actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
1,567 Commits 90 Branches 61 Tags
remove-warn-default
Commit Graph
1567 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
tgrall 05d861260a finalize testing 2024-01-28 15:54:59 +01:00
tgrall 2c526853b4 new debug test 2024-01-28 15:51:39 +01:00
tgrall 9e251a5913 dist 2024-01-28 15:00:36 +01:00
tgrall ee5bd475ba debug behavior 2024-01-28 14:59:04 +01:00
tgrall b0a705da21 Fix license printing bug in main.ts 2024-01-28 14:54:28 +01:00
tgrall 0bab6ffc2c Fix vulnerability check to print warnings instead 
of failing
 2024-01-28 14:54:14 +01:00
tgrall f91404ca86 set status to low when warn-only is set to true 2024-01-28 14:35:44 +01:00
tgrall d6f324d18a fix typo in readme 2024-01-28 14:24:12 +01:00
tgrall f1576849e6 package the action 2024-01-28 10:58:10 +01:00
tgrall fc49851780 merge from main and fix code review comment from @juxtin 2024-01-28 10:16:07 +01:00
Jon JanegoandGitHub d53388efe8 Merge pull request #671 from jonjanego/main 
Create stale.yaml
 2024-01-26 10:09:43 -06:00
Jon JanegoandGitHub 56991330a3 Update stale.yaml 
assigning explicit permissions
 2024-01-26 09:15:48 -06:00
Jon JanegoandGitHub a824acd5d7 Create stale.yaml 2024-01-25 13:49:10 -06:00
Federico Builes 935098a950 updating @types/node to Node 20 2024-01-22 07:54:40 +01:00
Federico BuilesandGitHub b658b91622 Merge pull request #669 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.6.3 
Bump eslint-plugin-jest from 27.6.0 to 27.6.3
 2024-01-22 07:40:35 +01:00
dependabot[bot]andGitHub d16453ab26 Bump eslint-plugin-jest from 27.6.0 to 27.6.3 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 27.6.0 to 27.6.3.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v27.6.0...v27.6.3)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-22 06:38:10 +00:00
Federico BuilesandGitHub 0381eac2bc Merge pull request #667 from actions/dependabot/npm_and_yarn/eslint-plugin-prettier-5.1.3 
Bump eslint-plugin-prettier from 5.1.2 to 5.1.3
 2024-01-22 07:36:52 +01:00
dependabot[bot]andGitHub 1967b21a03 Bump eslint-plugin-prettier from 5.1.2 to 5.1.3 
Bumps [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) from 5.1.2 to 5.1.3.
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-plugin-prettier/compare/v5.1.2...v5.1.3)

---
updated-dependencies:
- dependency-name: eslint-plugin-prettier
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-22 01:15:42 +00:00
Federico Builes 4cd9eb2d23 Updating docs to point to v4. 2024-01-18 14:23:52 +01:00
Federico Builes 4901385134 bump to 4.0.0 v4.0.0 2024-01-18 13:57:38 +01:00
Federico BuilesandGitHub dbf82a4a5e Merge pull request #639 from takost/takost/update-to-node-20 
Update action to node20
 2024-01-18 13:52:05 +01:00
Federico BuilesandGitHub 78aeb2a948 Merge pull request #663 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.18.1 
Bump @typescript-eslint/parser from 6.18.0 to 6.18.1
 2024-01-15 06:39:13 +01:00
dependabot[bot]andGitHub 4e510006f5 Bump @typescript-eslint/parser from 6.18.0 to 6.18.1 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 6.18.0 to 6.18.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.18.1/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-15 05:38:23 +00:00
Federico BuilesandGitHub 9560737c5e Merge pull request #661 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.18.1 
Bump @typescript-eslint/eslint-plugin from 6.18.0 to 6.18.1
 2024-01-15 06:37:15 +01:00
Federico BuilesandGitHub 4125f47f7e Merge pull request #660 from actions/dependabot/npm_and_yarn/types/node-16.18.70 
Bump @types/node from 16.18.62 to 16.18.70
 2024-01-15 06:37:05 +01:00
dependabot[bot]andGitHub 07cc93e0c8 Bump @typescript-eslint/eslint-plugin from 6.18.0 to 6.18.1 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 6.18.0 to 6.18.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.18.1/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-15 01:21:13 +00:00
dependabot[bot]andGitHub e2c203b8b7 Bump @types/node from 16.18.62 to 16.18.70 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.18.62 to 16.18.70.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-15 01:20:53 +00:00
Federico BuilesandGitHub f0b304d0bc Merge pull request #653 from actions/dependabot/npm_and_yarn/got-14.0.0 
Bump got from 13.0.0 to 14.0.0
 2024-01-09 13:24:33 +01:00
Federico BuilesandGitHub e41543eaf0 Merge pull request #656 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.18.0 
Bump @typescript-eslint/parser from 6.16.0 to 6.18.0
 2024-01-08 11:50:44 +01:00
dependabot[bot]andGitHub 8ded6194d1 Bump @typescript-eslint/parser from 6.16.0 to 6.18.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 6.16.0 to 6.18.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.18.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-08 10:46:03 +00:00
Federico BuilesandGitHub b5f60d5e37 Merge pull request #657 from actions/dependabot/npm_and_yarn/typescript-5.3.3 
Bump typescript from 5.3.2 to 5.3.3
 2024-01-08 11:45:16 +01:00
Federico BuilesandGitHub 45fc3f5adc Merge pull request #655 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.18.0 
Bump @typescript-eslint/eslint-plugin from 6.15.0 to 6.18.0
 2024-01-08 11:44:58 +01:00
Federico BuilesandGitHub c8593625f2 Merge pull request #654 from actions/dependabot/npm_and_yarn/eslint-plugin-prettier-5.1.2 
Bump eslint-plugin-prettier from 5.0.1 to 5.1.2
 2024-01-08 11:44:42 +01:00
dependabot[bot]andGitHub d2ca024914 Bump typescript from 5.3.2 to 5.3.3 
Bumps [typescript](https://github.com/Microsoft/TypeScript) from 5.3.2 to 5.3.3.
- [Release notes](https://github.com/Microsoft/TypeScript/releases)
- [Commits](https://github.com/Microsoft/TypeScript/compare/v5.3.2...v5.3.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-08 01:27:41 +00:00
dependabot[bot]andGitHub 9649fc68a8 Bump @typescript-eslint/eslint-plugin from 6.15.0 to 6.18.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 6.15.0 to 6.18.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.18.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-08 01:27:04 +00:00
dependabot[bot]andGitHub 2ac94ccf28 Bump eslint-plugin-prettier from 5.0.1 to 5.1.2 
Bumps [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) from 5.0.1 to 5.1.2.
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-plugin-prettier/compare/v5.0.1...v5.1.2)

---
updated-dependencies:
- dependency-name: eslint-plugin-prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-08 01:26:42 +00:00
dependabot[bot]andGitHub 925e3a5871 Bump got from 13.0.0 to 14.0.0 
Bumps [got](https://github.com/sindresorhus/got) from 13.0.0 to 14.0.0.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v13.0.0...v14.0.0)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-08 01:26:34 +00:00
Henri MaurerandGitHub ab6f73d40f Merge pull request #621 from actions/dependabot/npm_and_yarn/octokit-3.1.2 
Bump octokit from 2.1.0 to 3.1.2
 2024-01-05 09:38:43 +00:00
Henri Maurer 746e9675d6 npm run package 2024-01-05 09:37:10 +00:00
Henri Maurer 3735443721 update @octokit/* and @actions/* 2024-01-05 09:36:49 +00:00
dependabot[bot]andGitHub 44bab84b22 Bump octokit from 2.1.0 to 3.1.2 
Bumps [octokit](https://github.com/octokit/octokit.js) from 2.1.0 to 3.1.2.
- [Release notes](https://github.com/octokit/octokit.js/releases)
- [Commits](https://github.com/octokit/octokit.js/compare/v2.1.0...v3.1.2)

---
updated-dependencies:
- dependency-name: octokit
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-04 16:51:50 +00:00
Henri MaurerandGitHub 8690720eb6 Merge pull request #652 from actions/dependabot/npm_and_yarn/octokit/webhooks-10.9.2 
Bump @octokit/webhooks from 10.9.1 to 10.9.2
 2024-01-04 16:48:16 +00:00
Henri Maurer e03c8a14eb npm run all 2024-01-04 16:46:59 +00:00
dependabot[bot]andGitHub 194e338d30 Bump @octokit/webhooks from 10.9.1 to 10.9.2 
Bumps [@octokit/webhooks](https://github.com/octokit/webhooks.js) from 10.9.1 to 10.9.2.
- [Release notes](https://github.com/octokit/webhooks.js/releases)
- [Commits](https://github.com/octokit/webhooks.js/compare/v10.9.1...v10.9.2)

---
updated-dependencies:
- dependency-name: "@octokit/webhooks"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-04 16:40:33 +00:00
Henri MaurerandGitHub 1d740b64ec Merge pull request #642 from actions/dependabot/github_actions/actions/upload-artifact-4 
Bump actions/upload-artifact from 3 to 4
 2024-01-04 16:40:31 +00:00
Henri MaurerandGitHub c74b580d73 Merge pull request #651 from actions/release-3.1.5 
Bump version to 3.1.5
v3.1.5 		2024-01-04 15:06:44 +00:00
Henri MaurerandHenri Maurer cc4f6536e3 Release 3.1.5 v3 2024-01-04 15:05:38 +00:00
Henri MaurerandGitHub d2ed7c0d19 Merge pull request #649 from actions/per-page 
Smaller `per_page` when requesting diff
 2024-01-04 14:33:15 +00:00
Henri Maurer 9e77cc7329 npm run package 2024-01-04 10:49:05 +00:00
Henri Maurer b383a9aa6e Smaller per_page when requesting diff 2024-01-04 10:17:51 +00:00