actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
820 Commits 90 Branches 61 Tags
4b2cf01947881fd862c91b16424d75626367aa7c
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico Builes 90014ebf46 Merge pull request #368 from actions/dependabot/npm_and_yarn/yaml-2.2.1 
Bump yaml from 2.1.3 to 2.2.1
 2023-01-02 05:36:29 -05:00
Federico Builes c0fcb40fb5 dist 2023-01-02 11:35:30 +01:00
Federico Builes 6213daabf8 Merge branch 'main' into dependabot/npm_and_yarn/yaml-2.2.1 2023-01-02 11:34:56 +01:00
Federico Builes 6c62d64ea3 Merge pull request #366 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.47.1 
Bump @typescript-eslint/eslint-plugin from 5.45.0 to 5.47.1
 2023-01-02 05:32:26 -05:00
Federico Builes 6154af02da updating dist files 2023-01-02 11:23:18 +01:00
Federico Builes df40ce1edc fixing package.json conflict 2023-01-02 11:21:05 +01:00
Federico Builes d79457303f adding dist 2023-01-02 11:19:49 +01:00
Federico Builes b2f83f35c7 adding dist 2023-01-02 11:17:39 +01:00
Federico Builes 389b38eb1a Merge pull request #367 from actions/dependabot/npm_and_yarn/zod-3.20.2 
Bump zod from 3.19.1 to 3.20.2
 2023-01-02 05:17:04 -05:00
Federico Builes e3926a59f5 adding dist 2023-01-02 11:16:52 +01:00
Federico Builes 54656aadd8 Merge pull request #365 from actions/dependabot/npm_and_yarn/esbuild-register-3.4.2 
Bump esbuild-register from 3.4.1 to 3.4.2
 2023-01-02 05:13:23 -05:00
Federico Builes f02b9fb886 Merge pull request #364 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.47.1 
Bump @typescript-eslint/parser from 5.47.0 to 5.47.1
 2023-01-02 05:12:50 -05:00
Federico Builes a482eabd84 Merge pull request #362 from actions/dependabot/npm_and_yarn/types/node-16.18.11 
Bump @types/node from 16.18.8 to 16.18.11
 2022-12-27 09:42:24 -05:00
Federico Builes c63a70f2bb Merge pull request #358 from actions/dependabot/npm_and_yarn/typescript-4.9.4 
Bump typescript from 4.9.3 to 4.9.4
 2022-12-27 09:41:58 -05:00
Federico Builes ea081cab93 Merge pull request #357 from actions/dependabot/npm_and_yarn/eslint-8.30.0 
Bump eslint from 8.29.0 to 8.30.0
 2022-12-27 09:41:47 -05:00
Federico Builes ea38797bf9 Merge pull request #359 from jongwooo/chore/use-cache-in-check-dist 
Use cache in check-dist.yml
 2022-12-27 09:40:44 -05:00
Federico Builes 234f1c3e6b Merge pull request #355 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.7 
Bump eslint-plugin-jest from 27.1.6 to 27.1.7
 2022-12-27 09:39:34 -05:00
Federico Builes f5231a7139 Merge pull request #361 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.47.0 
Bump @typescript-eslint/parser from 5.46.0 to 5.47.0
 2022-12-27 09:36:32 -05:00
Federico Builes 08ec176670 Merge pull request #341 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.6 
Bump eslint-plugin-jest from 27.1.5 to 27.1.6
 2022-11-28 17:40:48 +01:00
Federico Builes 9ad1f84ed2 Dependabot Updates should only happen once a week. 2022-11-24 10:57:01 +01:00
Federico Builes 464e6ac735 Merge pull request #337 from actions/dependabot/npm_and_yarn/prettier-2.8.0 
Bump prettier from 2.7.1 to 2.8.0
