diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 6af960b..814b757 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -6,6 +6,13 @@ updates: interval: 'weekly' ignore: - dependency-name: 'crate-ci/typos' + - dependency-name: 'actions/dependency-review-action' + versions: + # https://github.com/actions/dependency-review-action/issues/759 + - '4.3.1' + - '4.3.0' + # https://github.com/actions/dependency-review-action/issues/493 + - '3.0.5' groups: determinatesystems-actions: patterns: diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index a0a8ea2..2c7d379 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -13,7 +13,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v4 + uses: actions/dependency-review-action@v4.2.5 with: # https://spdx.org/licenses/ allow-licenses: MIT, BSD-3-Clause, BSD-2-Clause, 0BSD, Unlicense, ISC, Apache-2.0, CC-BY-4.0