actions/component-detection-dependency-submission-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
204 Commits 50 Branches 0 Tags
472123c5f10d99b6abc68e14dbac4d5259c32cf1
Commit Graph

204 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Justin Hutchings 472123c5f1 Update docs 2024-08-26 23:28:42 +00:00
Justin Hutchings 8ad6ba7803 Clean up code 2024-08-26 23:22:50 +00:00
Justin Hutchings 6b81b8e569 Change from convenience method to rest command 2024-08-26 23:19:44 +00:00
Justin Hutchings b241c92568 Rebuild dist 2024-08-26 23:08:02 +00:00
Justin Hutchings 6130522064 Add debugging 2024-08-26 23:07:59 +00:00
Justin Hutchings cff2be16fa Add debugging 2024-08-26 22:54:29 +00:00
Justin Hutchings 723a111a61 Rebuild dist 2024-08-26 22:51:12 +00:00
Justin Hutchings 5787da590b Add fetch 2024-08-26 22:51:04 +00:00
Justin Hutchings 61b2daa67f Rebuild dist 2024-08-26 22:49:31 +00:00
Justin Hutchings 9b4a8182c2 Change octokit from Actions specific one to generic one 2024-08-26 22:49:12 +00:00
Justin Hutchings 0f2d542cef Rebuild dist 2024-08-26 22:45:02 +00:00
Justin Hutchings 9ff0000670 Add debugging 2024-08-26 22:39:44 +00:00
Justin Hutchings 01216ee138 Add debugging 2024-08-26 22:35:19 +00:00
Justin Hutchings a0e040ff7b Tweak GHES fix to make it off by default 2024-08-26 21:30:17 +00:00
Justin Hutchings a0a4b55d4d Tweak GHES fix 2024-08-26 21:28:19 +00:00
Justin Hutchings 8511b070f0 Create fix for Add GitHub Enterprise Server support #42 2024-08-26 21:24:18 +00:00
Justin Hutchings 7303e5e522 Merge pull request #43 from advanced-security/dependabot/npm_and_yarn/test/npm_and_yarn-49b2ef70b2 
Bump the npm_and_yarn group across 1 directory with 4 updates
 2024-05-08 07:07:45 +10:00
Justin Hutchings 63a8d8de1e Merge pull request #44 from advanced-security/dependabot/npm_and_yarn/npm_and_yarn-49b2ef70b2 
Bump the npm_and_yarn group with 4 updates
 2024-05-08 07:06:27 +10:00
dependabot[bot] d8d3455ed6 Bump the npm_and_yarn group with 4 updates 
Bumps the npm_and_yarn group with 4 updates: [tar](https://github.com/isaacs/node-tar), [yaml](https://github.com/eemeli/yaml), [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) and [undici](https://github.com/nodejs/undici).


Updates `tar` from 6.1.13 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v6.1.13...v6.2.1)

Updates `yaml` from 2.2.1 to 2.2.2
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.2.1...v2.2.2)

Updates `@babel/traverse` from 7.20.5 to 7.24.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.24.5/packages/babel-traverse)

Updates `undici` from 5.21.0 to 5.28.4
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.21.0...v5.28.4)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: yaml
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-07 20:32:29 +00:00
dependabot[bot] 2e5dd5d452 Bump the npm_and_yarn group across 1 directory with 4 updates 
Bumps the npm_and_yarn group with 4 updates in the /test directory: [tar](https://github.com/isaacs/node-tar), [yaml](https://github.com/eemeli/yaml), [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) and [undici](https://github.com/nodejs/undici).


Updates `tar` from 6.1.13 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v6.1.13...v6.2.1)

Updates `yaml` from 2.2.1 to 2.2.2
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.2.1...v2.2.2)

Updates `@babel/traverse` from 7.20.5 to 7.24.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.24.5/packages/babel-traverse)

Updates `undici` from 5.10.0 to 5.28.4
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.10.0...v5.28.4)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: yaml
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-07 20:32:23 +00:00
Justin Hutchings 3ea8a853fc Merge pull request #39 from advanced-security/dependabot/github_actions/actions/setup-node-3.7.0 
Bump actions/setup-node from 3.6.0 to 3.7.0
 2024-05-08 06:30:55 +10:00
Justin Hutchings d2ad702059 Add grouping, disable version updates for npm 2024-05-08 06:29:56 +10:00
Justin Hutchings 384d6ea0b6 Merge pull request #41 from advanced-security/dependabot/npm_and_yarn/eslint-8.46.0 
Bump eslint from 8.40.0 to 8.46.0
 2024-05-08 06:26:37 +10:00
dependabot[bot] 34535ba482 Bump eslint from 8.40.0 to 8.46.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.40.0 to 8.46.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.40.0...v8.46.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-31 13:26:37 +00:00
Lane Seppala efe25be749 Merge pull request #23 from felickz/patch-1 
Readme to v0.0.2
 2023-07-18 11:40:42 -06:00
dependabot[bot] e1ef448669 Bump actions/setup-node from 3.6.0 to 3.7.0 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3.6.0...v3.7.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-06 13:36:32 +00:00
Lane Seppala d05bcf1b85 Merge pull request #14 from lseppala/lsep/purl-qualifiers 
Fix encoding of PURL qualifiers
 2023-06-02 10:51:37 -06:00
Lane Seppala 5961fd4755 Defensively guard against dangling ? from qualifiers 2023-06-02 16:07:51 +00:00
Lane Seppala 83edbc93dd Qualifiers are a map of string key-value pairs 2023-06-02 15:24:39 +00:00
Chad Bentz 2a225a4eaf Readme to v0.0.2 2023-05-12 14:48:18 -04:00
Lane Seppala 5a8ce4ad8c Merge pull request #15 from advanced-security/dependabot/npm_and_yarn/types/jest-29.5.1 
Bump @types/jest from 29.5.0 to 29.5.1
 2023-05-11 14:57:08 -06:00
dependabot[bot] b8dd335ebd Bump @types/jest from 29.5.0 to 29.5.1 
Bumps [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) from 29.5.0 to 29.5.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-08 16:53:10 +00:00
Lane Seppala 08766c4e76 Merge pull request #22 from advanced-security/dependabot/npm_and_yarn/eslint-8.40.0 
Bump eslint from 8.38.0 to 8.40.0
 2023-05-08 10:52:35 -06:00
Lane Seppala 85c7fa27c0 Merge pull request #20 from felickz/main 
Add Windows support ( closes #19)
 2023-05-08 10:51:53 -06:00
Chad Bentz 9b5bb33c5e run prepare on non windows machine 2023-05-08 10:19:21 -04:00
dependabot[bot] b0c43e3bfe Bump eslint from 8.38.0 to 8.40.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.38.0 to 8.40.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.38.0...v8.40.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-08 14:10:23 +00:00
Chad Bentz cdeac4436f npm run prepare 2023-05-05 00:47:37 -04:00
Chad Bentz eea402190d Merge pull request #1 from felickz/windows 
Windows
 2023-05-05 00:25:34 -04:00
Chad Bentz 8a403ce453 add debug logs 2023-05-05 00:21:28 -04:00
Chad Bentz df3fb46172 set proper path to exe on win 2023-05-05 00:03:32 -04:00
Chad Bentz 6dc027ab22 Detect OS when installing 2023-05-04 22:57:27 -04:00
Justin Hutchings aaade1b507 Remove unneeded devcontainer 2023-04-07 23:39:23 +00:00
Justin Hutchings fcd8b671dc Merge pull request #8 from advanced-security/dependabot/npm_and_yarn/github/dependency-submission-toolkit-1.2.10 
Bump @github/dependency-submission-toolkit from 1.2.8 to 1.2.10
 2023-04-07 16:36:18 -07:00
Justin Hutchings c1fc8be9d9 Merge pull request #12 from advanced-security/dependabot/npm_and_yarn/jest-and-types/jest-29.5.0 
Bump jest and @types/jest
 2023-04-07 16:34:27 -07:00
Justin Hutchings 2706f2e970 Rebuild dist 2023-04-07 23:33:46 +00:00
dependabot[bot] 993666f762 Bump jest and @types/jest 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) and [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest). These dependencies needed to be updated together.

Updates `jest` from 29.4.2 to 29.5.0
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.5.0/packages/jest)

Updates `@types/jest` from 29.4.0 to 29.5.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-07 23:32:14 +00:00
Justin Hutchings ab80ace1b8 Merge pull request #4 from advanced-security/dependabot/npm_and_yarn/types/glob-8.1.0 
Bump @types/glob from 8.0.1 to 8.1.0
 2023-04-07 16:31:27 -07:00
dependabot[bot] ae7e494eac Bump @github/dependency-submission-toolkit from 1.2.8 to 1.2.10 
Bumps [@github/dependency-submission-toolkit](https://github.com/github/dependency-submission-toolkit) from 1.2.8 to 1.2.10.
- [Release notes](https://github.com/github/dependency-submission-toolkit/releases)
- [Commits](https://github.com/github/dependency-submission-toolkit/compare/v1.2.8...v1.2.10)

---
updated-dependencies:
- dependency-name: "@github/dependency-submission-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-07 23:28:19 +00:00
dependabot[bot] 1c4b470cd1 Bump @types/glob from 8.0.1 to 8.1.0 
Bumps [@types/glob](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/glob) from 8.0.1 to 8.1.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/glob)

---
updated-dependencies:
- dependency-name: "@types/glob"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-07 23:28:11 +00:00
Justin Hutchings 8d1e4e5664 Merge pull request #13 from advanced-security/dependabot/npm_and_yarn/eslint-8.38.0 
Bump eslint from 8.34.0 to 8.38.0
 2023-04-07 16:27:36 -07:00