Skip to content

chore(deps): update dependency csv-parse to v7 [security] #319

chore(deps): update dependency csv-parse to v7 [security]

chore(deps): update dependency csv-parse to v7 [security] #319

name: Version Packages peer dependency merge blocker
on:
pull_request_target:
branches: [dev]
types: [opened, reopened, synchronize, edited]
concurrency:
group: version-peer-deps-${{ github.event.pull_request.number }}
cancel-in-progress: true
permissions:
contents: read
statuses: write
jobs:
check:
name: Check Version Packages peer dependencies
if: >-
github.event.pull_request.head.ref == 'changeset-release/dev' &&
github.event.pull_request.head.repo.full_name == github.repository
runs-on: ubuntu-latest
timeout-minutes: 5
steps:
- name: Checkout trusted checker
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
with:
ref: ${{ github.event.pull_request.base.sha }}
path: control
persist-credentials: false
- name: Checkout exact Version Packages PR head
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
with:
ref: ${{ github.event.pull_request.head.sha }}
path: source
fetch-depth: 0
persist-credentials: false
- uses: oven-sh/setup-bun@v2
with:
bun-version: "1.3.13"
- name: Check React and Lynx peer dependency ranges
id: check
continue-on-error: true
working-directory: control
env:
BASE_SHA: ${{ github.event.pull_request.base.sha }}
SOURCE_SHA: ${{ github.event.pull_request.head.sha }}
run: >-
bun .github/scripts/check-version-peer-deps.ts
--root ../source
--base-sha "$BASE_SHA"
--source-sha "$SOURCE_SHA"
- name: Publish peer dependency status
if: always() && steps.check.outcome != 'skipped'
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
env:
CHECK_OUTCOME: ${{ steps.check.outcome }}
ERROR_MESSAGE: ${{ steps.check.outputs.error_message }}
RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
SOURCE_SHA: ${{ github.event.pull_request.head.sha }}
with:
script: |
const failed = process.env.CHECK_OUTCOME === 'failure';
const description = failed
? process.env.ERROR_MESSAGE || 'Peer dependency 검사에 실패했습니다.'
: 'Peer dependency 범위가 새 패키지 버전과 일치합니다.';
await github.rest.repos.createCommitStatus({
owner: context.repo.owner,
repo: context.repo.repo,
sha: process.env.SOURCE_SHA,
state: failed ? 'failure' : 'success',
target_url: process.env.RUN_URL,
description,
context: 'Version Packages peer dependencies',
});
if (failed) core.setFailed(description);