From 2f18090760566121f2bbbc417a3c8266dc919e52 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 02:07:01 +0000 Subject: [PATCH] chore(ci)(deps): bump google/osv-scanner-action/osv-scanner-action Bumps [google/osv-scanner-action/osv-scanner-action](https://github.com/google/osv-scanner-action) from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to 9fd1bcce27f67e3bd819a0a7620e332803dc43bc. - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](https://github.com/google/osv-scanner-action/compare/a82132c0bd6c7261ffcb78e754c46c70ab57ad9a...9fd1bcce27f67e3bd819a0a7620e332803dc43bc) --- updated-dependencies: - dependency-name: google/osv-scanner-action/osv-scanner-action dependency-version: 9fd1bcce27f67e3bd819a0a7620e332803dc43bc dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/validate-deps.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/validate-deps.yml b/.github/workflows/validate-deps.yml index c295bd24d6..53a8e2b70a 100644 --- a/.github/workflows/validate-deps.yml +++ b/.github/workflows/validate-deps.yml @@ -84,7 +84,7 @@ jobs: # accept a specific advisory, add an osv-scanner.toml `[[IgnoredVulns]]` # entry rather than lowering the gate. - name: Audit dependencies for known vulnerabilities (OSV-Scanner) - uses: google/osv-scanner-action/osv-scanner-action@a82132c0bd6c7261ffcb78e754c46c70ab57ad9a # v2.3.8 + uses: google/osv-scanner-action/osv-scanner-action@9fd1bcce27f67e3bd819a0a7620e332803dc43bc # v2.3.8 with: scan-args: |- --lockfile=pnpm-lock.yaml