Skip to content

Commit

Permalink
chore(ci)(deps): bump rustsec/audit-check from 0.1.0 to 1.4.1 (#6)
Browse files Browse the repository at this point in the history
Bumps [rustsec/audit-check](https://github.com/rustsec/audit-check) from
0.1.0 to 1.4.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rustsec/audit-check/releases">rustsec/audit-check's
releases</a>.</em></p>
<blockquote>
<h2>v1.4.1</h2>
<ul>
<li>Further corrected reporting on <code>unsound</code> and
<code>notice</code> informationals</li>
</ul>
<h2>v1.4.0</h2>
<ul>
<li>Informational <code>unsound</code> and <code>notice</code>
advisories are now relayed correctly <a
href="https://redirect.github.com/rustsec/audit-check/issues/9">#9</a></li>
</ul>
<p>Thanks <a
href="https://github.com/FabianLars"><code>@​FabianLars</code></a> for
reporting 🥳</p>
<h2>v1.3.2</h2>
<ul>
<li>Bumped to node16 and fixed outdated dependencies</li>
</ul>
<p>In case someone reads CHANGELOG this is a v1 release mirror.</p>
<h2>v1</h2>
<p>This is directly-compatible fork-version from
actions-rs/audit-check.</p>
<p>This will not be updated beyond to reflect v1.3.2 so please use the
point versions on and after v1.4.0</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/rustsec/audit-check/blob/main/CHANGELOG.md">rustsec/audit-check's
changelog</a>.</em></p>
<blockquote>
<h2>[1.4.1] - 2023-04-04</h2>
<h3>Fixed</h3>
<ul>
<li>Corrected reporting on <code>unsound</code> and <code>notice</code>
informationals</li>
</ul>
<h2>[1.4.0] - 2023-04-04</h2>
<h3>Fixed</h3>
<ul>
<li>Reflect change to enable warning on <code>unsound</code> and
<code>notice</code> informationals</li>
</ul>
<h2>[1.3.2] - 2023-03-13</h2>
<h3>Changed</h3>
<ul>
<li>Update various dependencies to fix some known vulnerabilities.</li>
</ul>
<h2>[1.3.1] - 2020-05-10</h2>
<h3>Fixed</h3>
<ul>
<li>GitHub Actions does not support sequences as input</li>
</ul>
<h2>[1.3.0] - 2022-05-09</h2>
<h3>Added</h3>
<ul>
<li>Add support for ignores (<a
href="https://redirect.github.com/rustsec/audit-check/issues/1">#1</a>)</li>
</ul>
<h2>[1.2.0] - 2020-05-07</h2>
<h3>Fixed</h3>
<ul>
<li>Compatibility with latest <code>cargo-audit == 0.12</code> JSON
output (<a
href="https://redirect.github.com/rustsec/audit-check/issues/115">#115</a>)</li>
<li>Do not fail check if no critical vulnerabilities were found when
executed for a fork repository (closes <a
href="https://redirect.github.com/rustsec/audit-check/issues/104">#104</a>)</li>
</ul>
<h2>[1.1.0]</h2>
<h3>Fixed</h3>
<ul>
<li>Invalid input properly terminates Action execution (<a
href="https://redirect.github.com/rustsec/audit-check/issues/1">#1</a>)</li>
<li>Compatibility with new <code>cargo-audit</code> JSON output (<a
href="https://redirect.github.com/rustsec/audit-check/issues/70">#70</a>)</li>
</ul>
<h2>[1.0.0] - 2019-10-09</h2>
<h3>Added</h3>
<ul>
<li>First public version</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/rustsec/audit-check/compare/0.1.0...v1.4.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustsec/audit-check&package-manager=github_actions&previous-version=0.1.0&new-version=1.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • Loading branch information
dependabot[bot] authored Jul 31, 2023
1 parent 8c70875 commit a8cd85b
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .github/workflows/audit.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,6 @@ jobs:
uses: actions/checkout@v3

- name: Run Audit-Check
uses: rustsec/audit-check@0.1.0
uses: rustsec/audit-check@v1.4.1
with:
token: ${{ secrets.GITHUB_TOKEN }}

0 comments on commit a8cd85b

Please sign in to comment.