ci: Bump ossf/scorecard-action from 2.4.4 to 2.5.0 in the actions group #30

Closed
dependabot[bot] wants to merge 1 commits from dependabot/github_actions/actions-dd3649b633 into main
pull from: dependabot/github_actions/actions-dd3649b633
1 Commits
Author SHA1 Message Date
dependabot[bot] a227e4a930 ci: Bump ossf/scorecard-action from 2.4.4 to 2.5.0 in the actions group
Bumps the actions group with 1 update: [ossf/scorecard-action](https://github.com/ossf/scorecard-action).


Updates `ossf/scorecard-action` from 2.4.4 to 2.5.0
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/2d1146689b8cda280b9bc96326124645441f03bc...fa7117db83c52d787ae5a89f350999701505d78e)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-10-19 05:27:31 +00:00