Merge 331c3d742d into f8607cc714

Merge pull request #278 from crazy-max/fix-zizmor
ci(zizmor): update rules
2026-05-10 12:32:07 +00:00 · 2026-04-15 22:04:36 +00:00 · 2026-04-15 14:26:22 -07:00 · 2026-04-15 16:02:59 +02:00 · 2026-03-27 00:22:58 +00:00
3 changed files with 5 additions and 6 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -19,6 +19,8 @@ updates:
      interval: "daily"
    cooldown:
      default-days: 2
+      exclude:
+        - "@docker/actions-toolkit"
    versioning-strategy: "increase"
    allow:
      - dependency-type: "production"
--- a/.github/zizmor.yml
+++ b/.github/zizmor.yml
@ -1,3 +0,0 @@
-rules:
-  secrets-outside-env: # FIXME: remove this rule when zizmor 1.24.0 is released, fixing the right persona attached to this rule: https://github.com/zizmorcore/zizmor/pull/1783
-    disable: true
--- a/yarn.lock
+++ b/yarn.lock
@ -2734,8 +2734,8 @@ __metadata:
  linkType: hard

 "handlebars@npm:^4.7.8":
-  version: 4.7.8
-  resolution: "handlebars@npm:4.7.8"
+  version: 4.7.9
+  resolution: "handlebars@npm:4.7.9"
  dependencies:
    minimist: "npm:^1.2.5"
    neo-async: "npm:^2.6.2"
@ -2747,7 +2747,7 @@ __metadata:
      optional: true
  bin:
    handlebars: bin/handlebars
-  checksum: 10/bd528f4dd150adf67f3f857118ef0fa43ff79a153b1d943fa0a770f2599e38b25a7a0dbac1a3611a4ec86970fd2325a81310fb788b5c892308c9f8743bd02e11
+  checksum: 10/e755433d652e8a15fc02f83d7478e652359e7a4d354c4328818853ed4f8a39d4a09e1d22dad3c7213c5240864a65b3c840970b8b181745575dd957dd258f2b8d
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
dependabot[bot]	2f1eb88d6a	Merge `331c3d742d` into `f8607cc714`	2026-04-15 22:04:36 +00:00
Tõnis Tiigi	f8607cc714	Merge pull request #278 from crazy-max/fix-zizmor ci(zizmor): update rules	2026-04-15 14:26:22 -07:00
CrazyMax	12ef543ef5	ci(zizmor): update rules Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-04-15 16:02:59 +02:00
dependabot[bot]	331c3d742d	build(deps): bump handlebars from 4.7.8 to 4.7.9 Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.8 to 4.7.9. - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9) --- updated-dependencies: - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-27 00:22:58 +00:00