From 3e30085d3824445f183f25097bb91b49a4443d49 Mon Sep 17 00:00:00 2001 From: Chia Automation Date: Fri, 28 Aug 2026 20:01:40 +0000 Subject: [PATCH 1/3] Update dep-review --- .github/workflows/dependency-review.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 130d7398..34d46b80 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -17,10 +17,10 @@ jobs: runs-on: ubuntu-latest steps: - name: "Checkout Repository" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: "Dependency Review" - uses: actions/dependency-review-action@v4 + uses: actions/dependency-review-action@v5.0.0 with: allow-dependencies-licenses: pkg:pypi/pyinstaller deny-licenses: AGPL-1.0-only, AGPL-1.0-or-later, AGPL-1.0-or-later, AGPL-3.0-or-later, GPL-1.0-only, GPL-1.0-or-later, GPL-2.0-only, GPL-2.0-or-later, GPL-3.0-only, GPL-3.0-or-later From eda86a42e798aa0a24964cc2e8dd7456419b5fdd Mon Sep 17 00:00:00 2001 From: Chia Automation Date: Fri, 28 Aug 2026 20:01:40 +0000 Subject: [PATCH 2/3] Update commit-signing --- .github/workflows/check-commit-signing.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/check-commit-signing.yml b/.github/workflows/check-commit-signing.yml index bb193697..333ece39 100644 --- a/.github/workflows/check-commit-signing.yml +++ b/.github/workflows/check-commit-signing.yml @@ -10,6 +10,9 @@ on: branches: - "**" +permissions: + contents: read + concurrency: group: ${{ github.event_name == 'pull_request' && format('{0}-{1}', github.workflow_ref, github.event.pull_request.number) || github.run_id }} cancel-in-progress: true @@ -22,7 +25,7 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: fetch-depth: 0 From 0f474510252f38a64f2e945a599a3b90294bf251 Mon Sep 17 00:00:00 2001 From: Chia Automation Date: Fri, 28 Aug 2026 20:01:41 +0000 Subject: [PATCH 3/3] Update dependabot --- .github/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 3e9fe237..d343120d 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -35,7 +35,7 @@ updates: - dependencies - python - "Changed" - reviewers: ["emlowe", "altendky"] + reviewers: ["emlowe"] - package-ecosystem: "github-actions" directories: ["/", ".github/actions/*"]