fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
- name: Dependency Review
if: ${{ github.event_name == 'push' && matrix.os == 'ubuntu-latest' && matrix.node == '20.x' }}
- uses: actions/dependency-review-action@v3
+ uses: actions/dependency-review-action@v4
with:
base-ref: ${{ github.ref_name }}
head-ref: ${{ github.sha }}
- name: Pull Request Dependency Review
if: ${{ github.event_name == 'pull_request' && matrix.os == 'ubuntu-latest' && matrix.node == '20.x' }}
- uses: actions/dependency-review-action@v3
- - uses: pnpm/action-setup@v2
+ uses: actions/dependency-review-action@v4
+ - uses: pnpm/action-setup@v3
with:
- version: 8
+ version: 9
- name: Setup node ${{ matrix.node }}
uses: actions/setup-node@v4
with:
fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
- name: Dependency Review
if: ${{ github.event_name == 'push' && matrix.os == 'ubuntu-latest' && matrix.node == '20.x' }}
- uses: actions/dependency-review-action@v3
+ uses: actions/dependency-review-action@v4
with:
base-ref: ${{ github.ref_name }}
head-ref: ${{ github.sha }}
- name: Pull Request Dependency Review
if: ${{ github.event_name == 'pull_request' && matrix.os == 'ubuntu-latest' && matrix.node == '20.x' }}
- uses: actions/dependency-review-action@v3
- - uses: pnpm/action-setup@v2
+ uses: actions/dependency-review-action@v4
+ - uses: pnpm/action-setup@v3
with:
- version: 8
+ version: 9
- name: Setup node ${{ matrix.node }}
uses: actions/setup-node@v4
with: