Skip to content
lockfile-rationale

build(deps): bump lodash from 4.17.23 to 4.18.1 in the npm-security group across 1 directory #150

Sign in to view logs

build(deps): bump lodash from 4.17.23 to 4.18.1 in the npm-security group across 1 directory

build(deps): bump lodash from 4.17.23 to 4.18.1 in the npm-security group across 1 directory #150

Workflow file for this run

.github/workflows/lockfile-rationale.yml at f70c379
name: lockfile-rationale
on:
pull_request:
types: [opened, synchronize, reopened, edited]
branches: [master]
permissions:
contents: read
pull-requests: read
jobs:
enforce:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
- uses: tj-actions/changed-files@48d8f15b2aaa3d255ca5af3eba4870f807ce6b3c
id: changed
- uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b
if: contains(steps.changed.outputs.all_changed_files, 'pnpm-lock.yaml') || contains(steps.changed.outputs.all_changed_files, 'package-lock.json') || contains(steps.changed.outputs.all_changed_files, 'yarn.lock')
with:
script: |
const body = context.payload.pull_request.body || "";
if (!/## Lockfile rationale/i.test(body)) {
core.setFailed("Lockfile changed but PR body lacks 'Lockfile rationale' section.");
}