hermes-agent/.github/workflows
dependabot[bot] 424f2cc6e5 chore(actions)(deps): bump the actions-minor-patch group across 1 directory with 2 updates
Bumps the actions-minor-patch group with 2 updates in the / directory: [google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action) and [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python).


Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml` from 2.3.5 to 2.3.8
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](c518547040...9a49870895)

Updates `sigstore/gh-action-sigstore-python` from 3.0.0 to 3.3.0
- [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases)
- [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md)
- [Commits](f514d46b90...04cffa1d79)

---
updated-dependencies:
- dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml
  dependency-version: 2.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor-patch
- dependency-name: sigstore/gh-action-sigstore-python
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-19 03:27:09 -07:00
..
contributor-check.yml security: supply chain hardening — CI pinning, dep pinning, and code fixes (#9801) 2026-04-14 14:23:37 -07:00
deploy-site.yml docs: publish llms.txt and llms-full.txt for agent-friendly ingestion (#18276) 2026-04-30 23:17:14 -07:00
docker-publish.yml ci(docker): split :latest (releases only) from :main (main HEAD) 2026-05-13 10:30:42 -04:00
docs-site-checks.yml docs(website): dedicated page per bundled + optional skill (#14929) 2026-04-23 22:22:11 -07:00
history-check.yml ci: reject PRs with no common ancestor on main (#26611) 2026-05-15 14:47:30 -07:00
lint.yml ci: skip lint comment on fork PRs 2026-05-10 13:19:41 -07:00
nix-lockfile-fix.yml change(nix): dedupe nix lockfile checking scripts in ci (#18000) 2026-04-30 22:52:30 +05:30
nix.yml change(nix): dedupe nix lockfile checking scripts in ci (#18000) 2026-04-30 22:52:30 +05:30
osv-scanner.yml chore(actions)(deps): bump the actions-minor-patch group across 1 directory with 2 updates 2026-05-19 03:27:09 -07:00
skills-index.yml security: supply chain hardening — CI pinning, dep pinning, and code fixes (#9801) 2026-04-14 14:23:37 -07:00
supply-chain-audit.yml security(deps): add upper bounds to 5 loose deps + document supply chain policy (#24226) 2026-05-15 01:33:08 -07:00
tests.yml fix(ci): bump e2e job timeout to 15 minutes 2026-05-12 17:10:57 -07:00
upload_to_pypi.yml chore(actions)(deps): bump the actions-minor-patch group across 1 directory with 2 updates 2026-05-19 03:27:09 -07:00
uv-lockfile-check.yml ci: add blocking uv.lock check 2026-05-08 18:47:07 -04:00