mirror of
https://github.com/Sea-Haven-Industries/seahaven-site.git
synced 2026-10-03 15:03:15 +00:00
2ee92e3051
Some checks are pending
Deploy / Deploy site to prod (push) Waiting to run
* chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates Bumps the npm_and_yarn group with 2 updates in the / directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [markdown-it](https://github.com/markdown-it/markdown-it). Updates `brace-expansion` from 1.1.18 to 1.1.21 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.18...v1.1.21) Updates `markdown-it` from 14.2.0 to 14.3.2 - [Changelog](https://github.com/markdown-it/markdown-it/blob/14.3.2/CHANGELOG.md) - [Commits](https://github.com/markdown-it/markdown-it/compare/14.2.0...14.3.2) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.21 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: markdown-it dependency-version: 14.3.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> * chore: update GitHub Actions workflows to v1.0.21 --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Adam Moussa <adam@seahavenind.com>
15 lines
538 B
YAML
15 lines
538 B
YAML
name: Dependency Review
|
|
on:
|
|
pull_request:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
review:
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@47185fa602dffddb8297db5f3525d7c9bc05d7cd # v1.0.21
|
|
with:
|
|
# brace-expansion OOM DoS: no in-range fix (patch only in 5.0.8; @11ty/recursive-copy
|
|
# pins minimatch <10.0.3). Build-time-only exposure, adjudicated in
|
|
# .security-review/suppressions.json — remove when recursive-copy bumps minimatch.
|
|
allow-ghsas: GHSA-mh99-v99m-4gvg
|