chore(deps): bump the npm-dependencies group across 4 directories with 3 updates #772
dependabot[bot]__pull-request-ci.yml
on: pull_request
Matrix: ci / linter / 🛡️ CodeQL Analysis
ci
/
...
/
🧹 Lint Code Base
1m 45s
ci
/
...
/
prepare-actions-linting
6s
ci
/
...
/
📦 Prepare configuration
2s
ci
/
...
/
📦 Prepare configuration
3s
ci
/
...
/
prepare-variables
4s
ci
/
...
/
🛡️ CodeQL Analysis
1m 4s
ci
/
...
/
🛡️ Dependency Review
40s
ci
/
...
/
🛡️ CodeQL Analysis
1m 3s
ci
/
...
/
🛡️ Dependency Review
42s
Matrix: ci / Test action "dependencies-cache" / test
Matrix: ci / Test action "get-package-manager" / test
Matrix: ci / Test action "has-installed-dependencies" / test
Matrix: ci / Test action "package" / test
Matrix: ci / Test action "setup-node" / test
ci
/
...
/
⚙️ Setup
7s
ci
/
...
/
⚙️ Setup
7s
Matrix: ci / Test workflow "continuous-integration" / Arrange - Build container image for CI workflow / build-images
ci
/
...
/
🏗️ Build
38s
ci
/
...
/
👕 Lint
57s
ci
/
...
/
🏗️ Build
2m 2s
ci
/
...
/
👕 Lint
1m 55s
ci
/
...
/
Publish images manifests
19s
ci
/
...
/
🧪 Test
1m 7s
ci
/
...
/
🧪 Test
1m 5s
ci
/
...
/
📦 Prepare configuration
6s
ci
/
...
/
📦 Prepare configuration
4s
ci
/
...
/
🛡️ CodeQL Analysis
1m 2s
ci
/
...
/
🛡️ Dependency Review
51s
ci
/
...
/
🛡️ CodeQL Analysis
1m 2s
ci
/
...
/
🛡️ Dependency Review
37s
ci
/
...
/
Assert - Ensure build artifact has been uploaded (without container)
0s
ci
/
...
/
⚙️ Setup
29s
ci
/
...
/
⚙️ Setup
26s
ci
/
...
/
🏗️ Build
33s
ci
/
...
/
👕 Lint
44s
ci
/
...
/
🏗️ Build
34s
ci
/
...
/
👕 Lint
46s
ci
/
...
/
🧪 Test
53s
ci
/
...
/
🧪 Test
59s
ci
/
...
/
Assert - Ensure build artifact has been uploaded (with container advanced)
0s
ci
/
...
/
Assert - Ensure build artifact has been uploaded (with container)
0s
Annotations
4 errors and 20 warnings
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (without container) / 🛡️ Dependency Review
Dependency review detected vulnerable packages.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (without container and GitHub reports) / 🛡️ Dependency Review
Dependency review detected vulnerable packages.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (with container and advanced options) / 🛡️ Dependency Review
Dependency review detected vulnerable packages.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (with container) / 🛡️ Dependency Review
Dependency review detected vulnerable packages.
|
|
ci / linter / 🛡️ CodeQL Analysis (actions)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (without container) / 🛡️ CodeQL Analysis
Starting April 2026, the CodeQL Action will skip computing file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses.
To opt out of this change, set the `CODEQL_ACTION_FILE_COVERAGE_ON_PRS` environment variable to `true`. Alternatively, create a custom repository property with the name `github-codeql-file-coverage-on-prs` and the type "True/false", then set this property to `true` in the repository's settings.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (without container) / 🛡️ CodeQL Analysis
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (without container) / 🛡️ Dependency Review
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
OpenSSF Scorecard Warning
npm/end-of-stream has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (without container and GitHub reports) / 🛡️ Dependency Review
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
OpenSSF Scorecard Warning
npm/end-of-stream has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (without container and GitHub reports) / 🛡️ CodeQL Analysis
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
|
|
|
|
ci / Test workflow "continuous-integration" / Arrange - Build container image for CI workflow / Build image ci-npm for linux/amd64
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: int128/docker-build-cache-config-action@b9cedacdde83a8248370324699c840b9a383d965, reproducible-containers/buildkit-cache-dance@1b8ab18fbda5ad3646e3fcc9ed9dd41ce2f297b4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (with container and advanced options) / 🛡️ Dependency Review
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
OpenSSF Scorecard Warning
npm/end-of-stream has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (with container) / 🛡️ Dependency Review
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
OpenSSF Scorecard Warning
npm/end-of-stream has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (with container and advanced options) / 🛡️ CodeQL Analysis
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (with container) / 🛡️ CodeQL Analysis
Starting April 2026, the CodeQL Action will skip computing file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses.
To opt out of this change, set the `CODEQL_ACTION_FILE_COVERAGE_ON_PRS` environment variable to `true`. Alternatively, create a custom repository property with the name `github-codeql-file-coverage-on-prs` and the type "True/false", then set this property to `true` in the repository's settings.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (with container) / 🛡️ CodeQL Analysis
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
|
|
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
hoverkraft-tech~ci-github-nodejs~5GSQH8.dockerbuild
|
60.5 KB |
sha256:29542739e81f10a407f04b55e9b6e59f6c94df5095df26b5735f504bbe2adfa2
|
|
|
setup-build-25536852555-2hypky
|
177 Bytes |
sha256:3a1483b972464c1a551af37b146884368690fba7cdb5a00b40a493cf2713d034
|
|
|
setup-build-25536852555-bpog3h
|
275 Bytes |
sha256:ed4e6c3fce4505cbc6a30586c16430387bf806224450889d95d3aef073edcbda
|
|
|
setup-build-25536852555-n0bcy8
|
177 Bytes |
sha256:0f55b60e112a8b6ee03396943789899103b35c0a62a29c167148234c0e67bab2
|
|
|
setup-build-25536852555-uxov5j
|
275 Bytes |
sha256:0826ccdb442da25dd8bf96a1e4a7f43a46ab02fa5bc26123496e2786e956a94e
|
|
|
test-for-ci-with-npm-0.1.0.tgz
|
857 Bytes |
sha256:372aa1fb0ae537a569939fbc17f8528e7057e94ade6193f198ee49e2b92e2f5f
|
|
|
test-for-ci-with-pnpm-0.1.0.tgz
|
850 Bytes |
sha256:d90486005e4ede28826b98237de9d22b0c6b6ea677eb91a28f094ffe7ed88672
|
|
|
test-for-ci-with-pnpm-in-package-json-0.1.0.tgz
|
873 Bytes |
sha256:89f87dcec6e143eb399b1a723fd19d66c8ac74d9bbb4074bc2530bf30a1b5038
|
|
|
test-for-ci-with-yarn-0.1.0.tgz
|
313 Bytes |
sha256:7636c95caa06158637d7c76669563f69a8e43ffcf271ea1e9f9409dcc4d43646
|
|