Merge 77b00e4df0 into 4a8376e001

Merge pull request #969 from crazy-max/fix-zizmor
ci(zizmor): update rules
2026-05-12 05:18:07 +00:00 · 2026-04-15 22:03:27 +00:00 · 2026-04-15 14:25:37 -07:00 · 2026-04-15 16:01:48 +02:00 · 2026-04-06 22:59:33 +00:00
3 changed files with 5 additions and 6 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -19,6 +19,8 @@ updates:
      interval: "daily"
    cooldown:
      default-days: 2
+      exclude:
+        - "@docker/actions-toolkit"
    versioning-strategy: "increase"
    groups:
      aws-sdk-dependencies:
--- a/.github/zizmor.yml
+++ b/.github/zizmor.yml
@ -1,3 +0,0 @@
-rules:
-  secrets-outside-env: # FIXME: remove this rule when zizmor 1.24.0 is released, fixing the right persona attached to this rule: https://github.com/zizmorcore/zizmor/pull/1783
-    disable: true
--- a/yarn.lock
+++ b/yarn.lock
@ -5570,8 +5570,8 @@ __metadata:
  linkType: hard

 "vite@npm:^6.0.0 || ^7.0.0":
-  version: 7.3.1
-  resolution: "vite@npm:7.3.1"
+  version: 7.3.2
+  resolution: "vite@npm:7.3.2"
  dependencies:
    esbuild: "npm:^0.27.0"
    fdir: "npm:^6.5.0"
@ -5620,7 +5620,7 @@ __metadata:
      optional: true
  bin:
    vite: bin/vite.js
-  checksum: 10/62e48ffa4283b688f0049005405a004447ad38ffc99a0efea4c3aa9b7eed739f7402b43f00668c0ee5a895b684dc953d62f0722d8a92c5b2f6c95f051bceb208
+  checksum: 10/c5f7a9a60011c41c836cedf31c8ee7624102aff9b6a7f3aab2ff47639721bba0916f81994c3a3ea6577a16c4f0dfee1e7dbd244e0da8edd5954e3c6d48daaaa2
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
dependabot[bot]	badd8404f5	Merge `77b00e4df0` into `4a8376e001`	2026-04-15 22:03:27 +00:00
Tõnis Tiigi	4a8376e001	Merge pull request #969 from crazy-max/fix-zizmor Some checks failed codeql / analyze (push) Failing after 1m52s Details test / test (push) Successful in 1m0s Details validate / prepare (push) Successful in 14s Details zizmor / zizmor (push) Failing after -1s Details validate / validate (push) Successful in 49s Details ci(zizmor): update rules	2026-04-15 14:25:37 -07:00
CrazyMax	d0fa2cf570	ci(zizmor): update rules Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-04-15 16:01:48 +02:00
dependabot[bot]	77b00e4df0	build(deps): bump vite from 7.3.1 to 7.3.2 Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.1 to 7.3.2. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 7.3.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-06 22:59:33 +00:00