Merge 3de63bf4d3 into 4a8376e001

Merge pull request #969 from crazy-max/fix-zizmor
ci(zizmor): update rules
2026-05-10 12:32:10 +00:00 · 2026-04-15 22:03:19 +00:00 · 2026-04-15 14:25:37 -07:00 · 2026-04-15 16:01:48 +02:00 · 2026-04-09 01:31:58 +00:00 · 2026-04-09 01:30:53 +00:00
5 changed files with 12 additions and 31 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -19,6 +19,8 @@ updates:
      interval: "daily"
    cooldown:
      default-days: 2
+      exclude:
+        - "@docker/actions-toolkit"
    versioning-strategy: "increase"
    groups:
      aws-sdk-dependencies:
--- a/.github/zizmor.yml
+++ b/.github/zizmor.yml
@ -1,3 +0,0 @@
-rules:
-  secrets-outside-env: # FIXME: remove this rule when zizmor 1.24.0 is released, fixing the right persona attached to this rule: https://github.com/zizmorcore/zizmor/pull/1783
-    disable: true
--- a/dist/index.js
+++ b/dist/index.js
--- a/dist/index.js.map
+++ b/dist/index.js.map
--- a/yarn.lock
+++ b/yarn.lock
@ -3596,7 +3596,7 @@ __metadata:
  languageName: node
  linkType: hard

-"fast-xml-parser@npm:5.5.8":
+"fast-xml-parser@npm:5.5.8, fast-xml-parser@npm:^5.0.7":
  version: 5.5.8
  resolution: "fast-xml-parser@npm:5.5.8"
  dependencies:
@ -3609,17 +3609,6 @@ __metadata:
  languageName: node
  linkType: hard

-"fast-xml-parser@npm:^5.0.7":
-  version: 5.3.6
-  resolution: "fast-xml-parser@npm:5.3.6"
-  dependencies:
-    strnum: "npm:^2.1.2"
-  bin:
-    fxparser: src/cli/cli.js
-  checksum: 10/03527ab0bdf49d960fdc8f6088cd0715c052e06b68b39459da87b1a1fbb3439a855b2d83cbf3c400e983b8e668b396296b072a4dd5c63403cf1e618c9326b6df
-  languageName: node
-  linkType: hard
-
 "fdir@npm:^6.5.0":
  version: 6.5.0
  resolution: "fdir@npm:6.5.0"
@ -5275,13 +5264,6 @@ __metadata:
  languageName: node
  linkType: hard

-"strnum@npm:^2.1.2":
-  version: 2.2.0
-  resolution: "strnum@npm:2.2.0"
-  checksum: 10/2969dbc8441f5af1b55db1d2fcea64a8f912de18515b57f85574e66bdb8f30ae76c419cf1390b343d72d687e2aea5aca82390f18b9e0de45d6bcc6d605eb9385
-  languageName: node
-  linkType: hard
-
 "strnum@npm:^2.2.0":
  version: 2.2.2
  resolution: "strnum@npm:2.2.2"
Author	SHA1	Message	Date
dependabot[bot]	fb7d3b943c	Merge `3de63bf4d3` into `4a8376e001`	2026-04-15 22:03:19 +00:00
Tõnis Tiigi	4a8376e001	Merge pull request #969 from crazy-max/fix-zizmor Some checks failed codeql / analyze (push) Failing after 1m52s Details test / test (push) Successful in 1m0s Details validate / prepare (push) Successful in 14s Details zizmor / zizmor (push) Failing after -1s Details validate / validate (push) Successful in 49s Details ci(zizmor): update rules	2026-04-15 14:25:37 -07:00
CrazyMax	d0fa2cf570	ci(zizmor): update rules Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-04-15 16:01:48 +02:00
github-actions[bot]	3de63bf4d3	chore: update generated content	2026-04-09 01:31:58 +00:00
dependabot[bot]	7cc00e02d0	build(deps): bump fast-xml-parser from 5.3.6 to 5.5.8 Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.3.6 to 5.5.8. - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.3.6...v5.5.8) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-version: 5.5.8 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-09 01:30:53 +00:00