actions/component-detection-dependency-submission-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
150 Commits 50 Branches 0 Tags
bcaa41e34f105850434e8628aeecd7f5c23b1eeb
Commit Graph

31 Commits

Author SHA1 Message Date
Justin Hutchings bcaa41e34f Update docs for ownership change (#2) 
* Add files to prepare for ownership change

* Fix tests

* Update repo name

* Update dependencies

* Attempt to fix permissions issues blocking test

* Update permissions

* Add environment variable

* Fix variable name

* Update test.yml

* Update test.yml
 2023-04-07 16:21:17 -07:00
dependabot[bot] db972bc58b Bump @vercel/ncc from 0.36.0 to 0.36.1 
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.36.0 to 0.36.1.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.36.0...0.36.1)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-15 00:20:32 +00:00
dependabot[bot] 1838b199f2 Bump jest and @types/jest 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) and [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest). These dependencies needed to be updated together.

Updates `jest` from 29.3.1 to 29.4.2
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.4.2/packages/jest)

Updates `@types/jest` from 29.2.6 to 29.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-15 00:16:54 +00:00
dependabot[bot] 247087dbbb Bump eslint from 8.32.0 to 8.34.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.32.0 to 8.34.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.32.0...v8.34.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-13 11:21:36 +00:00
Justin Hutchings eb5000d83f Merge pull request #2 from jhutchings1/dependabot/npm_and_yarn/eslint-8.32.0 
Bump eslint from 8.29.0 to 8.32.0
 2023-01-22 12:52:39 -08:00
Justin Hutchings 2be4283f9e Merge pull request #4 from jhutchings1/dependabot/npm_and_yarn/github/dependency-submission-toolkit-1.2.8 
Bump @github/dependency-submission-toolkit from 1.2.7 to 1.2.8
 2023-01-22 12:52:27 -08:00
dependabot[bot] af6d383e1c Bump eslint from 8.29.0 to 8.32.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.29.0 to 8.32.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.29.0...v8.32.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-22 20:29:17 +00:00
dependabot[bot] 9a9ab16d9f Bump @github/dependency-submission-toolkit from 1.2.7 to 1.2.8 
Bumps [@github/dependency-submission-toolkit](https://github.com/github/dependency-submission-toolkit) from 1.2.7 to 1.2.8.
- [Release notes](https://github.com/github/dependency-submission-toolkit/releases)
- [Commits](https://github.com/github/dependency-submission-toolkit/compare/v1.2.7...v1.2.8)

---
updated-dependencies:
- dependency-name: "@github/dependency-submission-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-22 20:29:17 +00:00
dependabot[bot] 9246b1abd3 Bump @types/glob from 8.0.0 to 8.0.1 
Bumps [@types/glob](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/glob) from 8.0.0 to 8.0.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/glob)

---
updated-dependencies:
- dependency-name: "@types/glob"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-22 20:29:16 +00:00
Justin Hutchings e2c79b684b Stub component detection download and execution 2023-01-21 21:56:51 +00:00
Justin Hutchings 2e4172a352 Stub release download code 2023-01-20 19:38:27 +00:00
Justin Hutchings 05ff2bfe02 Fix typescript errors 2023-01-20 00:41:22 +00:00
Justin Hutchings 6de9c7319f Convert from spdx parser to yaml - boilerplate 2023-01-19 20:10:29 +00:00
Justin Hutchings 83dc76315e Merge branch 'main' into dependency-fix 2022-12-06 15:48:20 -08:00
dependabot[bot] 9bb9a15640 Bump jest from 29.1.2 to 29.3.1 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) from 29.1.2 to 29.3.1.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.3.1/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-06 23:45:29 +00:00
dependabot[bot] 2592144c28 Bump @vercel/ncc from 0.34.0 to 0.36.0 
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.34.0 to 0.36.0.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.34.0...0.36.0)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-06 23:44:29 +00:00
Justin Hutchings bf4a11a1fb Merge pull request #34 from jhutchings1/dependabot/npm_and_yarn/eslint-8.29.0 
Bump eslint from 8.24.0 to 8.29.0
 2022-12-06 15:43:47 -08:00
dependabot[bot] fb599e9542 Bump eslint from 8.24.0 to 8.29.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.24.0 to 8.29.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.24.0...v8.29.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-05 21:20:19 +00:00
dependabot[bot] f225c3002b Bump @github/dependency-submission-toolkit from 1.2.3 to 1.2.7 
Bumps [@github/dependency-submission-toolkit](https://github.com/github/dependency-submission-toolkit) from 1.2.3 to 1.2.7.
- [Release notes](https://github.com/github/dependency-submission-toolkit/releases)
- [Commits](https://github.com/github/dependency-submission-toolkit/compare/v1.2.3...v1.2.7)

---
updated-dependencies:
- dependency-name: "@github/dependency-submission-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-28 21:49:33 +00:00
dependabot[bot] a3bc6eb3c7 Bump @github/dependency-submission-toolkit from 1.2.2 to 1.2.3 
Bumps [@github/dependency-submission-toolkit](https://github.com/github/dependency-submission-toolkit) from 1.2.2 to 1.2.3.
- [Release notes](https://github.com/github/dependency-submission-toolkit/releases)
- [Commits](https://github.com/github/dependency-submission-toolkit/compare/v1.2.2...v1.2.3)

---
updated-dependencies:
- dependency-name: "@github/dependency-submission-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-05 22:20:48 +00:00
dependabot[bot] 042a93c85c Bump eslint from 8.5.0 to 8.24.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.5.0 to 8.24.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.5.0...v8.24.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-05 03:52:44 +00:00
dependabot[bot] f0a3d22d5d Bump @vercel/ncc from 0.31.1 to 0.34.0 
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.31.1 to 0.34.0.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.31.1...0.34.0)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-05 03:48:26 +00:00
Justin Hutchings ebedcc1fe4 Merge pull request #17 from jhutchings1/dependabot/npm_and_yarn/actions/core-1.10.0 
Bump @actions/core from 1.6.0 to 1.10.0
 2022-10-04 20:47:26 -07:00
dependabot[bot] 2912044087 Bump jest from 27.4.5 to 29.1.2 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) from 27.4.5 to 29.1.2.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.1.2/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-04 23:42:33 +00:00
dependabot[bot] 6917ba48be Bump @actions/core from 1.6.0 to 1.10.0 
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.6.0 to 1.10.0.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-04 23:39:49 +00:00
Justin Hutchings 7c3b372567 Fix encoding issues 2022-10-04 14:35:19 -07:00
Justin Hutchings ab368561f7 Add character decoding 2022-10-04 14:26:24 -07:00
Justin Hutchings 168c9a869c Update context 2022-10-04 09:44:26 -07:00
Justin Hutchings 07788c269f Remove malware package for the actual dependency 2022-08-25 12:25:30 -07:00
Justin Hutchings aa7e545573 Initial attempt (untested) 2022-08-25 11:50:14 -07:00
Justin Hutchings 1467e01173 Initial commit 2022-08-25 09:12:00 -07:00