From 067d762a974db6ffba9e9a8163ed737fcabb669f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 4 Sep 2026 12:21:01 +0000 Subject: [PATCH] chore(ci): bump google/osv-scanner-action Bumps the all-minor-patch group with 1 update in the / directory: [google/osv-scanner-action](https://github.com/google/osv-scanner-action). Updates `google/osv-scanner-action` from 2.3.8 to 2.5.1 - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](https://github.com/google/osv-scanner-action/compare/v2.3.8...v2.5.1) --- updated-dependencies: - dependency-name: google/osv-scanner-action dependency-version: 2.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-minor-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/rampart-nightly.yml | 2 +- .github/workflows/rampart-pr.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/rampart-nightly.yml b/.github/workflows/rampart-nightly.yml index 40faae32..2680b5e1 100644 --- a/.github/workflows/rampart-nightly.yml +++ b/.github/workflows/rampart-nightly.yml @@ -36,7 +36,7 @@ jobs: - name: Scan — deps-osv id: deps_osv continue-on-error: true - uses: google/osv-scanner-action/osv-scanner-action@v2.3.8 + uses: google/osv-scanner-action/osv-scanner-action@v2.5.1 with: { scan-args: "--recursive --format json --output osv-report.json ." } - name: Gate — deps-osv diff --git a/.github/workflows/rampart-pr.yml b/.github/workflows/rampart-pr.yml index 3a5d0c5b..440b4571 100644 --- a/.github/workflows/rampart-pr.yml +++ b/.github/workflows/rampart-pr.yml @@ -30,7 +30,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v7 - - uses: google/osv-scanner-action/osv-scanner-action@v2.3.8 + - uses: google/osv-scanner-action/osv-scanner-action@v2.5.1 continue-on-error: ${{ env.RAMPART_ENFORCE == 'warn' }} with: { scan-args: "--recursive --format json --output osv-report.json ." } - name: Gate on CVSS>=7