fix: try adding the website to harden runnner

[Its-Just-Nans]

Trying to fix the #754 (comment)

[gemini-code-assist]

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

[amazon-q-developer]

This PR correctly adds the api.deps.dev:443 endpoint to the allowed list for the harden-runner in the dependency_review job, which should fix the connectivity issue referenced in the PR description.

However, the PR title contains a typo: "runnner" should be "runner". Please update the title to: fix: try adding the website to harden runner

---

You can now have the agent implement changes and create commits directly on your pull request's source branch. Simply comment with /q followed by your request in natural language to ask the agent to make changes.

[Its-Just-Nans]

@Pr0methean @im7mortal

That's strange, the dependency review is working is this MR
https://github.com/zip-rs/zip2/actions/runs/23696002687/job/69031281824?pr=755

with

Run actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48
No snapshots were found for the head SHA cc9d68da948250f766bc67246a7c89ad920375a5.
Vulnerabilities
Licenses
Denied
Scorecard
Dependency Changes

But not on the MR of #754

Run actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48
  with:
    repo-token: ***
  env:
    RUSTFLAGS: -Dwarnings
    MACOSX_DEPLOYMENT_TARGET: 14.5
No snapshots were found for the head SHA 199a6680b8eea1db63b0f060face48b1aed9cf1c.
Error: fetch failed

Not sure if this MR really fixes the runner

[Its-Just-Nans]

Closing in favor of #756