build(deps): bump the npm-deps group with 8 updates (#5882) #594

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.
	# ESLint is a tool for identifying and reporting on patterns
	# found in ECMAScript/JavaScript code.
	# More details at https://github.com/eslint/eslint
	# and https://eslint.org

	name: ESLint

	on:
	push:
	branches: [ "master" ]
	pull_request:
	branches: [ "master" ]

	jobs:
	eslint:
	name: Run eslint scanning
	runs-on: ubuntu-latest
	permissions:
	contents: read
	security-events: write
	actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	# We must fetch at least the immediate parents so that if this is
	# a pull request then we can checkout the head.
	with:
	fetch-depth: 2

	# If this run was triggered by a pull request event, then checkout
	# the head of the pull request instead of the merge commit.
	- run: git checkout HEAD^2
	if: ${{ github.event_name == 'pull_request' }}

	- name: Install ESLint
	run: \|
	npm install @microsoft/[email protected]
	npm ci --ignore-scripts

	- name: Run ESLint
	run: SARIF_ESLINT_IGNORE_SUPPRESSED=true npm run test_eslint_ci
	continue-on-error: true

	- name: Upload analysis results to GitHub
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: eslint-results.sarif
	wait-for-processing: true

Provide feedback