attest-sbom

20 changed files with 4105 additions and 3467 deletions

									
										.github/linters/.yaml-lint.yml
									
		-10
	
												View File
											
					@@ -1,10 +0,0 @@

					rules:

					  document-end: disable

					  document-start:

					    level: warning

					    present: false

					  line-length:

					    level: warning

					    max: 80

					    allow-non-breakable-words: true

					    allow-non-breakable-inline-mappings: true

									
										.github/linters/tsconfig.json
									
		-9
	
												View File
											
					@@ -1,9 +0,0 @@

					{

					  "$schema": "https://json.schemastore.org/tsconfig",

					  "extends": "../../tsconfig.json",

					  "compilerOptions": {

					    "noEmit": true

					  },

					  "include": ["../../__tests__/**/*", "../../src/**/*"],

					  "exclude": ["../../dist", "../../node_modules", "../../coverage", "*.json"]

					}

									
										.github/workflows/check-dist.yml
									
		+3
		-3
	
												View File
												
					@@ -28,11 +28,11 @@ jobs:

					    steps:

					    steps:

					      - name: Checkout

					      - name: Checkout

					        id: checkout

					        id: checkout

					        uses: actions/checkout@v4

					        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1

					      - name: Setup Node.js

					      - name: Setup Node.js

					        id: setup-node

					        id: setup-node

					        uses: actions/setup-node@v4

					        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0

					        with:

					        with:

					          node-version-file: .node-version

					          node-version-file: .node-version

					          cache: npm

					          cache: npm

					@@ -60,7 +60,7 @@ jobs:

					      - if: ${{ failure() && steps.diff.outcome == 'failure' }}

					      - if: ${{ failure() && steps.diff.outcome == 'failure' }}

					        name: Upload Artifact

					        name: Upload Artifact

					        id: upload

					        id: upload

					        uses: actions/upload-artifact@v4

					        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0

					        with:

					        with:

					          name: dist

					          name: dist

					          path: dist/

					          path: dist/

									
										.github/workflows/ci.yml
									
		+3
		-3
	
												View File
												
					@@ -21,11 +21,11 @@ jobs:

					    steps:

					    steps:

					      - name: Checkout

					      - name: Checkout

					        id: checkout

					        id: checkout

					        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1

					        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1

					      - name: Setup Node.js

					      - name: Setup Node.js

					        id: setup-node

					        id: setup-node

					        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1

					        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0

					        with:

					        with:

					          node-version-file: .node-version

					          node-version-file: .node-version

					          cache: npm

					          cache: npm

					@@ -57,7 +57,7 @@ jobs:

					    steps:

					    steps:

					      - name: Checkout

					      - name: Checkout

					        id: checkout

					        id: checkout

					        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1

					        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1

					      - name: Run attest-sbom

					      - name: Run attest-sbom

					        id: attest-sbom

					        id: attest-sbom

					        uses: ./

					        uses: ./

									
										.github/workflows/codeql-analysis.yml
									
		+4
		-4
	
												View File
												
					@@ -32,19 +32,19 @@ jobs:

					    steps:

					    steps:

					      - name: Checkout

					      - name: Checkout

					        id: checkout

					        id: checkout

					        uses: actions/checkout@v4

					        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1

					      - name: Initialize CodeQL

					      - name: Initialize CodeQL

					        id: initialize

					        id: initialize

					        uses: github/codeql-action/init@v3

					        uses: github/codeql-action/init@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8

					        with:

					        with:

					          languages: ${{ matrix.language }}

					          languages: ${{ matrix.language }}

					          source-root: src

					          source-root: src

					      - name: Autobuild

					      - name: Autobuild

					        id: autobuild

					        id: autobuild

					        uses: github/codeql-action/autobuild@v3

					        uses: github/codeql-action/autobuild@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8

					      - name: Perform CodeQL Analysis

					      - name: Perform CodeQL Analysis

					        id: analyze

					        id: analyze

					        uses: github/codeql-action/analyze@v3

					        uses: github/codeql-action/analyze@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8

									
										.github/workflows/linter.yml
									
		-54
	
												View File
											
					@@ -1,54 +0,0 @@

					name: Lint Codebase

					on:

					  pull_request:

					    branches:

					      - main

					  push:

					    branches:

					      - main

					permissions:

					  contents: read

					  packages: read

					  statuses: write

					jobs:

					  lint:

					    name: Lint Codebase

					    runs-on: ubuntu-latest

					    steps:

					      - name: Checkout

					        id: checkout

					        uses: actions/checkout@v4

					        with:

					          fetch-depth: 0

					      - name: Setup Node.js

					        id: setup-node

					        uses: actions/setup-node@v4

					        with:

					          node-version-file: .node-version

					          cache: npm

					      - name: Install Dependencies

					        id: install

					        run: npm ci

					      - name: Lint Codebase

					        id: super-linter

					        uses: super-linter/super-linter/slim@12150456a73e248bdc94d0794898f94e23127c88 # v7.4.0

					        env:

					          DEFAULT_BRANCH: main

					          FILTER_REGEX_EXCLUDE: dist/**/*

					          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

					          TYPESCRIPT_DEFAULT_STYLE: prettier

					          VALIDATE_ALL_CODEBASE: true

					          VALIDATE_JAVASCRIPT_STANDARD: false

					          VALIDATE_TYPESCRIPT_ES: false

					          VALIDATE_TYPESCRIPT_STANDARD: false

					          VALIDATE_JSCPD: false

					      - name: Run eslint

					        run: npm run lint:eslint

									
										.github/workflows/publish-immutable-actions.yml
									
		-22
	
												View File
											
					@@ -1,22 +0,0 @@

					name: 'Publish Immutable Action Version'

					on:

					  release:

					    types: [published]

					permissions: {}

					jobs:

					  publish:

					    runs-on: ubuntu-latest

					    permissions:

					      contents: read

					      id-token: write

					      packages: write

					    steps:

					      - name: Checking out

					        uses: actions/checkout@v4

					      - name: Publish

					        id: publish

					        uses: actions/[email protected]

.github/linters/.markdown-lint.yml → .markdown-lint.yml

View File

.node-version

+1 -1

View File

`@@ -1 +1 @@`
	`20.6.0`	`24.5.0`

									
										README.md
									
		+22
		-8
	
												View File
												
					@@ -45,17 +45,21 @@ attest:

					   permissions:

					   permissions:

					     id-token: write

					     id-token: write

					     attestations: write

					     attestations: write

					     artifact-metadata: write

					   ```

					   ```

					   The `id-token` permission gives the action the ability to mint the OIDC token

					   The `id-token` permission gives the action the ability to mint the OIDC token

					   necessary to request a Sigstore signing certificate. The `attestations`

					   necessary to request a Sigstore signing certificate. The `attestations`

					   permission is necessary to persist the attestation.

					   permission is necessary to persist the attestation.

					   The `artifact-metadata` permission is required to generate artifact

					   metadata storage records. If this permission is not included, the action

					   will continue without creating the record.

					1. Add the following to your workflow after your artifact has been built and

					1. Add the following to your workflow after your artifact has been built and

					   your SBOM has been generated:

					   your SBOM has been generated:

					   ```yaml

					   ```yaml

					   - uses: actions/attest-sbom@v2

					   - uses: actions/attest-sbom@v3

					     with:

					     with:

					       subject-path: '<PATH TO ARTIFACT>'

					       subject-path: '<PATH TO ARTIFACT>'

					       sbom-path: '<PATH TO SBOM>'

					       sbom-path: '<PATH TO SBOM>'

					@@ -70,7 +74,7 @@ attest:

					See [action.yml](action.yml)

					See [action.yml](action.yml)

					```yaml

					```yaml

					- uses: actions/attest-sbom@v2

					- uses: actions/attest-sbom@v3

					  with:

					  with:

					    # Path to the artifact serving as the subject of the attestation. Must

					    # Path to the artifact serving as the subject of the attestation. Must

					    # specify exactly one of "subject-path", "subject-digest", or

					    # specify exactly one of "subject-path", "subject-digest", or

					@@ -101,6 +105,12 @@ See [action.yml](action.yml)

					    # the "subject-digest" parameter be specified. Defaults to false.

					    # the "subject-digest" parameter be specified. Defaults to false.

					    push-to-registry:

					    push-to-registry:

					    # Whether to create a storage record for the artifact.

					    # Requires that push-to-registry is set to true.

					    # Requires that the "subject-name" parameter specify the fully-qualified

					    # image name. Defaults to true.

					    create-storage-record:

					    # Whether to attach a list of generated attestations to the workflow run

					    # Whether to attach a list of generated attestations to the workflow run

					    # summary page. Defaults to true.

					    # summary page. Defaults to true.

					    show-summary:

					    show-summary:

					@@ -174,7 +184,7 @@ jobs:

					          format: 'spdx-json'

					          format: 'spdx-json'

					          output-file: 'sbom.spdx.json'

					          output-file: 'sbom.spdx.json'

					      - name: Attest

					      - name: Attest

					        uses: actions/attest-sbom@v2

					        uses: actions/attest-sbom@v3

					        with:

					        with:

					          subject-path: '${{ github.workspace }}/my-app'

					          subject-path: '${{ github.workspace }}/my-app'

					          sbom-path: 'sbom.spdx.json'

					          sbom-path: 'sbom.spdx.json'

					@@ -186,7 +196,7 @@ If you are generating multiple artifacts, you can attest all of them at the same

					time by using a wildcard in the `subject-path` input.

					time by using a wildcard in the `subject-path` input.

					```yaml

					```yaml

					- uses: actions/attest-sbom@v2

					- uses: actions/attest-sbom@v3

					  with:

					  with:

					    subject-path: 'dist/**/my-bin-*'

					    subject-path: 'dist/**/my-bin-*'

					    sbom-path: '${{ github.workspace }}/my-bin.sbom.spdx.json'

					    sbom-path: '${{ github.workspace }}/my-bin.sbom.spdx.json'

					@@ -199,13 +209,13 @@ Alternatively, you can explicitly list multiple subjects with either a comma or

					newline delimited list:

					newline delimited list:

					```yaml

					```yaml

					- uses: actions/attest-sbom@v2

					- uses: actions/attest-sbom@v3

					  with:

					  with:

					    subject-path: 'dist/foo, dist/bar'

					    subject-path: 'dist/foo, dist/bar'

					```

					```

					```yaml

					```yaml

					- uses: actions/attest-sbom@v2

					- uses: actions/attest-sbom@v3

					  with:

					  with:

					    subject-path: |

					    subject-path: |

					      dist/foo

					      dist/foo

					@@ -226,7 +236,7 @@ attestation.

					- name: Calculate artifact digests

					- name: Calculate artifact digests

					  run: |

					  run: |

					    shasum -a 256 foo_0.0.1_* > subject.checksums.txt

					    shasum -a 256 foo_0.0.1_* > subject.checksums.txt

					- uses: actions/attest-sbom@v2

					- uses: actions/attest-sbom@v3

					  with:

					  with:

					    subject-checksums: subject.checksums.txt

					    subject-checksums: subject.checksums.txt

					    sbom-path: sbom.spdx.json

					    sbom-path: sbom.spdx.json

					@@ -258,6 +268,10 @@ fully-qualified image name (e.g. "ghcr.io/user/app" or

					"acme.azurecr.io/user/app"). Do NOT include a tag as part of the image name --

					"acme.azurecr.io/user/app"). Do NOT include a tag as part of the image name --

					the specific image being attested is identified by the supplied digest.

					the specific image being attested is identified by the supplied digest.

					If the `push-to-registry` option is set to true, the Action will also

					emit an Artifact Metadata Storage Record. If you do not want to emit a

					storage record, set `create-storage-record` to `false`.

					> **NOTE**: When pushing to Docker Hub, please use "index.docker.io" as the

					> **NOTE**: When pushing to Docker Hub, please use "index.docker.io" as the

					> registry portion of the image name.

					> registry portion of the image name.

					@@ -303,7 +317,7 @@ jobs:

					          format: 'cyclonedx-json'

					          format: 'cyclonedx-json'

					          output-file: 'sbom.cyclonedx.json'

					          output-file: 'sbom.cyclonedx.json'

					      - name: Attest

					      - name: Attest

					        uses: actions/attest-sbom@v2

					        uses: actions/attest-sbom@v3

					        id: attest

					        id: attest

					        with:

					        with:

					          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

					          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

									
										__tests__/sbom.test.ts
									
		+9
		-4
	
												View File
												
					@@ -108,6 +108,13 @@ describe('generateSBOMPredicate', () => {

					    expect(result.params).toEqual(sbom.object)

					    expect(result.params).toEqual(sbom.object)

					  })

					  })

					  it('throws an error for missing SPDX version', () => {

					    const sbom = { type: 'spdx' } as SBOM

					    expect(() => generateSBOMPredicate(sbom)).toThrow(

					      'Cannot find spdxVersion in the SBOM'

					    )

					  })

					  it('generates CycloneDX predicate correctly', () => {

					  it('generates CycloneDX predicate correctly', () => {

					    const sbom = { type: 'cyclonedx', object: {} } as SBOM

					    const sbom = { type: 'cyclonedx', object: {} } as SBOM

					    const result = generateSBOMPredicate(sbom)

					    const result = generateSBOMPredicate(sbom)

					@@ -116,10 +123,8 @@ describe('generateSBOMPredicate', () => {

					  })

					  })

					  it('throws error for unsupported SBOM formats', () => {

					  it('throws error for unsupported SBOM formats', () => {

					    const sbom = { type: 'spdx', object: {} }

					    const sbom = { type: 'foo', object: {} }

					    // @ts-expect-error test error case

					    // @ts-expect-error test error case

					    expect(() => generateSBOMPredicate(sbom)).toThrow(

					    expect(() => generateSBOMPredicate(sbom)).toThrow('Unsupported SBOM format')

					      'Cannot find spdxVersion in the SBOM'

					    )

					  })

					  })

					})

					})

									
										action.yml
									
		+11
		-2
	
												View File
												
					@@ -41,6 +41,12 @@ inputs:

					      and that the "subject-digest" parameter be specified. Defaults to false.

					      and that the "subject-digest" parameter be specified. Defaults to false.

					    default: false

					    default: false

					    required: false

					    required: false

					  create-storage-record:

					    description: >

					      Whether to create a storage record for the artifact.

					      Requires that push-to-registry is set to true. Defaults to true.

					    default: true

					    required: false

					  show-summary:

					  show-summary:

					    description: >

					    description: >

					      Whether to attach a list of generated attestations to the workflow run

					      Whether to attach a list of generated attestations to the workflow run

					@@ -67,12 +73,14 @@ outputs:

					runs:

					runs:

					  using: 'composite'

					  using: 'composite'

					  steps:

					  steps:

					    - uses: actions/attest-sbom/predicate@534423496eab34674190bc45fdacbb8b1198e07f # predicate@1.0.0

					    - uses: actions/attest-sbom/predicate@55e972012fb8695c1b0049174547f1fcb4baa8a5 # predicate@2.0.0

					      id: generate-sbom-predicate

					      id: generate-sbom-predicate

					      with:

					      with:

					        sbom-path: ${{ inputs.sbom-path }}

					        sbom-path: ${{ inputs.sbom-path }}

					    - uses: actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc # v2.4.0

					    - uses: actions/attest@7667f588f2f73a90cea6c7ac70e78266c4f76616 # v3.1.0

					      id: attest

					      id: attest

					      env:

					        NODE_OPTIONS: '--max-http-header-size=32768'

					      with:

					      with:

					        subject-path: ${{ inputs.subject-path }}

					        subject-path: ${{ inputs.subject-path }}

					        subject-digest: ${{ inputs.subject-digest }}

					        subject-digest: ${{ inputs.subject-digest }}

					@@ -83,5 +91,6 @@ runs:

					        predicate-path:

					        predicate-path:

					          ${{ steps.generate-sbom-predicate.outputs.predicate-path }}

					          ${{ steps.generate-sbom-predicate.outputs.predicate-path }}

					        push-to-registry: ${{ inputs.push-to-registry }}

					        push-to-registry: ${{ inputs.push-to-registry }}

					        create-storage-record: ${{ inputs.create-storage-record }}

					        show-summary: ${{ inputs.show-summary }}

					        show-summary: ${{ inputs.show-summary }}

					        github-token: ${{ inputs.github-token }}

					        github-token: ${{ inputs.github-token }}

dist/index.js

Generated Vendored

+1228 -986

View File

File diff suppressed because it is too large Load Diff

									
										.github/linters/eslint.config.mjs → eslint.config.mjs
									
		+2
		-2
	
												View File
												
					@@ -7,7 +7,7 @@ export default tseslint.config(

					  // Ignore non-project files

					  // Ignore non-project files

					  {

					  {

					    name: 'ignore',

					    name: 'ignore',

					    ignores: ['.github', 'dist', 'coverage', '**/*.json', 'jest.setup.js']

					    ignores: ['.github', 'dist', 'coverage', '**/*.json', 'jest.setup.js', 'eslint.config.mjs']

					  },

					  },

					  // Use recommended rules from ESLint, TypeScript, and other plugins

					  // Use recommended rules from ESLint, TypeScript, and other plugins

					  eslint.configs.recommended,

					  eslint.configs.recommended,

					@@ -21,7 +21,7 @@ export default tseslint.config(

					    languageOptions: {

					    languageOptions: {

					      ecmaVersion: 2023,

					      ecmaVersion: 2023,

					      parserOptions: {

					      parserOptions: {

					        project: ['./.github/linters/tsconfig.json', './tsconfig.json']

					        project: ['./tsconfig.lint.json']

					      }

					      }

					    },

					    },

					    rules: {

					    rules: {

package-lock.json

Generated

+2750 -2298

View File

File diff suppressed because it is too large Load Diff

									
										package.json
									
		+19
		-19
	
												View File
												
					@@ -1,7 +1,7 @@

					{

					{

					  "name": "actions/attest-sbom",

					  "name": "actions/attest-sbom",

					  "description": "Generate signed SBOM attestations",

					  "description": "Generate signed SBOM attestations",

					  "version": "1.0.0",

					  "version": "2.0.0",

					  "author": "",

					  "author": "",

					  "private": true,

					  "private": true,

					  "homepage": "https://github.com/actions/attest-sbom",

					  "homepage": "https://github.com/actions/attest-sbom",

					@@ -21,15 +21,15 @@

					    ".": "./dist/index.js"

					    ".": "./dist/index.js"

					  },

					  },

					  "engines": {

					  "engines": {

					    "node": ">=20"

					    "node": ">=24"

					  },

					  },

					  "scripts": {

					  "scripts": {

					    "bundle": "npm run format:write && npm run package",

					    "bundle": "npm run format:write && npm run package",

					    "ci-test": "jest",

					    "ci-test": "jest",

					    "format:write": "prettier --write **/*.ts",

					    "format:write": "prettier --write **/*.ts",

					    "format:check": "prettier --check **/*.ts",

					    "format:check": "prettier --check **/*.ts",

					    "lint:eslint": "npx eslint . -c ./.github/linters/eslint.config.mjs",

					    "lint:eslint": "npx eslint",

					    "lint:markdown": "npx markdownlint --config .github/linters/.markdown-lint.yml \"*.md\"",

					    "lint:markdown": "npx markdownlint --config .markdown-lint.yml \"*.md\"",

					    "lint": "npm run lint:eslint && npm run lint:markdown",

					    "lint": "npm run lint:eslint && npm run lint:markdown",

					    "package": "ncc build src/index.ts --license licenses.txt",

					    "package": "ncc build src/index.ts --license licenses.txt",

					    "package:watch": "npm run package -- --watch",

					    "package:watch": "npm run package -- --watch",

					@@ -70,22 +70,22 @@

					    ]

					    ]

					  },

					  },

					  "dependencies": {

					  "dependencies": {

					    "@actions/core": "^1.11.1"

					    "@actions/core": "^2.0.1"

					  },

					  },

					  "devDependencies": {

					  "devDependencies": {

					    "@actions/attest": "^1.6.0",

					    "@actions/attest": "^2.1.0",

					    "@eslint/js": "^9.28.0",

					    "@eslint/js": "^9.39.2",

					    "@types/jest": "^29.5.14",

					    "@types/jest": "^30.0.0",

					    "@types/node": "^22.15.29",

					    "@types/node": "^25.0.2",

					    "@vercel/ncc": "^0.38.3",

					    "@vercel/ncc": "^0.38.4",

					    "eslint": "^9.28.0",

					    "eslint": "^9.39.2",

					    "eslint-plugin-import": "^2.31.0",

					    "eslint-plugin-import": "^2.32.0",

					    "eslint-plugin-jest": "^28.12.0",

					    "eslint-plugin-jest": "^29.5.0",

					    "jest": "^29.7.0",

					    "jest": "^30.2.0",

					    "markdownlint-cli": "^0.45.0",

					    "markdownlint-cli": "^0.47.0",

					    "prettier": "^3.5.3",

					    "prettier": "^3.7.4",

					    "ts-jest": "^29.3.4",

					    "ts-jest": "^29.4.6",

					    "typescript": "^5.8.3",

					    "typescript": "^5.9.3",

					    "typescript-eslint": "^8.33.0"

					    "typescript-eslint": "^8.49.0"

					  }

					  }

					}

					}

									
										predicate/action.yml
									
		+1
		-1
	
												View File
												
					@@ -15,5 +15,5 @@ outputs:

					    description: >

					    description: >

					      URI identifying the type of the predicate.

					      URI identifying the type of the predicate.

					runs:

					runs:

					  using: node20

					  using: node24

					  main: ../dist/index.js

					  main: ../dist/index.js

									
										src/sbom.ts
									
		+5
		-4
	
												View File
												
					@@ -66,13 +66,14 @@ export const storePredicate = (predicate: Predicate): string => {

					}

					}

					export const generateSBOMPredicate = (sbom: SBOM): Predicate => {

					export const generateSBOMPredicate = (sbom: SBOM): Predicate => {

					  if (sbom.type === 'spdx') {

					  switch (sbom.type) {

					    case 'spdx':

					      return generateSPDXIntoto(sbom.object)

					      return generateSPDXIntoto(sbom.object)

					  }

					    case 'cyclonedx':

					  if (sbom.type === 'cyclonedx') {

					      return generateCycloneDXIntoto(sbom.object)

					      return generateCycloneDXIntoto(sbom.object)

					  }

					    default:

					      throw new Error('Unsupported SBOM format')

					      throw new Error('Unsupported SBOM format')

					  }

					}

					}

					// ref: https://github.com/in-toto/attestation/blob/main/spec/predicates/spdx.md

					// ref: https://github.com/in-toto/attestation/blob/main/spec/predicates/spdx.md

									
										tsconfig.json
									
		+1
		
												View File
												
					@@ -5,6 +5,7 @@

					    "module": "NodeNext",

					    "module": "NodeNext",

					    "rootDir": "./src",

					    "rootDir": "./src",

					    "moduleResolution": "NodeNext",

					    "moduleResolution": "NodeNext",

					    "isolatedModules": true,

					    "baseUrl": "./",

					    "baseUrl": "./",

					    "sourceMap": true,

					    "sourceMap": true,

					    "outDir": "./dist",

					    "outDir": "./dist",

									
										tsconfig.lint.json
									
		+9
		
												View File
												
					@@ -0,0 +1,9 @@

					{

					  "$schema": "https://json.schemastore.org/tsconfig",

					  "extends": "./tsconfig.json",

					  "compilerOptions": {

					    "noEmit": true

					  },

					  "include": ["./__tests__/**/*", "./src/**/*"],

					  "exclude": ["./dist", "./node_modules", "./coverage", "*.json"]

					}

Author	SHA1	Message	Date
Meredith Lancaster	c2c8e8afdf	update actions/attest version Signed-off-by: Meredith Lancaster <[email protected]>	2025-12-18 16:40:22 -08:00
Meredith Lancaster	ef02dcfae5	add docs create-storage-record option and artifact-metadata permission Signed-off-by: Meredith Lancaster <[email protected]>	2025-12-18 16:25:02 -08:00
Meredith Lancaster	88ac301612	add create-storage-record option Signed-off-by: Meredith Lancaster <[email protected]>	2025-12-18 16:23:51 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Brian DeHamer	6ec0860adb	Bump @actions/core from 1.11.1 to 2.0.1 (#237 ) * Bump @actions/core from 1.11.1 to 2.0.1 Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.11.1 to 2.0.1. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/@actions/[email protected]/packages/core) --- updated-dependencies: - dependency-name: "@actions/core" dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> * rebuild dist Signed-off-by: Brian DeHamer <[email protected]> --------- Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Brian DeHamer <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brian DeHamer <[email protected]>	2025-12-15 16:39:13 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	532af8af79	Bump github/codeql-action in the actions-minor group (#233 ) Bumps the actions-minor group with 1 update: [github/codeql-action](https://github.com/github/codeql-action). Updates `github/codeql-action` from 4.31.7 to 4.31.8 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cf1bb45a277cb3c205638b2cd5c984db1c46a412...1b168cd39490f61582a9beae412bb7057a6b2c4e) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.31.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-12-15 11:38:04 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	4f3e64cb63	Bump @types/node from 24.10.1 to 25.0.2 (#236 ) Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.10.1 to 25.0.2. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 25.0.2 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-12-15 11:37:40 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	ba126a2b5e	Bump the npm-development group with 6 updates (#235 ) Bumps the npm-development group with 6 updates: \| Package \| From \| To \| \| --- \| --- \| --- \| \| [@actions/attest](https://github.com/actions/toolkit/tree/HEAD/packages/attest) \| `2.0.0` \| `2.1.0` \| \| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) \| `9.39.1` \| `9.39.2` \| \| [eslint](https://github.com/eslint/eslint) \| `9.39.1` \| `9.39.2` \| \| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) \| `29.2.1` \| `29.5.0` \| \| [markdownlint-cli](https://github.com/igorshubovych/markdownlint-cli) \| `0.46.0` \| `0.47.0` \| \| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) \| `8.48.1` \| `8.49.0` \| Updates `@actions/attest` from 2.0.0 to 2.1.0 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/attest/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/attest) Updates `@eslint/js` from 9.39.1 to 9.39.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v9.39.2/packages/js) Updates `eslint` from 9.39.1 to 9.39.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v9.39.1...v9.39.2) Updates `eslint-plugin-jest` from 29.2.1 to 29.5.0 - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v29.2.1...v29.5.0) Updates `markdownlint-cli` from 0.46.0 to 0.47.0 - [Release notes](https://github.com/igorshubovych/markdownlint-cli/releases) - [Commits](https://github.com/igorshubovych/markdownlint-cli/compare/v0.46.0...v0.47.0) Updates `typescript-eslint` from 8.48.1 to 8.49.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.49.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@actions/attest" dependency-version: 2.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@eslint/js" dependency-version: 9.39.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: eslint dependency-version: 9.39.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: eslint-plugin-jest dependency-version: 29.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: markdownlint-cli dependency-version: 0.47.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: typescript-eslint dependency-version: 8.49.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-12-15 11:23:26 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3867ba47a1	Bump actions/upload-artifact from 5.0.0 to 6.0.0 (#234 ) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5.0.0 to 6.0.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/330a01c490aca151604b8cf639adc76d48f6c5d4...b7c566a772e6b6bfb58ed0dc250532a479d7789f) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-12-15 11:22:47 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	95613fb241	Bump the actions-minor group with 3 updates (#231 ) Bumps the actions-minor group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node) and [github/codeql-action](https://github.com/github/codeql-action). Updates `actions/checkout` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3...8e8c483db84b4bee98b60c0593521ed34d9990e8) Updates `actions/setup-node` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/2028fbc5c25fe9cf00d9f06a71cc4710d4507903...395ad3262231945c25e8478fd5baf05154b1d79f) Updates `github/codeql-action` from 4.31.5 to 4.31.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/fdbfb4d2750291e159f0156def62b853c2798ca2...cf1bb45a277cb3c205638b2cd5c984db1c46a412) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor - dependency-name: actions/setup-node dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor - dependency-name: github/codeql-action dependency-version: 4.31.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-12-08 10:22:32 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	b2a1607a55	Bump the npm-development group with 2 updates (#232 ) Bumps the npm-development group with 2 updates: [prettier](https://github.com/prettier/prettier) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint). Updates `prettier` from 3.7.3 to 3.7.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/prettier/compare/3.7.3...3.7.4) Updates `typescript-eslint` from 8.48.0 to 8.48.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: prettier dependency-version: 3.7.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: typescript-eslint dependency-version: 8.48.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-12-08 10:19:13 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2dab46ceb6	Bump ts-jest in the npm-development group across 1 directory (#230 ) Bumps the npm-development group with 1 update in the / directory: [ts-jest](https://github.com/kulshekhar/ts-jest). Updates `ts-jest` from 29.4.5 to 29.4.6 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.4.5...v29.4.6) --- updated-dependencies: - dependency-name: ts-jest dependency-version: 29.4.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-12-01 12:19:53 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	9dc6831a72	Bump actions/upload-artifact from 4.6.2 to 5.0.0 (#217 ) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 5.0.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...330a01c490aca151604b8cf639adc76d48f6c5d4) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-12-01 10:45:18 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	b8f802ae8b	Bump github/codeql-action in the actions-minor group (#227 ) Bumps the actions-minor group with 1 update: [github/codeql-action](https://github.com/github/codeql-action). Updates `github/codeql-action` from 4.31.4 to 4.31.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e12f0178983d466f2f6028f5cc7a6d786fd97f4b...fdbfb4d2750291e159f0156def62b853c2798ca2) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.31.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-12-01 10:44:39 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Tingting Wang	542c22bbcc	Bump the npm-development group with 2 updates (#228 ) Bumps the npm-development group with 2 updates: [prettier](https://github.com/prettier/prettier) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint). Updates `prettier` from 3.6.2 to 3.7.3 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/prettier/compare/3.6.2...3.7.3) Updates `typescript-eslint` from 8.47.0 to 8.48.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.48.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: prettier dependency-version: 3.7.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: typescript-eslint dependency-version: 8.48.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Tingting Wang <[email protected]>	2025-12-01 10:43:47 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	d519ae0726	Bump @actions/attest from 1.6.0 to 2.0.0 (#229 ) Bumps [@actions/attest](https://github.com/actions/toolkit/tree/HEAD/packages/attest) from 1.6.0 to 2.0.0. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/attest/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/attest) --- updated-dependencies: - dependency-name: "@actions/attest" dependency-version: 2.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-12-01 10:40:51 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	fd7a65e0c0	Bump actions/setup-node from 4.4.0 to 6.0.0 (#215 ) Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4.4.0 to 6.0.0. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/49933ea5288caeca8642d1e84afbd3f7d6820020...2028fbc5c25fe9cf00d9f06a71cc4710d4507903) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-24 08:41:41 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	f2e6656b8e	Bump js-yaml from 3.14.1 to 3.14.2 (#221 ) Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.1 to 3.14.2. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/3.14.1...3.14.2) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-24 08:38:43 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	c3380f58e7	Bump glob from 10.4.5 to 10.5.0 (#226 ) Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.5 to 10.5.0. - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](https://github.com/isaacs/node-glob/compare/v10.4.5...v10.5.0) --- updated-dependencies: - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-24 08:38:15 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	61614eea5c	Bump the npm-development group across 1 directory with 7 updates (#225 ) Bumps the npm-development group with 7 updates in the / directory: \| Package \| From \| To \| \| --- \| --- \| --- \| \| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) \| `9.37.0` \| `9.39.1` \| \| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) \| `24.6.2` \| `24.10.1` \| \| [eslint](https://github.com/eslint/eslint) \| `9.37.0` \| `9.39.1` \| \| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) \| `29.0.1` \| `29.2.1` \| \| [markdownlint-cli](https://github.com/igorshubovych/markdownlint-cli) \| `0.45.0` \| `0.46.0` \| \| [ts-jest](https://github.com/kulshekhar/ts-jest) \| `29.4.4` \| `29.4.5` \| \| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) \| `8.45.0` \| `8.47.0` \| Updates `@eslint/js` from 9.37.0 to 9.39.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v9.39.1/packages/js) Updates `@types/node` from 24.6.2 to 24.10.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 9.37.0 to 9.39.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v9.37.0...v9.39.1) Updates `eslint-plugin-jest` from 29.0.1 to 29.2.1 - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v29.0.1...v29.2.1) Updates `markdownlint-cli` from 0.45.0 to 0.46.0 - [Release notes](https://github.com/igorshubovych/markdownlint-cli/releases) - [Commits](https://github.com/igorshubovych/markdownlint-cli/compare/v0.45.0...v0.46.0) Updates `ts-jest` from 29.4.4 to 29.4.5 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.4.4...v29.4.5) Updates `typescript-eslint` from 8.45.0 to 8.47.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.47.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 9.39.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@types/node" dependency-version: 24.10.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: eslint dependency-version: 9.39.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: eslint-plugin-jest dependency-version: 29.2.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: markdownlint-cli dependency-version: 0.46.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: ts-jest dependency-version: 29.4.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: typescript-eslint dependency-version: 8.47.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-24 07:56:38 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	e24c2a9074	Bump actions/checkout from 5.0.0 to 6.0.0 (#224 ) Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 6.0.0. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/08c6903cd8c0fde910a37f88322edcfb5dd907a8...1af3b93b6815bc44a9784bd300feb67ff0d1eeb3) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-24 07:55:39 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	9e5a1e06d2	Bump github/codeql-action from 3.29.11 to 4.31.4 (#223 ) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.11 to 4.31.4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/3c3833e0f8c1c83d449a7478aa59c036a9165498...e12f0178983d466f2f6028f5cc7a6d786fd97f4b) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.31.4 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-24 07:55:11 -08:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	580d4aff21	Bump the npm-development group across 1 directory with 8 updates (#210 ) Bumps the npm-development group with 8 updates in the / directory: \| Package \| From \| To \| \| --- \| --- \| --- \| \| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) \| `9.34.0` \| `9.37.0` \| \| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) \| `24.3.0` \| `24.6.2` \| \| [@vercel/ncc](https://github.com/vercel/ncc) \| `0.38.3` \| `0.38.4` \| \| [eslint](https://github.com/eslint/eslint) \| `9.34.0` \| `9.37.0` \| \| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) \| `30.1.1` \| `30.2.0` \| \| [ts-jest](https://github.com/kulshekhar/ts-jest) \| `29.4.1` \| `29.4.4` \| \| [typescript](https://github.com/microsoft/TypeScript) \| `5.9.2` \| `5.9.3` \| \| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) \| `8.41.0` \| `8.45.0` \| Updates `@eslint/js` from 9.34.0 to 9.37.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v9.37.0/packages/js) Updates `@types/node` from 24.3.0 to 24.6.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vercel/ncc` from 0.38.3 to 0.38.4 - [Release notes](https://github.com/vercel/ncc/releases) - [Commits](https://github.com/vercel/ncc/compare/0.38.3...0.38.4) Updates `eslint` from 9.34.0 to 9.37.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v9.34.0...v9.37.0) Updates `jest` from 30.1.1 to 30.2.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest) Updates `ts-jest` from 29.4.1 to 29.4.4 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.4.1...v29.4.4) Updates `typescript` from 5.9.2 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml) - [Commits](https://github.com/microsoft/TypeScript/compare/v5.9.2...v5.9.3) Updates `typescript-eslint` from 8.41.0 to 8.45.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.45.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 9.37.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@types/node" dependency-version: 24.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@vercel/ncc" dependency-version: 0.38.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: eslint dependency-version: 9.37.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: jest dependency-version: 30.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: ts-jest dependency-version: 29.4.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: typescript-eslint dependency-version: 8.45.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-10-06 10:21:24 -07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	def7784df6	Bump github/codeql-action in the actions-minor group (#207 ) Bumps the actions-minor group with 1 update: [github/codeql-action](https://github.com/github/codeql-action). Updates `github/codeql-action` from 3.29.9 to 3.29.11 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/df559355d593797519d70b90fc8edd5db049e7a2...3c3833e0f8c1c83d449a7478aa59c036a9165498) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.29.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-10-06 10:21:09 -07:00
Brian DeHamerandGitHub	4e404e7097	prepare docs for v3 release (#205 ) Signed-off-by: Brian DeHamer <[email protected]>	2025-08-28 16:23:26 -07:00
Brian DeHamerandGitHub	4651f806c0	bump attest-sbom/predicate to v2.0.0 (#206 ) Signed-off-by: Brian DeHamer <[email protected]>	2025-08-28 15:38:20 -07:00
Brian DeHamer GitHub Salman Muin Kayser Chishti	55e972012f	make node24 upgrade (#204 ) Co-authored-by: Salman Muin Kayser Chishti <[email protected]>	2025-08-28 15:33:55 -07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	c2dd1df1ec	Bump the npm-development group across 1 directory with 5 updates (#203 ) Bumps the npm-development group with 5 updates in the / directory: \| Package \| From \| To \| \| --- \| --- \| --- \| \| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) \| `9.33.0` \| `9.34.0` \| \| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) \| `24.2.1` \| `24.3.0` \| \| [eslint](https://github.com/eslint/eslint) \| `9.33.0` \| `9.34.0` \| \| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) \| `30.0.5` \| `30.1.1` \| \| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) \| `8.39.0` \| `8.41.0` \| Updates `@eslint/js` from 9.33.0 to 9.34.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/commits/v9.34.0/packages/js) Updates `@types/node` from 24.2.1 to 24.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 9.33.0 to 9.34.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/compare/v9.33.0...v9.34.0) Updates `jest` from 30.0.5 to 30.1.1 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.1.1/packages/jest) Updates `typescript-eslint` from 8.39.0 to 8.41.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.41.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 9.34.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@types/node" dependency-version: 24.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: eslint dependency-version: 9.34.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: jest dependency-version: 30.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: typescript-eslint dependency-version: 8.41.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-08-28 15:28:18 -07:00
Brian DeHamerandGitHub	87ab9bb01b	bump actions/attest from v2.4.0 to v3.0.0 (#202 ) Signed-off-by: Brian DeHamer <[email protected]>	2025-08-28 15:22:38 -07:00
Brian DeHamerandGitHub	24900ce153	custom node max-http-header-size (#201 ) Signed-off-by: Brian DeHamer <[email protected]>	2025-08-28 15:21:59 -07:00
Brian DeHamerandGitHub	484c81f0bd	refactor eslint config (#200 ) Signed-off-by: Brian DeHamer <[email protected]>	2025-08-28 15:21:40 -07:00
Brian DeHamerandGitHub	eec1ec9904	pin workflow deps (#195 ) Signed-off-by: Brian DeHamer <[email protected]>	2025-08-14 15:29:10 -07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	b06100ab07	Bump the npm-development group across 1 directory with 6 updates (#194 ) Bumps the npm-development group with 6 updates in the / directory: \| Package \| From \| To \| \| --- \| --- \| --- \| \| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) \| `9.32.0` \| `9.33.0` \| \| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) \| `24.1.0` \| `24.2.1` \| \| [eslint](https://github.com/eslint/eslint) \| `9.32.0` \| `9.33.0` \| \| [ts-jest](https://github.com/kulshekhar/ts-jest) \| `29.4.0` \| `29.4.1` \| \| [typescript](https://github.com/microsoft/TypeScript) \| `5.8.3` \| `5.9.2` \| \| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) \| `8.38.0` \| `8.39.0` \| Updates `@eslint/js` from 9.32.0 to 9.33.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/commits/v9.33.0/packages/js) Updates `@types/node` from 24.1.0 to 24.2.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 9.32.0 to 9.33.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/compare/v9.32.0...v9.33.0) Updates `ts-jest` from 29.4.0 to 29.4.1 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.4.0...v29.4.1) Updates `typescript` from 5.8.3 to 5.9.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml) - [Commits](https://github.com/microsoft/TypeScript/compare/v5.8.3...v5.9.2) Updates `typescript-eslint` from 8.38.0 to 8.39.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.39.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 9.33.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@types/node" dependency-version: 24.2.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: eslint dependency-version: 9.33.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: ts-jest dependency-version: 29.4.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: typescript dependency-version: 5.9.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: typescript-eslint dependency-version: 8.39.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-08-11 08:58:45 -07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	ccb8edd7db	Bump the npm-development group with 5 updates (#191 ) Bumps the npm-development group with 5 updates: \| Package \| From \| To \| \| --- \| --- \| --- \| \| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) \| `9.30.1` \| `9.32.0` \| \| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) \| `24.0.10` \| `24.1.0` \| \| [eslint](https://github.com/eslint/eslint) \| `9.30.1` \| `9.32.0` \| \| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) \| `30.0.4` \| `30.0.5` \| \| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) \| `8.35.1` \| `8.38.0` \| Updates `@eslint/js` from 9.30.1 to 9.32.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/commits/v9.32.0/packages/js) Updates `@types/node` from 24.0.10 to 24.1.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 9.30.1 to 9.32.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/compare/v9.30.1...v9.32.0) Updates `jest` from 30.0.4 to 30.0.5 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.0.5/packages/jest) Updates `typescript-eslint` from 8.35.1 to 8.38.