[Snyk] Security upgrade @mdn/yari from 0.4.853 to 0.14.62 #268
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: System file changes | |
| on: | |
| pull_request_target: | |
| paths: | |
| - '.github/workflows/**' | |
| - '.github/CODEOWNERS' | |
| - '.github/dependabot.yml' | |
| - 'scripts/**' | |
| - package.json | |
| - yarn.lock | |
| jobs: | |
| block: | |
| # This make sure it only runs on our origin repo | |
| # and make an exception for Dependabot. | |
| if: github.repository_owner == 'mdn' && github.event.pull_request.user.login != 'dependabot[bot]' | |
| runs-on: ubuntu-latest | |
| steps: | |
| # - uses: hmarr/debug-action@v2 | |
| - name: Stop anything and everything | |
| run: | | |
| # It would be nice if we could disable this workflow if the PR | |
| # was made from a branch within the origin repo. But it seems you | |
| # can'd do that :( | |
| # See https://github.community/t/how-do-you-figure-out-if-a-pr-is-from-a-work-in-pull-request-target-workflows/170001 | |
| echo "If you're an admin, you have you use your admin privileges to override." | |
| echo "If you're not an admin, please ping someone for a review." | |
| exit 1 |