Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(ci)(deps): bump rustsec/audit-check from 0.1.0 to 1.4.1 (#6)
Bumps [rustsec/audit-check](https://github.com/rustsec/audit-check) from 0.1.0 to 1.4.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rustsec/audit-check/releases">rustsec/audit-check's releases</a>.</em></p> <blockquote> <h2>v1.4.1</h2> <ul> <li>Further corrected reporting on <code>unsound</code> and <code>notice</code> informationals</li> </ul> <h2>v1.4.0</h2> <ul> <li>Informational <code>unsound</code> and <code>notice</code> advisories are now relayed correctly <a href="https://redirect.github.com/rustsec/audit-check/issues/9">#9</a></li> </ul> <p>Thanks <a href="https://github.com/FabianLars"><code>@FabianLars</code></a> for reporting 🥳</p> <h2>v1.3.2</h2> <ul> <li>Bumped to node16 and fixed outdated dependencies</li> </ul> <p>In case someone reads CHANGELOG this is a v1 release mirror.</p> <h2>v1</h2> <p>This is directly-compatible fork-version from actions-rs/audit-check.</p> <p>This will not be updated beyond to reflect v1.3.2 so please use the point versions on and after v1.4.0</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rustsec/audit-check/blob/main/CHANGELOG.md">rustsec/audit-check's changelog</a>.</em></p> <blockquote> <h2>[1.4.1] - 2023-04-04</h2> <h3>Fixed</h3> <ul> <li>Corrected reporting on <code>unsound</code> and <code>notice</code> informationals</li> </ul> <h2>[1.4.0] - 2023-04-04</h2> <h3>Fixed</h3> <ul> <li>Reflect change to enable warning on <code>unsound</code> and <code>notice</code> informationals</li> </ul> <h2>[1.3.2] - 2023-03-13</h2> <h3>Changed</h3> <ul> <li>Update various dependencies to fix some known vulnerabilities.</li> </ul> <h2>[1.3.1] - 2020-05-10</h2> <h3>Fixed</h3> <ul> <li>GitHub Actions does not support sequences as input</li> </ul> <h2>[1.3.0] - 2022-05-09</h2> <h3>Added</h3> <ul> <li>Add support for ignores (<a href="https://redirect.github.com/rustsec/audit-check/issues/1">#1</a>)</li> </ul> <h2>[1.2.0] - 2020-05-07</h2> <h3>Fixed</h3> <ul> <li>Compatibility with latest <code>cargo-audit == 0.12</code> JSON output (<a href="https://redirect.github.com/rustsec/audit-check/issues/115">#115</a>)</li> <li>Do not fail check if no critical vulnerabilities were found when executed for a fork repository (closes <a href="https://redirect.github.com/rustsec/audit-check/issues/104">#104</a>)</li> </ul> <h2>[1.1.0]</h2> <h3>Fixed</h3> <ul> <li>Invalid input properly terminates Action execution (<a href="https://redirect.github.com/rustsec/audit-check/issues/1">#1</a>)</li> <li>Compatibility with new <code>cargo-audit</code> JSON output (<a href="https://redirect.github.com/rustsec/audit-check/issues/70">#70</a>)</li> </ul> <h2>[1.0.0] - 2019-10-09</h2> <h3>Added</h3> <ul> <li>First public version</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/rustsec/audit-check/compare/0.1.0...v1.4.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rustsec/audit-check&package-manager=github_actions&previous-version=0.1.0&new-version=1.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information