Skip to content

Conversation

@renovate-sh-app
Copy link

@renovate-sh-app renovate-sh-app bot commented Oct 23, 2025

This PR contains the following updates:

Package Change Age Confidence
fork-ts-checker-webpack-plugin ^9.0.2 -> ^9.1.0 age confidence

Release Notes

TypeStrong/fork-ts-checker-webpack-plugin (fork-ts-checker-webpack-plugin)

v9.1.0

Compare Source

Features

v9.0.3

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

| datasource | package                        | from  | to    |
| ---------- | ------------------------------ | ----- | ----- |
| npm        | fork-ts-checker-webpack-plugin | 9.0.2 | 9.1.0 |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@github-actions
Copy link

😢 zizmor failed with exit code 14.

Expand for full output
error[unpinned-uses]: unpinned action reference
  --> ./.github/workflows/ci.yml:67:9
   |
67 |         uses: codecov/codecov-action@v4
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./.github/workflows/codeql-analysis.yml:45:7
   |
45 |       uses: github/codeql-action/init@v2
   |       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./.github/workflows/codeql-analysis.yml:59:7
   |
59 |       uses: github/codeql-action/autobuild@v2
   |       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./.github/workflows/codeql-analysis.yml:72:7
   |
72 |       uses: github/codeql-action/analyze@v2
   |       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[unpinned-uses]: unpinned action reference
  --> ./.github/workflows/release.yml:75:9
   |
75 |         uses: softprops/action-gh-release@v1
   |         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ action is not pinned to a hash (required by blanket policy)
   |
   = note: audit confidence → High

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/release.yml:17:9
   |
 3 | / on:
 4 | |   push:
 5 | |     tags:
 6 | |       - 'v*.*.*' # Run workflow on version tags, e.g. v1.0.0.
   | |_____________________________________________________________- generally used when publishing artifacts generated at runtime
...
17 | /         with:
18 | |           node-version: '20'
19 | |           cache: 'npm'
   | |______________________^ opt-in for caching here
   |
   = note: audit confidence → Low

56 findings (26 ignored, 24 suppressed): 0 informational, 0 low, 0 medium, 6 high

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants