From f5557122f1fc5994a1d6d85f820a536945790ad3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 16 Sep 2024 10:10:33 -0700 Subject: [PATCH] Bump pypa/gh-action-pip-audit from 1.0.8 to 1.1.0 (#3690) Bumps [pypa/gh-action-pip-audit](https://github.com/pypa/gh-action-pip-audit) from 1.0.8 to 1.1.0. - [Release notes](https://github.com/pypa/gh-action-pip-audit/releases) - [Commits](https://github.com/pypa/gh-action-pip-audit/compare/v1.0.8...v1.1.0) --- updated-dependencies: - dependency-name: pypa/gh-action-pip-audit dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Kevin DeJong --- .github/workflows/ci-branch.yaml | 2 +- .github/workflows/ci-pr.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci-branch.yaml b/.github/workflows/ci-branch.yaml index 9c04be0c7f..2dc9eff91d 100644 --- a/.github/workflows/ci-branch.yaml +++ b/.github/workflows/ci-branch.yaml @@ -69,7 +69,7 @@ jobs: pip3 install -e . pip install --upgrade pip pip install --upgrade setuptools - - uses: pypa/gh-action-pip-audit@v1.0.8 + - uses: pypa/gh-action-pip-audit@v1.1.0 with: ignore-vulns: | GHSA-r9hx-vwmv-q579 diff --git a/.github/workflows/ci-pr.yaml b/.github/workflows/ci-pr.yaml index 75fcc3d29b..ede552f61e 100644 --- a/.github/workflows/ci-pr.yaml +++ b/.github/workflows/ci-pr.yaml @@ -71,7 +71,7 @@ jobs: pip3 install -e . pip install --upgrade pip pip install --upgrade setuptools - - uses: pypa/gh-action-pip-audit@v1.0.8 + - uses: pypa/gh-action-pip-audit@v1.1.0 with: ignore-vulns: | GHSA-r9hx-vwmv-q579