Resolve merge conflicts with actions/main#3

Merged

sgmurphy merged 149 commits into

sgmurphy:update-pr-commentfrom

niebloomj:resolve-main-conflicts

May 11, 2026

Commits on Aug 13, 2025

Commits on Aug 15, 2025

Commits on Aug 16, 2025

Address discrepancy between docs and reality
ahpook
committed

Commits on Aug 19, 2025

Commits on Aug 20, 2025

Commits on Aug 26, 2025

Commits on Aug 28, 2025

Commits on Aug 29, 2025

Merge pull request #978 from actions/ljones140/make-ruby-code-scannable
ljones140
authored

Commits on Sep 26, 2025

Commits on Oct 6, 2025

Bump actions/stale from 9.1.0 to 10.1.0
dependabot[bot]
authored

Commits on Oct 13, 2025

Bump github/codeql-action from 3 to 4
dependabot[bot]
authored

Commits on Oct 15, 2025

Scope warning about private repositories
jsoref
committed

Commits on Oct 17, 2025

Merge pull request #920 from jsoref/issue-919
ahpook
authored

Commits on Oct 22, 2025

Commits on Oct 23, 2025

Update README with allowed-dependencies-licenses example
danielhardej
authored

Commits on Oct 27, 2025

Commits on Nov 4, 2025

Merge pull request #1009 from danielhardej/patch-1
dangoor
authored

Commits on Nov 5, 2025

Commits on Nov 6, 2025

Commits on Nov 11, 2025

Commits on Nov 17, 2025

Bump js-yaml
dependabot[bot]
authored

Commits on Nov 28, 2025

Commits on Jan 5, 2026

Commits on Jan 6, 2026

Merge pull request #1036 from actions/ae/vuln-fixes
Ahmed3lmallah
authored

Commits on Feb 6, 2026

Add patched version column to vulnerability summary with multi-range support (#5)

Copilot
and
felickz
authored

Commits on Feb 8, 2026

Implement review fixes: semver library, scoping, case-insensitive matching, error logging, and configurable fail behavior (#7)

Copilot
and
felickz
authored

Commits on Feb 9, 2026

Implement review feedback: concurrency limiting, semver coercion, logging improvements, and test coverage (#8)

Copilot
and
felickz
authored

Commits on Feb 11, 2026

Bump fast-xml-parser from 5.3.3 to 5.3.5
dependabot[bot]
authored

Commits on Feb 17, 2026

Commits on Feb 18, 2026

Commits on Feb 23, 2026

Bump actions/stale from 10.1.0 to 10.2.0
dependabot[bot]
authored

Commits on Feb 26, 2026

fix: only get scorecard levels if user wants to see the OpenSSF scorecard
jantiebot
committed

Commits on Feb 27, 2026

Commits on Mar 2, 2026

Merge pull request #1058 from actions/dependabot/github_actions/actions/stale-10.2.0
ahpook
authored

Commits on Mar 3, 2026

Commits on Mar 6, 2026

Commits on Mar 23, 2026

fix: patched version display for advisories with non-strict semver ranges (e.g. Maven beta versions)
tspascoal
authored

Commits on Mar 24, 2026

docs: bump actions/checkout from v4 to v6 in workflow examples
Marukome0743
committed

Commits on Apr 8, 2026

Update Node.js runtime from 20 to 24
scottschreckengaust
committed

Commits on May 4, 2026

Bump spdx-license-ids from 3.0.20 to 3.0.23

mongolyy
and
claude
committed

Commits on May 8, 2026

Commits on May 11, 2026