From 675d0d93ad1ca8d30fcc0aa59735f2ff1de761c3 Mon Sep 17 00:00:00 2001
From: Hans Spaans <1072510+hspaans@users.noreply.github.com>
Date: Thu, 3 Sep 2026 22:20:37 +0000
Subject: [PATCH 1/3] Modernize dependency review workflow configuration

---
 .github/workflows/dependency-review.yml | 35 ++++++++++++++++++-------
 1 file changed, 25 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index e03e666..bfd2b28 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -1,25 +1,40 @@
+# Dependency Review Action
+#
+# This Action will scan dependency manifest files that change as part of a Pull Request,
+# surfacing known-vulnerable versions of the packages declared or updated in the PR.
+# Once installed, if the workflow run is marked as required, PRs introducing known-vulnerable
+# packages will be blocked from merging.
+#
+# Source repository: https://github.com/actions/dependency-review-action
+# Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
 ---
-name: Dependency Review
-
+name: 'Dependency review'
 on:
   pull_request:
-    branches:
-      - master
+    branches: [ "master" ]
 
+# If using a dependency submission action in this workflow this permission will need to be set to:
+#
+# permissions:
+#   contents: write
+#
+# https://docs.github.com/en/enterprise-cloud@latest/code-security/supply-chain-security/understanding-your-software-supply-chain/using-the-dependency-submission-api
 permissions:
   contents: read
+  # Write permissions for pull-requests are required for using the `comment-summary-in-pr` option, comment out if you aren't using this option
+  pull-requests: write
 
 jobs:
   dependency-review:
-    name: Dependency Review
     runs-on: ubuntu-latest
-
     steps:
-      - name: Checkout Code
+      - name: 'Checkout repository'
         uses: actions/checkout@v7
 
-      - name: Dependency Review
+      - name: 'Dependency Review'
         uses: actions/dependency-review-action@v5
+        # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
         with:
-          fail-on-severity: high
-          deny-licenses: AGPL-1.0-or-later
+          comment-summary-in-pr: always
+          allow-licenses: GPL-2.0-or-later, LGPL-2.1-or-later, GFDL-1.1-or-later, MIT, MPL-2.0, CC-BY-4.0, CC-BY-SA-4.0, Apache-2.0
+          allow-dependencies-licenses: "pkg:actions/dependency-review-action"

From 61a7ecd7c6406af01d4e13efe4942922b3e9ac38 Mon Sep 17 00:00:00 2001
From: Hans Spaans <1072510+hspaans@users.noreply.github.com>
Date: Thu, 3 Sep 2026 22:33:16 +0000
Subject: [PATCH 2/3] Refactor dependency review workflow for consistency and
 clarity

---
 .github/workflows/dependency-review.yml | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index bfd2b28..61f7c44 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -8,11 +8,12 @@
 # Source repository: https://github.com/actions/dependency-review-action
 # Public documentation: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement
 ---
-name: 'Dependency review'
+name: Dependency Review
 on:
   pull_request:
-    branches: [ "master" ]
-
+    branches:
+      - master
+  
 # If using a dependency submission action in this workflow this permission will need to be set to:
 #
 # permissions:
@@ -26,12 +27,13 @@ permissions:
 
 jobs:
   dependency-review:
+    name: Dependency Review
     runs-on: ubuntu-latest
     steps:
-      - name: 'Checkout repository'
+      - name: Checkout Repository
         uses: actions/checkout@v7
 
-      - name: 'Dependency Review'
+      - name: Dependency Review
         uses: actions/dependency-review-action@v5
         # Commonly enabled options, see https://github.com/actions/dependency-review-action#configuration-options for all available options.
         with:

From e5d72311155bbd5150c366a439d6e63f2805d7e6 Mon Sep 17 00:00:00 2001
From: Hans Spaans <1072510+hspaans@users.noreply.github.com>
Date: Thu, 3 Sep 2026 22:35:17 +0000
Subject: [PATCH 3/3] Fix formatting in dependency review workflow YAML

---
 .github/workflows/dependency-review.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 61f7c44..aac6f5c 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -13,7 +13,7 @@ on:
   pull_request:
     branches:
       - master
-  
+
 # If using a dependency submission action in this workflow this permission will need to be set to:
 #
 # permissions: