actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
1,567 Commits 90 Branches 61 Tags
remove-warn-default
Commit Graph
1567 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico BuilesandGitHub f2e57a19af Merge pull request #196 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.33.1 
Bump @typescript-eslint/eslint-plugin from 5.33.0 to 5.33.1
 2022-08-16 07:50:18 +02:00
dependabot[bot]andGitHub fb59017069 Bump @typescript-eslint/eslint-plugin from 5.33.0 to 5.33.1 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.33.0 to 5.33.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.33.1/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-16 05:46:37 +00:00
Federico BuilesandGitHub 3d5f077fa9 Merge pull request #195 from actions/dependabot/npm_and_yarn/types/node-16.11.49 
Bump @types/node from 16.11.48 to 16.11.49
 2022-08-16 07:45:40 +02:00
dependabot[bot]andGitHub cb1474859d Bump @types/node from 16.11.48 to 16.11.49 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.48 to 16.11.49.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-16 05:44:24 +00:00
Federico BuilesandGitHub 5f53719ca3 Merge pull request #197 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.8.3 
Bump eslint-plugin-jest from 26.8.2 to 26.8.3
 2022-08-16 07:44:12 +02:00
Federico BuilesandGitHub 193b31de81 Merge pull request #198 from actions/dependabot/npm_and_yarn/octokit/request-error-3.0.1 
Bump @octokit/request-error from 3.0.0 to 3.0.1
 2022-08-16 07:43:59 +02:00
Federico BuilesandGitHub 92e8b8da75 Merge pull request #199 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.33.1 
Bump @typescript-eslint/parser from 5.33.0 to 5.33.1
 2022-08-16 07:43:43 +02:00
dependabot[bot]andGitHub 625da714f5 Bump @typescript-eslint/parser from 5.33.0 to 5.33.1 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.33.0 to 5.33.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.33.1/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-16 01:42:20 +00:00
dependabot[bot]andGitHub 0794c6c280 Bump @octokit/request-error from 3.0.0 to 3.0.1 
Bumps [@octokit/request-error](https://github.com/octokit/request-error.js) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](https://github.com/octokit/request-error.js/compare/v3.0.0...v3.0.1)

---
updated-dependencies:
- dependency-name: "@octokit/request-error"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-16 01:42:07 +00:00
dependabot[bot]andGitHub d12f30b747 Bump eslint-plugin-jest from 26.8.2 to 26.8.3 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 26.8.2 to 26.8.3.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v26.8.2...v26.8.3)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-16 01:41:59 +00:00
Federico BuilesandGitHub dbafdf9b30 Merge pull request #194 from actions/dependabot/npm_and_yarn/eslint-8.22.0 
Bump eslint from 8.21.0 to 8.22.0
 2022-08-15 09:18:00 +02:00
dependabot[bot]andGitHub 3f3ba6e567 Bump eslint from 8.21.0 to 8.22.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.21.0 to 8.22.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.21.0...v8.22.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-15 01:55:22 +00:00
Federico BuilesandGitHub e2e1913ee9 Merge pull request #192 from actions/dependabot/npm_and_yarn/zod-3.18.0 
Bump zod from 3.17.10 to 3.18.0
 2022-08-12 18:19:08 +02:00
Federico Builes 2122cb87dc Merge branch 'main' into dependabot/npm_and_yarn/zod-3.18.0 
# Conflicts:
#	dist/index.js.map
 2022-08-12 18:17:01 +02:00
Federico BuilesandGitHub 694e9af6c9 Merge pull request #193 from actions/dependabot/npm_and_yarn/types/node-16.11.48 
Bump @types/node from 16.11.47 to 16.11.48
 2022-08-12 18:14:26 +02:00
Federico Builes 96dcfbbcd4 adding dist 2022-08-12 18:14:15 +02:00
dependabot[bot]andGitHub c77018cec1 Bump @types/node from 16.11.47 to 16.11.48 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.47 to 16.11.48.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-12 16:07:54 +00:00
Federico BuilesandGitHub 36a493b367 Merge pull request #189 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.33.0 
Bump @typescript-eslint/eslint-plugin from 5.32.0 to 5.33.0
 2022-08-12 18:05:11 +02:00
dependabot[bot]andGitHub 11e4eca6c1 Bump zod from 3.17.10 to 3.18.0 
Bumps [zod](https://github.com/colinhacks/zod) from 3.17.10 to 3.18.0.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/master/CHANGELOG.md)
- [Commits](https://github.com/colinhacks/zod/compare/v3.17.10...v3.18.0)

---
updated-dependencies:
- dependency-name: zod
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-12 16:04:10 +00:00
dependabot[bot]andGitHub e9f051f098 Bump @typescript-eslint/eslint-plugin from 5.32.0 to 5.33.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.32.0 to 5.33.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.33.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-12 16:03:51 +00:00
Federico BuilesandGitHub f59ac52391 Merge pull request #186 from actions/dependabot/npm_and_yarn/got-12.3.1 
Bump got from 12.3.0 to 12.3.1
 2022-08-12 18:03:34 +02:00
Federico BuilesandGitHub 5391a8b654 Merge pull request #190 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.33.0 
Bump @typescript-eslint/parser from 5.32.0 to 5.33.0
 2022-08-12 18:02:56 +02:00
Federico BuilesandGitHub 531da4bab3 Merge pull request #191 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.8.2 
Bump eslint-plugin-jest from 26.7.0 to 26.8.2
 2022-08-12 18:02:28 +02:00
Federico BuilesandGitHub a059506842 Merge pull request #188 from actions/dependabot/npm_and_yarn/actions/core-1.9.1 
Bump @actions/core from 1.9.0 to 1.9.1
 2022-08-12 18:01:43 +02:00
Federico Builes d8aff4cfce adding dist 2022-08-12 18:00:10 +02:00
dependabot[bot]andGitHub 1069034a80 Bump eslint-plugin-jest from 26.7.0 to 26.8.2 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 26.7.0 to 26.8.2.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v26.7.0...v26.8.2)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-10 01:22:58 +00:00
dependabot[bot]andGitHub 424d622090 Bump @typescript-eslint/parser from 5.32.0 to 5.33.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.32.0 to 5.33.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.33.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-09 01:36:41 +00:00
dependabot[bot]andGitHub 979fe8f031 Bump @actions/core from 1.9.0 to 1.9.1 
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-09 01:35:43 +00:00
dependabot[bot]andGitHub ea4b93e2db Bump got from 12.3.0 to 12.3.1 
Bumps [got](https://github.com/sindresorhus/got) from 12.3.0 to 12.3.1.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v12.3.0...v12.3.1)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-08 01:50:21 +00:00
Tiago Pascoal 47f663b6ee update dist after fixing typo 2022-08-07 11:39:10 +00:00
Tiago PascoalGitHubEric Cornelissen
 		dfcdb87cb3 Fix typo 
Co-authored-by: Eric Cornelissen <[email protected]>
 2022-08-07 12:36:42 +01:00
Tiago PascoalandGitHub 79f5aede88 Merge branch 'main' into add-summary 2022-08-04 16:59:57 +01:00
Tiago Pascoal aef949f026 Show vulnerabities and license information on the job summary. 
Users can see the results that were found directly on the job summary

All the results are grouped by manifest.

It shows a table with vulnerable packages, together with package version,
the vulnerabily info and it's severity.

Shows info about package licenses, which packages have a non allowed license,
and the list of packages with unknown licenses.
 2022-08-04 15:35:07 +00:00
Federico BuilesandGitHub 415088b56e Merge pull request #180 from actions/enterprise-docs 
Adding instructions for installing in GHES
 2022-08-03 17:28:05 +02:00
Federico BuilesGitHubCourtney Claessens
 		be18317f94 Update README.md 
Co-authored-by: Courtney Claessens <[email protected]>
 2022-08-03 17:27:39 +02:00
Courtney ClaessensandGitHub e20b197c93 adding info on licenses not supported for GHES 2022-08-03 10:46:47 -04:00
Federico Builes e66fd91484 Point to the 3.6 docs for Connect. 2022-08-03 11:29:50 +02:00
Federico Builes ea815ebddb Add link for GHAS. 2022-08-03 11:25:03 +02:00
Federico Builes bb3e014e0a Adding instructions for GHES 3.6. 2022-08-03 11:22:48 +02:00
Federico BuilesandGitHub 4317da3e38 Merge pull request #179 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.32.0 
Bump @typescript-eslint/parser from 5.31.0 to 5.32.0
 2022-08-02 10:46:34 +02:00
dependabot[bot]andGitHub 2aa2a269c4 Bump @typescript-eslint/parser from 5.31.0 to 5.32.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.31.0 to 5.32.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.32.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-02 08:45:25 +00:00
Federico BuilesandGitHub 67562b4c74 Merge pull request #178 from actions/dependabot/npm_and_yarn/eslint-8.21.0 
Bump eslint from 8.20.0 to 8.21.0
 2022-08-02 10:44:48 +02:00
Federico BuilesandGitHub fe523440bc Merge pull request #177 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.32.0 
Bump @typescript-eslint/eslint-plugin from 5.31.0 to 5.32.0
 2022-08-02 10:44:39 +02:00
dependabot[bot]andGitHub bddb4f4ac8 Bump eslint from 8.20.0 to 8.21.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.20.0 to 8.21.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.20.0...v8.21.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-02 01:32:02 +00:00
dependabot[bot]andGitHub 951c4b6b47 Bump @typescript-eslint/eslint-plugin from 5.31.0 to 5.32.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.31.0 to 5.32.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.32.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-02 01:31:50 +00:00
Federico BuilesandGitHub 90edb6f286 Merge pull request #174 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.7.0 
Bump eslint-plugin-jest from 26.6.0 to 26.7.0
 2022-08-01 17:33:21 +02:00
Federico BuilesandGitHub 76cb47a13a Merge pull request #175 from actions/dependabot/npm_and_yarn/types/node-16.11.47 
Bump @types/node from 16.11.46 to 16.11.47
 2022-08-01 17:33:11 +02:00
dependabot[bot]andGitHub 8c65c50f8e Bump @types/node from 16.11.46 to 16.11.47 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.46 to 16.11.47.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-01 01:56:27 +00:00
dependabot[bot]andGitHub 15dae1771a Bump eslint-plugin-jest from 26.6.0 to 26.7.0 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 26.6.0 to 26.7.0.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v26.6.0...v26.7.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-01 01:56:18 +00:00
Will Da Silva 15d18576a5 Merge branch 'upstream/main' into main 2022-07-30 00:44:27 -04:00