From 959ab9c5520627fc373bd06b6c89998bf3f92ffc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 14 May 2026 03:05:04 +0000 Subject: [PATCH] Bump the github-actions group with 2 updates Bumps the github-actions group with 2 updates: [actions/dependency-review-action](https://github.com/actions/dependency-review-action) and [davelosert/vitest-coverage-report-action](https://github.com/davelosert/vitest-coverage-report-action). Updates `actions/dependency-review-action` from 4.9.0 to 5.0.0 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/v4.9.0...v5.0.0) Updates `davelosert/vitest-coverage-report-action` from 2.11.2 to 2.12.0 - [Release notes](https://github.com/davelosert/vitest-coverage-report-action/releases) - [Changelog](https://github.com/davelosert/vitest-coverage-report-action/blob/main/release.config.js) - [Commits](https://github.com/davelosert/vitest-coverage-report-action/compare/3c50566c523e04813df28de8f7c48dd97d663f1c...02f3c2e641286b7fa308cd3e430783103ce6103b) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: davelosert/vitest-coverage-report-action dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/dependency-review.yml | 2 +- .github/workflows/test.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 30814d3f6..b5cf1f570 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -19,7 +19,7 @@ jobs: uses: actions/checkout@v6.0.2 - name: Dependency Review - uses: actions/dependency-review-action@v4.9.0 + uses: actions/dependency-review-action@v5.0.0 with: fail-on-severity: critical comment-summary-in-pr: always diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 9c3010b09..cfd881f35 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -69,7 +69,7 @@ jobs: if: steps.vitest.outcome == 'success' && hashFiles('coverage/coverage-summary.json') != '' # v2.9.0 - uses: davelosert/vitest-coverage-report-action@3c50566c523e04813df28de8f7c48dd97d663f1c + uses: davelosert/vitest-coverage-report-action@02f3c2e641286b7fa308cd3e430783103ce6103b with: json-summary-path: "./coverage/coverage-summary.json" json-final-path: "./coverage/coverage-final.json"