Update google/osv-scanner-action action to v2.3.5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
google/osv-scanner-action	action	minor	v2.2.3 → v2.3.5

---

Release Notes

google/osv-scanner-action (google/osv-scanner-action)

v2.3.5

Compare Source

This updates OSV-Scanner to v2.3.5.

What's Changed

• Update to v2.3.5 by @​tobyhawker in #​124

New Contributors

• @​tobyhawker made their first contribution in #​124

Full Changelog: google/osv-scanner-action@v2.3.3...v2.3.5

v2.3.3

Compare Source

This updates OSV-Scanner to v2.3.3.

What's Changed

• chore(deps): update github/codeql-action action to v4.31.10 by @​renovate-bot in #​115
• Update to v2.3.3 by @​Ly-Joey in #​118

New Contributors

• @​Ly-Joey made their first contribution in #​118

Full Changelog: google/osv-scanner-action@v2.3.2...v2.3.3

v2.3.2

Compare Source

This updates OSV-Scanner to v2.3.2

This release includes performance improvements for local scanning, reducing memory usage and avoiding unnecessary advisory loading. It also fixes issues with MCP's get_vulnerability_details tool, git queries in osv-scanner.json, and ignore entry tracking, along with documentation updates.

Fixes:

• Bug #​2415 Add more PURL-to-ecosystem mappings
• Bug #​2422 MCP error for get_vulnerability_id because type definition is incorrect.
• Bug #​2460 Enable osv-scanner.json git queries
• Bug #​2456 Properly track if an ignore entry has been used
• Bug #​2450 Performance: Avoid loading the entire advisory unless it will actually be used
• Bug #​2445 Performance: Don't read the entire zip into memory
• Bug #​2433 Allow specifying user agent in v2 osvscanner package

Misc:

• Misc #​2453 Switch from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3
• Misc #​2447 Include bun.lock as a supported lockfile
• Misc #​2444 Document GoVersionOverride in configuration.md

Full Changelog: google/osv-scanner@v2.3.1...v2.3.2

v2.3.1

Compare Source

What's Changed

• chore(deps): update workflows (major) by @​renovate-bot in #​105
• chore(deps): update github/codeql-action action to v4.31.7 by @​renovate-bot in #​108
• chore: more specific name for uploaded artifact by @​marcusburghardt in #​111
• Update to v2.3.1 by @​cuixq in #​112

New Contributors

• @​marcusburghardt made their first contribution in #​111

Full Changelog: google/osv-scanner-action@v2.3.0...v2.3.1

v2.3.0

Compare Source

What's Changed

• chore(deps): update workflows by @​renovate-bot in #​104
• Add gemini config.yaml file by @​michaelkedar in #​107
• Update to v2.3.0 by @​michaelkedar in #​106

Full Changelog: google/osv-scanner-action@v2.2.4...v2.3.0

v2.2.4

Compare Source

What's Changed

• chore(deps): update github/codeql-action action to v4 by @​renovate-bot in #​102
• Update to v2.2.4 by @​another-rex in #​103

Full Changelog: google/osv-scanner-action@v2.2.3...v2.2.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.