Skip to content

🚨 [security] Update yaml 2.6.0 β†’ 2.8.3 (minor) - #31

Merged
github-actions[bot] merged 1 commit into
mainfrom
depfu/update/pnpm/yaml-2.8.3
Mar 25, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
depfu/update/pnpm/yaml-2.8.3

Update yaml to version 2.8.3

2753fab
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis failed Mar 25, 2026 in 29s

Quality Gate failed

Failed conditions
8 Security Hotspots
C Security Rating on New Code (required β‰₯ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check warning on line 10 in .github/workflows/main.yml

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Move this read permission from workflow level to job level.

See more on https://sonarcloud.io/project/issues?id=volverjs_ai&issues=AZ0nDEKjpT-PXjuQgKOY&open=AZ0nDEKjpT-PXjuQgKOY&pullRequest=31

Check warning on line 11 in .github/workflows/main.yml

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Move this write permission from workflow level to job level.

See more on https://sonarcloud.io/project/issues?id=volverjs_ai&issues=AZ0nDEKjpT-PXjuQgKOd&open=AZ0nDEKjpT-PXjuQgKOd&pullRequest=31

Check warning on line 44 in .github/workflows/main.yml

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Prefix files and paths with "./" or "--" when using glob.

See more on https://sonarcloud.io/project/issues?id=volverjs_ai&issues=AZ0nDEKjpT-PXjuQgKOb&open=AZ0nDEKjpT-PXjuQgKOb&pullRequest=31

Check warning on line 63 in .github/workflows/main.yml

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Prefix files and paths with "./" or "--" when using glob.

See more on https://sonarcloud.io/project/issues?id=volverjs_ai&issues=AZ0nDEKjpT-PXjuQgKOc&open=AZ0nDEKjpT-PXjuQgKOc&pullRequest=31

Check warning on line 12 in .github/workflows/main.yml

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Move this write permission from workflow level to job level.

See more on https://sonarcloud.io/project/issues?id=volverjs_ai&issues=AZ0nDEKjpT-PXjuQgKOe&open=AZ0nDEKjpT-PXjuQgKOe&pullRequest=31

Check warning on line 13 in .github/workflows/main.yml

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Move this read permission from workflow level to job level.

See more on https://sonarcloud.io/project/issues?id=volverjs_ai&issues=AZ0nDEKjpT-PXjuQgKOZ&open=AZ0nDEKjpT-PXjuQgKOZ&pullRequest=31