[skip ci] bump dependency-check-workflow to version 3

[infeo]

No description provided.

[coderabbitai]

Walkthrough

Updates the GitHub Actions workflow at .github/workflows/dependency-check.yml by changing the dependency-check action reference from v1 to v3. Introduces two additional secret inputs to the workflow: ossindex-username and ossindex-token.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Pre-merge checks and finishing touches

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description Check	⚠️ Warning	The pull request contains no description of the changes made, offering no context or details related to the workflow update, and thus fails to meet the requirement of having at least some relevant description.	Please add a brief description summarizing the bump to dependency-check workflow v3 and the added secret inputs to give reviewers necessary context.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title Check	✅ Passed	The title clearly indicates the primary change of bumping the dependency-check workflow to version 3 and directly reflects the modifications in the changeset while remaining concise.
Docstring Coverage	✅ Passed	No functions found in the changes. Docstring coverage check skipped.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch feature/bump-dependency-check

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 58fe865 and 201675a.

📒 Files selected for processing (1)

• .github/workflows/dependency-check.yml (1 hunks)

🔇 Additional comments (1)

.github/workflows/dependency-check.yml (1)

20-21: Confirm new OSS Index secrets exist.

The upgraded workflow now depends on OSSINDEX_USERNAME and OSSINDEX_API_TOKEN. If these secrets are absent (missing or empty), the reusable workflow will fail at runtime. Please double-check that they’re configured in the repository or appropriate environment before merging.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}