{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":302670797,"defaultBranch":"main","name":"scorecard","ownerLogin":"ossf","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2020-10-09T14:48:27.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/67707773?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1725438322.0","currentOid":""},"activityList":{"items":[{"before":null,"after":"5b4db0055467ae3cc82d28437fbe013cacb9735b","ref":"refs/heads/dependabot/go_modules/github.com/onsi/gomega-1.34.2","pushedAt":"2024-09-04T08:25:22.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/onsi/gomega from 1.34.1 to 1.34.2\n\nBumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.34.1 to 1.34.2.\n- [Release notes](https://github.com/onsi/gomega/releases)\n- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/gomega/compare/v1.34.1...v1.34.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/onsi/gomega\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github.com/onsi/gomega from 1.34.1 to 1.34.2"}},{"before":null,"after":"6a6c2587ba3a8b4d7fc69740177e67939f9a3c87","ref":"refs/heads/dependabot/go_modules/github.com/xanzy/go-gitlab-0.108.0","pushedAt":"2024-09-04T08:25:15.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/xanzy/go-gitlab from 0.107.0 to 0.108.0\n\nBumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.107.0 to 0.108.0.\n- [Release notes](https://github.com/xanzy/go-gitlab/releases)\n- [Changelog](https://github.com/xanzy/go-gitlab/blob/main/releases_test.go)\n- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.107.0...v0.108.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/xanzy/go-gitlab\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github.com/xanzy/go-gitlab from 0.107.0 to 0.108.0"}},{"before":null,"after":"aa0071bc09274b739ef89e6ca627d6f917c97984","ref":"refs/heads/dependabot/go_modules/github.com/moby/buildkit-0.15.2","pushedAt":"2024-09-04T08:25:08.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/moby/buildkit from 0.15.1 to 0.15.2\n\nBumps [github.com/moby/buildkit](https://github.com/moby/buildkit) from 0.15.1 to 0.15.2.\n- [Release notes](https://github.com/moby/buildkit/releases)\n- [Commits](https://github.com/moby/buildkit/compare/v0.15.1...v0.15.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/moby/buildkit\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github.com/moby/buildkit from 0.15.1 to 0.15.2"}},{"before":"859b6e9ad2f79c08f953817cc5b48074ed77fb88","after":null,"ref":"refs/heads/dependabot/github_actions/github-actions-8a3b30e1aa","pushedAt":"2024-09-03T18:25:10.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"07a436f772f5faf2b445d9b88f23b8ca1ea1e83a","after":"c9a09a14c4df73ab775662bea34beb3aa027e813","ref":"refs/heads/main","pushedAt":"2024-09-03T18:25:09.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump actions/upload-artifact in the github-actions group (#4328)","shortMessageHtmlLink":"🌱 Bump actions/upload-artifact in the github-actions group (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2500337791\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4328\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4328/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4328\">#4328</a>)"}},{"before":"eb0021092cd9fe1a3ba12ffbaa1b9a65ca000466","after":"859b6e9ad2f79c08f953817cc5b48074ed77fb88","ref":"refs/heads/dependabot/github_actions/github-actions-8a3b30e1aa","pushedAt":"2024-09-03T18:17:31.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump actions/upload-artifact in the github-actions group\n\nBumps the github-actions group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact).\n\n\nUpdates `actions/upload-artifact` from 4.3.6 to 4.4.0\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/834a144ee995460fba8ed112a2fc961b36a5ec5a...50769540e7f4bd5e21e526ee35c689e35e0d6874)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump actions/upload-artifact in the github-actions group"}},{"before":"52d5a6bb68fac653368f53b082498c15502edfce","after":null,"ref":"refs/heads/dependabot/go_modules/mvdan.cc/sh/v3-3.9.0","pushedAt":"2024-09-03T18:04:32.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"}},{"before":"7ccdd9ff22237633ecc9a6fa405376749e942272","after":"07a436f772f5faf2b445d9b88f23b8ca1ea1e83a","ref":"refs/heads/main","pushedAt":"2024-09-03T18:04:31.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":":seedling: Bump mvdan.cc/sh/v3 from 3.8.0 to 3.9.0 (#4325)\n\nBumps [mvdan.cc/sh/v3](https://github.com/mvdan/sh) from 3.8.0 to 3.9.0.\r\n- [Release notes](https://github.com/mvdan/sh/releases)\r\n- [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/mvdan/sh/compare/v3.8.0...v3.9.