[PR #29] [MERGED] 🌱 bump actions/dependency-review-action from 4.3.2 to 4.3.3 #37

New issue

Closed

opened 2026-03-03 16:27:54 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:27:54 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/natrontech/pbs-exporter/pull/29
Author: @dependabot[bot]
Created: 6/24/2024
Status: ✅ Merged
Merged: 6/25/2024
Merged by: @janfuhrer

Base: main ← Head: dependabot/github_actions/actions/dependency-review-action-4.3.3

📝 Commits (1)

b6cf1c2 🌱 bump actions/dependency-review-action from 4.3.2 to 4.3.3

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 .github/workflows/dependency-review.yml (+1 -1)

📄 Description

Bumps actions/dependency-review-action from 4.3.2 to 4.3.3.

Release notes

Sourced from actions/dependency-review-action's releases.

Notes for v4.3.3

What's Changed

Allow slashes in purl package names by @juxtin in actions/dependency-review-action#765

use the v3 version of the deps.dev API by @josieang in actions/dependency-review-action#741

PR with suggestions - [Improvement]: Help streamline / simplify dependency review action README by @am-stead in actions/dependency-review-action#773

fix show-openssf-scorecard-levels input by @ramann in actions/dependency-review-action#776

Updates to the contribution guidelines by @jonjanego in actions/dependency-review-action#778

Create issue templates by @jonjanego in actions/dependency-review-action#777

Fix the max comment length issue by @jhutchings1 and @elireisman in actions/dependency-review-action#767

Bump project version to 4.3.3 in prep for a release by @elireisman in actions/dependency-review-action#781

