Getting Dependabot alert

[manoj27730]

Getting Dependabot alert

Hi Team / @peter-evans

I am trying to enable this below actions for my enterprise GitHub repository.

• name: Create Pull Request
  uses: peter-evans/create-pull-request@v4.2.3

But our Enterprise GitHub Team is unable to add the actions due to Dependabot alert.
Can you please help to fix the vulnerabilities and release new version or fix in the same version so that we can use them.

Thanks,
Manoj Kumar Sahu

[manoj27730]

[peter-evans]

Hi @manoj27730

Those issues were fixed on main but I hadn't released a new version of the action. Apologies for that.

I've released v4.2.4 / v4, which should contain the fixes.

[manoj27730]

Hi @manoj27730

Those issues were fixed on main but I hadn't released a new version of the action. Apologies for that.

I've released v4.2.4 / v4, which should contain the fixes.

Thank you