Skip to content

ci(deps): bump the osv-scanner group across 1 directory with 2 updates - #1124

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/osv-scanner-bdb15376f4
Oct 19, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/osv-scanner-bdb15376f4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the osv-scanner group with 2 updates in the / directory: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml and google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml.

Updates google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml from 2.6.0 to 2.7.0

Release notes

Sourced from google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml's releases.

v2.7.0

What's Changed

Full Changelog: google/osv-scanner-action@v2.6.0...v2.7.0

Commits
  • b1d267a Merge pull request #146 from google/update-to-v2.7.0
  • 2b1cfc6 Update unified workflow example to point to v2.7.0 reusable workflows
  • ef6dfdf Update reusable workflows to point to v2.7.0 actions
  • 0a65f82 "Update actions to use v2.7.0 osv-scanner image"
  • 8ac9e5c Merge pull request #143 from renovate-bot/renovate/workflows
  • 3b06fbb Update github/codeql-action action to v4.38.0
  • See full diff in compare view

Updates google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml from 2.6.0 to 2.7.0

Release notes

Sourced from google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml's releases.

v2.7.0

What's Changed

Full Changelog: google/osv-scanner-action@v2.6.0...v2.7.0

Commits
  • b1d267a Merge pull request #146 from google/update-to-v2.7.0
  • 2b1cfc6 Update unified workflow example to point to v2.7.0 reusable workflows
  • ef6dfdf Update reusable workflows to point to v2.7.0 actions
  • 0a65f82 "Update actions to use v2.7.0 osv-scanner image"
  • 8ac9e5c Merge pull request #143 from renovate-bot/renovate/workflows
  • 3b06fbb Update github/codeql-action action to v4.38.0
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Oct 19, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) October 19, 2026 13:47
@github-actions github-actions Bot added ci [Conventional Commits] Changes to our CI configuration files and scripts no-release-notes Skip this pull request in release notes labels Oct 19, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml b1d267aea5211fa648d9d442fa64b90dbdcbdd36 UnknownUnknown

Scanned Files

  • .github/workflows/osv-scanner.yml

Bumps the osv-scanner group with 2 updates in the / directory: [google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml](https://github.com/google/osv-scanner-action) and [google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action).


Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml` from 2.6.0 to 2.7.0
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](google/osv-scanner-action@a345acf...b1d267a)

Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml` from 2.6.0 to 2.7.0
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](google/osv-scanner-action@a345acf...b1d267a)

---
updated-dependencies:
- dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: osv-scanner
- dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: osv-scanner
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title ci(deps): bump the osv-scanner group with 2 updates ci(deps): bump the osv-scanner group across 1 directory with 2 updates Oct 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/osv-scanner-bdb15376f4 branch from 6ae66de to 56739c0 Compare October 19, 2026 13:56
@github-actions
github-actions Bot merged commit 9ce9dd9 into main Oct 19, 2026
55 checks passed
@github-actions
github-actions Bot deleted the dependabot/github_actions/osv-scanner-bdb15376f4 branch October 19, 2026 14:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci [Conventional Commits] Changes to our CI configuration files and scripts dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code no-release-notes Skip this pull request in release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants