Bump actions/dependency-review-action from 4.1.3 to 4.2.3 #145

	# Example taken from https://docs.github.com/en/actions/using-workflows/caching-dependencies-to-speed-up-workflows#managing-caches
	name: Cleanup Caches on PR Merge
	on:
	pull_request:
	types:
	- closed

	permissions:
	contents: read

	jobs:
	cleanup:
	runs-on: ubuntu-latest
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
	with:
	disable-sudo: true
	egress-policy: block
	allowed-endpoints: >
	api.github.com:443
	github.com:443
	objects.githubusercontent.com:443

	- name: Check out code
	uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2

	- name: Cleanup
	run: \|
	gh extension install actions/gh-actions-cache

	REPO=${{ github.repository }}
	BRANCH="refs/pull/${{ github.event.pull_request.number }}/merge"

	echo "Fetching list of cache key"
	cacheKeysForPR=$(gh actions-cache list -R $REPO -B $BRANCH -L 100 \| cut -f 1 )

	## Setting this to not fail the workflow while deleting cache keys.
	set +e
	echo "Deleting caches..."
	for cacheKey in $cacheKeysForPR
	do
	gh actions-cache delete $cacheKey -R $REPO -B $BRANCH --confirm
	done
	echo "Done"
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback