Skip to content

chore(deps): upgrade project dependencies to latest versions #272

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
yeshamavani merged 6 commits into from
Apr 21, 2026
Merged

chore(deps): upgrade project dependencies to latest versions #272

Show file tree
Hide file tree
Changes from 2 commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
66a43c8
chore(deps): upgrade project dependencies to latest versions
Sourav-kashyap Apr 2, 2026
7e4e51f
fix(ci): pin trivy-action to immutable commit SHA for supply-chain sa…
Copilot Apr 13, 2026
0c31ee8
fix(ci): correct trivy-action commit SHA to valid v0.35.0 SHA
Copilot Apr 13, 2026
6370c40
chore(deps): upgraded to latest dependencies, comment resolved
vinaygupta-sourcefuse Apr 16, 2026
948edbc
Update main.yaml
yeshamavani Apr 21, 2026
02e1862
chore(cic-d): Change npm install to npm ci in release workflow
yeshamavani Apr 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/trivy.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,8 +22,8 @@ jobs:
- uses: actions/checkout@v3
Copy link

Copilot AI Apr 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This workflow still uses actions/checkout@v3. Since GitHub Actions has moved off the Node 16 runtime, v3-based JS actions can become unsupported/break; please upgrade to actions/checkout@v4 to keep the workflow compatible long-term.

Suggested change
- uses: actions/checkout@v3
- uses: actions/checkout@v4

Copilot uses AI. Check for mistakes.
Copy link
Copy Markdown
Contributor Author

@Sourav-kashyap Sourav-kashyap Apr 14, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

resolved


- name: Run Trivy vulnerability scanner in repo mode
uses: aquasecurity/trivy-action@0.28.0
uses: aquasecurity/trivy-action@57a97c7e8b8c6e9c1a7a20db8c5e540c31cf79a8 # v0.35.0
with:
scan-type: "fs"
scan-ref: "${{ github.workspace }}"
trivy-config: "${{ github.workspace }}/trivy.yml"
scan-type: 'fs'
scan-ref: '${{ github.workspace }}'
trivy-config: '${{ github.workspace }}/trivy.yml'
Loading
Loading