Переглянути джерело

Merge pull request #1793 from PrivateBin/dependabot/github_actions/dawidd6/action-download-artifact-15

Bump dawidd6/action-download-artifact from 14 to 15
El RIDO 5 місяців тому
батько
коміт
65c73dbf93
2 змінених файлів з 6 додано та 1 видалено
  1. 1 1
      .github/workflows/test-results.yml
  2. 5 0
      composer.json

+ 1 - 1
.github/workflows/test-results.yml

@@ -25,7 +25,7 @@ jobs:
 
     steps:
        - name: Download and Extract Artifacts
-         uses: dawidd6/action-download-artifact@5c98f0b039f36ef966fdb7dfa9779262785ecb05
+         uses: dawidd6/action-download-artifact@fe9d59ce33ce92db8a6ac90b2c8be6b6d90417c8
          with:
           run_id: ${{ github.event.workflow_run.id }}
           path: artifacts

+ 5 - 0
composer.json

@@ -43,6 +43,11 @@
 		}
 	},
 	"config" : {
+		"audit": {
+			"ignore": {
+				"CVE-2025-45769": "disputed on the basis that key lengths are expected to be set by an application, not by this library"
+			}
+		},
 		"autoloader-suffix" : "DontChange",
 		"optimize-autoloader": true,
 		"preferred-install": "dist",