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.38.0/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 9.32.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@types/node" dependency-version: 24.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: eslint dependency-version: 9.32.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: jest dependency-version: 30.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: typescript-eslint dependency-version: 8.38.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-28 10:21:52 -07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Eugene	9a005994da	Bump the npm-development group with 5 updates (#189 ) Bumps the npm-development group with 5 updates: \| Package \| From \| To \| \| --- \| --- \| --- \| \| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) \| `9.30.0` \| `9.30.1` \| \| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) \| `24.0.7` \| `24.0.10` \| \| [eslint](https://github.com/eslint/eslint) \| `9.30.0` \| `9.30.1` \| \| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) \| `30.0.3` \| `30.0.4` \| \| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) \| `8.35.0` \| `8.35.1` \| Updates `@eslint/js` from 9.30.0 to 9.30.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/commits/v9.30.1/packages/js) Updates `@types/node` from 24.0.7 to 24.0.10 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 9.30.0 to 9.30.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/compare/v9.30.0...v9.30.1) Updates `jest` from 30.0.3 to 30.0.4 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.0.4/packages/jest) Updates `typescript-eslint` from 8.35.0 to 8.35.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.35.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 9.30.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: "@types/node" dependency-version: 24.0.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: eslint dependency-version: 9.30.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: jest dependency-version: 30.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: typescript-eslint dependency-version: 8.35.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Eugene <[email protected]>	2025-07-22 10:52:32 -04:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	57a8b1e21b	Bump super-linter/super-linter from 7.4.0 to 8.0.0 (#190 ) --- updated-dependencies: - dependency-name: super-linter/super-linter dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-22 10:48:52 -04:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	0d73e3f2be	Bump the npm-development group across 1 directory with 7 updates (#188 ) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 9.30.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@types/node" dependency-version: 24.0.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: eslint dependency-version: 9.30.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: eslint-plugin-import dependency-version: 2.32.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: jest dependency-version: 30.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: prettier dependency-version: 3.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: typescript-eslint dependency-version: 8.35.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-06-30 09:47:46 -07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2548367d4f	Bump eslint-plugin-jest from 28.14.0 to 29.0.1 (#186 ) Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 28.14.0 to 29.0.1. - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v28.14.0...v29.0.1) --- updated-dependencies: - dependency-name: eslint-plugin-jest dependency-version: 29.0.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-06-23 10:08:15 -07:00
Brian DeHamerandGitHub	f4e8bae046	update vulnerable deps (#184 ) Signed-off-by: Brian DeHamer <[email protected]>	2025-06-17 12:14:15 -07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Brian DeHamer	0486c4aa49	Bump jest and @types/jest (#182 ) * Bump jest and @types/jest Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) and [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest). These dependencies needed to be updated together. Updates `jest` from 29.7.0 to 30.0.0 - [Release notes](https://github.com/jestjs/jest/releases) - [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jestjs/jest/commits/v30.0.0/packages/jest) Updates `@types/jest` from 29.5.14 to 30.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest) --- updated-dependencies: - dependency-name: jest dependency-version: 30.0.0 dependency-type: direct:development update-type: version-update:semver-major - dependency-name: "@types/jest" dependency-version: 30.0.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> * ts isolated modules Signed-off-by: Brian DeHamer <[email protected]> * test coverage Signed-off-by: Brian DeHamer <[email protected]> * rebuild dist Signed-off-by: Brian DeHamer <[email protected]> --------- Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Brian DeHamer <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brian DeHamer <[email protected]>	2025-06-17 09:51:48 -07:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	e9b2cefbdf	Bump the npm-development group across 1 directory with 6 updates (#183 ) Bumps the npm-development group with 6 updates in the / directory: \| Package \| From \| To \| \| --- \| --- \| --- \| \| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) \| `9.28.0` \| `9.29.0` \| \| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) \| `24.0.1` \| `24.0.3` \| \| [eslint](https://github.com/eslint/eslint) \| `9.28.0` \| `9.29.0` \| \| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) \| `28.12.0` \| `28.14.0` \| \| [ts-jest](https://github.com/kulshekhar/ts-jest) \| `29.3.4` \| `29.4.0` \| \| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) \| `8.33.0` \| `8.34.1` \| Updates `@eslint/js` from 9.28.0 to 9.29.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/commits/v9.29.0/packages/js) Updates `@types/node` from 24.0.1 to 24.0.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `eslint` from 9.28.0 to 9.29.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md) - [Commits](https://github.com/eslint/eslint/compare/v9.28.0...v9.29.0) Updates `eslint-plugin-jest` from 28.12.0 to 28.14.0 - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v28.12.0...v28.14.0) Updates `ts-jest` from 29.3.4 to 29.4.0 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.3.4...v29.4.0) Updates `typescript-eslint` from 8.33.0 to 8.34.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.34.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: "@eslint/js" dependency-version: 9.29.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: "@types/node" dependency-version: 24.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-development - dependency-name: eslint dependency-version: 9.29.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: eslint-plugin-jest dependency-version: 28.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: ts-jest dependency-version: 29.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development - dependency-name: typescript-eslint dependency-version: 8.34.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-06-17 09:33:41 -07:00

Compare commits