Skip to content

[MODERATE] Dependabot metadata fetch version downgrade #43

Description

@github-actions

Problem

The Dependabot metadata fetch version has been downgraded from v3 to v2 in the .github/workflows/dependabot-auto-merge.yml file at line 22.

Code Reference

-        uses: dependabot/fetch-metadata@v3
+        uses: dependabot/fetch-metadata@v2

Suggested Fix

Consider reverting this change to use the latest version of the Dependabot metadata fetch action, unless there is a specific reason for downgrading to v2.

Permalink


Generated from PR #42 | Auto-detected role: security

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions