ci: bump actions/checkout from 6.0.2 to 7.0.0 #2
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dependency Review | |
| on: | |
| pull_request: | |
| jobs: | |
| dependency-review: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| - name: Dependency review | |
| continue-on-error: true | |
| uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0 | |
| with: | |
| # MPL-2.0 is safe only as a transitive dependency — do not vendor or | |
| # fork MPL-licensed source without re-evaluating the obligations. | |
| allow-licenses: Apache-2.0, MIT, ISC, BSD-2-Clause, BSD-3-Clause, CC0-1.0, Unlicense, 0BSD, Python-2.0, MPL-2.0 | |
| - name: Dependency review not supported notice | |
| if: ${{ failure() }} | |
| run: | | |
| echo "Dependency review is not supported for this repository configuration." | |
| echo "Proceeding without blocking CI." |