Alexei Lozovsky 74a501b087 Resolve audit warnings (#45) ...

* Update glob-parent to resolve CVE-2020-28469

* Run audit tasks on Ubuntu runners (they are cheaper)

* Audit only production dependencies

That is, something that can actually affect users of this action.
I don't really want to be bothered with yet another "prototype pollution"
or "denial of service" in transitive dependencies of eslint.

* Audit dev-dependencies for critical vulnerabilities

That said, still audit development dependencies for critical
vulnerabilities if they come along. Hopefully, this should be rare.

2021-06-09 12:25:52 +03:00

..

main.yml

Resolve audit warnings (#45)

2021-06-09 12:25:52 +03:00

release.yml

Resolve audit warnings (#45)

2021-06-09 12:25:52 +03:00