Bump fossas/fossa-action from 1.3.1 to 1.5.0 (#2109)

dependabot[bot] · web-flow · commit ffc1aba1970e · 2025-02-04T11:44:06.000-08:00
Bumps [fossas/fossa-action](https://github.com/fossas/fossa-action) from 1.3.1 to 1.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fossas/fossa-action/releases">fossas/fossa-action's releases</a>.</em></p> <blockquote> <h2>v1.5.0</h2> <h2>What's Changed</h2> <ul> <li>Adding team and policy by <a href="https://github.com/saramaebee"><code>@​saramaebee</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/44">fossas/fossa-action#44</a></li> <li>Generate attribution report by <a href="https://github.com/dylmye"><code>@​dylmye</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/53">fossas/fossa-action#53</a>, <a href="https://redirect.github.com/fossas/fossa-action/pull/57">fossas/fossa-action#57</a></li> <li>Add config option - Fixes <a href="https://redirect.github.com/fossas/fossa-action/issues/55">#55</a> by <a href="https://github.com/nficca"><code>@​nficca</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/59">fossas/fossa-action#59</a></li> <li>Screaming snake cases the examples in the readme by <a href="https://github.com/pieterocp"><code>@​pieterocp</code></a>, <a href="https://github.com/csasarak"><code>@​csasarak</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/58">fossas/fossa-action#58</a></li> <li>Add a PR template. by <a href="https://github.com/csasarak"><code>@​csasarak</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/43">fossas/fossa-action#43</a></li> <li>Clarify action as a starting point by <a href="https://github.com/jssblck"><code>@​jssblck</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/51">fossas/fossa-action#51</a></li> <li>Dependabot configuration to update actions in workflow by <a href="https://github.com/spatten"><code>@​spatten</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/47">fossas/fossa-action#47</a></li> <li>Bump actions/setup-node from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/48">fossas/fossa-action#48</a></li> <li>Bump actions/upload-artifact from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/49">fossas/fossa-action#49</a></li> <li>Bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/50">fossas/fossa-action#50</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/saramaebee"><code>@​saramaebee</code></a> made their first contribution in <a href="https://redirect.github.com/fossas/fossa-action/pull/44">fossas/fossa-action#44</a></li> <li><a href="https://github.com/dependabot"><code>@​dependabot</code></a> made their first contribution in <a href="https://redirect.github.com/fossas/fossa-action/pull/48">fossas/fossa-action#48</a></li> <li><a href="https://github.com/jssblck"><code>@​jssblck</code></a> made their first contribution in <a href="https://redirect.github.com/fossas/fossa-action/pull/51">fossas/fossa-action#51</a></li> <li><a href="https://github.com/dylmye"><code>@​dylmye</code></a> made their first contribution in <a href="https://redirect.github.com/fossas/fossa-action/pull/53">fossas/fossa-action#53</a></li> <li><a href="https://github.com/nficca"><code>@​nficca</code></a> made their first contribution in <a href="https://redirect.github.com/fossas/fossa-action/pull/59">fossas/fossa-action#59</a></li> <li><a href="https://github.com/pieterocp"><code>@​pieterocp</code></a> made their first contribution in <a href="https://redirect.github.com/fossas/fossa-action/pull/58">fossas/fossa-action#58</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fossas/fossa-action/compare/v1.4.0...v1.5.0">https://github.com/fossas/fossa-action/compare/v1.4.0...v1.5.0</a></p> <h2>v1.4.0</h2> <h2>What's Changed</h2> <ul> <li>Support FOSSA CLI's <code>--diff</code> flag. by <a href="https://github.com/csasarak"><code>@​csasarak</code></a> in <a href="https://redirect.github.com/fossas/fossa-action/pull/41">fossas/fossa-action#41</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fossas/fossa-action/compare/v1.3.3...v1.4.0">https://github.com/fossas/fossa-action/compare/v1.3.3...v1.4.0</a></p> <h2>v1.3.3</h2> <p>Add support for passing a <code>--project</code> argument to <code>fossa</code>.</p> <h2>v1.3.2</h2> <ul> <li>Switch action to use node20 before GH deprecates node16</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fossas/fossa-action/commit/93a52ecf7c3ac7eb40f5de77fd69b1a19524de94"><code>93a52ec</code></a> Screaming snake cases the examples in the readme (as other github act… (<a href="https://redirect.github.com/fossas/fossa-action/issues/58">#58</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/52ed4249bf85dd7395b2b84c0a48c3ceafc5dc87"><code>52ed424</code></a> Add config option - Fixes <a href="https://redirect.github.com/fossas/fossa-action/issues/55">#55</a> (<a href="https://redirect.github.com/fossas/fossa-action/issues/59">#59</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/ef29ba4cec2a013462e434e983120c04ed71b70c"><code>ef29ba4</code></a> Fix <code>report</code> options (<a href="https://redirect.github.com/fossas/fossa-action/issues/57">#57</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/6eb50db0eb881416bcd9ee04f47ee3c7636b3784"><code>6eb50db</code></a> Support generating attribution report (<a href="https://redirect.github.com/fossas/fossa-action/issues/53">#53</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/11374cc3320ac97000df7aa0b52a60687cb23c09"><code>11374cc</code></a> Clarify action as a starting point (<a href="https://redirect.github.com/fossas/fossa-action/issues/51">#51</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/dbd64c2dcb15fe4a5efda62a475d071667eb13b8"><code>dbd64c2</code></a> Bump actions/checkout from 3 to 4 (<a href="https://redirect.github.com/fossas/fossa-action/issues/50">#50</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/69d50ac1991229b38fdef6849fbb2471bfdca4ba"><code>69d50ac</code></a> Bump actions/upload-artifact from 3 to 4 (<a href="https://redirect.github.com/fossas/fossa-action/issues/49">#49</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/6ef2f0661fd9681a2f76f2b07b8488eb84039191"><code>6ef2f06</code></a> Bump actions/setup-node from 3 to 4 (<a href="https://redirect.github.com/fossas/fossa-action/issues/48">#48</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/2a7a96d388a419965d471ea2ce48227963fbbfe2"><code>2a7a96d</code></a> Dependabot configuration to update actions in workflow (<a href="https://redirect.github.com/fossas/fossa-action/issues/47">#47</a>)</li> <li><a href="https://github.com/fossas/fossa-action/commit/464c3ea79a16b61772f7338a00d36ec2570ab64f"><code>464c3ea</code></a> Adding team and policy (<a href="https://redirect.github.com/fossas/fossa-action/issues/44">#44</a>)</li> <li>Additional commits viewable in <a href="https://github.com/fossas/fossa-action/compare/f61a4c0c263690f2ddb54b9822a719c25a7b608f...93a52ecf7c3ac7eb40f5de77fd69b1a19524de94">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fossas/fossa-action&package-manager=github_actions&previous-version=1.3.1&new-version=1.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/fossa.yaml b/.github/workflows/fossa.yaml
@@ -11,6 +11,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@8f4b7f84864484a7bf31766abe9204da3cbe65b3  # v3.5.0
-    - uses: fossas/fossa-action@f61a4c0c263690f2ddb54b9822a719c25a7b608f  # v1.3.1
+    - uses: fossas/fossa-action@93a52ecf7c3ac7eb40f5de77fd69b1a19524de94  # v1.5.0
       with:
         api-key: ${{ secrets.FOSSA_API_KEY }}
