 Federico Builes
|
0fa40c3c10
|
bumping to 4.2.3.
|
2024-03-20 17:57:26 +01:00 |
|
|
Federico BuilesandGitHub
|
1f6240f54c
|
Merge pull request #707 from laughedelic/feat/data-outputs
Add outputs for the changes data
|
2024-03-20 17:47:40 +01:00 |
|
|
Federico BuilesandGitHub
|
b751d41e7e
|
Merge pull request #702 from actions/dependabot/npm_and_yarn/nodemon-3.1.0
Bump nodemon from 3.0.3 to 3.1.0
|
2024-03-20 06:48:20 +01:00 |
|
|
Federico BuilesandGitHub
|
6183eb9d2b
|
Merge pull request #703 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.9.0
Bump eslint-plugin-jest from 27.6.3 to 27.9.0
|
2024-03-20 06:48:14 +01:00 |
|
|
Federico BuilesandGitHub
|
36297aa214
|
Merge pull request #716 from actions/dependabot/npm_and_yarn/types/node-20.11.28
Bump @types/node from 20.11.19 to 20.11.28
|
2024-03-18 05:01:38 +01:00 |
|
|
Federico BuilesandGitHub
|
adaed32746
|
Merge pull request #709 from jhutchings1/scorecard
Add support for calculating OpenSSF Scorecards
|
2024-03-14 06:30:21 +01:00 |
|
|
Federico BuilesandGitHub
|
40eb2b8b00
|
Merge pull request #698 from jsoref/set-comment-as-output
Set comment as output
|
2024-02-21 12:36:50 +01:00 |
|
|
Federico Builes
|
9129d7d40b
|
don't set output on every run
|
2024-02-20 18:47:36 +01:00 |
|
|
Federico Builes
|
587ff57efd
|
Don't use if: always() in examples.
|
2024-02-19 18:11:35 +01:00 |
|
|
Federico Builes
|
be8bc500ee
|
Merge branch 'output-comment'
|
2024-02-19 17:26:04 +01:00 |
|
|
Federico BuilesandGitHub
|
cb180bf383
|
Merge pull request #696 from actions/output-comment
Expose dependency comment content
|
2024-02-19 17:23:55 +01:00 |
|
|
Federico Builes
|
b2ea187fd2
|
bumping action version
|
2024-02-19 17:21:55 +01:00 |
|
|
Federico BuilesandGitHub
|
c94f57ba90
|
Add a new image for the example report.
|
2024-02-19 17:18:02 +01:00 |
|
|
Federico Builes
|
124fafe31e
|
Merge branch 'issue-250' into output-comment
|
2024-02-19 17:12:19 +01:00 |
|
|
Federico Builes
|
26174d80a2
|
Merge branch 'issue-250' of https://github.com/jsoref/dependency-review-action into issue-250
|
2024-02-19 17:12:08 +01:00 |
|
|
Federico Builes
|
a87338ac8a
|
Update example workflow.
|
2024-02-19 17:10:11 +01:00 |
|
|
Federico Builes
|
7911825c25
|
Point directly to DR API.
|
2024-02-19 16:38:15 +01:00 |
|
|
Federico Builes
|
ad040f4b88
|
adding dist/
|
2024-02-19 16:22:53 +01:00 |
|
|
Federico Builes
|
fd07d42ce8
|
bumping to 4.1.1
|
2024-02-19 10:03:58 +01:00 |
|
|
Federico Builes
|
77290ae4a1
|
bump transitive dep on undici
|
2024-02-19 10:03:58 +01:00 |
|
|
Federico BuilesandGitHub
|
9411082069
|
Merge pull request #693 from actions/dependabot/npm_and_yarn/types/node-20.11.19
Bump @types/node from 20.11.17 to 20.11.19
|
2024-02-19 08:54:35 +01:00 |
|
|
Federico Builes
|
80f10bf419
|
Bump to 4.1.0.
|
2024-02-14 08:13:14 +01:00 |
|
|
Federico BuilesandGitHub
|
17728c80ab
|
Merge pull request #689 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.21.0
Bump @typescript-eslint/eslint-plugin from 6.20.0 to 6.21.0
|
2024-02-12 06:31:08 +01:00 |
|
|
Federico BuilesandGitHub
|
1ebcf1475c
|
Merge pull request #690 from actions/dependabot/npm_and_yarn/types/node-20.11.17
Bump @types/node from 20.11.10 to 20.11.17
|
2024-02-12 06:28:34 +01:00 |
|
|
Federico BuilesandGitHub
|
5777ce6aec
|
Merge pull request #688 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.21.0
Bump @typescript-eslint/parser from 6.20.0 to 6.21.0
|
2024-02-12 06:28:19 +01:00 |
|
|
Federico BuilesandGitHub
|
37dd5f9e8a
|
Merge pull request #687 from actions/dependabot/npm_and_yarn/ts-jest-29.1.2
Bump ts-jest from 29.1.1 to 29.1.2
|
2024-02-12 06:28:12 +01:00 |
|
|
Federico BuilesandGitHub
|
ba2d570913
|
Merge pull request #682 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.20.0
Bump @typescript-eslint/eslint-plugin from 6.19.1 to 6.20.0
|
2024-02-05 07:57:39 +01:00 |
|
|
Federico BuilesandGitHub
|
58e8c75f3b
|
Merge pull request #684 from actions/dependabot/npm_and_yarn/got-14.2.0
Bump got from 14.0.0 to 14.2.0
|
2024-02-05 07:55:50 +01:00 |
|
|
Federico BuilesandGitHub
|
b3aa197a26
|
Merge pull request #683 from actions/dependabot/npm_and_yarn/prettier-3.2.5
Bump prettier from 3.2.4 to 3.2.5
|
2024-02-05 07:55:42 +01:00 |
|
|
Federico BuilesandGitHub
|
4e78eb60ef
|
Merge pull request #681 from actions/dependabot/npm_and_yarn/types/jest-29.5.12
Bump @types/jest from 29.5.11 to 29.5.12
|
2024-02-05 07:54:49 +01:00 |
|
|
Federico BuilesandGitHub
|
65f749b96d
|
Merge pull request #680 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.20.0
Bump @typescript-eslint/parser from 6.18.1 to 6.20.0
|
2024-02-05 07:54:36 +01:00 |
|
|
Federico BuilesandGitHub
|
a7da313c35
|
Merge pull request #675 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.19.1
Bump @typescript-eslint/eslint-plugin from 6.18.1 to 6.19.1
|
2024-01-29 07:50:12 +01:00 |
|
|
Federico BuilesandGitHub
|
8953f45584
|
Merge pull request #674 from actions/dependabot/npm_and_yarn/types/node-20.11.10
Bump @types/node from 20.11.5 to 20.11.10
|
2024-01-29 07:49:59 +01:00 |
|
|
Federico Builes
|
935098a950
|
updating @types/node to Node 20
|
2024-01-22 07:54:40 +01:00 |
|
|
Federico BuilesandGitHub
|
b658b91622
|
Merge pull request #669 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.6.3
Bump eslint-plugin-jest from 27.6.0 to 27.6.3
|
2024-01-22 07:40:35 +01:00 |
|
|
Federico BuilesandGitHub
|
0381eac2bc
|
Merge pull request #667 from actions/dependabot/npm_and_yarn/eslint-plugin-prettier-5.1.3
Bump eslint-plugin-prettier from 5.1.2 to 5.1.3
|
2024-01-22 07:36:52 +01:00 |
|
|
Federico Builes
|
4cd9eb2d23
|
Updating docs to point to v4.
