fix(dep-review): incorrect trigger

[avivkeller]

As it currently stands, this workflow is reviewing the main branch for vulnerabilities whenever a PR is opened. Rather, it should be reviewing the PRs. Running on pull_request instead will cause this to execute in the context of the PR, rather than the context of the base branch.

Ref: https://github.com/actions/dependency-review-action#installation-standard

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Updated (UTC)
nodejs-org	✅ Ready (Inspect)	Visit Preview	Apr 17, 2025 7:48pm

[Copilot]

Copilot reviewed 1 out of 1 changed files in this pull request and generated no comments.

Comments suppressed due to low confidence (1)

.github/workflows/dependency-review.yml:12

• Changing the trigger event to 'pull_request' correctly ensures that the workflow runs in the context of the PR, not the base branch. Verify that the branch filter 'main' aligns with the intended target.

pull_request:

[avivkeller]

You can see a comparison of the executions:

On pull_request_target:

• main is checked-out, not the PR

On pull_request:

• PR head is checked-out

[MattIPv4]

This seems fine, doesn't look like this'd need any secrets etc. that'd nessecitate it being pull_request_target (the alternative would be to pass the correct ref into the checkout)

[ovflowd]

I'm fine fast-tracking this due to security concerns.

[github-actions]

Lighthouse Results

URL	Performance	Accessibility	Best Practices	SEO	Report
/en	🟢 100	🟢 100	🟢 100	🟢 91	🔗
/en/about	🟢 100	🟢 100	🟢 100	🟢 91	🔗
/en/about/previous-releases	🟢 99	🟢 100	🟢 100	🟢 92	🔗
/en/download	🟢 93	🟢 100	🟢 100	🟢 91	🔗
/en/blog	🟢 100	🟢 100	🟢 96	🟢 92	🔗

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 74.58%. Comparing base (c0d6b17) to head (1624311).

✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #7655      +/-   ##
==========================================
- Coverage   74.61%   74.58%   -0.03%     
==========================================
  Files          96       96              
  Lines        7685     7685              
  Branches      192      192              
==========================================
- Hits         5734     5732       -2     
- Misses       1949     1951       +2     
  Partials        2        2              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.