7b1fe3156d
Use dependabot to manage the dependencies defined in package.json and GitHub Actions workflows, so that we can proactively update versions. Outdated versions of third-party dependencies frequently have known security vulnerabilities with CVEs. |
||
---|---|---|
.. | ||
ISSUE_TEMPLATE | ||
PULL_REQUEST_TEMPLATE | ||
workflows | ||
CODEOWNERS | ||
dependabot.yml | ||
lock.yml |