mirror of
https://github.com/basecamp/once-campfire.git
synced 2026-08-22 23:11:07 +09:00
dfd2dd2bca
Dependabot version updates are disabled for this repo, so the weekly github-actions group never proposed these. The pins had been frozen since March: zizmor-action v0.5.2 ships zizmor 1.23.1, which flags secrets-outside-env at the default persona -- that moved to the auditor persona in zizmor 1.24.0. v0.6.2 ships zizmor 1.29.0. Both linters pass locally at the new versions.