Decide dependency advisories instead of counting them

.github/workflows/release.ymlmodified+5-0

Changes to .github/workflows/release.yml

		⋯21 linesShow the 21 lines above this hunk@@ -22,6 +22,11 @@ jobs:
22	22	- name: Validate tag and workspace versions
23	23	run: bun scripts/release-version.ts
24	24
	25	+ # A release must not carry an advisory nobody has reviewed, or a review
	26	+ # that expired while the release was being prepared.
	27	+ - name: Review dependency advisories
	28	+ run: bun scripts/advisory-policy.ts
	29	+
25	30	release-sbom:
26	31	needs: validate-release
27	32	uses: ./.github/workflows/sbom.yml