chore(deps-dev): bump @types/node from 26.3.0 to 26.4.0 in /sdk/typescript #346

	name: Security Audit

	on:
	schedule:
	# Run security audit every day at 00:00 UTC
	- cron: '0 0 * * *'
	push:
	branches: [ "main" ]
	pull_request:
	branches: [ "main" ]
	workflow_dispatch:

	env:
	CARGO_TERM_COLOR: always

	# Read-only: cargo-audit/cargo-deny and the dependency-review action only
	# need to read the checked-out tree and the PR dependency graph (#244).
	permissions:
	contents: read

	jobs:
	security_audit:
	name: Security Audit
	runs-on: ubuntu-latest

	steps:
	- name: Checkout repository
	uses: actions/checkout@v7

	- name: Set up Rust toolchain
	uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable

	- name: Cache dependencies
	uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2

	- name: Install cargo-audit
	run: cargo install cargo-audit

	- name: Run security audit
	run: cargo audit

	- name: Install cargo-deny
	run: cargo install cargo-deny

	- name: Run cargo-deny
	# No subcommand: evaluate every category deny.toml configures
	# (advisories, licenses, bans, and sources), not just advisories (#142).
	run: cargo deny check

	dependency_review:
	name: Dependency Review
	runs-on: ubuntu-latest
	if: github.event_name == 'pull_request'

	steps:
	- name: Checkout repository
	uses: actions/checkout@v7

	- name: Dependency Review
	uses: actions/dependency-review-action@v5

Navigation Menu