Skip to content

ci(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 in the scorecard-actions group across 1 directory - #65

Merged
yunseo-kim merged 1 commit into
mainfrom
dependabot/github_actions/scorecard-actions-f401757a1c
Aug 12, 2026
Merged

yunseo-kim merged 1 commit into
mainfrom
dependabot/github_actions/scorecard-actions-f401757a1c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the scorecard-actions group with 1 update in the / directory: ossf/scorecard-action.

Updates ossf/scorecard-action from 2.4.3 to 2.4.4

Release notes

Sourced from ossf/scorecard-action's releases.

v2.4.4

What's Changed

This update bumps the Scorecard version to the v5.5.0 release. For a complete list of changes, please refer to the Scorecard v5.4.0 release notes and the Scorecard v5.5.0 release notes.

Full Changelog: ossf/scorecard-action@v2.4.3...v2.4.4

Commits
  • 2d11466 Bump action tag for v2.4.4 release (#1688)
  • 1bd3285 🌱 Bump the docker-images group across 1 directory with 2 updates (#1...
  • 913edce 🌱 Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 (#1671)
  • 0957b8f 🌱 Bump golang.org/x/net from 0.56.0 to 0.57.0 (#1680)
  • f0061eb 🌱 Bump google.golang.org/grpc from 1.81.1 to 1.82.1 (#1687)
  • 20ee732 🌱 Bump github.com/sigstore/cosign/v2 from 2.6.3 to 2.6.4 (#1685)
  • 9f295ef 🌱 Bump the github-actions group with 6 updates (#1686)
  • 69bf556 🌱 Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0 (#1681)
  • 94e8b96 🌱 Bump github.com/sigstore/rekor from 1.5.0 to 1.5.2 (#1673)
  • c7a1b37 🌱 Bump github.com/sigstore/fulcio from 1.8.5 to 1.8.6 (#1675)
  • Additional commits viewable in compare view

Bumps the scorecard-actions group with 1 update in the / directory: [ossf/scorecard-action](https://github.com/ossf/scorecard-action).


Updates `ossf/scorecard-action` from 2.4.3 to 2.4.4
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@4eaacf0...2d11466)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: scorecard-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title ci(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 in the scorecard-actions group ci(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 in the scorecard-actions group across 1 directory Aug 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/scorecard-actions-f401757a1c branch from 0de6c01 to e26a4ac Compare August 10, 2026 16:32
@yunseo-kim
yunseo-kim merged commit 0fa5a6a into main Aug 12, 2026
6 checks passed
@yunseo-kim
yunseo-kim deleted the dependabot/github_actions/scorecard-actions-f401757a1c branch August 12, 2026 11:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant