mirror of
https://github.com/Sea-Haven-Industries/file-share.git
synced 2026-09-30 08:53:17 +00:00
7e194b864f
Some checks failed
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 5 updates: | Package | From | To | | --- | --- | --- | | [Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml](https://github.com/sea-haven-industries/.github) | `1.0.4` | `1.0.7` | | [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github) | `1.0.4` | `1.0.7` | | [Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml](https://github.com/sea-haven-industries/.github) | `1.0.4` | `1.0.7` | | [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github) | `1.0.4` | `1.0.7` | | [Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml](https://github.com/sea-haven-industries/.github) | `1.0.6` | `1.0.7` | Updates `Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml` from 1.0.4 to 1.0.7 - [Release notes](https://github.com/sea-haven-industries/.github/releases) - [Commits](81cf168170...e5691d8a7f) Updates `Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml` from 1.0.4 to 1.0.7 - [Release notes](https://github.com/sea-haven-industries/.github/releases) - [Commits](81cf168170...e5691d8a7f) Updates `Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml` from 1.0.4 to 1.0.7 - [Release notes](https://github.com/sea-haven-industries/.github/releases) - [Commits](81cf168170...e5691d8a7f) Updates `Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml` from 1.0.4 to 1.0.7 - [Release notes](https://github.com/sea-haven-industries/.github/releases) - [Commits](81cf168170...e5691d8a7f) Updates `Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml` from 1.0.6 to 1.0.7 - [Release notes](https://github.com/sea-haven-industries/.github/releases) - [Commits](7ac3528750...e5691d8a7f) --- updated-dependencies: - dependency-name: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml dependency-version: 1.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml dependency-version: 1.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml dependency-version: 1.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml dependency-version: 1.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml dependency-version: 1.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
17 lines
623 B
YAML
17 lines
623 B
YAML
name: Dependency Review
|
|
on:
|
|
pull_request:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
review:
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@e5691d8a7f96ac4d5a841a82975ff0a4354d53ac # v1.0.7
|
|
with:
|
|
# GHSA-rgw5-rvv9-x895 (brace-expansion DoS bypass of CVE-2026-14257):
|
|
# bundled transitive inside aws-cdk-lib (inBundle, not overridable via
|
|
# lockfile); adjudicated in .security-review/suppressions.json.
|
|
# aws-cdk-lib 2.263.0 bundles 5.0.8 (fixes GHSA-3jxr-9vmj-r5cp). Remove
|
|
# when aws-cdk-lib bundles >=5.0.9.
|
|
allow-ghsas: GHSA-rgw5-rvv9-x895
|