actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
1,774 Commits 90 Branches 61 Tags
roman/upd
Commit Graph
1774 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Roman Iakovlev cdee0bc8c3 Bump octokit and related dependencies 2025-03-12 10:57:15 +00:00
Lewis JonesandGitHub 0e562a634b Merge pull request #900 from actions/dependabot/npm_and_yarn/esbuild-0.25.0 
Bump esbuild from 0.19.5 to 0.25.0
 2025-03-07 11:49:50 +00:00
dependabot[bot]andGitHub 2c5ec1eea8 Bump esbuild from 0.19.5 to 0.25.0 
Bumps [esbuild](https://github.com/evanw/esbuild) from 0.19.5 to 0.25.0.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.19.5...v0.25.0)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-26 20:54:18 +00:00
Eric SorensonandGitHub bf0431a342 Merge pull request #893 from omahs/patch-1 
Fix typos
 2025-02-07 14:27:22 -08:00
omahsandGitHub c26b132baa fix typos 2025-02-07 13:22:20 +01:00
omahsandGitHub 3ffdd4d73e fix typos 2025-02-07 13:20:46 +01:00
Ashely TenesacaandGitHub ea2cae5127 Merge pull request #888 from ellenfieldn/allow-deny-package-removal 
Allow deny package removal
 2025-02-06 17:18:15 -05:00
Nathan Ellenfield dfe560420d fix formatting and dist 2025-02-05 15:50:50 -05:00
Nathan Ellenfield e4033dcc29 Merge remote-tracking branch 'origin/main' into allow-deny-package-removal 2025-02-04 13:33:03 -05:00
Ashely TenesacaandGitHub 92129e58e4 Merge pull request #891 from actions/ashelytc/server-url-fix 
DR Action should link to the proxima stamp when appropriate in error messages
 2025-02-03 14:46:11 -05:00
Ashely Tenesaca bf9bc3f2a6 generate dist code 2025-02-03 17:25:46 +00:00
Ashely Tenesaca d703cf58c3 replace server url with variable 2025-02-03 15:57:21 +00:00
Nathan Ellenfield c80eb9894b fixit 2025-01-27 16:01:10 -05:00
Nathan Ellenfield 5e7a6ffc7d fix: Allow removal denied packages 2025-01-27 16:00:09 -05:00
Ahmed ElMallahandGitHub 67ca5cc413 Merge pull request #877 from actions/dependabot/npm_and_yarn/undici-5.28.5 
Bump undici from 5.28.4 to 5.28.5
 2025-01-24 12:04:24 -08:00
Ahmed ElMallah 8992b0e1c7 updating dist code 2025-01-24 20:01:21 +00:00
Ahmed ElMallahandGitHub 5e9a56c6de Merge pull request #878 from actions/dependabot/github_actions/actions/stale-9.1.0 
Bump actions/stale from 9.0.0 to 9.1.0
 2025-01-24 11:58:00 -08:00
dependabot[bot]andGitHub 9cd1f01f7f Bump actions/stale from 9.0.0 to 9.1.0 
Bumps [actions/stale](https://github.com/actions/stale) from 9.0.0 to 9.1.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v9.0.0...v9.1.0)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-24 19:52:48 +00:00
Ahmed ElMallahandGitHub a0be92bfc2 Merge pull request #876 from actions/ahmed3lmallah/dependabot-updates 
Grouping minor and patch dependabot updates to lessen the number of PRs
 2025-01-24 11:52:11 -08:00
dependabot[bot]andGitHub 6ec8e13b9a Bump undici from 5.28.4 to 5.28.5 
Bumps [undici](https://github.com/nodejs/undici) from 5.28.4 to 5.28.5.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5)

---
updated-dependencies:
- dependency-name: undici
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-24 17:39:09 +00:00
Ahmed ElMallah c9bb42fdbf grouping minor and patch updates to lessen the number of PRs 2025-01-23 23:01:53 +00:00
Ahmed ElMallahandGitHub b109bc8c95 Merge pull request #870 from actions/ahmed3lmallah/updating-dependencies 
Updating multiple dependency versions
 2025-01-23 14:00:10 -08:00
Ahmed ElMallah 5f24a51147 Updating dist folder 2025-01-23 21:07:48 +00:00
Ahmed ElMallah ef281d4e24 Updating multiple dependency versions 2025-01-23 21:07:39 +00:00
