mirror of
https://github.com/Sea-Haven-Industries/seahaven-site.git
synced 2026-09-30 07:43:16 +00:00
a5b9716c31
Some checks failed
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 3 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-static.yaml](https://github.com/sea-haven-industries/.github), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github). Updates `Sea-Haven-Industries/.github/.github/workflows/ci-static.yaml` from 1.0.2 to 1.0.3 - [Release notes](https://github.com/sea-haven-industries/.github/releases) - [Commits](0170a57c0d...3f74677422) Updates `Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml` from 1.0.2 to 1.0.3 - [Release notes](https://github.com/sea-haven-industries/.github/releases) - [Commits](0170a57c0d...3f74677422) Updates `Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml` from 1.0.2 to 1.0.3 - [Release notes](https://github.com/sea-haven-industries/.github/releases) - [Commits](0170a57c0d...3f74677422) --- updated-dependencies: - dependency-name: Sea-Haven-Industries/.github/.github/workflows/ci-static.yaml dependency-version: 1.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml dependency-version: 1.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml dependency-version: 1.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
15 lines
537 B
YAML
15 lines
537 B
YAML
name: Dependency Review
|
|
on:
|
|
pull_request:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
review:
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml@3f746774229d41770727e2e4fd63ed5f5555a8b3 # v1.0.3
|
|
with:
|
|
# brace-expansion OOM DoS: no in-range fix (patch only in 5.0.8; @11ty/recursive-copy
|
|
# pins minimatch <10.0.3). Build-time-only exposure, adjudicated in
|
|
# .security-review/suppressions.json — remove when recursive-copy bumps minimatch.
|
|
allow-ghsas: GHSA-mh99-v99m-4gvg
|