Update dependency svelte to v4 [SECURITY] #2873
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CLA Assistant" | |
| on: | |
| issue_comment: | |
| types: [created] | |
| pull_request_target: | |
| types: [opened,closed,synchronize] | |
| permissions: | |
| actions: write | |
| contents: write | |
| pull-requests: write | |
| statuses: write | |
| jobs: | |
| CLAAssistant: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Private Repo for Allowlist | |
| uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 | |
| with: | |
| repository: OpenZeppelin/cla-sigs | |
| token: ${{ secrets.CLA_SIGS_ACCESS_PAT }} | |
| sparse-checkout: | | |
| allowlist.txt | |
| sparse-checkout-cone-mode: false | |
| - name: Read Allowlist File | |
| id: read_allowlist | |
| run: | | |
| ALLOWLIST=$(cat allowlist.txt) | |
| echo "allowlist=$ALLOWLIST" >> $GITHUB_OUTPUT | |
| - name: "CLA Assistant" | |
| if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I confirm that I have read and hereby agree to the OpenZeppelin Contributor License Agreement') || github.event_name == 'pull_request_target' | |
| uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 #v2.6.1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_SIGS_ACCESS_PAT }} | |
| with: | |
| path-to-signatures: 'signatures/${{ github.event.repository.name }}/v1_cla.json' | |
| path-to-document: 'https://github.com/OpenZeppelin/cla-assistant/blob/main/openzeppelin_2025_cla.md' | |
| branch: 'main' | |
| allowlist: ${{ steps.read_allowlist.outputs.allowlist }} | |
| remote-organization-name: 'OpenZeppelin' | |
| remote-repository-name: 'cla-sigs' | |
| custom-notsigned-prcomment: > | |
| Thank you for your contribution to OpenZeppelin Contracts Wizard. | |
| Before being able to integrate those changes, we would like you to | |
| sign our [Contributor License Agreement](https://github.com/OpenZeppelin/cla-assistant/blob/main/openzeppelin_2025_cla.md). | |
| You can sign the CLA by just posting a Pull Request Comment with the sentence below. Thanks. | |
| custom-pr-sign-comment: 'I confirm that I have read and hereby agree to the OpenZeppelin Contributor License Agreement' |