From e8016f37cec763d04e881cc48e95b09d5402e8ee Mon Sep 17 00:00:00 2001 From: Dmitry Nechay Date: Fri, 7 Aug 2026 18:26:00 +0300 Subject: [PATCH] chore: ignore react-dom server vulnerability --- .github/workflows/ci-dependency-review.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/ci-dependency-review.yaml b/.github/workflows/ci-dependency-review.yaml index 4ce01c8511..8a05160424 100644 --- a/.github/workflows/ci-dependency-review.yaml +++ b/.github/workflows/ci-dependency-review.yaml @@ -17,3 +17,5 @@ jobs: uses: actions/dependency-review-action@v5.0.0 with: show-openssf-scorecard: false + allow-ghsas: + - GHSA-qwww-vcr4-c8h2 # we don't use vulnerable functionality