chore(deps): bump the github-actions group with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates: AbsaOSS/organizational-workflows/.github/workflows/aquasec-scan.yml and AbsaOSS/generate-release-notes.

Updates AbsaOSS/organizational-workflows/.github/workflows/aquasec-scan.yml from 1.1.0 to 1.3.0

Release notes

Sourced from AbsaOSS/organizational-workflows/.github/workflows/aquasec-scan.yml's releases.

v1.3.0

New Features 🎉

• Feature: #82 Update aquasec workflow behavior - remove sec:adept-to-close label by @​HuvarVer, @​tmikula-dev in #84
  • GitHub issues now close automatically, after they disappear from AquaSec platform.
  • New standard labels recommended sec:suppression and sec:false-positive for full security ticket lifecycle.
• Feature: #88 Add fetched AquaSec JSON as an workflow artefact by @​tmikula-dev in #89
  • Scan run now uploads the fetched AquaSec findings as a workflow artifact named aquasec-night-scan, containing a single aquasec_scan.json file with all findings across every severity.
• Feature: #92 Add packed documentation and ingest into knowledge base by @​oto-macenauer-absa in #93
  • Added a Publish Docs workflow that publishes the Security Automation documentation to the AbsaOSS knowledge base on every published release, and on manual dispatch.
  • Fixed links in the Security Automation documentation that broke when the page is served outside the repository.

Infrastructure ⚙️

• PR: #86, #90 chore(deps): bump the github-actions group with several updates by @​dependabot[bot]
• PR: #87 chore(deps): update mypy requirement from >=2.2.0 to >=2.3.0 in the python-dependencies group by @​dependabot[bot]

Full Changelog

AbsaOSS/organizational-workflows@v1.2.0...v1.3.0

v1.2.0

New Features 🎉

• Feature: #82 Update AquaSec workflow behavior - remove sec:adept-to-close label by @​HuvarVer, @​tmikula-dev in #84
  • GitHub issues now close automatically, after they disappear from AquaSec platform.
  • New standard labels recommended sec:suppression and sec:false-positive for full security ticket lifecycle.

Infrastructure ⚙️

• PR: #77, #79, #83 chore(deps): bump the python-dependencies group by @​dependabot[bot]
• PR: #78, #80, #81 chore(deps): bump the github-actions group by @​dependabot[bot]

Security Alerts 🛡️

• #62 Security Alert – AVD-PIPELINE-0003
• #63, #64, #65, #66 [SEC:LOW] Echo of variables

Full Changelog

AbsaOSS/organizational-workflows@v1.1.0...v1.2.0

Commits

• ab0b537 fix(ci): re-pin publish-single-page-docs to a working upstream SHA (#95)
• 9fce6fd Feat: Adding fetched AquaSec JSON as workflow artifact. (#89)
• dd0c321 feat(docs): publish documentation to the AbsaOSS knowledge base (#93)
• abae613 chore(deps): bump the github-actions group across 1 directory with 4 updates ...
• d009d7b chore(deps): update mypy requirement in the python-dependencies group (#87)
• 3b6a6b0 feat: Removing adept to close label logic (#84)
• 7fce4b9 chore(deps): bump the github-actions group across 1 directory with 2 updates ...
• bf6d958 chore(deps): bump the python-dependencies group with 2 updates (#83)
• 572d3e3 chore(deps): bump the github-actions group with 2 updates (#78)
• 2654cb2 chore(deps): update pytest requirement in the python-dependencies group (#79)
• Additional commits viewable in compare view

Updates AbsaOSS/generate-release-notes from 1.3.2 to 1.3.3

Release notes

Sourced from AbsaOSS/generate-release-notes's releases.

v1.3.3

Bugfixes 🛠

• bug: Compare Mode Fails with 404 When Target Tag Not Yet Created @​miroslavpojer in #322
• Bug: sync-merge commits from a PR branch are misclassified as "Direct commits" @​miroslavpojer in #335

Full Changelog

AbsaOSS/generate-release-notes@v1.3.2...v1.3.3

Commits

• 4592187 Fix: direct commits still misclassified after #337 (compare mode) (#339)
• 2a4bb9a Fix: sync-merge commits misclassified as direct commits (#337)
• 3fbc515 chore(deps): bump the python-dependencies group with 3 updates (#334)
• b03dd49 chore(deps): bump pylint in the python-dependencies group (#333)
• 5124680 chore(deps): bump types-pyyaml in the python-dependencies group (#331)
• 27e303f chore(deps): bump the github-actions group with 2 updates (#330)
• a947b85 chore(deps): bump mypy in the python-dependencies group (#329)
• 867ae83 chore(deps): bump softprops/action-gh-release (#328)
• 918edc1 chore(deps): bump the python-dependencies group with 2 updates (#327)
• 7108794 chore(deps): bump responses in the python-dependencies group (#326)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions