[Snyk] Security upgrade cocoapods from 1.11.3 to 1.12.0 #71
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| pull_request_target: | |
| types: [opened] | |
| push: | |
| name: Pull request automation | |
| jobs: | |
| pull-request-automation: | |
| runs-on: ubuntu-latest | |
| if: ${{ github.repository == 'WordPress/gutenberg' }} | |
| strategy: | |
| matrix: | |
| node: ['16'] | |
| steps: | |
| # Checkout defaults to using the branch which triggered the event, which | |
| # isn't necessarily `trunk` (e.g. in the case of a merge). | |
| - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 | |
| with: | |
| ref: trunk | |
| - name: Use desired version of Node.js | |
| uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0 | |
| with: | |
| node-version: ${{ matrix.node }} | |
| - name: Cache NPM packages | |
| uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1 | |
| with: | |
| # npm cache files are stored in `~/.npm` on Linux/macOS | |
| path: ~/.npm | |
| key: ${{ runner.os }}-node-${{ matrix.node }}-npm-pr-automation-cache-${{ hashFiles('**/package-lock.json') }} | |
| # Changing into the action's directory and running `npm install` is much | |
| # faster than a full project-wide `npm ci`. | |
| - name: Install NPM dependencies | |
| run: npm install | |
| working-directory: packages/project-management-automation | |
| - uses: ./packages/project-management-automation | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} |