[DEV-OPS] (dependabot) Bump advanced-security/maven-dependency-submission-action from 4.1.1 to 4.1.2 (#42)
Bumps [advanced-security/maven-dependency-submission-action](https://github.com/advanced-security/maven-dependency-submission-action) from 4.1.1 to 4.1.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/advanced-security/maven-dependency-submission-action/releases">advanced-security/maven-dependency-submission-action's releases</a>.</em></p> <blockquote> <h2>v4.1.2</h2> <h2>What's Changed</h2> <ul> <li>Add cycle safety for transitive dependencies by <a href="https://github.com/juxtin"><code>@juxtin</code></a> in <a href="https://redirect.github.com/advanced-security/maven-dependency-submission-action/pull/103">advanced-security/maven-dependency-submission-action#103</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/juxtin"><code>@juxtin</code></a> made their first contribution in <a href="https://redirect.github.com/advanced-security/maven-dependency-submission-action/pull/103">advanced-security/maven-dependency-submission-action#103</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/advanced-security/maven-dependency-submission-action/compare/v4...v4.1.2">https://github.com/advanced-security/maven-dependency-submission-action/compare/v4...v4.1.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="aeab9f8852
"><code>aeab9f8</code></a> Merge pull request <a href="https://redirect.github.com/advanced-security/maven-dependency-submission-action/issues/106">#106</a> from advanced-security/juxtin/prep-412</li> <li><a href="bc43a53a41
"><code>bc43a53</code></a> Update step numbers</li> <li><a href="8ec6a0b12e
"><code>8ec6a0b</code></a> Add note about running npm build</li> <li><a href="8c8c37cf51
"><code>8c8c37c</code></a> Merge branch 'main' into juxtin/prep-412</li> <li><a href="4ccf7bf0a3
"><code>4ccf7bf</code></a> Update version to 4.1.2 and update release instructions</li> <li><a href="973a8cf442
"><code>973a8cf</code></a> Merge pull request <a href="https://redirect.github.com/advanced-security/maven-dependency-submission-action/issues/104">#104</a> from advanced-security/juxtin/prep-412</li> <li><a href="48f232b0d1
"><code>48f232b</code></a> Update dist files</li> <li><a href="769e1e8558
"><code>769e1e8</code></a> Prepare for 4.1.2 release</li> <li><a href="298a804769
"><code>298a804</code></a> Upgrade version of Maven plugin</li> <li><a href="29fd39885e
"><code>29fd398</code></a> Merge pull request <a href="https://redirect.github.com/advanced-security/maven-dependency-submission-action/issues/103">#103</a> from advanced-security/juxtin/handle-cycles</li> <li>Additional commits viewable in <a href="4f64ddab9d...aeab9f8852
">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
parent
b12108ec00
commit
7185a34fda
2
.github/workflows/maven.yml
vendored
2
.github/workflows/maven.yml
vendored
@ -32,4 +32,4 @@ jobs:
|
||||
|
||||
# Optional: Uploads the full dependency graph to GitHub to improve the quality of Dependabot alerts this repository can receive
|
||||
- name: Update dependency graph
|
||||
uses: advanced-security/maven-dependency-submission-action@4f64ddab9d742a4806eeb588d238e4c311a8397d
|
||||
uses: advanced-security/maven-dependency-submission-action@aeab9f885293af501bae8bdfe88c589528ea5e25
|
||||
|
Loading…
x
Reference in New Issue
Block a user