|
2024-01-18 14:23:52 +01:00 |
|
|
Federico Builes
|
4901385134
|
bump to 4.0.0
|
2024-01-18 13:57:38 +01:00 |
|
|
Federico BuilesandGitHub
|
dbf82a4a5e
|
Merge pull request #639 from takost/takost/update-to-node-20
Update action to node20
|
2024-01-18 13:52:05 +01:00 |
|
|
Federico BuilesandGitHub
|
78aeb2a948
|
Merge pull request #663 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.18.1
Bump @typescript-eslint/parser from 6.18.0 to 6.18.1
|
2024-01-15 06:39:13 +01:00 |
|
|
Federico BuilesandGitHub
|
9560737c5e
|
Merge pull request #661 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.18.1
Bump @typescript-eslint/eslint-plugin from 6.18.0 to 6.18.1
|
2024-01-15 06:37:15 +01:00 |
|
|
Federico BuilesandGitHub
|
4125f47f7e
|
Merge pull request #660 from actions/dependabot/npm_and_yarn/types/node-16.18.70
Bump @types/node from 16.18.62 to 16.18.70
|
2024-01-15 06:37:05 +01:00 |
|
|
Federico BuilesandGitHub
|
f0b304d0bc
|
Merge pull request #653 from actions/dependabot/npm_and_yarn/got-14.0.0
Bump got from 13.0.0 to 14.0.0
|
2024-01-09 13:24:33 +01:00 |
|
|
Federico BuilesandGitHub
|
e41543eaf0
|
Merge pull request #656 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.18.0
Bump @typescript-eslint/parser from 6.16.0 to 6.18.0
|
2024-01-08 11:50:44 +01:00 |
|
|
Federico BuilesandGitHub
|
b5f60d5e37
|
Merge pull request #657 from actions/dependabot/npm_and_yarn/typescript-5.3.3
Bump typescript from 5.3.2 to 5.3.3
|
2024-01-08 11:45:16 +01:00 |
|
|
Federico BuilesandGitHub
|
45fc3f5adc
|
Merge pull request #655 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.18.0
Bump @typescript-eslint/eslint-plugin from 6.15.0 to 6.18.0
|
2024-01-08 11:44:58 +01:00 |
|
|
Federico BuilesandGitHub
|
c8593625f2
|
Merge pull request #654 from actions/dependabot/npm_and_yarn/eslint-plugin-prettier-5.1.2
Bump eslint-plugin-prettier from 5.0.1 to 5.1.2
|
2024-01-08 11:44:42 +01:00 |
|
|
Federico BuilesandGitHub
|
8a49820431
|
Merge pull request #646 from actions/dependabot/npm_and_yarn/prettier-3.1.1
Bump prettier from 3.1.0 to 3.1.1
|
2024-01-01 08:02:27 -05:00 |
|
|
Federico BuilesandGitHub
|
a10a70d24c
|
Merge pull request #645 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.16.0
Bump @typescript-eslint/parser from 6.13.1 to 6.16.0
|
2024-01-01 08:02:14 -05:00 |
|
|
Federico BuilesandGitHub
|
2597ca4eee
|
Merge pull request #640 from actions/dependabot/npm_and_yarn/eslint-8.56.0
Bump eslint from 8.53.0 to 8.56.0
|
2023-12-28 12:27:10 -05:00 |
|
|
Federico BuilesandGitHub
|
94f992f10e
|
Merge pull request #644 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.15.0
Bump @typescript-eslint/eslint-plugin from 6.12.0 to 6.15.0
|
2023-12-28 10:36:29 -05:00 |
|
|
Federico BuilesandGitHub
|
2425542aca
|
Merge pull request #638 from actions/fix-purls
Replace pip -> pypi in PURL examples
|
2023-12-11 17:25:43 +01:00 |
|
|
Federico Builes
|
b39e17ba5e
|
Replace pip -> pypi in PURL examples
|
2023-12-11 17:23:19 +01:00 |
|
|
Federico BuilesandGitHub
|
b8a398b675
|
Merge pull request #636 from actions/dependabot/npm_and_yarn/nodemon-3.0.2
Bump nodemon from 3.0.1 to 3.0.2
|
2023-12-11 06:04:47 +01:00 |
|
|
Federico BuilesandGitHub
|
1612de9646
|
Merge pull request #637 from actions/dependabot/npm_and_yarn/types/jest-29.5.11
Bump @types/jest from 29.5.8 to 29.5.11
|
2023-12-11 06:04:33 +01:00 |
|
|
Federico BuilesandGitHub
|
359e1ffa80
|
Merge pull request #629 from actions/dependabot/npm_and_yarn/prettier-3.1.0
Bump prettier from 3.0.3 to 3.1.0
|
2023-12-04 08:58:13 +01:00 |
|
|
Federico BuilesandGitHub
|
63e1558807
|
Merge pull request #630 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.13.1
Bump @typescript-eslint/parser from 6.10.0 to 6.13.1
|
2023-12-04 08:57:52 +01:00 |
|
|
Federico Builes
|
01bc87099b
|
bumping version
|
2023-11-28 08:11:14 +01:00 |
|
|
Federico BuilesandGitHub
|
4b4f0de8e1
|
Merge pull request #623 from actions/fix-advisory-filters
Fix GHSA Filtering
|
2023-11-28 08:10:11 +01:00 |
|
|
Federico Builes
|
a93fa86c77
|
Fixing test name.
|
2023-11-28 08:08:29 +01:00 |
|
|
Federico BuilesandGitHub
|
550520e2c5
|
Merge pull request #624 from actions/dependabot/npm_and_yarn/typescript-5.3.2
Bump typescript from 5.2.2 to 5.3.2
|
2023-11-27 07:22:56 +01:00 |
|
|
Federico BuilesandGitHub
|
2d0fb60634
|
Merge pull request #625 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.12.0
Bump @typescript-eslint/eslint-plugin from 6.11.0 to 6.12.0
|
2023-11-27 07:22:47 +01:00 |
|
|
Federico Builes
|
a6d4686316
|
adding dist
|
2023-11-24 14:40:48 +01:00 |
|
|
Federico Builes
|
4366dbae42
|
Advisory filters should not drop entire dependencies.
|
2023-11-24 14:40:18 +01:00 |
|
|
Federico Builes
|
50dafeb5e4
|
Tiny logic refactor.
|
2023-11-24 14:37:30 +01:00 |
|
|
Federico BuilesandGitHub
|
1cbb048907
|
Merge pull request #620 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.11.0
Bump @typescript-eslint/eslint-plugin from 6.10.0 to 6.11.0
|
2023-11-20 08:33:40 +01:00 |
|
|
Federico BuilesandGitHub
|
5991d7a97d
|
Merge pull request #619 from actions/dependabot/npm_and_yarn/types/node-16.18.62
Bump @types/node from 16.18.61 to 16.18.62
|
2023-11-20 08:27:56 +01:00 |
|
|
Federico Builes
|
7bbfa034e7
|
bumping to 3.1.3
|
2023-11-13 17:57:44 +01:00 |
|
|
Federico BuilesandGitHub
|
26f1ad9120
|
Merge pull request #617 from theztefan/purl-encoding-error
Fixes purl "version must be percent-encoded"
|
2023-11-13 17:55:23 +01:00 |
|
|
Federico BuilesandGitHub
|
fde92acd08
|
Merge pull request #611 from actions/fix-https-proxy
Fix proxy failures in 3.1.1
|
2023-11-08 09:14:57 +01:00 |
|
|
Federico Builes
|
a89dd96450
|
adding dist
|
2023-11-08 08:49:49 +01:00 |
|
|
Federico Builes
|
76891836b1
|
revert octokit changes
|
2023-11-08 08:47:43 +01:00 |
|
|
Federico Builes
|
fc5e2db757
|
go back to Node 16 to skip using fetch API
|
2023-11-08 08:36:27 +01:00 |
|
|
Federico Builes
|
ded987cb3b
|
Downgrade usage of retries.
This commit reverts:
f7363549ac
76b050a607
8dc52cdbed
|
2023-11-08 08:35:44 +01:00 |
|
|
Federico Builes
|
9f45b2463b
|
bumping to 3.1.1
|
2023-11-06 08:03:41 +01:00 |
|
|
Federico BuilesandGitHub
|
559513a56c
|
Merge pull request #606 from actions/dependabot/npm_and_yarn/actions/github-6.0.0
Bump @actions/github from 5.1.1 to 6.0.0
|
2023-11-06 07:55:54 +01:00 |
|
|
Federico Builes
|
8edc431d7d
|
Merge branch 'main' into dependabot/npm_and_yarn/actions/github-6.0.0
|
2023-11-06 07:52:53 +01:00 |
|
|
Federico BuilesandGitHub
|
3e8322e4bb
|
Merge pull request #605 from actions/dependabot/npm_and_yarn/yaml-2.3.4
Bump yaml from 2.3.3 to 2.3.4
|
2023-11-06 07:51:31 +01:00 |
|
|
Federico Builes
|
5a55885447
|
adding dist
|
2023-11-06 07:50:51 +01:00 |
|
|
Federico Builes
|
f952b5a2c5
|
Merge branch 'main' into dependabot/npm_and_yarn/yaml-2.3.4
|
2023-11-06 07:48:24 +01:00 |
|
|
Federico BuilesandGitHub
|
8678cfac42
|
Merge pull request #607 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.9.1
Bump @typescript-eslint/eslint-plugin from 6.9.0 to 6.9.1
|
2023-11-06 07:47:08 +01:00 |
|
|
Federico Builes
|
aa8e70d588
|
adding dist
|
2023-11-06 07:46:52 +01:00 |
|
|
Federico Builes
|
3331d25f9d
|
adding dist
|
2023-11-06 07:42:40 +01:00 |
|
|
Federico BuilesandGitHub
|
b2a5ead1f7
|
Merge pull request #604 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.9.1
Bump @typescript-eslint/parser from 6.8.0 to 6.9.1
|
2023-11-06 07:41:16 +01:00 |
|
|
Federico BuilesandGitHub
|
79f0a0b62b
|
Merge pull request #603 from actions/dependabot/npm_and_yarn/actions/core-1.10.1
Bump @actions/core from 1.10.0 to 1.10.1
|
2023-11-06 07:40:58 +01:00 |
|
|
Federico Builes
|
fc44602899
|
adding dist
|
2023-11-06 07:40:46 +01:00 |
|
|
Federico BuilesandGitHub
|
11e0dead9a
|
Merge pull request #598 from actions/dependabot/npm_and_yarn/packageurl-js-1.2.0
Bump packageurl-js from 1.0.2 to 1.2.0
|
2023-10-30 09:43:41 +01:00 |
|
|
Federico Builes
|
3c1cb72dcd
|
updating dist
|
2023-10-30 09:31:26 +01:00 |
|
|
Federico BuilesandGitHub
|
570a2b5dcd
|
Merge pull request #597 from actions/dependabot/npm_and_yarn/eslint-8.52.0
Bump eslint from 8.51.0 to 8.52.0
|
2023-10-30 09:28:21 +01:00 |
|
|
Federico BuilesandGitHub
|
a7e01b8d9c
|
Merge pull request #599 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.9.0
Bump @typescript-eslint/eslint-plugin from 6.8.0 to 6.9.0
|
2023-10-30 09:28:05 +01:00 |
|
|
Federico BuilesandGitHub
|
0631089c32
|
Merge pull request #596 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.6.0
Bump eslint-plugin-jest from 27.4.2 to 27.6.0
|
2023-10-30 09:24:44 +01:00 |
|
|
Federico BuilesandGitHub
|
0b8ffde994
|
Merge pull request #600 from actions/dependabot/npm_and_yarn/types/spdx-satisfies-0.1.1
Bump @types/spdx-satisfies from 0.1.0 to 0.1.1
|
2023-10-30 09:23:36 +01:00 |
|
|
Federico BuilesandGitHub
|
68d57cd360
|
Merge pull request #601 from actions/dependabot/github_actions/actions/setup-node-4
Bump actions/setup-node from 3 to 4
|
2023-10-30 09:22:44 +01:00 |
|
|
Federico BuilesandGitHub
|
e65eb02ccf
|
Merge pull request #591 from actions/dependabot/npm_and_yarn/typescript-5.2.2
Bump typescript from 4.9.5 to 5.2.2
|
2023-10-23 12:27:41 +02:00 |
|
|
Federico Builes
|
88953c2b16
|
updating dist
|
2023-10-23 12:26:03 +02:00 |
|
|
Federico BuilesandGitHub
|
d97416955e
|
Merge pull request #594 from actions/dependabot/npm_and_yarn/babel/traverse-7.23.2
Bump @babel/traverse from 7.23.0 to 7.23.2
|
2023-10-23 06:57:28 +02:00 |
|
|
Federico BuilesandGitHub
|
89ff65dbf7
|
Merge pull request #589 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.10.1
Bump eslint-plugin-github from 4.9.2 to 4.10.1
|
2023-10-23 05:18:52 +02:00 |
|
|
Federico BuilesandGitHub
|
c3c32181a9
|
Merge pull request #592 from actions/dependabot/npm_and_yarn/types/spdx-expression-parse-3.0.4
Bump @types/spdx-expression-parse from 3.0.3 to 3.0.4
|
2023-10-23 05:18:42 +02:00 |
|
|
Federico BuilesandGitHub
|
ead6e4616f
|
Merge pull request #593 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.8.0
Bump @typescript-eslint/parser from 6.7.3 to 6.8.0
|
2023-10-23 05:18:25 +02:00 |
|
|
Federico BuilesandGitHub
|
954314c2b1
|
Merge pull request #590 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.8.0
Bump @typescript-eslint/eslint-plugin from 6.7.5 to 6.8.0
|
2023-10-23 05:11:58 +02:00 |
|