Skip to content

Actions: theupdateframework/python-tuf

Actions

Dependency Review

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
dependency-review.yml
379 workflow runs
379 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

build(deps): bump actions/setup-python from 4.7.0 to 4.7.1 Dependency Review #689: Pull request #2484 opened by dependabot bot
October 3, 2023 11:01 27s dependabot/github_actions/actions/setup-python-4.7.1
dependabot/github_actions/actions/setup-python-4.7.1
October 3, 2023 11:01 27s
build(deps): bump pylint from 2.17.7 to 3.0.0 Dependency Review #688: Pull request #2483 opened by dependabot bot
October 3, 2023 10:16 18s dependabot/pip/pylint-3.0.0
dependabot/pip/pylint-3.0.0
October 3, 2023 10:16 18s
build(deps): bump coverage from 7.3.1 to 7.3.2 Dependency Review #687: Pull request #2482 opened by dependabot bot
October 3, 2023 10:16 17s dependabot/pip/coverage-7.3.2
dependabot/pip/coverage-7.3.2
October 3, 2023 10:16 17s
Metadata API: add get_verification_result method Dependency Review #686: Pull request #2481 opened by lukpueh
October 3, 2023 10:06 16s lukpueh:signing-status
lukpueh:signing-status
October 3, 2023 10:06 16s
build(deps): bump urllib3 from 2.0.5 to 2.0.6 in /requirements Dependency Review #685: Pull request #2480 opened by dependabot bot
October 3, 2023 00:23 16s dependabot/pip/requirements/urllib3-2.0.6
dependabot/pip/requirements/urllib3-2.0.6
October 3, 2023 00:23 16s
build(deps): bump cffi from 1.15.1 to 1.16.0 Dependency Review #684: Pull request #2476 synchronize by dependabot bot
October 2, 2023 11:01 16s dependabot/pip/cffi-1.16.0
dependabot/pip/cffi-1.16.0
October 2, 2023 11:01 16s
workflows: Stop pinning actions that are not security relevant Dependency Review #683: Pull request #2479 opened by jku
October 2, 2023 10:52 13s jku:dont-pin-code-scanner-actions
jku:dont-pin-code-scanner-actions
October 2, 2023 10:52 13s
build(deps): bump pylint from 2.17.6 to 2.17.7 Dependency Review #682: Pull request #2478 opened by dependabot bot
October 2, 2023 10:47 14s dependabot/pip/pylint-2.17.7
dependabot/pip/pylint-2.17.7
October 2, 2023 10:47 14s
build(deps): bump charset-normalizer from 3.2.0 to 3.3.0 Dependency Review #681: Pull request #2477 opened by dependabot bot
October 2, 2023 10:47 13s dependabot/pip/charset-normalizer-3.3.0
dependabot/pip/charset-normalizer-3.3.0
October 2, 2023 10:47 13s
build(deps): bump cffi from 1.15.1 to 1.16.0 Dependency Review #680: Pull request #2476 opened by dependabot bot
September 29, 2023 10:26 15s dependabot/pip/cffi-1.16.0
dependabot/pip/cffi-1.16.0
September 29, 2023 10:26 15s
build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 Dependency Review #679: Pull request #2475 opened by dependabot bot
September 28, 2023 10:09 16s dependabot/github_actions/github/codeql-action-2.21.9
dependabot/github_actions/github/codeql-action-2.21.9
September 28, 2023 10:09 16s
Remove obsolete comments from Python 2.7 times Dependency Review #678: Pull request #2474 opened by lukpueh
September 28, 2023 09:43 19s lukpueh:rm-obsolete-comments
lukpueh:rm-obsolete-comments
September 28, 2023 09:43 19s
build(deps): bump coverage from 7.2.7 to 7.3.1 Dependency Review #677: Pull request #2458 synchronize by dependabot bot
September 28, 2023 09:29 13s dependabot/pip/coverage-7.3.1
dependabot/pip/coverage-7.3.1
September 28, 2023 09:29 13s
Drop support for Python 3.7 Dependency Review #676: Pull request #2473 opened by lukpueh
September 28, 2023 09:15 20s lukpueh:drop-py37
lukpueh:drop-py37
September 28, 2023 09:15 20s
Offline mode Dependency Review #675: Pull request #2472 synchronize by jku
September 27, 2023 16:17 23s jku:offline-mode
jku:offline-mode
September 27, 2023 16:17 23s
Offline mode Dependency Review #674: Pull request #2472 opened by jku
September 27, 2023 10:30 20s jku:offline-mode
jku:offline-mode
September 27, 2023 10:30 20s
build(deps): bump pylint from 2.17.5 to 2.17.6 Dependency Review #673: Pull request #2470 opened by dependabot bot
September 26, 2023 10:49 15s dependabot/pip/pylint-2.17.6
dependabot/pip/pylint-2.17.6
September 26, 2023 10:49 15s
build(deps): bump actions/checkout from 4.0.0 to 4.1.0 Dependency Review #672: Pull request #2469 opened by dependabot bot
September 25, 2023 10:56 17s dependabot/github_actions/actions/checkout-4.1.0
dependabot/github_actions/actions/checkout-4.1.0
September 25, 2023 10:56 17s
build(deps): bump cryptography from 41.0.3 to 41.0.4 in /requirements Dependency Review #671: Pull request #2468 opened by dependabot bot
September 21, 2023 21:02 17s dependabot/pip/requirements/cryptography-41.0.4
dependabot/pip/requirements/cryptography-41.0.4
September 21, 2023 21:02 17s
build(deps): bump urllib3 from 2.0.4 to 2.0.5 Dependency Review #670: Pull request #2467 opened by dependabot bot
September 20, 2023 10:11 17s dependabot/pip/urllib3-2.0.5
dependabot/pip/urllib3-2.0.5
September 20, 2023 10:11 17s
build(deps): bump cryptography from 41.0.3 to 41.0.4 Dependency Review #669: Pull request #2466 opened by dependabot bot
September 20, 2023 10:11 22s dependabot/pip/cryptography-41.0.4
dependabot/pip/cryptography-41.0.4
September 20, 2023 10:11 22s
build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 Dependency Review #668: Pull request #2465 opened by dependabot bot
September 19, 2023 10:32 16s dependabot/github_actions/github/codeql-action-2.21.8
dependabot/github_actions/github/codeql-action-2.21.8
September 19, 2023 10:32 16s
build(deps): bump github/codeql-action from 2.21.5 to 2.21.7 Dependency Review #667: Pull request #2464 opened by dependabot bot
September 15, 2023 10:30 15s dependabot/github_actions/github/codeql-action-2.21.7
dependabot/github_actions/github/codeql-action-2.21.7
September 15, 2023 10:30 15s
build(deps): bump github/codeql-action from 2.21.5 to 2.21.6 Dependency Review #666: Pull request #2463 opened by dependabot bot
September 14, 2023 10:38 19s dependabot/github_actions/github/codeql-action-2.21.6
dependabot/github_actions/github/codeql-action-2.21.6
September 14, 2023 10:38 19s
build(deps): bump black from 23.7.0 to 23.9.1 Dependency Review #665: Pull request #2462 opened by dependabot bot
September 11, 2023 10:34 19s dependabot/pip/black-23.9.1
dependabot/pip/black-23.9.1
September 11, 2023 10:34 19s
ProTip! You can narrow down the results and go further in time using created:<2023-09-11 or the other filters available.