deps(deps): bump lucide-react from 1.22.0 to 1.31.0 #60
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ============================================================================= | |
| # CodeQL — Statische Security-Analyse (GitHub Code Scanning) | |
| # ----------------------------------------------------------------------------- | |
| # Analysiert JavaScript/TypeScript und die GitHub-Actions-Workflows selbst. | |
| # build-mode: none — kein Kompilat nötig, CodeQL liest den Source direkt. | |
| # Trigger: push + PR auf main, plus wöchentlicher Scan (Mittwoch nachts). | |
| # ============================================================================= | |
| name: "CodeQL Advanced" | |
| on: | |
| push: | |
| branches: ["main"] | |
| pull_request: | |
| branches: ["main"] | |
| schedule: | |
| - cron: "37 22 * * 3" | |
| jobs: | |
| analyze: | |
| name: Analyze (${{ matrix.language }}) | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write # Ergebnisse nach Code Scanning schreiben | |
| packages: read # private CodeQL-Packs ziehen | |
| actions: read | |
| contents: read | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| include: | |
| - language: actions | |
| build-mode: none | |
| - language: javascript-typescript | |
| build-mode: none | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v7 | |
| - name: Initialize CodeQL | |
| uses: github/codeql-action/init@v4.37.3 | |
| with: | |
| languages: ${{ matrix.language }} | |
| build-mode: ${{ matrix.build-mode }} | |
| - name: Perform CodeQL Analysis | |
| uses: github/codeql-action/analyze@v4.37.3 | |
| with: | |
| category: "/language:${{ matrix.language }}" |