Ahmed ElMallahandGitHub 3b139cfc5f Merge pull request #851 from actions/ahmed3lmallah/prepare-for-4.5.0-release 
Prepare for 4.5.0 release
v4.5.0 		2024-11-20 13:49:04 -08:00
Ahmed ElMallah d6807b6643 updating generated code 2024-11-20 21:42:05 +00:00
Ahmed ElMallah c89b41fdc6 addressing lint issues 2024-11-20 21:41:54 +00:00
Ahmed ElMallah eee97d8b03 incrementing project version 2024-11-20 21:41:43 +00:00
Ahmed ElMallahandGitHub 9d101822a3 Merge pull request #827 from ebickle/fix/comment-warn-only 
fix: add summary comment on failure when warn-only: true
 2024-11-20 13:28:17 -08:00
Ahmed ElMallahandGitHub 9192be9c72 Merge pull request #850 from actions/ahmed3lmallah/adressing-CVE-2024-21538 
Overriding the cross-spawn dependency to use a safe version
 2024-11-19 14:42:32 -08:00
Ahmed ElMallah 2fc8e23b12 Using cross-spawn safe version 2024-11-19 22:26:34 +00:00
Eric Bickle fb86db2043 fix: resolve race conditions in async core.group calls 2024-11-19 14:17:06 -08:00
Eric Bickle 0a198ab3ed fix: replace integer failureCount with boolean 2024-11-19 13:15:15 -08:00
Eric Bickle fc499fc13a Merge branch 'main' into fix/comment-warn-only 2024-11-19 12:51:47 -08:00
Ahmed ElMallahandGitHub b02ea3a88b Merge pull request #849 from actions/dependabot/npm_and_yarn/vercel/ncc-0.38.3 
Bump @vercel/ncc from 0.38.1 to 0.38.3
 2024-11-18 15:14:46 -08:00
Ahmed ElMallah 612e96e757 updating dist code 2024-11-18 22:36:35 +00:00
Ahmed ElMallahandGitHub 0adc9b8215 Merge pull request #847 from actions/dependabot/npm_and_yarn/nodemon-3.1.7 
Bump nodemon from 3.1.0 to 3.1.7
 2024-11-18 13:05:25 -08:00
dependabot[bot]andGitHub 591cbf9044 Bump @vercel/ncc from 0.38.1 to 0.38.3 
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.38.1 to 0.38.3.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.38.1...0.38.3)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-11-18 01:28:26 +00:00
dependabot[bot]andGitHub c0a5e20c51 Bump nodemon from 3.1.0 to 3.1.7 
Bumps [nodemon](https://github.com/remy/nodemon) from 3.1.0 to 3.1.7.
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](https://github.com/remy/nodemon/compare/v3.1.0...v3.1.7)

---
updated-dependencies:
- dependency-name: nodemon
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-11-04 01:59:13 +00:00
Eli ReismanandGitHub c82883d789 Merge pull request #844 from actions/dependabot/npm_and_yarn/got-14.4.3 
Bump got from 14.4.2 to 14.4.3
 2024-10-28 16:23:56 -07:00
Ahmed ElMallahandGitHub 4081bf99e2 Merge pull request #846 from actions/merge-group-bug-fix 
Fix for merge_group event bug
v4.4.0 		2024-10-28 11:42:18 -07:00
ahmed3lmallah 03e585eea7 fixing minor typo 2024-10-27 23:34:29 -07:00
ahmed3lmallah 08b4117924 updating dist code 2024-10-27 23:30:45 -07:00
ahmed3lmallah 9c3441f7ee updating dist code 2024-10-27 23:12:50 -07:00
ahmed3lmallah 304a544dca updating tests 2024-10-27 23:11:58 -07:00
ahmed3lmallah e99353b1e1 fixing merge_group schema bug 2024-10-27 22:56:44 -07:00
dependabot[bot]andGitHub d8ae44e2a0 Bump got from 14.4.2 to 14.4.3 
Bumps [got](https://github.com/sindresorhus/got) from 14.4.2 to 14.4.3.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v14.4.2...v14.4.3)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-28 01:10:40 +00:00
Ahmed ElMallahandGitHub a6993e2c61 Merge pull request #840 from actions/dependabot-updates 
Bump eslint-plugin-jest and ts-jest
v4.3.5 		2024-10-21 15:29:33 -07:00
ahmed3lmallah d92f08b3ff Bump eslint-plugin-jest and ts-jest 2024-10-21 15:16:32 -07:00
Barry GordonandGitHub 3e334b7ca7 Merge pull request #822 from actions/dependabot/npm_and_yarn/got-14.4.2 
Bump got from 14.4.1 to 14.4.2
 2024-09-30 16:17:18 +01:00