Skip to content

Commit a1d282b

Browse files
authored
Merge pull request #1098 from actions/ahpook/v5-release
v5.0.0 release branch
2 parents 454943c + eb6c199 commit a1d282b

6 files changed

Lines changed: 38969 additions & 63407 deletions

File tree

README.md

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@
2222
## Overview
2323

2424
The dependency review action scans your pull requests for dependency changes, and will raise an error if any vulnerabilities or invalid licenses are being introduced.
25-
The action is supported by an [API endpoint](https://docs.github.com/en/rest/dependency-graph/dependency-review?apiVersion=2022-11-28) that diffs the dependencies between any two revisions on your default branch.
25+
The action is supported by an [API endpoint](https://docs.github.com/en/rest/dependency-graph/dependency-review?apiVersion=2026-03-10) that diffs the dependencies between any two revisions on your default branch.
2626

2727
The action is available for:
2828

@@ -54,6 +54,8 @@ When the action runs, you can see the results on:
5454

5555
You can install the action on any public repository, or any organization-owned private repository, provided the organization has a GitHub Advanced Security license.
5656

57+
> Note: Dependency Review Action v5.0.0 updates the runtime to node24. This requires a minimum Actions Runner version [v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) to run.
58+
5759
1. Add a new YAML workflow to your `.github/workflows` folder:
5860

5961
```yaml
@@ -70,7 +72,7 @@ You can install the action on any public repository, or any organization-owned p
7072
- name: 'Checkout Repository'
7173
uses: actions/checkout@v6
7274
- name: 'Dependency Review'
73-
uses: actions/dependency-review-action@v4
75+
uses: actions/dependency-review-action@v5
7476
```
7577
7678
#### Installation (GitHub Enterprise Server)
@@ -95,7 +97,7 @@ You can install the action on repositories on GitHub Enterprise Server.
9597
- name: 'Checkout Repository'
9698
uses: actions/checkout@v6
9799
- name: 'Dependency Review'
98-
uses: actions/dependency-review-action@v4
100+
uses: actions/dependency-review-action@v5
99101
```
100102

101103
4. In the workflow file, replace the `runs-on` value with the label of any of your runners. (The default value is `self-hosted`.)
@@ -164,7 +166,7 @@ You can pass configuration options to the dependency review action using your wo
164166
- name: 'Checkout Repository'
165167
uses: actions/checkout@v6
166168
- name: Dependency Review
167-
uses: actions/dependency-review-action@v4
169+
uses: actions/dependency-review-action@v5
168170
with:
169171
fail-on-severity: moderate
170172
@@ -191,7 +193,7 @@ You can use an external configuration file to specify settings for this action.
191193
- name: 'Checkout Repository'
192194
uses: actions/checkout@v6
193195
- name: Dependency Review
194-
uses: actions/dependency-review-action@v4
196+
uses: actions/dependency-review-action@v5
195197
with:
196198
config-file: './.github/dependency-review-config.yml'
197199
```
@@ -204,7 +206,7 @@ You can use an external configuration file to specify settings for this action.
204206

205207
```yaml
206208
- name: Dependency Review
207-
uses: actions/dependency-review-action@v4
209+
uses: actions/dependency-review-action@v5
208210
with:
209211
config-file: 'github/octorepo/dependency-review-config.yml@main'
210212
external-repo-token: 'ghp_123456789abcde'

0 commit comments

Comments
 (0)