 2022-11-24 06:57:46 +01:00
Federico Builes 37bb7a46dd Merge pull request #336 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.44.0 
Bump @typescript-eslint/parser from 5.43.0 to 5.44.0
 2022-11-23 08:13:04 +01:00
Federico Builes 5aafbe4a32 Merge pull request #335 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.44.0 
Bump @typescript-eslint/eslint-plugin from 5.43.0 to 5.44.0
 2022-11-23 08:07:40 +01:00
Federico Builes 08fe899167 Merge pull request #334 from actions/dependabot/npm_and_yarn/eslint-8.28.0 
Bump eslint from 8.27.0 to 8.28.0
 2022-11-21 07:16:29 +01:00
Federico Builes 6b47d2662b Merge pull request #333 from actions/dependabot/npm_and_yarn/got-12.5.3 
Bump got from 12.5.2 to 12.5.3
 2022-11-17 07:17:03 +01:00
Federico Builes 352f50a80e Update contribution instructions with v3 for easier copy/pasting. 2022-11-16 11:36:08 +01:00
Federico Builes 11310527b4 bumping version 2022-11-16 11:31:19 +01:00
Federico Builes ea0f46928b Merge pull request #330 from actions/errors-for-external-configs 
Improve error messages for external config files
 2022-11-16 11:26:15 +01:00
Federico Builes 369356e2e7 Fixing merge conflict in dist/ 
# Conflicts:
#	dist/index.js.map
 2022-11-16 11:24:44 +01:00
Federico Builes 136c0838bf Merge pull request #332 from actions/dependabot/npm_and_yarn/typescript-4.9.3 
Bump typescript from 4.8.4 to 4.9.3
 2022-11-16 07:04:34 +01:00
Federico Builes a952d7b1b7 adding dist 2022-11-15 22:34:15 +01:00
Federico Builes b8e622f102 Move test out of failing block. 2022-11-15 22:33:31 +01:00
Federico Builes ac059c649c Checkpoint! 2022-11-15 22:29:00 +01:00
Federico Builes 93652d7af0 Fix failing tests. 2022-11-15 22:28:50 +01:00
Federico Builes ba127cac5e Adding a test to confirm lists work properly in config files. 2022-11-15 22:25:26 +01:00
Federico Builes 1dd7392739 Adding fixture for testing config file string lists. 2022-11-15 22:25:13 +01:00
Federico Builes 2d265aa7cc Updating dist. 2022-11-15 07:50:53 +01:00
Federico Builes c57c602135 Force error casting to get messages! 2022-11-15 07:50:45 +01:00
Federico Builes c2097b2a9b Updating copy in a test. 2022-11-15 07:50:32 +01:00
Federico Builes 0a055a6a13 Improve error messages for external config files. 2022-11-15 07:45:29 +01:00
Federico Builes 3417e62ba2 Merge pull request #328 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.43.0 
Bump @typescript-eslint/parser from 5.42.1 to 5.43.0
 2022-11-15 05:38:42 +01:00
Federico Builes 173a4b8d96 Merge pull request #329 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.43.0 
Bump @typescript-eslint/eslint-plugin from 5.42.1 to 5.43.0
 2022-11-15 05:32:34 +01:00
Federico Builes 30d5821115 Bumping version number 2022-11-11 15:41:53 +01:00
Federico Builes 6e42c3395a Remove defaults from the recently added fields. 2022-11-11 15:19:46 +01:00
Federico Builes a3074cd699 Merge pull request #327 from actions/adding-extra-options 
Updating action.yml to include `*-check` config options
 2022-11-11 15:11:20 +01:00
Federico Builes 51a29d6960 Updating action.yml to include *-check config 
options.
