actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
1,824 Commits 90 Branches 61 Tags
2bedf4a221c94de43894e690e432b09913640d67
Commit Graph
69 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Justin HolguínandGitHub a2dda6f539 Merge pull request #766 from louis-bompart/main 
fix: getRefs function to handle merge_group events
 2024-07-12 12:55:37 -07:00
Justin HolguínandGitHub 5a2ce3f5b9 Merge pull request #791 from actions/juxtin/update-version 
Prepare even more for v4.3.4
 2024-07-11 13:47:10 -07:00
Justin HolguínandGitHub ac6a6adece Prepare even more for v4.3.4 2024-07-11 20:39:43 +00:00
Justin HolguínandGitHub 3e2b91798f Merge pull request #790 from actions/juxtin/update-version 
Prepare for v4.3.4 release
 2024-07-11 13:38:12 -07:00
Justin HolguínandGitHub d9ab9c8c45 Update version in package.json 2024-07-11 18:57:29 +00:00
Justin HolguínandGitHub 8c152c7a0f Merge pull request #769 from actions/dependabot/npm_and_yarn/zod-3.23.8 
Bump zod from 3.22.4 to 3.23.8
 2024-07-10 10:50:09 -07:00
Justin HolguínandGitHub 0085d30a6f Update dist 2024-07-10 17:47:42 +00:00
Justin HolguínandGitHub 986fce9040 Merge pull request #784 from actions/dependabot/npm_and_yarn/got-14.4.1 
Bump got from 14.2.0 to 14.4.1
 2024-07-10 10:41:24 -07:00
Justin HolguínandGitHub 28743f8570 Merge pull request #719 from actions/change-spdx-parser 
Update SPDX Expression Parsing
 2024-07-10 10:06:31 -07:00
Justin HolguínandGitHub d6f34c3a26 Merge pull request #789 from actions/dependabot/npm_and_yarn/braces-3.0.3 
Bump braces from 3.0.2 to 3.0.3
 2024-07-08 14:53:16 -07:00
Justin HolguínandGitHub b4ae47ca2c Properly display test failures using jest 2024-06-10 23:07:07 +00:00
Justin HolguínandGitHub 82ab8f69c7 Merge pull request #765 from actions/juxtin/allow-slashes-in-purls 
Allow slashes in purl package names
 2024-05-02 13:30:20 -07:00
Justin HolguínandGitHub 432d8e7efe Allow slashes in purl package names 2024-05-02 19:11:08 +00:00
Justin HolguínandGitHub 0c155c5e85 Merge pull request #762 from actions/juxtin/prepare-4.3.2 
Update version number to 4.3.2
 2024-04-30 09:39:04 -07:00
Justin HolguínandGitHub f3dac32d35 Merge pull request #761 from actions/juxtin/fix-allow-dependencies-licenses 
Fix package-url parsing for allow-dependencies-licenses
 2024-04-30 09:38:44 -07:00
Justin HolguínandGitHub d0d5cc3ec4 Update version number to 4.3.2 2024-04-30 16:30:51 +00:00
Justin HolguínandGitHub 49fbbe0acb Fix package-url parsing for allow-dependencies-licenses 2024-04-29 23:24:15 +00:00
Justin HolguínandGitHub e58c696e52 Merge pull request #758 from actions/juxtin/prepare-4.3.1 
Change version to 4.3.1
 2024-04-29 10:48:18 -07:00
Justin HolguínandGitHub 9b7c72ddcd Change version to 4.3.1 2024-04-29 17:45:21 +00:00
Justin HolguínandGitHub 7dcfabfea2 Merge pull request #753 from actions/juxtin/debug-purl 
Parse purls cautiously in getDeniedChanges
 2024-04-29 10:43:30 -07:00
Justin HolguínandGitHub 5f0808ffb1 Validate that deny-packages purls are complete 2024-04-29 16:46:21 +00:00
