chore: upgrade markdown-it to ^14.3.2 to address GHSA-253c-mchw-3w2r #2023
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test | |
| on: | |
| pull_request: | |
| branches: ["main"] | |
| jobs: | |
| vulnerability-automation: | |
| name: Vulnerability automation | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Test reconciliation behavior | |
| run: .github/scripts/test-vulnerability-triage.sh | |
| - name: Test CVE remediation discovery | |
| run: .github/scripts/test-cve-remediation.sh | |
| - name: Test Zoekt sync automation | |
| run: .github/scripts/testZoektSync.sh | |
| - name: Test entrypoint install ID behavior | |
| run: .github/scripts/test-entrypoint-install-id.sh | |
| test: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| with: | |
| submodules: "true" | |
| - name: Use Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '20.x' | |
| - name: Install | |
| run: yarn install --frozen-lockfile | |
| - name: Test | |
| # The CLI has separate packed-artifact and Node-compatibility gates in setup-wizard-e2e. | |
| # Keep the application workspaces on their existing runtime here. | |
| run: yarn workspaces foreach --all --topological --exclude setup-sourcebot --exclude 'root-workspace-*' run test |