Address further PR comment

.github/workflows/update-dependencies.yml

@@ -1,7 +1,6 @@
 name: Update dependencies
 on:
-  pull_request_target:
-    types: [opened, synchronize, reopened, labeled]
+  pull_request:
 
 jobs:
   update:

CHANGELOG.md

@@ -4,10 +4,6 @@
 
 No user facing changes.
 
-## 1.0.7 - 21 Jul 2021
-
-No user facing changes.
-
 ## 1.0.6 - 19 Jul 2021
 
 - The `init` step of the Action now supports a `source-root` input as a path to the root source-code directory. By default, the path is relative to `$GITHUB_WORKSPACE`. [#607](https://github.com/github/codeql-action/pull/607)

README.md

@@ -22,9 +22,7 @@ name: "Code Scanning - Action"
 
 on:
   push:
-    branches: [main]
   pull_request:
-    branches: [main]
   schedule:
     #        ┌───────────── minute (0 - 59)
     #        │  ┌───────────── hour (0 - 23)

node_modules/.package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "codeql",
-  "version": "1.0.8",
+  "version": "1.0.6",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
@@ -1243,6 +1243,7 @@
       "dependencies": {
         "anymatch": "~3.1.1",
         "braces": "~3.0.2",
+        "fsevents": "~2.1.2",
         "glob-parent": "~5.1.0",
         "is-binary-path": "~2.1.0",
         "is-glob": "~4.0.1",
@@ -3219,6 +3220,9 @@
     "node_modules/jsonfile": {
       "version": "4.0.0",
       "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.1.6"
+      },
       "optionalDependencies": {
         "graceful-fs": "^4.1.6"
       }

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "codeql",
-  "version": "1.0.8",
+  "version": "1.0.7",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "codeql",
-      "version": "1.0.8",
+      "version": "1.0.6",
       "license": "MIT",
       "dependencies": {
         "@actions/artifact": "^0.5.1",
@@ -1297,6 +1297,7 @@
       "dependencies": {
         "anymatch": "~3.1.1",
         "braces": "~3.0.2",
+        "fsevents": "~2.1.2",
         "glob-parent": "~5.1.0",
         "is-binary-path": "~2.1.0",
         "is-glob": "~4.0.1",
@@ -3273,6 +3274,9 @@
     "node_modules/jsonfile": {
       "version": "4.0.0",
       "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.1.6"
+      },
       "optionalDependencies": {
         "graceful-fs": "^4.1.6"
       }

package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeql",
-  "version": "1.0.8",
+  "version": "1.0.7",
   "private": true,
   "description": "CodeQL action",
   "scripts": {

runner/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "codeql-runner",
-  "version": "1.0.8",
+  "version": "1.0.7",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {

runner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeql-runner",
-  "version": "1.0.8",
+  "version": "1.0.7",
   "private": true,
   "description": "CodeQL runner",
   "scripts": {