mirror of
https://github.com/Sea-Haven-Industries/.github.git
synced 2026-09-30 15:13:12 +00:00
Adam Moussa
3a258918e2
actions/checkout v7.0.0 (2026-06-18) is internally an ESM rebuild plus one behavioral change: it blocks checking out a fork PR head ref under pull_request_target / workflow_run (PR #2454). No Sea Haven workflow uses those triggers, so there is no reachable behavior change. The Node 24 runtime requirement already landed at v6, so v6 -> v7 carries no new runner requirement. All runners here are GitHub-hosted (ubuntu, macos). Covers all 16 checkout pins across 12 reusable/standalone workflows plus the dependency-review workflow-template scaffold. Consumers on @main pick this up automatically on merge.
20 lines
415 B
YAML
20 lines
415 B
YAML
name: Dependency Review
|
|
on:
|
|
pull_request:
|
|
branches: [main]
|
|
|
|
permissions:
|
|
contents: read
|
|
pull-requests: write
|
|
|
|
jobs:
|
|
dependency-review:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v7
|
|
- name: Dependency Review
|
|
uses: actions/dependency-review-action@v4
|
|
with:
|
|
fail-on-severity: high
|
|
comment-summary-in-pr: on-failure
|