chore(deps): update google/osv-scanner-action action to v2.5.0 #67

2026-08-07T08:37:05Z

renovate[bot] commented

2026-08-07 08:37:05 +00:00

(Migrated from github.com)

This PR contains the following updates:

Package	Type	Update	Change
google/osv-scanner-action	action	minor	`v2.3.8` → `v2.5.0`

Release Notes

google/osv-scanner-action (google/osv-scanner-action)

`v2.5.0`

Compare Source

This updates OSV-Scanner to v2.5.0 as well as:

What's Changed

feat: gate reusable workflow outputs with a flag by @another-rex in #130
Pin download-artifact action to SHA by @SVilgelm in #127
feat: add runs-on input to reusable workflows by @BeyondEvil in #131
fix: address zizmor warnings by @another-rex in #135
fix: add GOTOOLCHAIN=auto env to osv-scanner calls by @another-rex in #138

New Contributors

@SVilgelm made their first contribution in #127
@BeyondEvil made their first contribution in #131

Full Changelog: https://github.com/google/osv-scanner-action/compare/v2.3.8...v2.5.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google/osv-scanner-action](https://redirect.github.com/google/osv-scanner-action) | action | minor | `v2.3.8` → `v2.5.0` | --- ### Release Notes <details> <summary>google/osv-scanner-action (google/osv-scanner-action)</summary> ### [`v2.5.0`](https://redirect.github.com/google/osv-scanner-action/releases/tag/v2.5.0) [Compare Source](https://redirect.github.com/google/osv-scanner-action/compare/v2.3.8...v2.5.0) This updates OSV-Scanner to v2.5.0 as well as: #### What's Changed - feat: gate reusable workflow outputs with a flag by [@another-rex](https://redirect.github.com/another-rex) in [#130](https://redirect.github.com/google/osv-scanner-action/pull/130) - Pin download-artifact action to SHA by [@SVilgelm](https://redirect.github.com/SVilgelm) in [#127](https://redirect.github.com/google/osv-scanner-action/pull/127) - feat: add runs-on input to reusable workflows by [@BeyondEvil](https://redirect.github.com/BeyondEvil) in [#131](https://redirect.github.com/google/osv-scanner-action/pull/131) - fix: address zizmor warnings by [@another-rex](https://redirect.github.com/another-rex) in [#135](https://redirect.github.com/google/osv-scanner-action/pull/135) - fix: add GOTOOLCHAIN=auto env to osv-scanner calls by [@another-rex](https://redirect.github.com/another-rex) in [#138](https://redirect.github.com/google/osv-scanner-action/pull/138) #### New Contributors - [@SVilgelm](https://redirect.github.com/SVilgelm) made their first contribution in [#127](https://redirect.github.com/google/osv-scanner-action/pull/127) - [@BeyondEvil](https://redirect.github.com/BeyondEvil) made their first contribution in [#131](https://redirect.github.com/google/osv-scanner-action/pull/131) **Full Changelog**: <https://github.com/google/osv-scanner-action/compare/v2.3.8...v2.5.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/Lochnair/sqm-autorate-rust).

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Lochnair-Labs/sqm-autorate-rust#67