog**:
gradle/gradle-build-action@v2.7.1...v2.8.0

###
[`v2.7.1`](https://github.com/gradle/gradle-build-action/releases/tag/v2.7.1)

[Compare
Source](https://github.com/gradle/gradle-build-action/compare/v2.7.0...v2.7.1)

This release contains no code changes, only dependency updates and
documentation improvements.

##### Changelog

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.3.0`](https://github.com/ossf/scorecard-action/releases/tag/v2.3.0)

[Compare
Source](https://github.com/ossf/scorecard-action/compare/v2.2.0...v2.3.0)

#### What's Changed

- 🌱 Bump github.com/ossf/scorecard/v4 from v4.11.0 to v4.13.0
by [@&#8203;spencerschrock](https://github.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1270](https://github.com/ossf/scorecard-action/pull/1270)
- For a full changelist of what this includes, see the
[v4.12.0](https://github.com/ossf/scorecard/releases/tag/v4.12.0) and
[v4.13.0](https://github.com/ossf/scorecard/releases/tag/v4.13.0)
release notes
- ✨ Send rekor tlog index to webapp when publishing results by
[@&#8203;spencerschrock](https://github.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1169](https://github.com/ossf/scorecard-action/pull/1169)
- 🐛 Prevent url clipping for GHES instances by
[@&#8203;rajbos](https://github.com/rajbos) in
[https://github.com/ossf/scorecard-action/pull/1225](https://github.com/ossf/scorecard-action/pull/1225)

##### Documentation

- 📖 Update access rights needed to see the results in code scanning
by [@&#8203;rajbos](https://github.com/rajbos) in
[https://github.com/ossf/scorecard-action/pull/1229](https://github.com/ossf/scorecard-action/pull/1229)
- 📖 Add package comments. by
[@&#8203;spencerschrock](https://github.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1221](https://github.com/ossf/scorecard-action/pull/1221)
- 📖 Add SECURITY.md file by
[@&#8203;david-a-wheeler](https://github.com/david-a-wheeler) in
[https://github.com/ossf/scorecard-action/pull/1250](https://github.com/ossf/scorecard-action/pull/1250)
- 📖 Fix typo in token input docs by
[@&#8203;aabouzaid](https://github.com/aabouzaid) in
[https://github.com/ossf/scorecard-action/pull/1258](https://github.com/ossf/scorecard-action/pull/1258)

#### New Contributors

- [@&#8203;david-a-wheeler](https://github.com/david-a-wheeler) made
their first contribution in
[https://github.com/ossf/scorecard-action/pull/1250](https://github.com/ossf/scorecard-action/pull/1250)
- [@&#8203;aabouzaid](https://github.com/aabouzaid) made their first
contribution in
[https://github.com/ossf/scorecard-action/pull/1258](https://github.com/ossf/scorecard-action/pull/1258)

**Full Changelog**:
ossf/scorecard-action@v2.2.0...v2.3.0

</details>

<details>
<summary>sigstore/cosign-installer (sigstore/cosign-installer)</summary>

###
[`v3.1.2`](https://github.com/sigstore/cosign-installer/releases/tag/v3.1.2)

[Compare
Source](https://github.com/sigstore/cosign-installer/compare/v3.1.1...v3.1.2)

#### What's Changed

- Fix build and push step Readme missing id by
[@&#8203;hbenali](https://github.com/hbenali) in
[https://github.com/sigstore/cosign-installer/pull/138](https://github.com/sigstore/cosign-installer/pull/138)
- bump cosign to v2.2.0 by
[@&#8203;cpanato](https://github.com/cpanato) in
[https://github.com/sigstore/cosign-installer/pull/142](https://github.com/sigstore/cosign-installer/pull/142)

#### New Contributors

- [@&#8203;hbenali](https://github.com/hbenali) made their first
contribution in
[https://github.com/sigstore/cosign-installer/pull/138](https://github.com/sigstore/cosign-installer/pull/138)

**Full Changelog**:
sigstore/cosign-installer@v3...v3.1.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekend" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/slsa-framework/slsa-github-generator).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44LjEiLCJ1cGRhdGVkSW5WZXIiOiIzNy4xOS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Signed-off-by: Mend Renovate <bot@renovateapp.com>
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants