.github/workflows/dependency-review.yml - main - githubmirror/webpack

.github/workflows/dependency-review.yml

77 строк2 KB

dependabot[bot]

chore(deps): bump actions/checkout in the dependencies group (#21478)

22 июл 2026, 18:23

22 июл 2026, 18:2306e8dbf

name: Dependency Review

on:
  pull_request:

permissions:
  contents: read

jobs:
  dependency-review:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

      - name: Dependency Review
        uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
        with:
          allow-dependencies-licenses: |
            pkg:npm/@cspell/dict-django,
            pkg:npm/@cspell/dict-en-common-misspellings,
            pkg:npm/flatted,
            pkg:npm/parse-imports,
            pkg:npm/prettier,
            pkg:npm/type-fest,
            pkg:npm/abbrev,
            pkg:npm/@pkgjs/parseargs,
            pkg:npm/@apidevtools/json-schema-ref-parser,
            pkg:npm/cookie-signature,
            pkg:npm/ansis,
            pkg:npm/strtok3,
            pkg:npm/@sinclair/typebox,
            pkg:npm/fs-monkey
          allow-licenses: |
            0BSD,
            AFL-1.1,
            AFL-1.2,
            AFL-2.0,
            AFL-2.1,
            AFL-3.0,
            AGPL-3.0-only,
            AGPL-3.0-or-later,
            Apache-1.1,
            Apache-2.0,
            APSL-2.0,
            Artistic-2.0,
            BlueOak-1.0.0,
            BSD-2-Clause,
            BSD-3-Clause-Clear,
            BSD-3-Clause,
            BSL-1.0,
            CAL-1.0,
            CC-BY-3.0,
            CC-BY-4.0,
            CC-BY-SA-4.0,
            CDDL-1.0,
            CC0-1.0,
            EPL-2.0,
            GPL-2.0-only,
            GPL-2.0-or-later,
            GPL-2.0,
            GPL-3.0-or-later,
            ISC,
            LGPL-2.0-only,
            LGPL-2.1-only,
            LGPL-2.1-or-later,
            LGPL-2.1,
            LGPL-3.0-only,
            LGPL-3.0,
            MIT,
            MPL-2.0,
            OFL-1.1,
            PSF-2.0,
            Python-2.0,
            Python-2.0.1,
            Unicode-DFS-2016,
            Unlicense