New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Update actions/dependency-review-action action to v4.6.0 #76

Open

renovate wants to merge 1 commit into main from renovate/actions-dependency-review-action-4.x

Contributor

renovate bot commented Apr 1, 2025

This PR contains the following updates:

Package	Type	Update	Change
actions/dependency-review-action	action	minor	`v4.5.0` -> `v4.6.0`

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

`v4.6.0`

What's Changed

Updating multiple dependency versions by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/870
Grouping minor and patch dependabot updates to lessen the number of PRs by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/876
Bump actions/stale from 9.0.0 to 9.1.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/878
Bump undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/actions/dependency-review-action/pull/877
DR Action should link to the proxima stamp when appropriate in error messages by @AshelyTC in https://github.com/actions/dependency-review-action/pull/891
Allow deny package removal by @ellenfieldn in https://github.com/actions/dependency-review-action/pull/888
Fix typos by @omahs in https://github.com/actions/dependency-review-action/pull/893
Bump esbuild from 0.19.5 to 0.25.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/900
Bump octokit and related dependencies by @RomanIakovlev in https://github.com/actions/dependency-review-action/pull/904
Bump @babel/helpers from 7.23.2 to 7.26.10 by @dependabot in https://github.com/actions/dependency-review-action/pull/905
Bump @octokit/plugin-paginate-rest from 9.1.5 to 9.2.2 by @dependabot in https://github.com/actions/dependency-review-action/pull/899
Update transitive dependency spdx-license-ids by @ailox in https://github.com/actions/dependency-review-action/pull/855
To not print OpenSSF Scorecard section if no dependencies scanned by @fabasoad in https://github.com/actions/dependency-review-action/pull/884
Improve usage of this action in dependency-review.yml by @fabasoad in https://github.com/actions/dependency-review-action/pull/883
Clarify comment-summary-in-pr behaviour by @Pantelis-Santorinios in https://github.com/actions/dependency-review-action/pull/902
Prepare 4.6.0 Release candidate by @brrygrdn in https://github.com/actions/dependency-review-action/pull/910

New Contributors

@AshelyTC made their first contribution in https://github.com/actions/dependency-review-action/pull/891
@ellenfieldn made their first contribution in https://github.com/actions/dependency-review-action/pull/888
@omahs made their first contribution in https://github.com/actions/dependency-review-action/pull/893
@RomanIakovlev made their first contribution in https://github.com/actions/dependency-review-action/pull/904
@ailox made their first contribution in https://github.com/actions/dependency-review-action/pull/855
@fabasoad made their first contribution in https://github.com/actions/dependency-review-action/pull/884
@Pantelis-Santorinios made their first contribution in https://github.com/actions/dependency-review-action/pull/902
@brrygrdn made their first contribution in https://github.com/actions/dependency-review-action/pull/910

Full Changelog: actions/dependency-review-action@v4.5.0...v4.6.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


          Update actions/dependency-review-action action to v4.6.0

517b0b3

| datasource  | package                          | from   | to     |
| ----------- | -------------------------------- | ------ | ------ |
| github-tags | actions/dependency-review-action | v4.5.0 | v4.6.0 |


Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot added the dependencies label

renovate bot enabled auto-merge (squash)

April 1, 2025 17:02

# for free to join this conversation on GitHub. Already have an account? # to comment

Labels