build(deps): Bump actions/dependency-review-action from 3 to 4
authordependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Thu, 18 Jan 2024 16:12:56 +0000 (16:12 +0000)
committerGitHub <noreply@github.com>
Thu, 18 Jan 2024 16:12:56 +0000 (16:12 +0000)
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 3 to 4.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
.github/workflows/ci.yml

index 87818ade76840a72062c004ddcd1877058a98604..869d5b69b6150fb98e28e8d3a95f688749f78420 100644 (file)
@@ -35,13 +35,13 @@ jobs:
           fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
       - name: Dependency Review
         if: ${{ github.event_name == 'push' && matrix.os == 'ubuntu-latest' && matrix.node == '20.x' }}
-        uses: actions/dependency-review-action@v3
+        uses: actions/dependency-review-action@v4
         with:
           base-ref: ${{ github.ref_name }}
           head-ref: ${{ github.sha }}
       - name: Pull Request Dependency Review
         if: ${{ github.event_name == 'pull_request' && matrix.os == 'ubuntu-latest' && matrix.node == '20.x' }}
-        uses: actions/dependency-review-action@v3
+        uses: actions/dependency-review-action@v4
       - uses: pnpm/action-setup@v2
         with:
           version: 8
@@ -88,13 +88,13 @@ jobs:
           fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
       - name: Dependency Review
         if: ${{ github.event_name == 'push' && matrix.os == 'ubuntu-latest' && matrix.node == '20.x' }}
-        uses: actions/dependency-review-action@v3
+        uses: actions/dependency-review-action@v4
         with:
           base-ref: ${{ github.ref_name }}
           head-ref: ${{ github.sha }}
       - name: Pull Request Dependency Review
         if: ${{ github.event_name == 'pull_request' && matrix.os == 'ubuntu-latest' && matrix.node == '20.x' }}
-        uses: actions/dependency-review-action@v3
+        uses: actions/dependency-review-action@v4
       - uses: pnpm/action-setup@v2
         with:
           version: 8