Skip to content

Upgrade: [dependabot] - bump mikefarah/yq from 4.52.2 to 4.52.4 #70

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
anthony-nhs merged 2 commits into from
Feb 20, 2026
Merged

Upgrade: [dependabot] - bump mikefarah/yq from 4.52.2 to 4.52.4 #70

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
87492dd
Upgrade: [dependabot] - bump mikefarah/yq from 4.52.2 to 4.52.4
dependabot[bot] Feb 19, 2026
4b6a7fe
update trivyignore
anthony-nhs Feb 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/quality-checks.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -182,7 +182,7 @@ jobs:
fi
touch trivy.yaml
- name: Update trivy config to include dev dependencies
uses: mikefarah/yq@2be0094729a1006f61e8339ce9934bfb3cbb549f
uses: mikefarah/yq@5a7e72a743649b1b3a47d1a1d8214f3453173c51
with:
cmd: yq -i '.pkg.include-dev-deps = true' 'trivy.yaml'
- name: convert python dependencies to requirements.txt
Expand Down
8 changes: 7 additions & 1 deletion .trivyignore.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,12 @@ vulnerabilities:
- id: CVE-2026-25547
statement: isaacs/brace-expansion vulnerability accepted as risk - dependency of semantic-release
expired_at: 2026-03-01
- id: CVE-2026-0775
- id: CVE-2026-0775
statement: npm vulnerability accepted as risk - dependency of semantic-release
expired_at: 2026-03-01
- id: CVE-2026-26996
statement: minimatch vulnerability accepted as risk
expired_at: 2026-06-01
- id: CVE-2026-26960
statement: tar vulnerability accepted as risk
expired_at: 2026-06-01