Dependabot pull-requests - Githubissues

silverstripe / .github

0 stars 2 forks source link

Dependabot pull-requests #256

Closed github-actions[bot] closed 4 months ago

github-actions[bot] commented 4 months ago

This is an automatically created issue used to list dependabot pull requests every 3 months.

It was created by the .github/workflows/dependabot-prs-issue.yml workflow in the silverstripe/.github repository.

Triage instructions (Silverstripe Ltd CMS Squad)

Put on the following labels:
- type/bug
- impact/low
Move this issue to the "Ready" column on our internal zenhub board
If there is an open issue for JS PRs, block this issue on it - those PRs may resolve some dependabot alerts

Dependabot pull-requests:

See the list of dependabot pull-requests in Rhino.

Make a quick determination as to whether the vulnerability fixed by the PR warrants using our security process
Merge these PRs if there are no merge-conflicts and CI is green
If there are conflicts or CI isn't green, get dependabot to recreate the PR
If there are still problems, manually resolve them and open your own PR
Backport anything that seems like it needs to be patched immediately

Dependabot alerts:

After all of the above have been completed and resolved, check for any outstanding dependabot alerts in the list below.

Make a quick determination as to whether any alerts warrant using our security process
Ignore or dismiss any alerts that aren't relevant
Try to resolve any relevant alerts which dependabot is unable to resolve automatically

Respositories with alerts:

GuySartorelli commented 4 months ago

Created just to test the new action works well. Closing.