Skip to content

ci: bump anchore/scan-action from 522bcc5cc7e62e4ce7cbe30f22372b991b432751 to 27805bf3b4e84b4a5c980df22ed233c00390a439 - #47

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/anchore/scan-action-27805bf3b4e84b4a5c980df22ed233c00390a439
Open

ci: bump anchore/scan-action from 522bcc5cc7e62e4ce7cbe30f22372b991b432751 to 27805bf3b4e84b4a5c980df22ed233c00390a439#47
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/anchore/scan-action-27805bf3b4e84b4a5c980df22ed233c00390a439

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps anchore/scan-action from 522bcc5cc7e62e4ce7cbe30f22372b991b432751 to 27805bf3b4e84b4a5c980df22ed233c00390a439.

Changelog

Sourced from anchore/scan-action's changelog.

Release

A release publishes a vX.Y.Z git tag, a GitHub release with a chronicle-generated changelog, and the committed dist/index.js. Aim for a 1–2 week cadence.

From a clean checkout of main:

make release

Updating Grype

make update-grype-release repins GrypeVersion.js and rebuilds dist/ — review the diff and open a PR. Requires gh auth.

Commits
  • 27805bf chore(deps): update Grype to latest release (#755) (#756)
  • 8964e60 chore(deps): update Grype to latest release (#755)
  • 6875336 chore: bump fast-xml-parser from 5.5.8 to 5.7.3 (#654)
  • 65b5fb1 chore: bump esbuild from 0.28.0 to 0.28.2 (#753)
  • b905e0e chore(deps): update Grype to latest release (#713)
  • e49c028 fix: pin grype install.sh to the release tag being installed (#750)
  • db8f0b6 chore: bump globals from 17.9.0 to 17.11.0 (#754)
  • 35bf076 chore: bump eslint from 10.8.0 to 10.8.1 (#752)
  • bd77fb5 chore: bump anchore/workflows/.github/workflows/check-gate.yaml (#720)
  • d04f6c4 chore: bump lint-staged from 17.2.0 to 17.3.0 (#748)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 522bcc5cc7e62e4ce7cbe30f22372b991b432751 to 27805bf3b4e84b4a5c980df22ed233c00390a439.
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](anchore/scan-action@522bcc5...27805bf)

---
updated-dependencies:
- dependency-name: anchore/scan-action
  dependency-version: 27805bf3b4e84b4a5c980df22ed233c00390a439
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 1, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Sep 1, 2026

Copy link
Copy Markdown

Deploying dakaneye-dev with  Cloudflare Pages  Cloudflare Pages

Latest commit: 5e9be24
Status: ✅  Deploy successful!
Preview URL: https://d6e1a94d.dakaneye-dev.pages.dev
Branch Preview URL: https://dependabot-github-actions-an-q5bh.dakaneye-dev.pages.dev

View logs

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants