Files
phishing/.github/workflows/lists.yml
dependabot[bot] db8f625241 ci: bump actions/setup-node from 7.0.0 to 7.1.0 in the actions group
Bumps the actions group with 1 update: [actions/setup-node](https://github.com/actions/setup-node).


Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-11-01 11:27:51 +00:00

46 lines
1.8 KiB
YAML

name: Lists
# The rules every change to the lists must pass: scripts/lists.test.mjs for the rules and the
# sync, scripts/checkLists.mjs for the committed files. Nothing to install, so this check stands
# on its own when the build toolchain does not.
on:
pull_request:
push:
branches: [master]
permissions: {}
jobs:
lists:
name: lists
runs-on: ubuntu-latest
timeout-minutes: 10
permissions:
contents: read
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: false
- uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
with:
node-version: "22"
- name: Rules for the lists and the sync
run: node --test scripts/lists.test.mjs
- name: The committed lists
run: node scripts/checkLists.mjs
# What the repository says about itself: the build toolchain reads
# repository.url and dies on a host it cannot parse, and a wrong homepage
# ships to everyone who installs the package. This lives here rather than
# in the build job because it must run even when the build cannot.
- name: The repository's own metadata
run: node scripts/checkRepoMeta.mjs
# Whether the Deno build can still reach its dependencies. Same reason as
# above: it must run even when the toolchain cannot be installed, and it
# is the check that would have caught the broken map years earlier.
- name: The Deno import map
run: node scripts/checkDenoMap.mjs
# What phishing.pezkuwichain.io runs before it serves a new master: against a scratch
# repository and web root, with these lists.
- name: The host's publish checks
run: bash pezkuwi/host/test-publish.sh