Skip to content

ci: bump hadolint/hadolint-action from 3.3.0 to 3.5.0 - #33

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/hadolint/hadolint-action-3.5.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/hadolint/hadolint-action-3.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps hadolint/hadolint-action from 3.3.0 to 3.5.0.

Release notes

Sourced from hadolint/hadolint-action's releases.

v3.5.0

3.5.0 (2026-08-24)

Features

  • Bump Hadolint to v2.15.1 (941db07)

v3.4.0

3.4.0 (2026-07-30)

Features

  • Bump Hadolint to v2.15.0 (2a66e89)
Commits
  • 06be81b Merge pull request #107 from gizero/bump-hadolint-base-image-to-2.15.1
  • 941db07 feat: Bump Hadolint to v2.15.1
  • d0e9595 Merge pull request #106 from m-ildefons/gh-78
  • df662ab Problem Matcher: Capture code and severity
  • 32c6895 Merge pull request #85 from rjbell4/patch-1
  • 146301c Merge pull request #105 from m-ildefons/gh-100
  • df8eaaf CI: run integration tests with different runners
  • 2a66e89 feat: Bump Hadolint to v2.15.0
  • 75bb911 fixup! Update hadolint.sh
  • 631cc83 Update repository reference in problem-matcher.json
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 28, 2026
@RealDougEubanks

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@RealDougEubanks

Copy link
Copy Markdown
Owner

@dependabot rebase

Bumps [hadolint/hadolint-action](https://github.com/hadolint/hadolint-action) from 3.3.0 to 3.5.0.
- [Release notes](https://github.com/hadolint/hadolint-action/releases)
- [Commits](hadolint/hadolint-action@v3.3.0...v3.5.0)

---
updated-dependencies:
- dependency-name: hadolint/hadolint-action
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/hadolint/hadolint-action-3.5.0 branch from a8d9121 to d19040c Compare September 10, 2026 02:10
@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/hadolint/hadolint-action 3.5.0 🟢 4.5
Details
CheckScoreReason
Code-Review🟢 3Found 5/15 approved changesets -- score normalized to 3
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 88 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 8
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • .github/workflows/lint.yml

@RealDougEubanks

Copy link
Copy Markdown
Owner

Superseded by #36, which upgraded hadolint-action to v3.5.0 and pinned all actions to commit SHAs.

@dependabot @github

dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/hadolint/hadolint-action-3.5.0 branch September 10, 2026 02:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant