deps: Audit 11/13 #4628

	name: Moon

	on:
	push:
	branches:
	- master
	pull_request:
	paths:
	- .cargo/config.toml
	- .github/workflows/moon.yml
	- .moon/*
	- crates/**
	- legacy/**
	- packages/**
	- website/**
	- package.json
	- yarn.lock
	- Cargo.lock
	- Cargo.toml
	- rust-toolchain.toml

	jobs:
	ci:
	name: CI
	runs-on: ${{ matrix.os }}
	strategy:
	matrix:
	os: [ubuntu-latest, windows-latest]
	node-version: [18, 20, 22]
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- uses: actions/setup-node@v4
	- uses: moonrepo/setup-rust@v1
	with:
	cache-base: '^(master\|develop-)'
	- run: cargo run -- --color --log trace ci --base ${{ github.base_ref \|\| 'master' }}
	env:
	MOON_NODE_VERSION: ${{ matrix.node-version }}
	MOONBASE_SECRET_KEY: ${{ secrets.MOONBASE_SECRET_KEY }}
	MOONBASE_ACCESS_KEY: ${{ secrets.MOONBASE_ACCESS_KEY }}
	- uses: moonrepo/run-report-action@v1
	if: success() \|\| failure()
	with:
	access-token: ${{ secrets.GITHUB_TOKEN }}
	matrix: ${{ toJSON(matrix) }}
	docker:
	name: Docker
	runs-on: ubuntu-latest
	permissions:
	contents: read
	id-token: write
	steps:
	- uses: actions/checkout@v4
	- uses: depot/setup-action@v1
	- uses: moonrepo/setup-rust@v1
	with:
	cache-base: '^(master\|develop-)'
	- run: cargo build --workspace
	- run: ./target/debug/moon --version
	# Non-staged
	- run: ./target/debug/moon docker scaffold website --include '*.config.js' --log debug
	env:
	MOON_SKIP_SETUP_TOOLCHAIN: '*'
	- uses: depot/build-push-action@v1
	with:
	context: .
	push: false
	file: ./tests/docker/Dockerfile
	# Staged
	- uses: depot/build-push-action@v1
	with:
	context: .
	push: false
	file: ./tests/docker/Dockerfile.staged

Provide feedback