chore: sync main to dev #499
4 new alerts including 4 medium severity security vulnerabilities
New alerts in code changed by this pull request
Security Alerts:
- 4 medium
See annotations below for details.
Annotations
Check warning on line 41 in .github/workflows/build-test-publish-wheel.yml
github-advanced-security / CodeQL
Workflow does not contain permissions
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
Check warning on line 15 in .github/workflows/cherry-pick-release-commit.yml
github-advanced-security / CodeQL
Workflow does not contain permissions
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
Check warning on line 33 in .github/workflows/release-freeze.yml
github-advanced-security / CodeQL
Workflow does not contain permissions
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}
Check warning on line 48 in .github/workflows/release.yaml
github-advanced-security / CodeQL
Workflow does not contain permissions
Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {{}}