Justin HolguínandGitHub fcc66c23b3 Refine purl parsing and tests 2024-04-28 20:33:37 +00:00
Justin HolguínandGitHub 1dd418bcb3 Basic tests for PURL validation in config 2024-04-27 22:16:46 +00:00
Justin HolguínandGitHub 640617990f Replace packageurl-js with our own implementation 2024-04-27 21:26:06 +00:00
Justin HolguínandGitHub 2034babb6b Bypass purls (mostly) for deny checks 2024-04-26 23:17:11 +00:00
Justin HolguínandGitHub 7e773b1e98 Log offending purl 2024-04-26 21:50:12 +00:00
Justin HolguínandGitHub a3460920cc Parse purls cautiously in getDeniedChanges 2024-04-26 21:28:24 +00:00
Justin HolguínandGitHub 0659a74c94 Merge pull request #751 from actions/juxtin/release 
Update version to 4.3.0 in preparation for release
 2024-04-26 10:26:45 -07:00
Justin HolguínandGitHub 28facf5722 Update release instructions 2024-04-26 17:11:57 +00:00
Justin HolguínandGitHub 5ab7b74146 Update package-lock.json 2024-04-26 17:11:46 +00:00
Justin HolguínandGitHub 95b6fa4e6b Update version to 4.3.0 2024-04-25 22:41:44 +00:00
Justin HolguínandGitHub df1b3661fd Merge pull request #750 from actions/juxtin/fix-deny-icon 
Show denied packages with red X
 2024-04-24 15:37:25 -07:00
Justin HolguínandGitHub 7e2c3c347b Show denied packages with red X 2024-04-24 22:11:24 +00:00
Justin HolguínandGitHub f456418f6a Merge pull request #737 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.10.2 
Bump eslint-plugin-github from 4.10.1 to 4.10.2
 2024-04-24 14:59:31 -07:00
Justin HolguínandGitHub 19bd35e07b Merge pull request #744 from actions/dependabot/npm_and_yarn/typescript-5.4.5 
Bump typescript from 5.3.3 to 5.4.5
 2024-04-24 14:57:23 -07:00
Justin HolguínandGitHub ff97293707 Update dist 2024-04-24 21:55:26 +00:00
Justin HolguínandGitHub 68488bcecb Merge pull request #748 from actions/issue-738 
Fix extra https:// in summary
 2024-04-24 13:54:40 -07:00
Justin HolguínandGitHub 60f93ef4a0 Merge pull request #432 from tgrall/issue-431-fail-on-severity-none 
Add none as option for fail-on-severity
 2024-02-11 14:00:39 -08:00
Justin HolguínandGitHub 748888b3fd Merge pull request #665 from actions/dependabot/npm_and_yarn/prettier-3.2.4 
Bump prettier from 3.1.1 to 3.2.4
 2024-01-31 14:19:36 -08:00
Justin HolguínandGitHub 4dffb75625 Run prettier --write 2024-01-31 22:09:37 +00:00
Justin HolguínandGitHub 9e50351924 Merge pull request #678 from actions/juxtin/codeql-ignore-dist 
Use manual codeql config
 2024-01-31 13:49:51 -08:00
Justin HolguínandGitHub 0812876f7c Update codeql.yml 2024-01-31 13:44:54 -08:00
Justin HolguínandGitHub 4f37a60d4f Create codeql.yml 2024-01-31 13:36:31 -08:00
Justin HolguínandGitHub 0229309241 Merge pull request #673 from actions/dependabot/npm_and_yarn/nodemon-3.0.3 
Bump nodemon from 3.0.2 to 3.0.3
 2024-01-31 10:56:20 -08:00
Justin HolguínandGitHub 6c5ccdad46 Merge pull request #562 from actions/juxtin/v3.0.9 
Update version to 3.1.0
 2023-09-07 14:46:08 -07:00
Justin HolguínandGitHub ca13810d94 Update version to 3.1.0 2023-09-07 21:42:29 +00:00
