actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
1,859 Commits 90 Branches 61 Tags
ljones140/ruby-codeql
Commit Graph

1859 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
tgrall f1e6d67732 wan only 2023-06-13 09:29:10 +02:00
tgrall d833109d4d new build 2023-06-13 08:54:16 +02:00
tgrall a3a8a9c756 new build 2023-06-12 13:56:53 +02:00
tgrall 0b053fccb4 add new parameter warn_only 2023-06-12 11:26:44 +02:00
Federico Builes 9617594ce4 Merge pull request #506 from actions/dependabot/npm_and_yarn/octokit-2.0.19 
update octokit, regenerate dist
 2023-06-12 07:29:57 +02:00
Federico Builes c10600ad00 update octokit, regenerate dist 2023-06-12 07:28:23 +02:00
Federico Builes 86477f1ea0 Merge pull request #504 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.59.9 
Bump @typescript-eslint/eslint-plugin from 5.59.8 to 5.59.9
 2023-06-12 07:19:03 +02:00
Federico Builes b6ef88155e Merge pull request #505 from actions/dependabot/npm_and_yarn/types/node-16.18.35 
Bump @types/node from 16.18.34 to 16.18.35
 2023-06-12 07:18:49 +02:00
Federico Builes 1c01b75438 Merge pull request #503 from actions/dependabot/npm_and_yarn/octokit/plugin-retry-5.0.2 
Bump @octokit/plugin-retry from 5.0.0 to 5.0.2
 2023-06-12 07:18:36 +02:00
dependabot[bot] 1590d3f795 Bump @typescript-eslint/eslint-plugin from 5.59.8 to 5.59.9 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.59.8 to 5.59.9.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.59.9/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-12 05:17:03 +00:00
Federico Builes 90de8e47b4 adding dist 2023-06-12 07:16:52 +02:00
Federico Builes 6d3699baca Merge pull request #502 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.59.9 
Bump @typescript-eslint/parser from 5.59.8 to 5.59.9
 2023-06-12 07:15:59 +02:00
dependabot[bot] 87e767d41f Bump @types/node from 16.18.34 to 16.18.35 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.18.34 to 16.18.35.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-12 01:59:53 +00:00
dependabot[bot] 554d5fa52b Bump @octokit/plugin-retry from 5.0.0 to 5.0.2 
Bumps [@octokit/plugin-retry](https://github.com/octokit/plugin-retry.js) from 5.0.0 to 5.0.2.
- [Release notes](https://github.com/octokit/plugin-retry.js/releases)
- [Commits](https://github.com/octokit/plugin-retry.js/compare/v5.0.0...v5.0.2)

---
updated-dependencies:
- dependency-name: "@octokit/plugin-retry"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-12 01:59:03 +00:00
dependabot[bot] 983fa12c36 Bump @typescript-eslint/parser from 5.59.8 to 5.59.9 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.59.8 to 5.59.9.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.59.9/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-12 01:58:41 +00:00
Henri Maurer f6f94a23a4 fix 2023-06-09 10:44:43 +01:00
Henri Maurer 50954e6a9a fix 2023-06-09 10:30:56 +01:00
Henri Maurer 66b6f67835 Add configs 2023-06-09 10:26:24 +01:00
Henri Maurer 1644401f8d rewrite retry logic 2023-06-08 18:11:13 +01:00
Henri Maurer 1a326fc7fa proceed even if warnings 2023-06-08 17:04:40 +01:00
Henri Maurer a82096e68a fix 2023-06-07 16:51:53 +01:00
Henri Maurer 90d3a94eb7 fix 2023-06-07 16:48:32 +01:00
Henri Maurer 9dde5949a8 retry every 10s 2023-06-07 16:39:16 +01:00
Henri Maurer cff142b535 includes_dependency_snapshots 2023-06-07 14:04:29 +01:00
Henri Maurer a4c5ac881a disable caching 2023-06-07 10:10:21 +01:00
Henri Maurer d35955ebf6 Prototype re-try on snapshot warnings 2023-06-06 16:44:27 +01:00
Federico Builes 0342e75832 Merge pull request #500 from actions/dependabot/npm_and_yarn/octokit/plugin-retry-5.0.0 
Bump @octokit/plugin-retry from 4.1.3 to 5.0.0
 2023-06-05 07:14:34 +02:00
Federico Builes 3daf1c6551 Updating dist 2023-06-05 07:13:53 +02:00
Federico Builes 16cbdf9d97 Merge pull request #498 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.8.0 
Bump eslint-plugin-github from 4.7.0 to 4.8.0
 2023-06-05 07:09:55 +02:00
Federico Builes 59a0ce5dc2 Merge pull request #497 from actions/dependabot/npm_and_yarn/got-13.0.0 
Bump got from 12.6.0 to 13.0.0
 2023-06-05 07:08:54 +02:00
dependabot[bot] 6cc98d3032 Bump @octokit/plugin-retry from 4.1.3 to 5.0.0 
Bumps [@octokit/plugin-retry](https://github.com/octokit/plugin-retry.js) from 4.1.3 to 5.0.0.
- [Release notes](https://github.com/octokit/plugin-retry.js/releases)
- [Commits](https://github.com/octokit/plugin-retry.js/compare/v4.1.3...v5.0.0)

---
updated-dependencies:
- dependency-name: "@octokit/plugin-retry"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-05 01:59:54 +00:00
dependabot[bot] 617fd3907e Bump eslint-plugin-github from 4.7.0 to 4.8.0 
Bumps [eslint-plugin-github](https://github.com/github/eslint-plugin-github) from 4.7.0 to 4.8.0.
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](https://github.com/github/eslint-plugin-github/compare/v4.7.0...v4.8.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-github
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-05 01:59:21 +00:00
dependabot[bot] 537fc8f28d Bump got from 12.6.0 to 13.0.0 
Bumps [got](https://github.com/sindresorhus/got) from 12.6.0 to 13.0.0.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v12.6.0...v13.0.0)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-06-05 01:58:58 +00:00
Federico Builes 1360a344cc Merge pull request #494 from actions/fix-purl-bug 
Empty PURLs should not block the action from running
v3.0.6 		2023-05-31 17:11:07 +02:00
Federico Builes 123b58703a bumping to 3.0.6 2023-05-31 17:10:00 +02:00
Federico Builes cd559bc984 adding dist 2023-05-31 17:09:53 +02:00
Federico Builes 70f8094bec adding a test for empty PURLs 2023-05-31 16:24:19 +02:00
Federico Builes 0b306aef97 Don't try to create PURLs from empty strings. 2023-05-31 16:14:02 +02:00
Federico Builes 554aaf5c3d Merge pull request #423 from theztefan/allow-list-dependencies 
Exclude dependencies from license checks
v3.0.5 		2023-05-31 14:24:05 +02:00
Federico Builes c6e94c1336 External config files should use underscores, not dashes 2023-05-31 14:21:57 +02:00
Stefan Petrushevski 88d6af3d4a latest build 2023-05-31 12:54:16 +02:00
Stefan Petrushevski f1c8401a59 resolve merge conflicts 2023-05-30 18:04:26 +02:00
Stefan Petrushevski ef8ebf0eef rebuild 2023-05-30 17:33:40 +02:00
Federico Builes 1f7c838fcb Merge pull request #492 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.59.8 
Bump @typescript-eslint/eslint-plugin from 5.59.6 to 5.59.8
 2023-05-30 08:10:28 +02:00
dependabot[bot] 1ee07d8652 Bump @typescript-eslint/eslint-plugin from 5.59.6 to 5.59.8 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.59.6 to 5.59.8.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.59.8/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-30 05:32:06 +00:00
Federico Builes 861f696c44 Merge pull request #491 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.59.8 
Bump @typescript-eslint/parser from 5.59.7 to 5.59.8
 2023-05-30 07:31:16 +02:00
dependabot[bot] ce9db3928f Bump @typescript-eslint/parser from 5.59.7 to 5.59.8 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.59.7 to 5.59.8.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.59.8/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-30 05:25:32 +00:00
Federico Builes 854aa8a142 Merge pull request #485 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.59.7 
Bump @typescript-eslint/parser from 5.59.6 to 5.59.7
 2023-05-30 07:24:55 +02:00
Federico Builes 9fbf14f620 Merge pull request #484 from actions/dependabot/npm_and_yarn/types/node-16.18.34 
Bump @types/node from 16.18.32 to 16.18.34
 2023-05-30 07:24:43 +02:00
Federico Builes 64222d2efe Merge pull request #483 from actions/dependabot/npm_and_yarn/yaml-2.3.1 
Bump yaml from 2.2.2 to 2.3.1
 2023-05-30 07:24:34 +02:00