From 73bd8aaca6ebd786cf0d891cf587b2655bac91e5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 12 May 2026 05:33:59 +0000 Subject: [PATCH] Bump actions/dependency-review-action from 4 to 5 Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4 to 5. - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 82507b5..1b00174 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -75,7 +75,7 @@ jobs: - name: Checkout uses: actions/checkout@v6 - name: Dependency review - uses: actions/dependency-review-action@v4 + uses: actions/dependency-review-action@v5 with: config-file: './.github/dependency-review-config.yml' allow-ghsas: GHSA-735f-pc8j-v9w8 # This is for a protobuf-java DoS vulnerability. This is only used in tests, and is thus not relevant.