chore(ci): add deprecate action; (#10591)

This commit is contained in:
Dmitriy Mozgovoy 2026-03-31 04:42:15 +03:00 committed by GitHub
parent a7f41f5bb5
commit e2bed7f84d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

30
.github/workflows/deprecate.yml vendored Normal file
View File

@ -0,0 +1,30 @@
name: Deprecate compromised axios version
on:
workflow_dispatch:
inputs:
version:
description: "Version of axios to deprecate (e.g. 1.14.1)"
required: true
default: "1.14.1"
jobs:
deprecate:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Setup Node.js
uses: actions/setup-node@v4
with:
node-version: 20
registry-url: https://registry.npmjs.org/
- name: Deprecate selected version
run: |
echo "Deprecating axios@${{ github.event.inputs.version }}"
npm deprecate axios@${{ github.event.inputs.version }} "🚨 SECURITY: compromised dependency (plain-crypto-js). DO NOT USE. Downgrade to 1.13.6"
env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}