This is an automated email from the ASF dual-hosted git repository.

erisu pushed a commit to branch chore/update-actions-dependabot
in repository https://gitbox.apache.org/repos/asf/cordova-app-hello-world.git

commit 959d41b1ea83c31bfbd0aa6c5d2a350c519f55e6
Author: Erisu <[email protected]>
AuthorDate: Wed Aug 19 18:53:17 2026 +0900

    chore(workflow): release-audit
---
 .github/workflows/release-audit.yml | 24 +++++++++++++++++++++---
 1 file changed, 21 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release-audit.yml 
b/.github/workflows/release-audit.yml
index df9e73e..6bceca2 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/release-audit.yml
@@ -34,7 +34,25 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Checkout project
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 
v7.0.1
+        with:
+          persist-credentials: false
+          fetch-depth: 1
 
-      # Check license headers (v1.2.0)
-      - uses: erisu/apache-rat-action@3127a8c18f3bb10e91c60e835144085b31c5c463
+      # Check license headers
+      - uses: erisu/apache-rat-action@30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd 
# v3.0.0
+
+      # Setup environment with node
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 
v7.0.0
+        with:
+          node-version: 24
+
+      # Install node packages
+      - name: npm install packages
+        run: npm ci
+
+      # Check node package licenses
+      - uses: 
erisu/license-checker-action@04511f4c052b5773f11e1c65b42cda88235c62ae # v2.1.0
+        with:
+          license-config: 'licence_checker.yml'
+          include-asf-category-a: true


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to