Skip to content

Bump the mix-dependencies group across 1 directory with 4 updates #157

Bump the mix-dependencies group across 1 directory with 4 updates

Bump the mix-dependencies group across 1 directory with 4 updates #157

Workflow file for this run

# SPDX-License-Identifier: BSD-3-Clause
# SPDX-FileCopyrightText: 2025 Erlang Ecosystem Foundation
on:
pull_request:
branches:
- "*"
workflow_dispatch: {}
name: "Pull Request"
permissions:
contents: read
jobs:
test:
name: "Test"
permissions:
contents: read
security-events: write
uses: ./.github/workflows/part_test.yml
build:
name: "Build"
permissions:
id-token: write
contents: read
attestations: write
uses: ./.github/workflows/part_build.yml
with:
attest: false
licensing:
name: "Licensing"
permissions:
id-token: write
contents: read
attestations: write
uses: ./.github/workflows/part_licensensing.yml
with:
attest: false
docs:
name: "Docs"
permissions:
id-token: write
contents: read
attestations: write
uses: ./.github/workflows/part_docs.yml
with:
attest: false
dependency_submission:
name: "Mix Dependency Submission"
permissions:
contents: write
# PRs from external forks do not have access to the Submission API
if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
uses: ./.github/workflows/part_dependency_submission.yml
smoke_test:
name: "Smoke Test"
needs: ['build']
permissions:
id-token: write
contents: read
attestations: write
uses: ./.github/workflows/part_smoke_test.yml
dependency-review:
name: "Dependency Review"
needs: ['dependency_submission']
runs-on: ubuntu-latest
steps:
- name: Harden Runner
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
with:
egress-policy: audit
- name: 'Checkout Repository'
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: 'Dependency Review'
uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0