这是indexloc提供的服务，不要输入任何密码
Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: ossf/criticality_score
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.0.3
Choose a base ref
...
head repository: ossf/criticality_score
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.0.4
Choose a head ref
  • 18 commits
  • 13 files changed
  • 2 contributors

Commits on Mar 17, 2024

  1. Add @latest to go install commands in docs. (#572) 

    Signed-off-by: Caleb Brown <calebbrown@google.com>
    @calebbrown
    calebbrown authored Mar 17, 2024
    Configuration menu
    Copy the full SHA
    4cf5a53 View commit details
    Browse the repository at this point in the history

Commits on Mar 18, 2024

  1. Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#562) 

    Bumps google.golang.org/protobuf from 1.32.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Mar 18, 2024
    Configuration menu
    Copy the full SHA
    5f09ed2 View commit details
    Browse the repository at this point in the history

  2. Bump github.com/hasura/go-graphql-client from 0.12.0 to 0.12.1 (#559) 

    Bumps [github.com/hasura/go-graphql-client](https://github.com/hasura/go-graphql-client) from 0.12.0 to 0.12.1.
- [Release notes](https://github.com/hasura/go-graphql-client/releases)
- [Commits](hasura/go-graphql-client@v0.12.0...v0.12.1)

---
updated-dependencies:
- dependency-name: github.com/hasura/go-graphql-client
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Mar 18, 2024
    Configuration menu
    Copy the full SHA
    6651972 View commit details
    Browse the repository at this point in the history

  3. Bump golang.org/x/sys from 0.17.0 to 0.18.0 (#561) 

    Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.17.0 to 0.18.0.
- [Commits](golang/sys@v0.17.0...v0.18.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Mar 18, 2024
    Configuration menu
    Copy the full SHA
    0c9dcba View commit details
    Browse the repository at this point in the history

  4. Bump google.golang.org/api from 0.156.0 to 0.170.0 (#570) 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.156.0 to 0.170.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.156.0...v0.170.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Mar 18, 2024
    Configuration menu
    Copy the full SHA
    3dfee28 View commit details
    Browse the repository at this point in the history

  5. Bump cloud.google.com/go/bigquery from 1.57.1 to 1.59.1 (#544) 

    Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.57.1 to 1.59.1.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@bigquery/v1.57.1...bigquery/v1.59.1)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Mar 18, 2024
    Configuration menu
    Copy the full SHA
    27833b0 View commit details
    Browse the repository at this point in the history

  6. Bump gocloud.dev from 0.36.0 to 0.37.0 (#565) 

    Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.36.0 to 0.37.0.
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](google/go-cloud@v0.36.0...v0.37.0)

---
updated-dependencies:
- dependency-name: gocloud.dev
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Mar 18, 2024
    Configuration menu
    Copy the full SHA
    39a763a View commit details
    Browse the repository at this point in the history

Commits on Apr 19, 2024

  1. Fix linter issues (#589) 

    * Update go.work.sum

Signed-off-by: Caleb Brown <calebbrown@google.com>

* Add a long timeout for golanci-lint

Signed-off-by: Caleb Brown <calebbrown@google.com>

---------

Signed-off-by: Caleb Brown <calebbrown@google.com>
    @calebbrown
    calebbrown authored Apr 19, 2024
    1 Configuration menu
    Copy the full SHA
    ed18990 View commit details
    Browse the repository at this point in the history

  2. Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /tools (#569) 

    Bumps google.golang.org/protobuf from 1.31.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    ba6db7e View commit details
    Browse the repository at this point in the history

  3. Bump golang.org/x/sys from 0.18.0 to 0.19.0 (#583) 

    Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.18.0 to 0.19.0.
- [Commits](golang/sys@v0.18.0...v0.19.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    c35486e View commit details
    Browse the repository at this point in the history

  4. Bump actions/checkout from 4.1.1 to 4.1.2 (#566) 

    Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@b4ffde6...9bb5618)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    18bde06 View commit details
    Browse the repository at this point in the history

  5. Bump cloud.google.com/go/bigquery from 1.59.1 to 1.60.0 (#581) 

    Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.59.1 to 1.60.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@bigquery/v1.59.1...spanner/v1.60.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    6f2d1c6 View commit details
    Browse the repository at this point in the history

  6. Bump google.golang.org/api from 0.170.0 to 0.174.0 (#587) 

    Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.170.0 to 0.174.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.170.0...v0.174.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    01b2e38 View commit details
    Browse the repository at this point in the history

  7. Bump github/codeql-action from 3.24.3 to 3.25.1 (#588) 

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.3 to 3.25.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](github/codeql-action@v3.24.3...v3.25.1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    8b83db7 View commit details
    Browse the repository at this point in the history

  8. Bump actions/upload-artifact from 4.3.1 to 4.3.2 (#590) 

    Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.1 to 4.3.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@5d5d22a...1746f4a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    16d00d2 View commit details
    Browse the repository at this point in the history

  9. Bump github.com/golangci/golangci-lint from 1.56.2 to 1.57.2 in /tools ( 

    #582)

Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.56.2 to 1.57.2.
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md)
- [Commits](golangci/golangci-lint@v1.56.2...v1.57.2)

---
updated-dependencies:
- dependency-name: github.com/golangci/golangci-lint
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 19, 2024
    Configuration menu
    Copy the full SHA
    9beb4f8 View commit details
    Browse the repository at this point in the history

Commits on Apr 22, 2024

  1. Bump golang.org/x/net from 0.22.0 to 0.23.0 (#591) 

    Bumps [golang.org/x/net](https://github.com/golang/net) from 0.22.0 to 0.23.0.
- [Commits](golang/net@v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Apr 22, 2024
    Configuration menu
    Copy the full SHA
    2335e48 View commit details
    Browse the repository at this point in the history

Commits on Apr 30, 2024

  1. Fix the issue lookback duration to be 90 days. (#605) 

    Signed-off-by: Caleb Brown <calebbrown@google.com>
    @calebbrown
    calebbrown authored Apr 30, 2024
    Configuration menu
    Copy the full SHA
    7cacdd0 View commit details
    Browse the repository at this point in the history
Loading