chore(deps): bump the prod-deps group across 1 directory with 7 updates #927
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow enables dependency scans on pull requests. | |
| # When changes in dependencies are detected, it will raise an error | |
| # if any vulnerabilities or invalid licenses are introduced. | |
| # See for more info: https://github.com/actions/dependency-review-action | |
| name: 'Dependabot PR Review' | |
| on: [pull_request_target] | |
| permissions: | |
| contents: read | |
| jobs: | |
| dependency-review: | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: 'Checkout Repository' | |
| uses: actions/checkout@v4 | |
| with: | |
| ref: ${{ github.event.pull_request.head.sha }} | |
| - name: 'Dependency Review' | |
| uses: actions/dependency-review-action@v4 | |
| with: | |
| # fails when moderate vulnerabilities are detected | |
| fail-on-severity: moderate |