Update dependency review action and .npmrc config

coliff · coliff · commit bf195f506f7e · 2025-09-16T15:26:54.000+09:00
Pin dependency-review-action to a specific commit (v4.7) in the GitHub Actions workflow for improved reliability. Remove lockfile-version from .npmrc to avoid potential npm configuration issues.
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -15,4 +15,4 @@ jobs:
           persist-credentials: false
 
       - name: "Dependency Review"
-        uses: actions/dependency-review-action@v4
+        uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7
diff --git a/.npmrc b/.npmrc
@@ -1,2 +1 @@
-lockfile-version = 3
 registry = 'https://registry.npmjs.org/'

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1 @@`
`1`		`-lockfile-version = 3`
`2`	`1`	`registry = 'https://registry.npmjs.org/'`