From 4cd9eb2d23752464a87e00499c30d256a59a01b4 Mon Sep 17 00:00:00 2001 From: Federico Builes Date: Thu, 18 Jan 2024 14:23:52 +0100 Subject: [PATCH] Updating docs to point to v4. --- CONTRIBUTING.md | 4 ++-- README.md | 8 ++++---- docs/examples.md | 20 ++++++++++---------- 3 files changed, 16 insertions(+), 16 deletions(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index def03bd16..bd11b8347 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -112,8 +112,8 @@ minor/patch updates. To do this just checkout `main`, force-create a new annotated tag, and push it: ``` -git tag -fa v3 -m "Updating v3 to 3.0.1" -git push origin v3 --force +git tag -fa v4 -m "Updating v4 to 4.0.1" +git push origin v4 --force ``` ## Resources diff --git a/README.md b/README.md index d39f95996..9e5276497 100644 --- a/README.md +++ b/README.md @@ -33,7 +33,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 ``` ### GitHub Enterprise Server @@ -59,7 +59,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 ``` ## Configuration options @@ -105,7 +105,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: Dependency Review - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 with: fail-on-severity: moderate @@ -128,7 +128,7 @@ Start by specifying that you will be using an external configuration file: ```yaml - name: Dependency Review - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 with: config-file: './.github/dependency-review-config.yml' ``` diff --git a/docs/examples.md b/docs/examples.md index d353a7729..523f3d6d7 100644 --- a/docs/examples.md +++ b/docs/examples.md @@ -20,7 +20,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 ``` ## Using an inline configuration @@ -41,7 +41,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 with: fail-on-severity: critical deny-licenses: LGPL-2.0, BSD-2-Clause @@ -78,7 +78,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 with: config-file: './.github/dependency-review-config.yml' ``` @@ -105,7 +105,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 with: config-file: 'github/octorepo/dependency-review-config.yml@main' ``` @@ -132,7 +132,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 with: config-file: 'github/octorepo-private/dependency-review-config.yml@main' external-repo-token: ${{ secrets.GITHUB_TOKEN }} # or a personal access token @@ -157,7 +157,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 with: fail-on-severity: critical deny-licenses: LGPL-2.0, BSD-2-Clause @@ -185,7 +185,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 with: fail-on-severity: critical deny-licenses: LGPL-2.0, BSD-2-Clause @@ -224,7 +224,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 with: fail-on-severity: critical comment-summary-in-pr: always @@ -253,7 +253,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 with: deny-packages: 'pkg:maven/org.apache.logging.log4j/log4j-api,pkg:maven/org.apache.logging.log4j/log4j-core' deny-groups: 'pkg:maven/com.bazaarvoice.jolt' @@ -287,7 +287,7 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 with: retry-on-snapshot-warnings: true retry-on-snapshot-warnings-timeout: 60