You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by gi...@apache.org on 2026/10/14 15:02:37 UTC

(ofbiz-framework) branch dependabot/github_actions/release24.09/ossf/scorecard-action-2.5.0 created (now 6114701075)

This is an automated email from the ASF dual-hosted git repository.

dependabot[bot] pushed a change to branch dependabot/github_actions/release24.09/ossf/scorecard-action-2.5.0
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


      at 6114701075 Bump ossf/scorecard-action from 2.4.4 to 2.5.0

This branch includes the following new commits:

     new 6114701075 Bump ossf/scorecard-action from 2.4.4 to 2.5.0

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

(ofbiz-framework) 01/01: Bump ossf/scorecard-action from 2.4.4 to 2.5.0

Posted by gi...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

dependabot[bot] pushed a commit to branch dependabot/github_actions/release24.09/ossf/scorecard-action-2.5.0
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git

commit 61147010758fbb6763daaf511a95635f2d563078
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Wed Oct 14 15:02:31 2026 +0000

    Bump ossf/scorecard-action from 2.4.4 to 2.5.0
    
    Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.4 to 2.5.0.
    - [Release notes](https://github.com/ossf/scorecard-action/releases)
    - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
    - [Commits](https://github.com/ossf/scorecard-action/compare/2d1146689b8cda280b9bc96326124645441f03bc...fa7117db83c52d787ae5a89f350999701505d78e)
    
    ---
    updated-dependencies:
    - dependency-name: ossf/scorecard-action
      dependency-version: 2.5.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
---
 .github/workflows/scorecard.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index bf1247595f..0c90eaa84f 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -71,7 +71,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
+        uses: ossf/scorecard-action@fa7117db83c52d787ae5a89f350999701505d78e # v2.5.0
         with:
           results_file: results.sarif
           results_format: sarif