Justin HolguínandGitHub 8447b31d38 Merge pull request #561 from actions/juxtin/dr-snaps-readme 
Add new Dr Snaps config options to readme
 2023-09-07 14:19:42 -07:00
Justin HolguínandGitHub 85df23de2c Update readme with new parameters 2023-09-07 21:17:45 +00:00
Justin HolguínandGitHub 5da6fdbdf9 Clean up markdown formatting 2023-09-07 21:11:56 +00:00
Justin HolguínandGitHub 92837b0ca8 Merge pull request #560 from actions/juxtin/improve-warnings 
Improve display of snapshot warnings
 2023-09-07 14:09:36 -07:00
Justin HolguínandGitHub 35a52fd146 Minor tweaks to snapshot warnings 2023-09-07 18:00:57 +00:00
Justin HolguínandGitHub bed9726f78 Make snapshot warning messages clearer and more actionable 2023-09-07 17:54:42 +00:00
Justin HolguínandGitHub e4d20ce9ad Merge pull request #556 from actions/juxtin/dr-snaps-pre-launch 
Dr Snaps launch PR
 2023-09-07 10:18:47 -07:00
Justin HolguínandGitHub bb0ca79fcd Update action.yml to show retry default 2023-09-07 17:08:20 +00:00
Justin HolguínandGitHub 07f52ce621 Add example with retry-on-snapshot-warnings to docs 2023-09-07 17:07:50 +00:00
Justin HolguínGitHubFederico Builes
 		c7e8727af4 Update action.yml 
Co-authored-by: Federico Builes <[email protected]>
 2023-09-07 09:50:44 -07:00
Justin HolguínandGitHub ffaf251c92 update dist 2023-09-06 20:38:47 +00:00
Justin HolguínandGitHub 726ffc8aa8 Merge remote-tracking branch 'origin/main' into juxtin/dr-snaps-pre-launch 2023-09-06 20:26:55 +00:00
Justin HolguínandGitHub fcef41f1e0 Add docs link to snapshot warnings 2023-09-06 19:07:18 +00:00
Justin HolguínandGitHub e81e6e582f Default retry-on-snapshot-warnings to false 
Keeping this true by default means wasting actions minutes for
the vast majority of DR users
 2023-09-06 18:04:16 +00:00
Justin HolguínandGitHub ada103783f Merge remote-tracking branch 'origin/retry-on-snapshot-warnings' into juxtin/dr-snaps-pre-launch 2023-08-31 16:31:44 +00:00
Justin HolguínandGitHub abc80cf6a0 Merge branch 'juxtin/snapshot-warnings' into juxtin/dr-snaps-pre-launch 2023-08-31 16:06:14 +00:00
Justin HolguínandGitHub ee86529290 Show all non-empty snapshot warnings 2023-08-23 18:45:35 +00:00
Justin HolguínandGitHub e0ec35dfb0 Merge pull request #439 from actions/juxtin/snapshot-warnings 
Show snapshot warnings in the summary
 2023-04-06 13:27:46 -07:00
Justin HolguínandGitHub 76b8e83d1a Use 'Unnamed Manifest' as catchall bucket 2023-03-28 16:06:07 +00:00
Justin HolguínandGitHub 7e1f7be1f6 Handle dependencies with an empty manifest field 
This happens sometimes with snapshots. We just want them to be displayed properly in the HTML output.
 2023-03-24 19:07:22 +00:00
Justin HolguínandGitHub 0c01e947d6 Flesh out the warnings section a tiny bit 2023-03-23 23:26:23 +00:00
Justin HolguínandGitHub 782549c724 Ignore snapshot_warnings for missing head snapshots 2023-03-23 22:59:07 +00:00
Justin HolguínandGitHub 419396de41 Show snapshot warnings in the summary 2023-03-22 21:30:12 +00:00