From bbbabdae9e547a137332628122b7cfb68fe2d025 Mon Sep 17 00:00:00 2001 From: Chia Automation Date: Fri, 21 Aug 2026 16:12:04 +0000 Subject: [PATCH 1/3] Update dep-review --- .github/workflows/dependency-review.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 130d7398..34d46b80 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -17,10 +17,10 @@ jobs: runs-on: ubuntu-latest steps: - name: "Checkout Repository" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: "Dependency Review" - uses: actions/dependency-review-action@v4 + uses: actions/dependency-review-action@v5.0.0 with: allow-dependencies-licenses: pkg:pypi/pyinstaller deny-licenses: AGPL-1.0-only, AGPL-1.0-or-later, AGPL-1.0-or-later, AGPL-3.0-or-later, GPL-1.0-only, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later From 7d42875c2c91625a9df976eeec7f05c3cbb5eb21 Mon Sep 17 00:00:00 2001 From: Chia Automation Date: Fri, 21 Aug 2026 16:12:05 +0000 Subject: [PATCH 2/3] Update commit-signing --- .github/workflows/check-commit-signing.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/check-commit-signing.yml b/.github/workflows/check-commit-signing.yml index bb193697..333ece39 100644 --- a/.github/workflows/check-commit-signing.yml +++ b/.github/workflows/check-commit-signing.yml @@ -10,6 +10,9 @@ on: branches: - "**" +permissions: + contents: read + concurrency: group: ${{ github.event_name == 'pull_request' && format('{0}-{1}', github.workflow_ref, github.event.pull_request.number) || github.run_id }} cancel-in-progress: true @@ -22,7 +25,7 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: fetch-depth: 0 From 4b3b81d3c0ec4ff761c00063631766e9003aeb51 Mon Sep 17 00:00:00 2001 From: Chia Automation Date: Fri, 21 Aug 2026 16:12:05 +0000 Subject: [PATCH 3/3] Update dependabot --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 3e9fe237..d343120d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -35,7 +35,7 @@ updates: - dependencies - python - "Changed" - reviewers: ["emlowe", "altendky"] + reviewers: ["emlowe"] - package-ecosystem: "github-actions" directories: ["/", ".github/actions/*"]