Skip to content
Dependency Review

ci: add Dependabot config, update GitHub Actions workflows with pinned versions, add security policy, and bump project version to 1.1.0 #1

Sign in to view logs

ci: add Dependabot config, update GitHub Actions workflows with pinned versions, add security policy, and bump project version to 1.1.0

ci: add Dependabot config, update GitHub Actions workflows with pinned versions, add security policy, and bump project version to 1.1.0 #1

Workflow file for this run

.github/workflows/dependency-review.yml at 0b0a5e8
name: Dependency Review
on:
pull_request:
permissions:
contents: read
jobs:
dependency-review:
name: Dependency Review
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Review dependency changes
uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2
with:
fail-on-severity: moderate