From 32400df12a1157970a514d4bc23357b5c10e76b4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Nov 2023 13:21:12 +0000
Subject: [PATCH] chore(deps): bump actions/dependency-review-action from 3.1.0
to 3.1.1
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/v3.1.0...v3.1.1)
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
---
.github/workflows/dependency-review.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 8a8422673..4734471b2 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -20,7 +20,7 @@ jobs:
- name: GitHub dependency vulnerability check
if: ${{ github.event_name == 'pull_request_target' }}
- uses: actions/dependency-review-action@v3.1.0
+ uses: actions/dependency-review-action@v3.1.1
with:
fail-on-severity: high