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: mvdan.cc/sh/v3\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"🌱 Bump mvdan.cc/sh/v3 from 3.8.0 to 3.9.0 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2496662116\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4325\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4325/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4325\">#4325</a>)"}},{"before":"5bb966d12c5df5c3ffdffdeeab11dc6dead3da22","after":"52d5a6bb68fac653368f53b082498c15502edfce","ref":"refs/heads/dependabot/go_modules/mvdan.cc/sh/v3-3.9.0","pushedAt":"2024-09-03T17:31:46.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump mvdan.cc/sh/v3 from 3.8.0 to 3.9.0\n\nBumps [mvdan.cc/sh/v3](https://github.com/mvdan/sh) from 3.8.0 to 3.9.0.\n- [Release notes](https://github.com/mvdan/sh/releases)\n- [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/mvdan/sh/compare/v3.8.0...v3.9.0)\n\n---\nupdated-dependencies:\n- dependency-name: mvdan.cc/sh/v3\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump mvdan.cc/sh/v3 from 3.8.0 to 3.9.0"}},{"before":"1baa4689afe28818bf38002b31636b2adbeb8356","after":null,"ref":"refs/heads/dependabot/go_modules/cloud.google.com/go/pubsub-1.42.0","pushedAt":"2024-09-03T17:27:39.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"7fff613970f6d67769c4253d0672d78a2eff2a21","after":"7ccdd9ff22237633ecc9a6fa405376749e942272","ref":"refs/heads/main","pushedAt":"2024-09-03T17:27:37.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump cloud.google.com/go/pubsub from 1.41.0 to 1.42.0 (#4324)","shortMessageHtmlLink":"🌱 Bump cloud.google.com/go/pubsub from 1.41.0 to 1.42.0 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2496661826\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4324\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4324/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4324\">#4324</a>)"}},{"before":"c2d53fd1b41d61572c5a7ed83c1e1ad6310d490d","after":"1baa4689afe28818bf38002b31636b2adbeb8356","ref":"refs/heads/dependabot/go_modules/cloud.google.com/go/pubsub-1.42.0","pushedAt":"2024-09-03T17:19:18.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump cloud.google.com/go/pubsub from 1.41.0 to 1.42.0\n\nBumps [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) from 1.41.0 to 1.42.0.\n- [Release notes](https://github.com/googleapis/google-cloud-go/releases)\n- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)\n- [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.41.0...pubsub/v1.42.0)\n\n---\nupdated-dependencies:\n- dependency-name: cloud.google.com/go/pubsub\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump cloud.google.com/go/pubsub from 1.41.0 to 1.42.0"}},{"before":"a700a73c126c341d2a7492bbfb5bddfdf1e8c6b4","after":null,"ref":"refs/heads/dependabot/go_modules/github.com/onsi/ginkgo/v2-2.20.2","pushedAt":"2024-09-03T17:16:28.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"71c6655f40a44f6b462a933092f5d85a21b5b355","after":"7fff613970f6d67769c4253d0672d78a2eff2a21","ref":"refs/heads/main","pushedAt":"2024-09-03T17:16:27.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.2 (#4319)","shortMessageHtmlLink":"🌱 Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.2 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2493789629\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4319\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4319/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4319\">#4319</a>)"}},{"before":"c6288120ca8540b87eb3786e8a7d4c23afd19402","after":"a700a73c126c341d2a7492bbfb5bddfdf1e8c6b4","ref":"refs/heads/dependabot/go_modules/github.com/onsi/ginkgo/v2-2.20.2","pushedAt":"2024-09-03T17:05:09.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.2\n\nBumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.19.1 to 2.20.2.\n- [Release notes](https://github.com/onsi/ginkgo/releases)\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.19.1...v2.20.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/onsi/ginkgo/v2\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.2"}},{"before":"e602075805a407a5b20cb9529952e4d746652000","after":null,"ref":"refs/heads/dependabot/docker/golang-85ad6359a4","pushedAt":"2024-09-03T17:03:36.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"799e576160d57278311ff4d46720a1f9736de4e3","after":"71c6655f40a44f6b462a933092f5d85a21b5b355","ref":"refs/heads/main","pushedAt":"2024-09-03T03:22:00.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":":seedling: Require minimum version of Go 1.22.0 (#4322)\n\n* Bump go directive to 1.22.0\r\n\r\nAt least one of our dependencies now requires 1.22. Additionally, with\r\nthe Go 1.23 release, Go 1.21 is no longer supported. Due to the loopvar\r\nchanges, I'm submitting this as a standalone change.