Skip to content

chore(deps): update dependency review action #14439

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 4 commits into
base: main
Choose a base branch
from

Conversation

pranavosu
Copy link
Member

@pranavosu pranavosu commented Jun 20, 2025

Description of changes

This update fixes an issue where package + dependents resulting in multiple licenses fail the check.

We could add the concatenated string to our config as a workaround like before, but the updated package parses these cases correctly. After update: result

Issue #, if available

actions/dependency-review-action#263

Description of how you validated changes

  • Action succeeds when licenses allowed
  • Fails when license not allowlisted

Checklist

  • PR description included
  • yarn test passes
  • Unit Tests are changed or added
  • Relevant documentation is changed or added (and PR referenced)

Checklist for repo maintainers

  • Verify E2E tests for existing workflows are working as expected or add E2E tests for newly added workflows
  • New source file paths included in this PR have been added to CODEOWNERS, if appropriate

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@pranavosu pranavosu requested a review from a team as a code owner June 20, 2025 20:00
@pranavosu pranavosu force-pushed the chore/dependency-review-update branch from e13cd26 to 57b0c9d Compare June 20, 2025 21:02
@pranavosu pranavosu requested a review from a team as a code owner June 20, 2025 21:02
@pranavosu pranavosu force-pushed the chore/dependency-review-update branch from 9d97704 to dabf8a0 Compare June 20, 2025 21:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants