Merge branch 'master' into ft/randomness-option

Author: twanthony4

.github/dependabot.yaml

@@ -4,6 +4,7 @@ updates:
     directory: "/"
     schedule:
       interval: daily
+      time: "23:00"
     commit-message:
       prefix: "chore"
       include: "scope"
@@ -18,6 +19,7 @@ updates:
     # Check for updates once a week
     schedule:
       interval: "weekly"
+      time: "23:00"
 
   - package-ecosystem: "github-actions"
     target-branch: "master"

.github/workflows/dependabot-merge.yml

@@ -17,7 +17,7 @@ jobs:
       # will not occur.
       - name: Dependabot metadata
         id: dependabot-metadata
-        uses: dependabot/fetch-metadata@v2.1.0
+        uses: dependabot/fetch-metadata@v2.2.0
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
       # Here the PR gets approved.

Dockerfile

@@ -2,7 +2,7 @@
 # We don't declare them here — take a look at our docs.
 # https://github.com/swagger-api/swagger-ui/blob/master/docs/usage/configuration.md
 
-FROM nginx:1.26.0-alpine
+FROM nginx:1.27.0-alpine
 
 RUN apk update && apk add --no-cache "nodejs>=18.20.1-r0 "
 

SECURITY.md

@@ -9,11 +9,12 @@ If you believe you've found an exploitable security issue in Swagger UI,
 This is the list of versions of `swagger-ui` which are
 currently being supported with security updates.
 
-| Version  | Supported          | Notes                  |
-| -------- | ------------------ | ---------------------- |
-| 4.x      | :white_check_mark: |                        |
-| 3.x      | :x:                | End-of-life as of November 2021 |
-| 2.x      | :x:                | End-of-life as of 2017 |
+| Version | Supported          | Notes                           |
+|---------|--------------------|---------------------------------|
+| 5.x     | :white_check_mark: | Active LTS                      |
+| 4.x     | :x:                | End-of-life as of August 2023   |
+| 3.x     | :x:                | End-of-life as of November 2021 |
+| 2.x     | :x:                | End-of-life as of 2017          |
 
 ## Reporting a vulnerability