From ed537ea38bff27366d52127cb2f759a1dc31663b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 02:07:44 +0000 Subject: [PATCH] chore(ci)(deps): bump google/osv-scanner-action/osv-scanner-action Bumps [google/osv-scanner-action/osv-scanner-action](https://github.com/google/osv-scanner-action) from 8dc09193bb540e09b23da07ad7e30bd33bf87018 to a82132c0bd6c7261ffcb78e754c46c70ab57ad9a. - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](https://github.com/google/osv-scanner-action/compare/8dc09193bb540e09b23da07ad7e30bd33bf87018...a82132c0bd6c7261ffcb78e754c46c70ab57ad9a) --- updated-dependencies: - dependency-name: google/osv-scanner-action/osv-scanner-action dependency-version: a82132c0bd6c7261ffcb78e754c46c70ab57ad9a dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/validate-deps.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/validate-deps.yml b/.github/workflows/validate-deps.yml index 3d5b93bcc1..c295bd24d6 100644 --- a/.github/workflows/validate-deps.yml +++ b/.github/workflows/validate-deps.yml @@ -84,7 +84,7 @@ jobs: # accept a specific advisory, add an osv-scanner.toml `[[IgnoredVulns]]` # entry rather than lowering the gate. - name: Audit dependencies for known vulnerabilities (OSV-Scanner) - uses: google/osv-scanner-action/osv-scanner-action@8dc09193bb540e09b23da07ad7e30bd33bf87018 # v2.3.8 + uses: google/osv-scanner-action/osv-scanner-action@a82132c0bd6c7261ffcb78e754c46c70ab57ad9a # v2.3.8 with: scan-args: |- --lockfile=pnpm-lock.yaml