Skip to content

Commit 1ef548a

Browse files
author
MPCoreDeveloper
committed
fix: use advanced-security/component-detection-dependency-submission-action@v0.1.3
Replace non-existent dotnet/dependency-submission with the actively maintained advanced-security fork (v0.1.3, March 2026) of the component-detection action. The actions/ fork is abandoned (last commit July 2025, no releases).
1 parent b26777c commit 1ef548a

File tree

1 file changed

+3
-5
lines changed

1 file changed

+3
-5
lines changed

.github/workflows/dependency-submission.yml

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@
22
# Replaces the broken GitHub system-managed "Automatic Dependency Submission" workflow
33
# that uses an outdated actions/component-detection-dependency-submission-action@374343e SHA.
44
#
5-
# This workflow uses the official Microsoft dotnet/dependency-submission action
6-
# which is purpose-built for .NET repositories and properly supports .NET 10.
5+
# Uses the actively maintained advanced-security/component-detection-dependency-submission-action
6+
# (upstream of the abandoned actions/ fork) which properly supports .NET 10 and Node.js 24.
77
#
88
# IMPORTANT: After adding this workflow, disable the system-managed
99
# "Automatic Dependency Submission" in GitHub Settings:
@@ -34,6 +34,4 @@ jobs:
3434
dotnet-version: '10.0.x'
3535

3636
- name: Submit dependencies
37-
uses: dotnet/dependency-submission@v2
38-
with:
39-
solution-path: 'SharpCoreDB.CI.slnf'
37+
uses: advanced-security/component-detection-dependency-submission-action@v0.1.3

0 commit comments

Comments
 (0)