jason810496 opened a new pull request, #71397: URL: https://github.com/apache/airflow/pull/71397
## Why The TypeScript SDK currently has no automated updates for known vulnerable packages and no pull request gate for newly introduced vulnerable dependencies. ## What - Add grouped Dependabot version and security updates for `ts-sdk`. - Add a least-privilege dependency review workflow for manifest and lockfile changes. - Reject dependency changes with known high or critical vulnerabilities. - Pin the dependency review action to an immutable commit SHA. --- ##### Was generative AI tooling used to co-author this PR? - [x] Yes, with help of Codex GPT-5 following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