\r\n\r\nhttps://go.dev/doc/go1.22\r\n\r\nSigned-off-by: Spencer Schrock <sschrock@google.com>\r\n\r\n* remove unneeded nolint directive\r\n\r\nThis wasn't included in b31449017edbf20ed5b7d3a30bf35c5901062b43,\r\nbecause we didn't redeclare the loopvar with `tt := tt`, which is now\r\ndone by default in Go 1.22.0.\r\n\r\nSigned-off-by: Spencer Schrock <sschrock@google.com>\r\n\r\n* bump minimum Go version in setup doc\r\n\r\nSigned-off-by: Spencer Schrock <sschrock@google.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Spencer Schrock <sschrock@google.com>","shortMessageHtmlLink":"🌱 Require minimum version of Go 1.22.0 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2495543395\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4322\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4322/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4322\">#4322</a>)"}},{"before":null,"after":"eb0021092cd9fe1a3ba12ffbaa1b9a65ca000466","ref":"refs/heads/dependabot/github_actions/github-actions-8a3b30e1aa","pushedAt":"2024-09-02T08:28:12.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump actions/upload-artifact in the github-actions group\n\nBumps the github-actions group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact).\n\n\nUpdates `actions/upload-artifact` from 4.3.6 to 4.4.0\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/834a144ee995460fba8ed112a2fc961b36a5ec5a...50769540e7f4bd5e21e526ee35c689e35e0d6874)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump actions/upload-artifact in the github-actions group"}},{"before":null,"after":"e602075805a407a5b20cb9529952e4d746652000","ref":"refs/heads/dependabot/docker/golang-85ad6359a4","pushedAt":"2024-09-02T08:09:26.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump the golang group across 8 directories with 1 update\n\nBumps the golang group with 1 update in the / directory: golang.\nBumps the golang group with 1 update in the /attestor directory: golang.\nBumps the golang group with 1 update in the /clients/githubrepo/roundtripper/tokens/server directory: golang.\nBumps the golang group with 1 update in the /cron/internal/bq directory: golang.\nBumps the golang group with 1 update in the /cron/internal/cii directory: golang.\nBumps the golang group with 1 update in the /cron/internal/controller directory: golang.\nBumps the golang group with 1 update in the /cron/internal/webhook directory: golang.\nBumps the golang group with 1 update in the /cron/internal/worker directory: golang.\n\n\nUpdates `golang` from `8e529b6` to `613a108`\n\nUpdates `golang` from `8e529b6` to `613a108`\n\nUpdates `golang` from `8e529b6` to `613a108`\n\nUpdates `golang` from `8e529b6` to `613a108`\n\nUpdates `golang` from `8e529b6` to `613a108`\n\nUpdates `golang` from `8e529b6` to `613a108`\n\nUpdates `golang` from `8e529b6` to `613a108`\n\nUpdates `golang` from `8e529b6` to `613a108`\n\n---\nupdated-dependencies:\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n- dependency-name: golang\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: golang\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump the golang group across 8 directories with 1 update"}},{"before":null,"after":"5bb966d12c5df5c3ffdffdeeab11dc6dead3da22","ref":"refs/heads/dependabot/go_modules/mvdan.cc/sh/v3-3.9.0","pushedAt":"2024-08-30T09:06:40.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump mvdan.cc/sh/v3 from 3.8.0 to 3.9.0\n\nBumps [mvdan.cc/sh/v3](https://github.com/mvdan/sh) from 3.8.0 to 3.9.0.\n- [Release notes](https://github.com/mvdan/sh/releases)\n- [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/mvdan/sh/compare/v3.8.0...v3.9.0)\n\n---\nupdated-dependencies:\n- dependency-name: mvdan.cc/sh/v3\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump mvdan.cc/sh/v3 from 3.8.0 to 3.9.0"}},{"before":null,"after":"c2d53fd1b41d61572c5a7ed83c1e1ad6310d490d","ref":"refs/heads/dependabot/go_modules/cloud.google.com/go/pubsub-1.42.0","pushedAt":"2024-08-30T09:06:32.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump cloud.google.com/go/pubsub from 1.41.0 to 1.42.0\n\nBumps [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go) from 1.41.0 to 1.42.0.\n- [Release notes](https://github.com/googleapis/google-cloud-go/releases)\n- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)\n- [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.41.0...pubsub/v1.42.0)\n\n---\nupdated-dependencies:\n- dependency-name: cloud.google.com/go/pubsub\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump cloud.google.com/go/pubsub from 1.41.0 to 1.42.0"}},{"before":"43737c548b34e697457428819e2f41fe41305202","after":"c6288120ca8540b87eb3786e8a7d4c23afd19402","ref":"refs/heads/dependabot/go_modules/github.com/onsi/ginkgo/v2-2.20.2","pushedAt":"2024-08-29T19:57:00.