From a79c26fabd581995b0b8dc7e43baea646ed45850 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 21:06:42 +0000 Subject: [PATCH] build(deps): Bump google/osv-scanner-action/osv-scanner-action Bumps [google/osv-scanner-action/osv-scanner-action](https://github.com/google/osv-scanner-action) from 9fd1bcce27f67e3bd819a0a7620e332803dc43bc to f4cfcc01edc9c8b756a9b873b7a623ca674da51e. - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](https://github.com/google/osv-scanner-action/compare/9fd1bcce27f67e3bd819a0a7620e332803dc43bc...f4cfcc01edc9c8b756a9b873b7a623ca674da51e) --- updated-dependencies: - dependency-name: google/osv-scanner-action/osv-scanner-action dependency-version: f4cfcc01edc9c8b756a9b873b7a623ca674da51e dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/osv-scanner.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml index 2b2eae4c..742bf0e3 100644 --- a/.github/workflows/osv-scanner.yml +++ b/.github/workflows/osv-scanner.yml @@ -56,7 +56,7 @@ jobs: # compiles into a root-installed system service. - name: Scan bun.lock and Cargo.lock for known-vulnerable / malicious dependencies id: scan - uses: google/osv-scanner-action/osv-scanner-action@9fd1bcce27f67e3bd819a0a7620e332803dc43bc # v2.3.8 + uses: google/osv-scanner-action/osv-scanner-action@f4cfcc01edc9c8b756a9b873b7a623ca674da51e # v2.3.8 with: scan-args: |- --lockfile=bun.lock