From 6ac686b8c9354c73a87fdcec548057cbcb1bc8c4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 5 Sep 2026 22:10:23 +0000 Subject: [PATCH] chore(deps): bump bounded-systems/ci-workflows/.github/workflows/osv-scan.yml Bumps [bounded-systems/ci-workflows/.github/workflows/osv-scan.yml](https://github.com/bounded-systems/ci-workflows) from 62990dd15f1b0deba21e597bebd1512970544c15 to 46f8d50be74f62024eceb1307ce7dc5e7d372da1. - [Commits](https://github.com/bounded-systems/ci-workflows/compare/62990dd15f1b0deba21e597bebd1512970544c15...46f8d50be74f62024eceb1307ce7dc5e7d372da1) --- updated-dependencies: - dependency-name: bounded-systems/ci-workflows/.github/workflows/osv-scan.yml dependency-version: 46f8d50be74f62024eceb1307ce7dc5e7d372da1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/deps.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/deps.yml b/.github/workflows/deps.yml index 8dbf430c..325fc316 100644 --- a/.github/workflows/deps.yml +++ b/.github/workflows/deps.yml @@ -43,4 +43,4 @@ jobs: osv: # SHA-pinned per org policy. `# main` records what the SHA was at the time, so a # reviewer can tell an intentional bump from a drifted one. - uses: bounded-systems/ci-workflows/.github/workflows/osv-scan.yml@62990dd15f1b0deba21e597bebd1512970544c15 # main + uses: bounded-systems/ci-workflows/.github/workflows/osv-scan.yml@46f8d50be74f62024eceb1307ce7dc5e7d372da1 # main