actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
1,565 Commits 90 Branches 61 Tags
devcontainer-cleanup
Commit Graph
1565 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Justin HolguínandGitHub 7e1f7be1f6 Handle dependencies with an empty manifest field 
This happens sometimes with snapshots. We just want them to be displayed properly in the HTML output.
 2023-03-24 19:07:22 +00:00
Justin HolguínandGitHub 0c01e947d6 Flesh out the warnings section a tiny bit 2023-03-23 23:26:23 +00:00
Justin HolguínandGitHub 782549c724 Ignore snapshot_warnings for missing head snapshots 2023-03-23 22:59:07 +00:00
Justin HolguínandGitHub 419396de41 Show snapshot warnings in the summary 2023-03-22 21:30:12 +00:00
tgrall cc302f4c2b fix linter/format 2023-03-20 09:07:07 +01:00
Federico Builes f46c48ed6d bumping version v3.0.4 2023-03-20 07:22:20 +01:00
Federico BuilesandGitHub 1ac6f5d754 Merge pull request #437 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.55.0 
Bump @typescript-eslint/eslint-plugin from 5.54.1 to 5.55.0
 2023-03-20 06:47:27 +01:00
dependabot[bot]andGitHub 30049aaf02 Bump @typescript-eslint/eslint-plugin from 5.54.1 to 5.55.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.54.1 to 5.55.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.55.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-03-20 05:45:47 +00:00
Federico BuilesandGitHub 02b3fbad1c Merge pull request #436 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.55.0 
Bump @typescript-eslint/parser from 5.54.1 to 5.55.0
 2023-03-20 06:44:51 +01:00
Federico BuilesandGitHub 5c5feeb63d Merge pull request #435 from actions/dependabot/npm_and_yarn/types/node-16.18.16 
Bump @types/node from 16.18.14 to 16.18.16
 2023-03-20 06:44:19 +01:00
dependabot[bot]andGitHub 85bb8372bf Bump @typescript-eslint/parser from 5.54.1 to 5.55.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.54.1 to 5.55.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.55.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-03-20 02:15:06 +00:00
dependabot[bot]andGitHub 463aece43a Bump @types/node from 16.18.14 to 16.18.16 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.18.14 to 16.18.16.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-03-20 02:14:20 +00:00
tgrall 621d03bf3a Add none as option for fail-on-severity 2023-03-18 05:21:58 +01:00
Stefan Petrushevski e17845d155 README changes as per PR comments 2023-03-16 11:23:57 +01:00
Federico BuilesandGitHub e3fb5152be Merge pull request #426 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.54.1 
Bump @typescript-eslint/eslint-plugin from 5.54.0 to 5.54.1
 2023-03-13 09:29:06 +01:00
Federico BuilesandGitHub 4b088f072a Merge pull request #427 from actions/dependabot/npm_and_yarn/zod-3.21.4 
Bump zod from 3.21.0 to 3.21.4
 2023-03-13 09:28:51 +01:00
dependabot[bot]andGitHub e46d65f438 Bump @typescript-eslint/eslint-plugin from 5.54.0 to 5.54.1 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.54.0 to 5.54.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.54.1/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-03-13 07:08:40 +00:00
Federico Builes 75222ed640 adding dist 2023-03-13 08:02:02 +01:00
Federico BuilesandGitHub f46bc4dbf8 Merge pull request #428 from actions/dependabot/npm_and_yarn/eslint-8.36.0 
Bump eslint from 8.35.0 to 8.36.0
 2023-03-13 08:00:22 +01:00
Federico BuilesandGitHub e0a5088fd6 Merge pull request #429 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.54.1 
Bump @typescript-eslint/parser from 5.53.0 to 5.54.1
 2023-03-13 08:00:01 +01:00
dependabot[bot]andGitHub f1f8f2bf88 Bump @typescript-eslint/parser from 5.53.0 to 5.54.1 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.53.0 to 5.54.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.54.1/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-03-13 02:06:48 +00:00
dependabot[bot]andGitHub 453f5e3690 Bump eslint from 8.35.0 to 8.36.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.35.0 to 8.36.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.35.0...v8.36.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-03-13 02:06:12 +00:00
dependabot[bot]andGitHub 6a47644794 Bump zod from 3.21.0 to 3.21.4 
Bumps [zod](https://github.com/colinhacks/zod) from 3.21.0 to 3.21.4.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/master/CHANGELOG.md)
- [Commits](https://github.com/colinhacks/zod/compare/v3.21.0...v3.21.4)

---
updated-dependencies:
- dependency-name: zod
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-03-13 02:05:51 +00:00
Stefan Petrushevski f0bda66bbf updated README 2023-03-08 15:44:01 +01:00
Stefan Petrushevski 1d7d9a2c93 new builds 2023-03-08 15:24:23 +01:00
Stefan Petrushevski d5c2f70a7f no inline config options due to limitations 2023-03-08 15:23:57 +01:00
Stefan Petrushevski f92376010c inline config options 2023-03-08 15:05:16 +01:00
Stefan Petrushevski c2303c3070 builds 2023-03-08 14:30:37 +01:00
Stefan Petrushevski 884b7abd2d updated summary output; create_summary.ts script 2023-03-08 13:02:59 +01:00
Stefan Petrushevski 600458c5dd licenses check exclusion list 2023-03-08 12:38:34 +01:00
Federico Builes d11e757f70 No support for custom branches note in README. 2023-03-06 09:13:40 +01:00
Federico BuilesandGitHub 63e5e62dba Merge pull request #416 from davelosert/adjust_summary_format 
Adjust summary format
 2023-03-06 09:10:58 +01:00
Federico Builes 5951e7db04 Merge branch 'main' into adjust_summary_format 2023-03-06 09:08:35 +01:00
Federico BuilesandGitHub 4f537bf170 Merge pull request #417 from actions/dependabot/npm_and_yarn/zod-3.21.0 
Bump zod from 3.20.6 to 3.21.0
 2023-03-06 08:25:25 +01:00
Federico Builes 25f22ad0c7 dist files 2023-03-06 08:25:10 +01:00
Federico BuilesandGitHub 2878425083 Merge pull request #419 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.54.0 
Bump @typescript-eslint/eslint-plugin from 5.53.0 to 5.54.0
 2023-03-06 05:56:03 +01:00
Federico BuilesandGitHub 862b667fee Merge pull request #421 from actions/dependabot/npm_and_yarn/nodemon-2.0.21 
Bump nodemon from 2.0.20 to 2.0.21
 2023-03-06 05:55:16 +01:00
dependabot[bot]andGitHub f7c42c00ca Bump @typescript-eslint/eslint-plugin from 5.53.0 to 5.54.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.53.0 to 5.54.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.54.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-03-06 04:48:15 +00:00
dependabot[bot]andGitHub 00dbe9df8d Bump nodemon from 2.0.20 to 2.0.21 
Bumps [nodemon](https://github.com/remy/nodemon) from 2.0.20 to 2.0.21.
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](https://github.com/remy/nodemon/compare/v2.0.20...v2.0.21)

---
updated-dependencies:
- dependency-name: nodemon
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-03-06 04:47:54 +00:00
Federico BuilesandGitHub f89a053f16 Merge pull request #420 from actions/dependabot/npm_and_yarn/types/node-16.18.14 
Bump @types/node from 16.18.13 to 16.18.14
 2023-03-06 05:47:25 +01:00
Federico BuilesandGitHub 700f66ed8f Merge pull request #418 from actions/dependabot/npm_and_yarn/got-12.6.0 
Bump got from 12.5.3 to 12.6.0
 2023-03-06 05:47:11 +01:00
dependabot[bot]andGitHub fc5eaef91a Bump @types/node from 16.18.13 to 16.18.14 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.18.13 to 16.18.14.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-03-06 02:15:36 +00:00
dependabot[bot]andGitHub 087d445ca8 Bump got from 12.5.3 to 12.6.0 
Bumps [got](https://github.com/sindresorhus/got) from 12.5.3 to 12.6.0.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v12.5.3...v12.6.0)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-03-06 02:14:13 +00:00
dependabot[bot]andGitHub 95fa321e74 Bump zod from 3.20.6 to 3.21.0 
Bumps [zod](https://github.com/colinhacks/zod) from 3.20.6 to 3.21.0.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/master/CHANGELOG.md)
- [Commits](https://github.com/colinhacks/zod/compare/v3.20.6...v3.21.0)

---
updated-dependencies:
- dependency-name: zod
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2023-03-06 02:13:53 +00:00
David LosertandGitHub 429d317ccc Rebuilt dist files 2023-03-02 07:52:41 +00:00
David LosertandGitHub 6b34d93738 Skips dependency review if no changes detected 2023-03-02 07:47:09 +00:00
David LosertandGitHub b7a25f4e9b Makes License Issues a single table per manifest 2023-03-02 07:43:23 +00:00
David LosertandGitHub 9f0792541a Rebuilt dist files 2023-03-02 06:57:41 +00:00
David LosertandGitHub 5e6910e937 Built the library in it's current state 2023-03-01 07:43:17 +00:00
David LosertandGitHub 715956774a Adds some explanation on how to use the script 2023-03-01 07:43:08 +00:00