Replace Bun with pnpm · giselles-ai/giselle@c34fd84

Dependency review detected vulnerable packages.

$GITHUB_STEP_SUMMARY upload aborted, supports content up to a size of 1024k, got 1692k. For more information see: https://docs.github.com/actions/using-workflows/workflow-commands-for-github-actions#adding-a-markdown-summary

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

npm/@ampproject/remapping has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/@bcoe/v8-coverage has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

npm/@jridgewell/resolve-uri has an OpenSSF Scorecard of 2.6, which is less than this repository's threshold of 3.

npm/@jridgewell/set-array has an OpenSSF Scorecard of 2.6, which is less than this repository's threshold of 3.

npm/@jridgewell/source-map has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/@pdf-lib/standard-fonts has an OpenSSF Scorecard of 1.7, which is less than this repository's threshold of 3.

npm/@pdf-lib/upng has an OpenSSF Scorecard of 1.7, which is less than this repository's threshold of 3.

npm/@webassemblyjs/ast has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/@webassemblyjs/floating-point-hex-parser has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/@webassemblyjs/helper-api-error has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

Provide feedback