Skip to content

Build(deps): Bump anchore/scan-action from 6 to 7 - #4

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/anchore/scan-action-7
Open

Build(deps): Bump anchore/scan-action from 6 to 7#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/anchore/scan-action-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown

Bumps anchore/scan-action from 6 to 7.

Release notes

Sourced from anchore/scan-action's releases.

v7.0.0

New in scan-action v7.0.0

  • chore(deps): update Grype to v0.100.0 (#516)

v6.5.1

New in scan-action v6.5.1

  • Update Grype to v0.97.1 (#495)

v6.5.0

New in scan-action v6.5.0

v6.4.0

New in scan-action v6.4.0

  • Update Grype to v0.95.0 (#486)
  • chore(deps-dev): bump eslint from 9.30.0 to 9.30.1 (#485)
  • chore(deps-dev): bump lint-staged from 16.1.0 to 16.1.2 (#476)
  • chore(deps-dev): bump jest from 30.0.0 to 30.0.3 (#481)
  • chore(deps-dev): bump prettier from 3.5.3 to 3.6.2 (#483)
  • chore(deps-dev): bump eslint from 9.28.0 to 9.30.0 (#484)

v6.3.0

New in scan-action v6.3.0

  • Update Grype to v0.94.0 (#470)

v6.2.0

New in scan-action v6.2.0

  • feat: update Scan action to use grype db v6 (#462) [spiffcs]

v6.1.0

New in scan-action v6.1.0

Commits
  • e116508 chore: bump fast-xml-parser from 5.5.6 to 5.5.7 + setup-node (#631)
  • 382a23a chore(deps): update Grype to v0.110.0 (#618)
  • 2898213 chore: update to node 24 (#629)
  • 4e1eb5b chore: update to modules and bump all deps (required for new @​actions librari...
  • 8ed60d1 chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 (#617)
  • 5a271d2 chore(deps-dev): bump lint-staged from 16.3.1 to 16.3.2 (#619)
  • 6d37af2 chore(deps-dev): bump jest from 30.2.0 to 30.3.0 (#625)
  • 50a8160 chore(deps-dev): bump tar from 7.5.10 to 7.5.11 (#620)
  • daeb723 chore(deps): bump undici from 6.23.0 to 6.24.1 (#622)
  • 6471a7e chore(deps): bump fast-xml-parser from 5.3.6 to 5.5.6 (#626)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 27, 2026
@MartinSch77

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 6 to 7.
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](anchore/scan-action@v6...v7)

---
updated-dependencies:
- dependency-name: anchore/scan-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump anchore/scan-action from 6 to 7 Build(deps): Bump anchore/scan-action from 6 to 7 Jul 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/anchore/scan-action-7 branch from 4b35e47 to 28a898f Compare July 27, 2026 16:47
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant