Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jun 8, 2025

This PR contains the following updates:

Package Type Update Change
8hobbies/workflows action digest 71e7c31 -> a59ef2f

Configuration

📅 Schedule: Branch creation - "on Sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from xuhdev as a code owner June 8, 2025 22:51
@renovate renovate bot enabled auto-merge (squash) June 8, 2025 22:51
jobs:
lint:
uses: 8hobbies/workflows/.github/workflows/npm-lint.yml@71e7c31d67cdf9e3f03cb62c72951f48215e4c82
uses: 8hobbies/workflows/.github/workflows/npm-lint.yml@a59ef2fc12c42dbd69f1afd8502e163a9f5aabe2

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Copilot Autofix

AI 7 months ago

To fix the issue, add a permissions block at the root of the workflow file. Since this is a linting workflow, it likely only needs read access to the repository contents. The permissions block should be set to contents: read to minimize the permissions granted to the GITHUB_TOKEN.


Suggested changeset 1
.github/workflows/lint.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -16,2 +16,5 @@
 
+permissions:
+  contents: read
+
 on:
EOF
@@ -16,2 +16,5 @@

permissions:
contents: read

on:
Copilot is powered by AI and may make mistakes. Always verify output.
jobs:
run:
uses: 8hobbies/workflows/.github/workflows/npm-publish-dry-run.yml@71e7c31d67cdf9e3f03cb62c72951f48215e4c82
uses: 8hobbies/workflows/.github/workflows/npm-publish-dry-run.yml@a59ef2fc12c42dbd69f1afd8502e163a9f5aabe2

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Copilot Autofix

AI 7 months ago

To fix the issue, we need to add a permissions block to the workflow. This block should specify the least privileges required for the workflow to function correctly. Since the workflow uses a reusable workflow (npm-publish-dry-run.yml), we should consult its documentation or analyze its functionality to determine the required permissions. If no specific permissions are documented, we can start with a minimal set, such as contents: read.

The permissions block should be added at the root level of the workflow file to apply to all jobs, including the reusable workflow.


Suggested changeset 1
.github/workflows/publish-dry-run.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/publish-dry-run.yml b/.github/workflows/publish-dry-run.yml
--- a/.github/workflows/publish-dry-run.yml
+++ b/.github/workflows/publish-dry-run.yml
@@ -16,2 +16,5 @@
 
+permissions:
+  contents: read
+
 on:
EOF
@@ -16,2 +16,5 @@

permissions:
contents: read

on:
Copilot is powered by AI and may make mistakes. Always verify output.
jobs:
test:
uses: 8hobbies/workflows/.github/workflows/npm-runtime.yml@71e7c31d67cdf9e3f03cb62c72951f48215e4c82
uses: 8hobbies/workflows/.github/workflows/npm-runtime.yml@a59ef2fc12c42dbd69f1afd8502e163a9f5aabe2

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Copilot Autofix

AI 7 months ago

To fix the issue, add a permissions block at the root level of the workflow. This block will define the minimal permissions required for the workflow. Since the specific permissions required by the reusable workflow are not detailed, we will start with the most restrictive permissions (contents: read) and adjust as needed based on the workflow's functionality.

The permissions block should be added after the name field and before the on field in the workflow file.


Suggested changeset 1
.github/workflows/runtime.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/runtime.yml b/.github/workflows/runtime.yml
--- a/.github/workflows/runtime.yml
+++ b/.github/workflows/runtime.yml
@@ -15,2 +15,4 @@
 name: Runtime
+permissions:
+  contents: read
 
EOF
@@ -15,2 +15,4 @@
name: Runtime
permissions:
contents: read

Copilot is powered by AI and may make mistakes. Always verify output.
@renovate renovate bot merged commit 505b631 into master Jun 8, 2025
13 checks passed
@renovate renovate bot deleted the renovate/all-digest branch June 8, 2025 22:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet