Skip to content

:dependabot: github-actions(deps): Bump astral-sh/setup-uv from 8.3.2 to 9.0.0 #519

:dependabot: github-actions(deps): Bump astral-sh/setup-uv from 8.3.2 to 9.0.0

:dependabot: github-actions(deps): Bump astral-sh/setup-uv from 8.3.2 to 9.0.0 #519

name: Dependency review
on:
pull_request:
branches:
- master
- "**dev"
permissions: {}
jobs:
dependency-review:
name: Dependency review
runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: write
steps:
- name: Checkout
id: checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- name: Dependency Review
id: dependency_review
uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
with:
comment-summary-in-pr: true
fail-on-severity: critical