chore(deps): bump the npm-dependencies group across 4 directories with 3 updates #785
dependabot[bot]__pull-request-ci.yml
on: pull_request
Matrix: ci / linter / 🛡️ CodeQL Analysis
ci
/
...
/
🧹 Lint Code Base
1m 43s
ci
/
...
/
prepare-actions-linting
6s
ci
/
...
/
📦 Prepare configuration
4s
ci
/
...
/
📦 Prepare configuration
2s
ci
/
...
/
prepare-variables
5s
Matrix: ci / Test action "package" / test
ci
/
...
/
🛡️ CodeQL Analysis
1m 7s
ci
/
...
/
🛡️ Dependency Review
43s
ci
/
...
/
🛡️ CodeQL Analysis
1m 7s
ci
/
...
/
🛡️ Dependency Review
58s
Matrix: ci / Test action "dependencies-cache" / test
Matrix: ci / Test action "get-package-manager" / test
Matrix: ci / Test action "has-installed-dependencies" / test
Matrix: ci / Test action "setup-node" / test
ci
/
...
/
⚙️ Setup
9s
ci
/
...
/
⚙️ Setup
8s
Matrix: ci / Test workflow "continuous-integration" / Arrange - Build container image for CI workflow / build-images
Matrix: ci / Test action "package" / assert-package-tarball
ci
/
...
/
🚀 Release
9s
ci
/
...
/
🏗️ Build
49s
ci
/
...
/
👕 Lint
49s
ci
/
...
/
🏗️ Build
42s
ci
/
...
/
👕 Lint
48s
ci
/
...
/
Publish images manifests
23s
ci
/
...
/
🧪 Test
52s
ci
/
...
/
🧪 Test
1m 0s
ci
/
...
/
📦 Prepare configuration
5s
ci
/
...
/
📦 Prepare configuration
3s
ci
/
...
/
🛡️ CodeQL Analysis
1m 2s
ci
/
...
/
🛡️ Dependency Review
54s
ci
/
...
/
🛡️ CodeQL Analysis
1m 1s
ci
/
...
/
🛡️ Dependency Review
54s
ci
/
...
/
Assert - Ensure build artifact has been uploaded (without container)
ci
/
...
/
⚙️ Setup
28s
ci
/
...
/
⚙️ Setup
34s
ci
/
...
/
🏗️ Build
28s
ci
/
...
/
👕 Lint
49s
ci
/
...
/
🏗️ Build
38s
ci
/
...
/
👕 Lint
51s
ci
/
...
/
🧪 Test
54s
ci
/
...
/
🧪 Test
52s
ci
/
...
/
Assert - Ensure build artifact has been uploaded (with container advanced)
0s
ci
/
...
/
Assert - Ensure build artifact has been uploaded (with container)
Annotations
4 errors and 14 warnings
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (without container) / 🛡️ Dependency Review
Dependency review detected vulnerable packages.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (without container and GitHub reports) / 🛡️ Dependency Review
Dependency review detected vulnerable packages.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (with container and advanced options) / 🛡️ Dependency Review
Dependency review detected vulnerable packages.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (with container) / 🛡️ Dependency Review
Dependency review detected vulnerable packages.
|
|
ci / linter / 🛡️ CodeQL Analysis (actions)
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
OpenSSF Scorecard Warning
npm/end-of-stream has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.
|
|
ci / Test workflow "continuous-integration" / Arrange - Build container image for CI workflow / Build image ci-npm for linux/amd64
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: int128/docker-build-cache-config-action@dcc94fc867b7444b6c25adaab482961d3acc139a, reproducible-containers/buildkit-cache-dance@1b8ab18fbda5ad3646e3fcc9ed9dd41ce2f297b4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (without container) / 🛡️ CodeQL Analysis
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
OpenSSF Scorecard Warning
npm/end-of-stream has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (without container and GitHub reports) / 🛡️ CodeQL Analysis
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
|
|
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (with container) / 🛡️ CodeQL Analysis
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
OpenSSF Scorecard Warning
npm/end-of-stream has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.
|
|
OpenSSF Scorecard Warning
npm/end-of-stream has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.
|
|
ci / Test workflow "continuous-integration" / Act - Run the continuous integration workflow (with container and advanced options) / 🛡️ CodeQL Analysis
1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.
|
|
|
|
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
hoverkraft-tech~ci-github-nodejs~EM8QAU.dockerbuild
|
49 KB |
sha256:5e7283183b19cfe3453e31c243122f3f0fd2879ba1c9f418c3e76134608ea630
|
|
|
package-tarball-25848395641-1-d7446e7a-ddc5-4185-a2db-bd65e2f173f5.tgz
|
857 Bytes |
sha256:2a45bb4da61bfd1295bf8fa431a76d06e4b33273ca40fb9f7628e8b7f7d838f6
|
|
|
package-tarball-test-npm-25848395641-1.tgz
|
857 Bytes |
sha256:2a45bb4da61bfd1295bf8fa431a76d06e4b33273ca40fb9f7628e8b7f7d838f6
|
|
|
package-tarball-test-pnpm-25848395641-1.tgz
|
849 Bytes |
sha256:b7092c534db138e497b84b522354cf16830dc4fa435377c708d3a562ae86db4b
|
|
|
package-tarball-test-pnpm-package-manager-25848395641-1.tgz
|
873 Bytes |
sha256:50eac5f9a021a046794f06e0b45a49a5687e9724c06fd4c4434aef03e9607e90
|
|
|
package-tarball-test-yarn-25848395641-1.tgz
|
312 Bytes |
sha256:b663eec6186a77cca445a0144c2f9c62e00ddc03d3c2587eb1a38350f96ffec4
|
|
|
setup-build-25848395641-1ddy8s
|
177 Bytes |
sha256:d70bc578f1ba78648e41fdbd69a6438e5c987dbc49d948456315e0367139b409
|
|
|
setup-build-25848395641-bhmb4m
|
275 Bytes |
sha256:a3bc0714d86023ed69bdab1e8fc93c691aa9ca987b28a93781eb76a3b9e9166a
|
|
|
setup-build-25848395641-d2h7u5
|
275 Bytes |
sha256:bea4e08d4d2e117e33600d25a0aedbc8d7c9030a2b96663603bcde19d08d58bd
|
|
|
setup-build-25848395641-ga84bu
|
177 Bytes |
sha256:42fcea5f424c8b7b2b713c4c03475031fa95c0685bf8409a08450241d4adc3aa
|
|