Skip to content

ci(deps): bump google/osv-scanner-action/osv-scanner-action from 2.3.8 to 2.5.0 - #71

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/google/osv-scanner-action/osv-scanner-action-2.5.0
Open

ci(deps): bump google/osv-scanner-action/osv-scanner-action from 2.3.8 to 2.5.0#71
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/google/osv-scanner-action/osv-scanner-action-2.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps google/osv-scanner-action/osv-scanner-action from 2.3.8 to 2.5.0.

Release notes

Sourced from google/osv-scanner-action/osv-scanner-action's releases.

v2.5.0

This updates OSV-Scanner to v2.5.0 as well as:

What's Changed

New Contributors

Full Changelog: google/osv-scanner-action@v2.3.8...v2.5.0

Commits
  • 8deb546 Merge pull request #140 from google/update-to-v2.5.0
  • 8fb3f8c Update unified workflow example to point to v2.5.0 reusable workflows
  • 0c58c54 Update reusable workflows to point to v2.5.0 actions
  • 06b2ab4 "Update actions to use v2.5.0 osv-scanner image"
  • 9fd1bcc Merge pull request #138 from google/fix/gotoolchain-auto
  • 01a87d5 fix: add GOTOOLCHAIN=auto env to osv-scanner calls
  • a82132c Merge pull request #135 from google/fix-zizmor-excessive-permissions
  • 272ff57 fix: address zizmor template injection warnings
  • 10621fb refactor: move permissions to job level to satisfy zizmor
  • fa4ff67 Merge pull request #131 from BeyondEvil/feat/add-runs-on-input
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from yunseo-kim as a code owner August 10, 2026 00:10
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/google/osv-scanner-action/osv-scanner-action-2.5.0 branch from 3449971 to 39df113 Compare August 10, 2026 16:32
Bumps [google/osv-scanner-action/osv-scanner-action](https://github.com/google/osv-scanner-action) from 2.3.8 to 2.5.0.
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](google/osv-scanner-action@9a49870...8deb546)

---
updated-dependencies:
- dependency-name: google/osv-scanner-action/osv-scanner-action
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/google/osv-scanner-action/osv-scanner-action-2.5.0 branch from 39df113 to d96d6fa Compare August 12, 2026 11:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants