build(deps): bump the github-actions group with 2 updates - #336

Open

dependabot[bot] wants to merge 1 commit into

mainfrom

SonarQubeCloud / SonarCloud Code Analysis failed Jul 25, 2026 in 14s

Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.

See more on https://sonarcloud.io/project/issues?id=smocker-dev_smocker&issues=AZ-YOmAytfFoT9tNgf52&open=AZ-YOmAytfFoT9tNgf52&pullRequest=336

Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.

See more on https://sonarcloud.io/project/issues?id=smocker-dev_smocker&issues=AZ-YOmAytfFoT9tNgf53&open=AZ-YOmAytfFoT9tNgf53&pullRequest=336

"npx" can install packages on-demand and run their lifecycle scripts.

See more on https://sonarcloud.io/project/issues?id=smocker-dev_smocker&issues=AZ-YOmAytfFoT9tNgf55&open=AZ-YOmAytfFoT9tNgf55&pullRequest=336

Omitting "--ignore-scripts" allows lifecycle scripts to run during package installation.

See more on https://sonarcloud.io/project/issues?id=smocker-dev_smocker&issues=AZ-YOmAytfFoT9tNgf54&open=AZ-YOmAytfFoT9tNgf54&pullRequest=336

Define exact package version to avoid installing unverified releases.

See more on https://sonarcloud.io/project/issues?id=smocker-dev_smocker&issues=AZ-YOmAytfFoT9tNgf56&open=AZ-YOmAytfFoT9tNgf56&pullRequest=336