The failed test is caused by the downgrade of node-ical, AFAIS we have to live with it (because we cannot upgrade node-ical before next release).

You can tempory add allow-ghsas: GHSA-8hc4-vh64-cxmj in dep-review.yaml

      ....
      - name: "Dependency Review"
        uses: actions/dependency-review-action@v4
        with:
          allow-ghsas: GHSA-8hc4-vh64-cxmj

We used this kind of exception some time ago
In this case: Don't forget to notify it in the changelog so that we can check it during the next release of node-ical (in order to remove the exception)

It's green now :)

yes, thanks!

@sdetweil can you please review/merge?

looks good