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.2\n\nBumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.19.1 to 2.20.2.\n- [Release notes](https://github.com/onsi/ginkgo/releases)\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.19.1...v2.20.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/onsi/ginkgo/v2\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github.com/onsi/ginkgo/v2 from 2.19.1 to 2.20.2"}},{"before":"14cface66e8b6f2523973656d9fc6868abbc3b81","after":null,"ref":"refs/heads/dependabot/go_modules/tools/github.com/onsi/ginkgo/v2-2.20.2","pushedAt":"2024-08-29T19:48:17.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"}},{"before":"a8252b21758475ae1fa38f45488104e0c2652691","after":"799e576160d57278311ff4d46720a1f9736de4e3","ref":"refs/heads/main","pushedAt":"2024-08-29T19:48:15.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"spencerschrock","name":"Spencer Schrock","path":"/spencerschrock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6064089?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/onsi/ginkgo/v2 in /tools (#4320)\n\nBumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.20.1 to 2.20.2.\r\n- [Release notes](https://github.com/onsi/ginkgo/releases)\r\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.20.1...v2.20.2)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: github.com/onsi/ginkgo/v2\r\n  dependency-type: direct:production\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"🌱 Bump github.com/onsi/ginkgo/v2 in /tools (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2493791005\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4320\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4320/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4320\">#4320</a>)"}},{"before":"bbbde62526768e4007de358d2663dbbfd5deae06","after":"14cface66e8b6f2523973656d9fc6868abbc3b81","ref":"refs/heads/dependabot/go_modules/tools/github.com/onsi/ginkgo/v2-2.20.2","pushedAt":"2024-08-29T19:28:20.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github.com/onsi/ginkgo/v2 in /tools\n\nBumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.20.1 to 2.20.2.\n- [Release notes](https://github.com/onsi/ginkgo/releases)\n- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/onsi/ginkgo/compare/v2.20.1...v2.20.2)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/onsi/ginkgo/v2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github.com/onsi/ginkgo/v2 in /tools"}},{"before":"3ffe81a8939f4e1664b76d3f82b2dada59cd413f","after":null,"ref":"refs/heads/dependabot/github_actions/github-actions-aadb7c6e64","pushedAt":"2024-08-29T18:27:00.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"6afd5cc22ea501a2f7fecf035a167a31f39ed035","after":"a8252b21758475ae1fa38f45488104e0c2652691","ref":"refs/heads/main","pushedAt":"2024-08-29T18:26:59.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github/codeql-action (#4321)","shortMessageHtmlLink":"🌱 Bump github/codeql-action (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2495243086\" data-permission-text=\"Title is private\" data-url=\"https://github.com/ossf/scorecard/issues/4321\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/ossf/scorecard/pull/4321/hovercard\" href=\"https://github.com/ossf/scorecard/pull/4321\">#4321</a>)"}},{"before":"db61129e7b7578d564083965ac7aad4fee452b5f","after":null,"ref":"refs/heads/dependabot/github_actions/github-actions-38aacf0b95","pushedAt":"2024-08-29T18:18:16.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"3ffe81a8939f4e1664b76d3f82b2dada59cd413f","ref":"refs/heads/dependabot/github_actions/github-actions-aadb7c6e64","pushedAt":"2024-08-29T18:18:13.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":":seedling: Bump github/codeql-action\n\nBumps the github-actions group with 1 update in the / directory: [github/codeql-action](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action` from 3.26.0 to 3.26.6\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/eb055d739abdc2e8de2e5f4ba1a8b246daa779aa...4dd16135b69a43b6c8efb853346f8437d92d3c93)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>","shortMessageHtmlLink":"🌱 Bump github/codeql-action"}},{"before":"d4fda9a830d7d1c725d1d1339f4a53167f81d8c3","after":null,"ref":"refs/heads/dependabot/go_modules/github.com/google/osv-scanner-1.8.4","pushedAt":"2024-08-29T18:10:49.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAErHB1_gA","startCursor":null,"endCursor":null}},"title":"Activity · ossf/scorecard"}