 2022-11-11 14:56:07 +01:00
Federico Builes 235a221cf4 Merge pull request #324 from actions/readme-update 
Update the README
 2022-11-11 11:27:19 +01:00
Federico Builes 9b3a7f61dd Minor README tweaks. 2022-11-11 11:26:05 +01:00
Federico Builes a4761312ac Add pull_request to the list of events that don't need refs. 2022-11-11 11:23:46 +01:00
Federico Builes 28c7c8c314 Set the correct default for license-check in README. 2022-11-11 11:17:08 +01:00
Federico Builes 9da0fd4871 Merge pull request #325 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.5 
Bump eslint-plugin-jest from 27.1.4 to 27.1.5
 2022-11-11 09:00:04 +01:00
Federico Builes fe45fd6645 Merge pull request #326 from actions/dependabot/npm_and_yarn/esbuild-register-3.4.1 
Bump esbuild-register from 3.4.0 to 3.4.1
 2022-11-11 08:59:46 +01:00
Federico Builes 9e552623cc Merge pull request #323 from actions/dependabot/npm_and_yarn/esbuild-register-3.4.0 
Bump esbuild-register from 3.3.3 to 3.4.0
 2022-11-10 12:45:45 +01:00
Federico Builes 4108a15bd3 Merge pull request #306 from actions/external-repo-config 
Read configuration from external repositories
 2022-11-10 11:03:15 +01:00
Federico Builes 5ea8fbfb83 Update docs for config file paths. 2022-11-10 08:18:58 +01:00
Federico BuilesandCourtney Claessens c72eb06e71 Update README.md 
Co-authored-by: Courtney Claessens <[email protected]>
 2022-11-10 07:59:35 +01:00
Federico BuilesandCourtney Claessens aa409fa6cd Update README.md 
Co-authored-by: Courtney Claessens <[email protected]>
 2022-11-10 07:59:28 +01:00
Federico BuilesandCourtney Claessens 5aaa78ce3c Update README.md 
Co-authored-by: Courtney Claessens <[email protected]>
 2022-11-10 07:59:15 +01:00
Federico Builes 59a4f4c4ba Fixing typo in README.md 2022-11-09 13:24:07 +01:00
Federico Builes bf8cfe8b38 Linting, adding dist files. 2022-11-09 13:22:33 +01:00
Federico Builes ae538ebe32 Linting and whitespace. Smol rename. 2022-11-09 13:17:12 +01:00
Federico Builes b4126ce983 Shuffle things around. 2022-11-09 13:16:53 +01:00
Federico Builes 418ae59d51 Replace TODO with instructions for getting PAT. 2022-11-08 17:51:31 +01:00
Federico Builes c38007a979 Don't abbreviate repo in docs. 
In general let's try not to use abbreviations in public
documentation.
 2022-11-08 17:45:23 +01:00
Federico Builes 7a42af0f2f Merge pull request #320 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.4 
Bump eslint-plugin-jest from 27.1.3 to 27.1.4
 2022-11-08 10:40:36 +01:00
Federico Builes 40e460b464 Merge pull request #316 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.42.1 
Bump @typescript-eslint/parser from 5.42.0 to 5.42.1
 2022-11-08 10:38:41 +01:00
Federico Builes 774bd6c1d5 Merge pull request #318 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.4.1 
Bump eslint-plugin-github from 4.4.0 to 4.4.1
 2022-11-08 10:37:41 +01:00
Federico Builes f7686f8c21 Merge pull request #317 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.42.1 
Bump @typescript-eslint/eslint-plugin from 5.42.0 to 5.42.1
 2022-11-08 10:36:16 +01:00
Federico Builes 7ce779229f Merge pull request #319 from actions/dependabot/npm_and_yarn/eslint-8.27.0 
Bump eslint from 8.26.0 to 8.27.0
 2022-11-08 08:34:38 +01:00
Federico Builes 683cbc4872 Merge branch 'main' into external-repo-config 2022-11-01 08:11:26 +01:00
Federico Builes 2f696d8c7a Merge pull request #314 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.42.0 
Bump @typescript-eslint/eslint-plugin from 5.41.0 to 5.42.0
 2022-11-01 08:10:28 +01:00
Federico Builes ad6e320da1 Merge pull request #313 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.42.0 
Bump @typescript-eslint/parser from 5.41.0 to 5.42.0
 2022-11-01 08:09:22 +01:00
Federico Builes 10dc05ba09 Merge pull request #311 from ericcornelissen/308-disable-license-or-vuln 
Add `license-check` and `vulnerability-check` inputs
 2022-10-31 07:56:37 +01:00
Federico Builes 04f48dec81 Update __tests__/config.test.ts 2022-10-31 07:55:17 +01:00
Federico Builes bb5c0c7ca0 Merge pull request #312 from actions/dependabot/npm_and_yarn/types/node-16.18.3 
Bump @types/node from 16.18.2 to 16.18.3
 2022-10-31 06:42:09 +01:00
Federico Builes 2532504548 Merge pull request #310 from actions/cn/node-18 
Upgrade to Node 18
 2022-10-28 13:46:26 +02:00
Federico Builes fa62a0febc Merge pull request #294 from actions/cn/spdx-licenses 
Add support for SPDX expressions
 2022-10-28 11:27:18 +02:00
Federico Builes d6e28cdfae Merge pull request #307 from actions/dependabot/npm_and_yarn/types/node-16.18.2 
Bump @types/node from 16.18.0 to 16.18.2
 2022-10-27 07:34:11 +02:00
Federico Builes 024a5a6342 Merge pull request #305 from actions/dependabot/npm_and_yarn/octokit-2.0.10 
Bump octokit from 2.0.9 to 2.0.10
 2022-10-26 08:49:12 +02:00
Federico Builes b2fc686406 Resolving merge conflicts 2022-10-26 08:47:43 +02:00
Federico Builes cfef8bfe29 Merge pull request #304 from actions/dependabot/npm_and_yarn/octokit/plugin-retry-4.0.3 
Bump @octokit/plugin-retry from 3.0.9 to 4.0.3
 2022-10-26 08:45:28 +02:00
Federico Builes bd43b8d1e2 updating dist 2022-10-26 08:45:18 +02:00
Federico Builes 65f9f50468 Merge pull request #303 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.41.0 
Bump @typescript-eslint/parser from 5.40.1 to 5.41.0
 2022-10-25 07:57:41 +02:00
Federico Builes 56163c5659 Merge pull request #302 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.41.0 
Bump @typescript-eslint/eslint-plugin from 5.40.1 to 5.41.0
 2022-10-25 07:56:10 +02:00
Federico Builes 0efb1d1d84 bumping to 2.5.1 2022-10-24 17:03:38 +02:00
Federico Builes d4f6425aa4 Merge pull request #290 from actions/cn/scan_pr 
Enable setting configuration options for local testing
 2022-10-24 16:55:54 +02:00
Federico Builesandcnagadya 49a61bd9bd Update scripts/scan_pr 
Co-authored-by: cnagadya <[email protected]>
 2022-10-24 16:54:03 +02:00
Federico Builesandcnagadya 06c01e11e8 Update scripts/scan_pr 
Co-authored-by: cnagadya <[email protected]>
 2022-10-24 16:53:56 +02:00
Federico Builes 4538b29c27 Merge pull request #300 from actions/dependabot/npm_and_yarn/eslint-8.26.0 
Bump eslint from 8.25.0 to 8.26.0
 2022-10-24 07:14:08 +02:00
Federico Builes 4153ec555a Merge pull request #299 from actions/dependabot/npm_and_yarn/types/node-16.18.0 
Bump @types/node from 16.11.68 to 16.18.0
 2022-10-24 07:13:59 +02:00
Federico Builes 9760f87258 Fix config-file description in action.yml 2022-10-21 17:38:18 +02:00
Federico Builes 74c047086c Adding README and action.yml for external config files. 2022-10-21 17:34:20 +02:00
Federico Builes 80e573b784 Fixing whitespace. 2022-10-21 14:03:17 +02:00
Federico Builes b5c3d1e723 Update scan_pr to support loading an external config YAML file. 2022-10-21 14:00:52 +02:00
Federico Builes 7fd272118a Updating scan_pr to support a config file option. 2022-10-21 13:55:52 +02:00
Federico Builes 3c9a31f5a0 Updating CONTRIBUTING.md 2022-10-21 13:36:00 +02:00
Federico Builes d8fba3fdc1 Remove hardcode file from .gitignore 2022-10-21 13:33:24 +02:00
Federico Builes e805dd89e8 Merge branch 'main' into cn/scan_pr 2022-10-21 13:27:09 +02:00
Federico Builes 32276cb73d Merge pull request #298 from actions/dependabot/npm_and_yarn/types/node-16.11.68 
Bump @types/node from 16.11.66 to 16.11.68
 2022-10-19 07:49:08 +02:00
Federico Builes fe226ac019 Merge pull request #297 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.3 
Bump eslint-plugin-jest from 27.1.2 to 27.1.3
 2022-10-19 07:48:52 +02:00