Merge 85f6198a91 into f8607cc714

Merge pull request #278 from crazy-max/fix-zizmor
ci(zizmor): update rules
2026-05-10 20:42:14 +00:00 · 2026-04-15 22:04:45 +00:00 · 2026-04-15 14:26:22 -07:00 · 2026-04-15 16:02:59 +02:00 · 2026-03-14 05:54:16 +00:00 · 2026-03-14 05:53:20 +00:00
5 changed files with 8 additions and 9 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -19,6 +19,8 @@ updates:
      interval: "daily"
    cooldown:
      default-days: 2
+      exclude:
+        - "@docker/actions-toolkit"
    versioning-strategy: "increase"
    allow:
      - dependency-type: "production"
--- a/.github/zizmor.yml
+++ b/.github/zizmor.yml
@ -1,3 +0,0 @@
-rules:
-  secrets-outside-env: # FIXME: remove this rule when zizmor 1.24.0 is released, fixing the right persona attached to this rule: https://github.com/zizmorcore/zizmor/pull/1783
-    disable: true
--- a/dist/index.js
+++ b/dist/index.js
--- a/dist/index.js.map
+++ b/dist/index.js.map
--- a/yarn.lock
+++ b/yarn.lock
@ -4431,9 +4431,9 @@ __metadata:
  linkType: hard

 "undici@npm:^6.23.0":
-  version: 6.23.0
-  resolution: "undici@npm:6.23.0"
-  checksum: 10/56950995e7b628e62c996430445d17995ca9b70f6f2afe760a63da54205660d968bd08f0741b6f4fb008f40aa35c69cce979cd96ced399585d8c897a76a4f1d1
+  version: 6.24.0
+  resolution: "undici@npm:6.24.0"
+  checksum: 10/fdb636cd583c9f12736b32ef088a2d9da9398fc0b80805b519137b3d8e5fcaa6e4c25630414df678aa9912e7f9c1c49911645592da07abda2e1094398175e9da
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
dependabot[bot]	5ce3e0ac87	Merge `85f6198a91` into `f8607cc714`	2026-04-15 22:04:45 +00:00
Tõnis Tiigi	f8607cc714	Merge pull request #278 from crazy-max/fix-zizmor ci(zizmor): update rules	2026-04-15 14:26:22 -07:00
CrazyMax	12ef543ef5	ci(zizmor): update rules Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-04-15 16:02:59 +02:00
github-actions[bot]	85f6198a91	chore: update generated content	2026-03-14 05:54:16 +00:00
dependabot[bot]	21a6df35bd	build(deps): bump undici from 6.23.0 to 6.24.0 Bumps [undici](https://github.com/nodejs/undici) from 6.23.0 to 6.24.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v6.23.0...v6.24.0) --- updated-dependencies: - dependency-name: undici dependency-version: 6.24.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-14 05:53:20 +00:00