Dependabot security alerts: Bump flatted and unidici #2171
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Prevent blocked | |
| on: | |
| # zizmor: ignore[dangerous-triggers] | |
| # Reason: This workflow does not checkout code or use secrets. | |
| # It only reads labels to set a failure status on the PR. | |
| pull_request_target: | |
| types: [opened, labeled, unlabeled, synchronize] | |
| permissions: | |
| pull-requests: read | |
| # Required to fail the check on the PR | |
| statuses: write | |
| jobs: | |
| prevent-blocked: | |
| name: Prevent blocked | |
| runs-on: ubuntu-latest | |
| permissions: | |
| pull-requests: read | |
| steps: | |
| - name: Add notice | |
| uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7 | |
| if: contains(github.event.pull_request.labels.*.name, 'X-Blocked') | |
| with: | |
| script: | | |
| core.setFailed("PR has been labeled with X-Blocked; it cannot be merged."); |