)]}'
{
  "commit": "d0ce56559760ae6d0f6e5f7edb88d06ba67e8681",
  "tree": "43959db64f88551aa5f3e96e437a6ba1e486948e",
  "parents": [
    "764c33c3c773df128947e08b033642cfa29e1957"
  ],
  "author": {
    "name": "dependabot[bot]",
    "email": "49699333+dependabot[bot]@users.noreply.github.com",
    "time": "Tue May 14 05:57:50 2024 +0000"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Tue May 14 05:57:50 2024 +0000"
  },
  "message": "Bump ossf/scorecard-action from 2.3.1 to 2.3.3 (#52799)\n\nBumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.1 to 2.3.3.\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href\u003d\"https://github.com/ossf/scorecard-action/releases\"\u003eossf/scorecard-action\u0027s releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.3.3\u003c/h2\u003e\n\u003cblockquote\u003e\n\u003cp\u003e[!NOTE]\u003cbr /\u003e\nThere is no v2.3.2 release as a step was skipped in the release process. This was fixed and re-released under the v2.3.3 tag\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003ch2\u003eWhat\u0027s Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e:seedling: Bump github.com/ossf/scorecard/v4 (v4.13.1) to github.com/ossf/scorecard/v5 (v5.0.0-rc1) by \u003ca href\u003d\"https://github.com/spencerschrock\"\u003e\u003ccode\u003e@​spencerschrock\u003c/code\u003e\u003c/a\u003e in \u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/pull/1366\"\u003eossf/scorecard-action#1366\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e:seedling: Bump github.com/ossf/scorecard/v5 from v5.0.0-rc1 to v5.0.0-rc2 by \u003ca href\u003d\"https://github.com/spencerschrock\"\u003e\u003ccode\u003e@​spencerschrock\u003c/code\u003e\u003c/a\u003e in \u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/pull/1374\"\u003eossf/scorecard-action#1374\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e:seedling: Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0-rc2.0.20240509182734-7ce860946928 by \u003ca href\u003d\"https://github.com/spencerschrock\"\u003e\u003ccode\u003e@​spencerschrock\u003c/code\u003e\u003c/a\u003e in \u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/pull/1377\"\u003eossf/scorecard-action#1377\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFor a full changelist of what these include, see the \u003ca href\u003d\"https://github.com/ossf/scorecard/releases/tag/v5.0.0-rc1\"\u003ev5.0.0-rc1\u003c/a\u003e and \u003ca href\u003d\"https://github.com/ossf/scorecard/releases/tag/v5.0.0-rc2\"\u003ev5.0.0-rc2\u003c/a\u003e release notes.\u003c/p\u003e\n\u003ch3\u003eDocumentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e:book: Move token discussion out of main README. by \u003ca href\u003d\"https://github.com/spencerschrock\"\u003e\u003ccode\u003e@​spencerschrock\u003c/code\u003e\u003c/a\u003e in \u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/pull/1279\"\u003eossf/scorecard-action#1279\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e:book: link to \u003ccode\u003eossf/scorecard\u003c/code\u003e workflow instead of maintaining an example by \u003ca href\u003d\"https://github.com/spencerschrock\"\u003e\u003ccode\u003e@​spencerschrock\u003c/code\u003e\u003c/a\u003e in \u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/pull/1352\"\u003eossf/scorecard-action#1352\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e:book: update api links to new scorecard.dev site by \u003ca href\u003d\"https://github.com/spencerschrock\"\u003e\u003ccode\u003e@​spencerschrock\u003c/code\u003e\u003c/a\u003e in \u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/pull/1376\"\u003eossf/scorecard-action#1376\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href\u003d\"https://github.com/ossf/scorecard-action/compare/v2.3.1...v2.3.3\"\u003ehttps://github.com/ossf/scorecard-action/compare/v2.3.1...v2.3.