From 9545a75714a51b420bb1ee943fb4334daae4feab Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 14 Jun 2023 05:59:33 +0000 Subject: [PATCH] build(deps): bump peter-evans/create-pull-request from 3.12.0 to 5.0.2 Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 3.12.0 to 5.0.2. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](https://github.com/peter-evans/create-pull-request/compare/dcd5fd746d53dd8de555c0f10bca6c35628be47a...153407881ec5c347639a548ade7d8ad1d6740e38) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/vuln-scan.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/vuln-scan.yaml b/.github/workflows/vuln-scan.yaml index d218921baf..3caaf558d4 100644 --- a/.github/workflows/vuln-scan.yaml +++ b/.github/workflows/vuln-scan.yaml @@ -195,7 +195,7 @@ jobs: # ref: https://github.com/peter-evans/create-pull-request - name: Create or update a PR if: steps.analyze.outputs.proceed == 'yes' && github.event_name != 'pull_request' - uses: peter-evans/create-pull-request@dcd5fd746d53dd8de555c0f10bca6c35628be47a + uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 with: token: "${{ secrets.GITHUB_TOKEN }}" author: jupyterhub vuln-scan bot