New Contributors

@josieang made their first contribution in actions/dependency-review-action#741

@am-stead made their first contribution in actions/dependency-review-action#773

@ramann made their first contribution in actions/dependency-review-action#776

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.3.2...v4.3.3

Commits

72eb03d Merge pull request #781 from actions/release-v4.3.3
137d8b4 bump to version v4.3.3
e6b618e Merge pull request #767 from actions/max-comment-length
3c42649 fix ws for linter
8e6ea8d update packaging
1b3d277 post-review: add PR comment full summary test case
220872c Update src/main.ts
087d0f8 repackage to update dist
4531204 whitespace
df1ca89 appease linter
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/natrontech/pbs-exporter/pull/29 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 6/24/2024 **Status:** ✅ Merged **Merged:** 6/25/2024 **Merged by:** [@janfuhrer](https://github.com/janfuhrer) **Base:** `main` ← **Head:** `dependabot/github_actions/actions/dependency-review-action-4.3.3` --- ### 📝 Commits (1) - [`b6cf1c2`](https://github.com/natrontech/pbs-exporter/commit/b6cf1c2f5fb51241aa8d261d6bb2925a62f1e718) :seedling: bump actions/dependency-review-action from 4.3.2 to 4.3.3 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/dependency-review.yml` (+1 -1) </details> ### 📄 Description Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.3.2 to 4.3.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/dependency-review-action/releases">actions/dependency-review-action's releases</a>.</em></p> <blockquote> <h2>Notes for v4.3.3</h2> <h2>What's Changed</h2> <ul> <li>Allow slashes in purl package names by <a href="https://github.com/juxtin"><code>@juxtin</code></a> in <a href="https://redirect.github.com/actions/dependency-review-action/pull/765">actions/dependency-review-action#765</a></li> <li>use the v3 version of the deps.dev API by <a href="https://github.com/josieang"><code>@josieang</code></a> in <a href="https://redirect.github.com/actions/dependency-review-action/pull/741">actions/dependency-review-action#741</a></li> <li>PR with suggestions - [Improvement]: Help streamline / simplify dependency review action README by <a href="https://github.com/am-stead"><code>@am-stead</code></a> in <a href="https://redirect.github.com/actions/dependency-review-action/pull/773">actions/dependency-review-action#773</a></li> <li>fix show-openssf-scorecard-levels input by <a href="https://github.com/ramann"><code>@ramann</code></a> in <a href="https://redirect.github.com/actions/dependency-review-action/pull/776">actions/dependency-review-action#776</a></li> <li>Updates to the contribution guidelines by <a href="https://github.com/jonjanego"><code>@jonjanego</code></a> in <a href="https://redirect.github.com/actions/dependency-review-action/pull/778">actions/dependency-review-action#778</a></li> <li>Create issue templates by <a href="https://github.com/jonjanego"><code>@jonjanego</code></a> in <a href="https://redirect.github.com/actions/dependency-review-action/pull/777">actions/dependency-review-action#777</a></li> <li>Fix the max comment length issue by <a href="https://github.com/jhutchings1"><code>@jhutchings1</code></a> and <a href="https://github.com/elireisman"><code>@elireisman</code></a> in <a href="https://redirect.github.com/actions/dependency-review-action/pull/767">actions/dependency-review-action#767</a></li> <li>Bump project version to 4.3.3 in prep for a release by <a href="https://github.com/elireisman"><code>@elireisman</code></a> in <a href="https://redirect.github.com/actions/dependency-review-action/pull/781">actions/dependency-review-action#781</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/josieang"><code>@josieang</code></a> made their first contribution in <a href="https://redirect.github.com/actions/dependency-review-action/pull/741">actions/dependency-review-action#741</a></li> <li><a href="https://github.com/am-stead"><code>@am-stead</code></a> made their first contribution in <a href="https://redirect.github.com/actions/dependency-review-action/pull/773">actions/dependency-review-action#773</a></li> <li><a href="https://github.com/ramann"><code>@ramann</code></a> made their first contribution in <a href="https://redirect.github.com/actions/dependency-review-action/pull/776">actions/dependency-review-action#776</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/dependency-review-action/compare/v4.3.2...v4.3.3">https://github.com/actions/dependency-review-action/compare/v4.3.2...v4.3.3</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/dependency-review-action/commit/72eb03d02c7872a771aacd928f3123ac62ad6d3a"><code>72eb03d</code></a> Merge pull request <a href="https://redirect.github.com/actions/dependency-review-action/issues/781">#781</a> from actions/release-v4.3.3</li> <li><a href="https://github.com/actions/dependency-review-action/commit/137d8b42ce0de43f5c5bfb9387870a16495547db"><code>137d8b4</code></a> bump to version v4.3.3</li> <li><a href="https://github.com/actions/dependency-review-action/commit/e6b618ed051bcc41ac296ca2f39259a5cadfbe03"><code>e6b618e</code></a> Merge pull request <a href="https://redirect.github.com/actions/dependency-review-action/issues/767">#767</a> from actions/max-comment-length</li> <li><a href="https://github.com/actions/dependency-review-action/commit/3c42649204e62c5b7e4b8a64e867f209220d0528"><code>3c42649</code></a> fix ws for linter</li> <li><a href="https://github.com/actions/dependency-review-action/commit/8e6ea8d29be9a4f679e5f77417495f0a7cfc4876"><code>8e6ea8d</code></a> update packaging</li> <li><a href="https://github.com/actions/dependency-review-action/commit/1b3d2772d090bbbfaea250a42a7672c5596ec39f"><code>1b3d277</code></a> post-review: add PR comment full summary test case</li> <li><a href="https://github.com/actions/dependency-review-action/commit/220872c81a2b7320d542265bc488c6f1cb438dad"><code>220872c</code></a> Update src/main.ts</li> <li><a href="https://github.com/actions/dependency-review-action/commit/087d0f81a50ff2b07f4c77eed4877c7ca815eca6"><code>087d0f8</code></a> repackage to update dist</li> <li><a href="https://github.com/actions/dependency-review-action/commit/4531204be7f2a33809812cf5764ad3ee1153030f"><code>4531204</code></a> whitespace</li> <li><a href="https://github.com/actions/dependency-review-action/commit/df1ca890c5abee86bfafafdb2404292bdb60b66d"><code>df1ca89</code></a> appease linter</li> <li>Additional commits viewable in <a href="https://github.com/actions/dependency-review-action/compare/0c155c5e8556a497adf53f2c18edabf945ed8e70...72eb03d02c7872a771aacd928f3123ac62ad6d3a">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/dependency-review-action&package-manager=github_actions&previous-version=4.3.2&new-version=4.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>