Watch

chore(deps): bump google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml from 2.5.0 to 2.5.1 #163

Merged

dependabot[bot] merged 1 commit from dependabot/github_actions/google/osv-scanner-action/dot-github/workflows/osv-scanner-reusable-pr.yml-2.5.1 into main

2026-09-10 19:53:06 -05:00

dependabot[bot] commented

2026-08-24 04:20:09 -05:00

(Migrated from github.com)

Bumps google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml from 2.5.0 to 2.5.1.

Release notes

Sourced from google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml's releases.

v2.5.1

This updates OSV-Scanner to v2.3.8.

What's Changed

Update actions/checkout action to v7 by @renovate-bot in google/osv-scanner-action#133

Fixes:

Preserve package namespaces when querying osv.dev API (fixes #2978).

Re-add support for the OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY environment variable (fixes #2983).

Fix local vulnerability matching (--offline-vulnerabilities) not working when network capability is NetworkOnline.

Full Changelog: https://github.com/google/osv-scanner-action/compare/v2.5.0...v2.5.1

Commits

6e4298e Merge pull request #141 from google/update-to-v2.5.1
5957b4e Update unified workflow example to point to v2.5.1 reusable workflows
880d9b5 Update reusable workflows to point to v2.5.1 actions
baa4139 "Update actions to use v2.5.1 osv-scanner image"
f4cfcc0 Merge pull request #117 from renovate-bot/renovate/workflows
dfd4cd1 Update workflows
e13f842 Merge pull request #133 from renovate-bot/renovate/major-workflows
3f2e7fe Update actions/checkout action to v7
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml](https://github.com/google/osv-scanner-action) from 2.5.0 to 2.5.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/osv-scanner-action/releases">google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml's releases</a>.</em></p> <blockquote> <h2>v2.5.1</h2> <p>This updates OSV-Scanner to v2.3.8.</p> <h2>What's Changed</h2> <ul> <li>Update actions/checkout action to v7 by <a href="https://github.com/renovate-bot"><code>@renovate-bot</code></a> in <a href="https://redirect.github.com/google/osv-scanner-action/pull/133">google/osv-scanner-action#133</a></li> </ul> <h3>Fixes:</h3> <ul> <li>Preserve package namespaces when querying osv.dev API (fixes <a href="https://redirect.github.com/google/osv-scanner/issues/2978">#2978</a>).</li> <li>Re-add support for the <code>OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY</code> environment variable (fixes <a href="https://redirect.github.com/google/osv-scanner/issues/2983">#2983</a>).</li> <li>Fix local vulnerability matching (<code>--offline-vulnerabilities</code>) not working when network capability is <code>NetworkOnline</code>.</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/google/osv-scanner-action/compare/v2.5.0...v2.5.1">https://github.com/google/osv-scanner-action/compare/v2.5.0...v2.5.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/osv-scanner-action/commit/6e4298ebc4db23e847df9b2e2de2939d6f066c67"><code>6e4298e</code></a> Merge pull request <a href="https://redirect.github.com/google/osv-scanner-action/issues/141">#141</a> from google/update-to-v2.5.1</li> <li><a href="https://github.com/google/osv-scanner-action/commit/5957b4e7a8725730a37d973099c16b9fe44cfc5f"><code>5957b4e</code></a> Update unified workflow example to point to v2.5.1 reusable workflows</li> <li><a href="https://github.com/google/osv-scanner-action/commit/880d9b542cc66d36d91d51b3fbcc038f5f28cfc5"><code>880d9b5</code></a> Update reusable workflows to point to v2.5.1 actions</li> <li><a href="https://github.com/google/osv-scanner-action/commit/baa4139e56d6312335d899e6ba045fa16d1d3d0b"><code>baa4139</code></a> "Update actions to use v2.5.1 osv-scanner image"</li> <li><a href="https://github.com/google/osv-scanner-action/commit/f4cfcc01edc9c8b756a9b873b7a623ca674da51e"><code>f4cfcc0</code></a> Merge pull request <a href="https://redirect.github.com/google/osv-scanner-action/issues/117">#117</a> from renovate-bot/renovate/workflows</li> <li><a href="https://github.com/google/osv-scanner-action/commit/dfd4cd1d0114e5fc71a6862faf1114ed69d9dca7"><code>dfd4cd1</code></a> Update workflows</li> <li><a href="https://github.com/google/osv-scanner-action/commit/e13f842f8f0b5845b610f16e8a2eb7f22a7f8677"><code>e13f842</code></a> Merge pull request <a href="https://redirect.github.com/google/osv-scanner-action/issues/133">#133</a> from renovate-bot/renovate/major-workflows</li> <li><a href="https://github.com/google/osv-scanner-action/commit/3f2e7fe5a8528de51a596a4c89dd68e977012c5d"><code>3f2e7fe</code></a> Update actions/checkout action to v7</li> <li>See full diff in <a href="https://github.com/google/osv-scanner-action/compare/v2.5.0...v2.5.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml&package-manager=github_actions&previous-version=2.5.0&new-version=2.5.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

Gitchegumi (Migrated from github.com) approved these changes

2026-09-10 19:52:57 -05:00

No reviewers

Gitchegumi

No milestone

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

gitchegumi/GitchAlerts!163

No description provided.

Rows
Columns