chore(deps): update dependency csv-parse to v7 [security] #319
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Version Packages peer dependency merge blocker | |
| on: | |
| pull_request_target: | |
| branches: [dev] | |
| types: [opened, reopened, synchronize, edited] | |
| concurrency: | |
| group: version-peer-deps-${{ github.event.pull_request.number }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| statuses: write | |
| jobs: | |
| check: | |
| name: Check Version Packages peer dependencies | |
| if: >- | |
| github.event.pull_request.head.ref == 'changeset-release/dev' && | |
| github.event.pull_request.head.repo.full_name == github.repository | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 5 | |
| steps: | |
| - name: Checkout trusted checker | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 | |
| with: | |
| ref: ${{ github.event.pull_request.base.sha }} | |
| path: control | |
| persist-credentials: false | |
| - name: Checkout exact Version Packages PR head | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 | |
| with: | |
| ref: ${{ github.event.pull_request.head.sha }} | |
| path: source | |
| fetch-depth: 0 | |
| persist-credentials: false | |
| - uses: oven-sh/setup-bun@v2 | |
| with: | |
| bun-version: "1.3.13" | |
| - name: Check React and Lynx peer dependency ranges | |
| id: check | |
| continue-on-error: true | |
| working-directory: control | |
| env: | |
| BASE_SHA: ${{ github.event.pull_request.base.sha }} | |
| SOURCE_SHA: ${{ github.event.pull_request.head.sha }} | |
| run: >- | |
| bun .github/scripts/check-version-peer-deps.ts | |
| --root ../source | |
| --base-sha "$BASE_SHA" | |
| --source-sha "$SOURCE_SHA" | |
| - name: Publish peer dependency status | |
| if: always() && steps.check.outcome != 'skipped' | |
| uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 | |
| env: | |
| CHECK_OUTCOME: ${{ steps.check.outcome }} | |
| ERROR_MESSAGE: ${{ steps.check.outputs.error_message }} | |
| RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }} | |
| SOURCE_SHA: ${{ github.event.pull_request.head.sha }} | |
| with: | |
| script: | | |
| const failed = process.env.CHECK_OUTCOME === 'failure'; | |
| const description = failed | |
| ? process.env.ERROR_MESSAGE || 'Peer dependency 검사에 실패했습니다.' | |
| : 'Peer dependency 범위가 새 패키지 버전과 일치합니다.'; | |
| await github.rest.repos.createCommitStatus({ | |
| owner: context.repo.owner, | |
| repo: context.repo.repo, | |
| sha: process.env.SOURCE_SHA, | |
| state: failed ? 'failure' : 'success', | |
| target_url: process.env.RUN_URL, | |
| description, | |
| context: 'Version Packages peer dependencies', | |
| }); | |
| if (failed) core.setFailed(description); |