actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
381 Commits 90 Branches 61 Tags
0d02efb12ccce31b16b625f45448897fec9ded6f
Commit Graph
381 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico BuilesandGitHub 0d02efb12c Merge pull request #207 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.34.0 
Bump @typescript-eslint/eslint-plugin from 5.33.1 to 5.34.0
 2022-08-23 08:37:24 +02:00
dependabot[bot]andGitHub 2a09e52261 Bump @typescript-eslint/eslint-plugin from 5.33.1 to 5.34.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.33.1 to 5.34.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.34.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-23 01:35:02 +00:00
Federico BuilesandGitHub e86dfd8cc0 Merge pull request #206 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.8.7 
Bump eslint-plugin-jest from 26.8.3 to 26.8.7
 2022-08-22 08:10:22 +02:00
Federico BuilesandGitHub a39d9063b3 Merge pull request #205 from actions/dependabot/npm_and_yarn/types/node-16.11.52 
Bump @types/node from 16.11.49 to 16.11.52
 2022-08-22 08:09:56 +02:00
dependabot[bot]andGitHub 9809e06c2d Bump eslint-plugin-jest from 26.8.3 to 26.8.7 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 26.8.3 to 26.8.7.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v26.8.3...v26.8.7)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-22 01:51:45 +00:00
dependabot[bot]andGitHub 70bbe4186e Bump @types/node from 16.11.49 to 16.11.52 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.49 to 16.11.52.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-22 01:51:24 +00:00
Federico Builes 23d1ffffb6 Bumping to 2.1.0. v2.1.0 2022-08-18 16:22:01 +02:00
Federico Builes d792f3e8ca Add a reminder to update the version number in package.json 
when creating a new release.
 2022-08-18 16:20:03 +02:00
Federico Builes 5da7945e2b Fixing lint/dist. 2022-08-18 16:15:03 +02:00
Federico BuilesandGitHub a8e7c378a3 Merge pull request #181 from tspascoal/add-summary 
Show vulnerabities and license information on the job summary.
 2022-08-18 16:14:27 +02:00
Federico BuilesandGitHub 0e0d6ec5d6 Merge branch 'main' into add-summary 2022-08-18 16:11:15 +02:00
Federico BuilesandGitHub 9f2f2d8aa6 Merge pull request #200 from actions/willdasilva-fork 
Support user-provided base/head refs & non-PR workflows
 2022-08-18 15:30:04 +02:00
Federico Builes d2018420d8 Clean up mock data setup. 2022-08-18 15:03:11 +02:00
Federico Builes 54af7c7fbe Merge branch 'main' into WillDaSilva-main. 
Took the time to tweak the README.

# Conflicts:
#	README.md
#	dist/index.js.map
 2022-08-18 14:56:08 +02:00
Federico BuilesandGitHub f2e57a19af Merge pull request #196 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.33.1 
Bump @typescript-eslint/eslint-plugin from 5.33.0 to 5.33.1
 2022-08-16 07:50:18 +02:00
dependabot[bot]andGitHub fb59017069 Bump @typescript-eslint/eslint-plugin from 5.33.0 to 5.33.1 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.33.0 to 5.33.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.33.1/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-16 05:46:37 +00:00
Federico BuilesandGitHub 3d5f077fa9 Merge pull request #195 from actions/dependabot/npm_and_yarn/types/node-16.11.49 
Bump @types/node from 16.11.48 to 16.11.49
 2022-08-16 07:45:40 +02:00
dependabot[bot]andGitHub cb1474859d Bump @types/node from 16.11.48 to 16.11.49 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.48 to 16.11.49.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-16 05:44:24 +00:00
Federico BuilesandGitHub 5f53719ca3 Merge pull request #197 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.8.3 
Bump eslint-plugin-jest from 26.8.2 to 26.8.3
 2022-08-16 07:44:12 +02:00
Federico BuilesandGitHub 193b31de81 Merge pull request #198 from actions/dependabot/npm_and_yarn/octokit/request-error-3.0.1 
Bump @octokit/request-error from 3.0.0 to 3.0.1
 2022-08-16 07:43:59 +02:00
Federico BuilesandGitHub 92e8b8da75 Merge pull request #199 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.33.1 
Bump @typescript-eslint/parser from 5.33.0 to 5.33.1
 2022-08-16 07:43:43 +02:00
dependabot[bot]andGitHub 625da714f5 Bump @typescript-eslint/parser from 5.33.0 to 5.33.1 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.33.0 to 5.33.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.33.1/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-16 01:42:20 +00:00
dependabot[bot]andGitHub 0794c6c280 Bump @octokit/request-error from 3.0.0 to 3.0.1 
Bumps [@octokit/request-error](https://github.com/octokit/request-error.js) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](https://github.com/octokit/request-error.js/compare/v3.0.0...v3.0.1)

---
updated-dependencies:
- dependency-name: "@octokit/request-error"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-16 01:42:07 +00:00
dependabot[bot]andGitHub d12f30b747 Bump eslint-plugin-jest from 26.8.2 to 26.8.3 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 26.8.2 to 26.8.3.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v26.8.2...v26.8.3)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-16 01:41:59 +00:00
Federico BuilesandGitHub dbafdf9b30 Merge pull request #194 from actions/dependabot/npm_and_yarn/eslint-8.22.0 
Bump eslint from 8.21.0 to 8.22.0
 2022-08-15 09:18:00 +02:00
dependabot[bot]andGitHub 3f3ba6e567 Bump eslint from 8.21.0 to 8.22.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.21.0 to 8.22.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.21.0...v8.22.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-15 01:55:22 +00:00
Federico BuilesandGitHub e2e1913ee9 Merge pull request #192 from actions/dependabot/npm_and_yarn/zod-3.18.0 
Bump zod from 3.17.10 to 3.18.0
 2022-08-12 18:19:08 +02:00
Federico Builes 2122cb87dc Merge branch 'main' into dependabot/npm_and_yarn/zod-3.18.0 
# Conflicts:
#	dist/index.js.map
 2022-08-12 18:17:01 +02:00
Federico BuilesandGitHub 694e9af6c9 Merge pull request #193 from actions/dependabot/npm_and_yarn/types/node-16.11.48 
Bump @types/node from 16.11.47 to 16.11.48
 2022-08-12 18:14:26 +02:00
Federico Builes 96dcfbbcd4 adding dist 2022-08-12 18:14:15 +02:00
dependabot[bot]andGitHub c77018cec1 Bump @types/node from 16.11.47 to 16.11.48 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.47 to 16.11.48.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-12 16:07:54 +00:00
Federico BuilesandGitHub 36a493b367 Merge pull request #189 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.33.0 
Bump @typescript-eslint/eslint-plugin from 5.32.0 to 5.33.0
 2022-08-12 18:05:11 +02:00
dependabot[bot]andGitHub 11e4eca6c1 Bump zod from 3.17.10 to 3.18.0 
Bumps [zod](https://github.com/colinhacks/zod) from 3.17.10 to 3.18.0.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/master/CHANGELOG.md)
- [Commits](https://github.com/colinhacks/zod/compare/v3.17.10...v3.18.0)

---
updated-dependencies:
- dependency-name: zod
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-12 16:04:10 +00:00
dependabot[bot]andGitHub e9f051f098 Bump @typescript-eslint/eslint-plugin from 5.32.0 to 5.33.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.32.0 to 5.33.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.33.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-12 16:03:51 +00:00
Federico BuilesandGitHub f59ac52391 Merge pull request #186 from actions/dependabot/npm_and_yarn/got-12.3.1 
Bump got from 12.3.0 to 12.3.1
 2022-08-12 18:03:34 +02:00
Federico BuilesandGitHub 5391a8b654 Merge pull request #190 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.33.0 
Bump @typescript-eslint/parser from 5.32.0 to 5.33.0
 2022-08-12 18:02:56 +02:00
Federico BuilesandGitHub 531da4bab3 Merge pull request #191 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.8.2 
Bump eslint-plugin-jest from 26.7.0 to 26.8.2
 2022-08-12 18:02:28 +02:00
Federico BuilesandGitHub a059506842 Merge pull request #188 from actions/dependabot/npm_and_yarn/actions/core-1.9.1 
Bump @actions/core from 1.9.0 to 1.9.1
 2022-08-12 18:01:43 +02:00
Federico Builes d8aff4cfce adding dist 2022-08-12 18:00:10 +02:00
dependabot[bot]andGitHub 1069034a80 Bump eslint-plugin-jest from 26.7.0 to 26.8.2 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 26.7.0 to 26.8.2.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v26.7.0...v26.8.2)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-10 01:22:58 +00:00
dependabot[bot]andGitHub 424d622090 Bump @typescript-eslint/parser from 5.32.0 to 5.33.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.32.0 to 5.33.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.33.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-09 01:36:41 +00:00
dependabot[bot]andGitHub 979fe8f031 Bump @actions/core from 1.9.0 to 1.9.1 
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-09 01:35:43 +00:00
dependabot[bot]andGitHub ea4b93e2db Bump got from 12.3.0 to 12.3.1 
Bumps [got](https://github.com/sindresorhus/got) from 12.3.0 to 12.3.1.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v12.3.0...v12.3.1)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-08 01:50:21 +00:00
Tiago Pascoal 47f663b6ee update dist after fixing typo 2022-08-07 11:39:10 +00:00
Tiago PascoalGitHubEric Cornelissen
 		dfcdb87cb3 Fix typo 
Co-authored-by: Eric Cornelissen <ericornelissen@gmail.com>
 2022-08-07 12:36:42 +01:00
Tiago PascoalandGitHub 79f5aede88 Merge branch 'main' into add-summary 2022-08-04 16:59:57 +01:00
Tiago Pascoal aef949f026 Show vulnerabities and license information on the job summary. 
Users can see the results that were found directly on the job summary

All the results are grouped by manifest.

It shows a table with vulnerable packages, together with package version,
the vulnerabily info and it's severity.

Shows info about package licenses, which packages have a non allowed license,
and the list of packages with unknown licenses.
 2022-08-04 15:35:07 +00:00
Federico BuilesandGitHub 415088b56e Merge pull request #180 from actions/enterprise-docs 
Adding instructions for installing in GHES
 2022-08-03 17:28:05 +02:00
Federico BuilesGitHubCourtney Claessens
 		be18317f94 Update README.md 
Co-authored-by: Courtney Claessens <courtneycl@github.com>
 2022-08-03 17:27:39 +02:00
Courtney ClaessensandGitHub e20b197c93 adding info on licenses not supported for GHES 2022-08-03 10:46:47 -04:00