build(deps): bump python-multipart from 0.0.29 to 0.0.30 #19
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dependency Review | |
| # PR diff'inde yeni dependency eklenirse GHSA advisory database'iyle eşleştir. | |
| # Dependabot upgrade'leri tamamlayıcı: Dependabot mevcut dep'i yeni versiyona | |
| # çıkarır; bu workflow yeni eklenen dep'in mevcut açıkları varsa PR'ı bloklar. | |
| on: | |
| pull_request: | |
| branches: [ main ] | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| jobs: | |
| review: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Dependency Review | |
| uses: actions/dependency-review-action@v5 | |
| with: | |
| fail-on-severity: high | |
| # license deny-list: GPL'ler shipping ürünle uyumsuz | |
| deny-licenses: 'GPL-2.0, GPL-3.0, AGPL-3.0' | |
| comment-summary-in-pr: on-failure |