-
Notifications
You must be signed in to change notification settings - Fork 614
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update and pin dependencies #18454
Update and pin dependencies #18454
Conversation
With v4.4.0 and later, hidden files are excluded by default.
With v1.2.3 the action was switched to node20, whereas running older node versions generated a warning and actions were even forced to run on a newer version.
@ScottTodd the failing |
Nope, should be good to merge. We can monitor for any errors after merging. |
Actually, can you link to the policy / scorecard context in the PR description? |
Pins (and updates some) dependencies as suggested by OpenSSF Scorecard, see https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies.
Pins (and updates some) dependencies as suggested by OpenSSF Scorecard, see https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies.
Pins (and updates some) dependencies as suggested by OpenSSF Scorecard, see https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies.