name: Dependency Review

on:
  pull_request:

permissions:
  contents: read

jobs:
  dependency-review:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: Dependency Review
        uses: actions/dependency-review-action@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 # v4.8.0
        with:
          allow-dependencies-licenses: |
            pkg:npm/@cspell/dict-en-common-misspellings,
            pkg:npm/flatted,
            pkg:npm/parse-imports,
            pkg:npm/prettier,
            pkg:npm/type-fest,
            pkg:npm/abbrev,
            pkg:npm/@pkgjs/parseargs,
            pkg:npm/cookie-signature
          allow-licenses: |
            0BSD,
            AFL-1.1,
            AFL-1.2,
            AFL-2.0,
            AFL-2.1,
            AFL-3.0,
            AGPL-3.0-only,
            AGPL-3.0-or-later,
            Apache-1.1,
            Apache-2.0,
            APSL-2.0,
            Artistic-2.0,
            BlueOak-1.0.0,
            BSD-2-Clause,
            BSD-3-Clause-Clear,
            BSD-3-Clause,
            BSL-1.0,
            CAL-1.0,
            CC-BY-3.0,
            CC-BY-4.0,
            CC-BY-SA-4.0,
            CDDL-1.0,
            CC0-1.0,
            EPL-2.0,
            GPL-2.0-only,
            GPL-2.0-or-later,
            GPL-2.0,
            GPL-3.0-or-later,
            ISC,
            LGPL-2.0-only,
            LGPL-2.1-only,
            LGPL-2.1-or-later,
            LGPL-2.1,
            LGPL-3.0-only,
            LGPL-3.0,
            MIT,
            MPL-2.0,
            OFL-1.1,
            PSF-2.0,
            Python-2.0,
            Python-2.0.1,
            Unicode-DFS-2016,
            Unlicense