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/ossf/scorecard-action/commit/dc50aa9510b46c811795eb24b2f1ba02a914e534\"\u003e\u003ccode\u003edc50aa9\u003c/code\u003e\u003c/a\u003e :seedling: Bump docker tag for v2.3.3 release (\u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/issues/1368\"\u003e#1368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/ossf/scorecard-action/commit/8ff570017382a0ef795f21f71e519b27a9b5f29e\"\u003e\u003ccode\u003e8ff5700\u003c/code\u003e\u003c/a\u003e :seedling: Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0-rc2.0....\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/ossf/scorecard-action/commit/8ba5e73d11a5fd0917494d02ab01dfd7866d2191\"\u003e\u003ccode\u003e8ba5e73\u003c/code\u003e\u003c/a\u003e update api links to new scorecard.dev site (\u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/issues/1376\"\u003e#1376\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/ossf/scorecard-action/commit/92ddde3eaffd7e147638317c023642a6adc8a874\"\u003e\u003ccode\u003e92ddde3\u003c/code\u003e\u003c/a\u003e Bump github.com/ossf/scorecard/v5 from v5.0.0-rc1 to v5.0.0-rc2 (\u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/issues/1374\"\u003e#1374\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/ossf/scorecard-action/commit/6c55905542a1ce814c7ec177a96904f5bc74aab5\"\u003e\u003ccode\u003e6c55905\u003c/code\u003e\u003c/a\u003e :seedling: Bump golang.org/x/net from 0.24.0 to 0.25.0 (\u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/issues/1373\"\u003e#1373\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/ossf/scorecard-action/commit/09bb953b6a0e34c84fb453985435a07cc2baa3a3\"\u003e\u003ccode\u003e09bb953\u003c/code\u003e\u003c/a\u003e :seedling: Bump distroless/base in the docker-images group (\u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/issues/1372\"\u003e#1372\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/ossf/scorecard-action/commit/1511e1305b9d7e51245388421563264573c77bc7\"\u003e\u003ccode\u003e1511e13\u003c/code\u003e\u003c/a\u003e :seedling: Bump the github-actions group across 1 directory with 6 updates (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/ossf/scorecard-action/commit/df66cd8fd834fab4483ac0031b8d8ff819b62422\"\u003e\u003ccode\u003edf66cd8\u003c/code\u003e\u003c/a\u003e :seedling: Bump the docker-images group with 2 updates (\u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/issues/1370\"\u003e#1370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/ossf/scorecard-action/commit/fad9a3cc533bb069b1f01f272f1f630895cd690a\"\u003e\u003ccode\u003efad9a3c\u003c/code\u003e\u003c/a\u003e :seedling: Bump distroless/base in the docker-images group (\u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/issues/1364\"\u003e#1364\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href\u003d\"https://github.com/ossf/scorecard-action/commit/1e01a309c1de65b6221c25768bcfc322bac8ccee\"\u003e\u003ccode\u003e1e01a30\u003c/code\u003e\u003c/a\u003e :seedling: Bump the github-actions group with 3 updates (\u003ca href\u003d\"https://redirect.github.com/ossf/scorecard-action/issues/1365\"\u003e#1365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href\u003d\"https://github.com/ossf/scorecard-action/compare/0864cf19026789058feabb7e87baa5f140aac736...dc50aa9510b46c811795eb24b2f1ba02a914e534\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name\u003dossf/scorecard-action\u0026package-manager\u003dgithub_actions\u0026previous-version\u003d2.3.1\u0026new-version\u003d2.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don\u0027t alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\u003c/details\u003e",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "d8b03e9e4e1017abde8d87e6d9a974611005a410",
      "old_mode": 33188,
      "old_path": ".github/workflows/scorecards-analysis.yml",
      "new_id": "f0b99c685151dcfa6a096ab2cb194ecfb74ffe59",
      "new_mode": 33188,
      "new_path": ".github/workflows/scorecards-analysis.yml"
    }
  ]
}