actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
1,701 Commits 90 Branches 61 Tags
8c152c7a0faa5b818825908e223ab71bdb639967
Commit Graph
1701 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Justin HolguínandGitHub 8c152c7a0f Merge pull request #769 from actions/dependabot/npm_and_yarn/zod-3.23.8 
Bump zod from 3.22.4 to 3.23.8
 2024-07-10 10:50:09 -07:00
Justin HolguínandGitHub 0085d30a6f Update dist 2024-07-10 17:47:42 +00:00
dependabot[bot]andGitHub 08b5bf2921 Bump zod from 3.22.4 to 3.23.8 
Bumps [zod](https://github.com/colinhacks/zod) from 3.22.4 to 3.23.8.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/master/CHANGELOG.md)
- [Commits](https://github.com/colinhacks/zod/compare/v3.22.4...v3.23.8)

---
updated-dependencies:
- dependency-name: zod
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-07-10 17:43:18 +00:00
Justin HolguínandGitHub 986fce9040 Merge pull request #784 from actions/dependabot/npm_and_yarn/got-14.4.1 
Bump got from 14.2.0 to 14.4.1
 2024-07-10 10:41:24 -07:00
Justin HolguínandGitHub 28743f8570 Merge pull request #719 from actions/change-spdx-parser 
Update SPDX Expression Parsing
 2024-07-10 10:06:31 -07:00
Justin HolguínandGitHub d6f34c3a26 Merge pull request #789 from actions/dependabot/npm_and_yarn/braces-3.0.3 
Bump braces from 3.0.2 to 3.0.3
 2024-07-08 14:53:16 -07:00
dependabot[bot]andGitHub 465867cec8 Bump braces from 3.0.2 to 3.0.3 
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-07-08 21:49:13 +00:00
Justin HolguínandGitHub b4ae47ca2c Properly display test failures using jest 2024-06-10 23:07:07 +00:00
Eli Reisman d85edeb45d remove redundant declaration from TS types module registration 2024-06-10 10:11:00 -07:00
Eli Reisman f60d59372e npm run package 2024-06-10 09:52:17 -07:00
Eli Reisman ed624dba72 more SPDX unit tests to illustrate matching behavior 2024-06-10 09:51:01 -07:00
Eli Reisman bbed6f340a update licenses pkg and tests 2024-06-10 09:51:01 -07:00
Eli Reisman 2e4eaa490e complete test suite conversions; simplify fn name 2024-06-10 09:51:00 -07:00
Eli Reisman ecd706f525 register spdx lib as ES Module, start converting call sites to use new spdx pkg - TODO: update tests 2024-06-10 09:51:00 -07:00
Eli Reisman bc5b235cf6 move jest to dev dependencies 2024-06-10 09:51:00 -07:00
Eli Reisman 154c1500f3 add @onebeyond/spdx-license-satisfies to DR Action project 2024-06-10 09:51:00 -07:00
dependabot[bot]andGitHub 2115d9eeea Bump got from 14.2.0 to 14.4.1 
Bumps [got](https://github.com/sindresorhus/got) from 14.2.0 to 14.4.1.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v14.2.0...v14.4.1)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-06-10 01:18:26 +00:00
Eli ReismanandGitHub df5d74f5d3 Merge pull request #783 from actions/elireisman/all-changes-to-scorecard 
Include all added dependencies in scorecard entries
 2024-06-07 14:15:00 -07:00
Eli Reisman 1e5b2e69a2 npm run package 2024-06-07 10:00:47 -07:00
Eli Reisman e69288dbec only filter out removed changes from the original PR diff when adding scorecard entries in DR Action report 2024-06-07 10:00:37 -07:00
Eli ReismanandGitHub 8285e75fb2 Merge pull request #782 from actions/dependabot/npm_and_yarn/undici-5.28.4 
Bump undici from 5.28.3 to 5.28.4
 2024-06-07 09:44:10 -07:00
Eli Reisman 2224c7c05a npm run package to update dist 2024-06-07 09:35:26 -07:00
dependabot[bot]andGitHub c0630c2a88 Bump undici from 5.28.3 to 5.28.4 
Bumps [undici](https://github.com/nodejs/undici) from 5.28.3 to 5.28.4.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4)

---
updated-dependencies:
- dependency-name: undici
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-06-06 18:28:02 +00:00
Eli ReismanandGitHub 72eb03d02c Merge pull request #781 from actions/release-v4.3.3 
Bump project version to 4.3.3 in prep for a release
v4.3.3 		2024-06-05 12:15:21 -07:00
Eli Reisman 137d8b42ce bump to version v4.3.3 2024-06-05 10:26:55 -07:00
Eli ReismanandGitHub e6b618ed05 Merge pull request #767 from actions/max-comment-length 
Fix the max comment length issue
 2024-06-04 13:03:31 -07:00
Eli Reisman 3c42649204 fix ws for linter 2024-06-04 12:33:48 -07:00
Eli Reisman 8e6ea8d29b update packaging 2024-06-04 12:30:34 -07:00
Eli Reisman 1b3d2772d0 post-review: add PR comment full summary test case 2024-06-04 12:30:05 -07:00
Eli ReismanGitHubBrandon Teng
 		220872c81a Update src/main.ts 
Co-authored-by: Brandon Teng <[email protected]>
 2024-06-04 12:14:40 -07:00
Eli Reisman 087d0f81a5 repackage to update dist 2024-06-04 11:50:22 -07:00
Eli Reisman 4531204be7 whitespace 2024-06-04 11:50:21 -07:00
Eli Reisman df1ca890c5 appease linter 2024-06-04 11:50:21 -07:00
Eli Reisman 97c6dd59c3 run prettier to clear linter warnings 2024-06-04 11:50:21 -07:00
Eli Reisman 0bec1ca5b4 clean up list formatting for PR comment 2024-06-04 11:21:15 -07:00
Eli Reisman 5460632ba9 WIP: summary test 2024-06-04 11:21:15 -07:00
Eli Reisman f7aca4f481 refactor to dedup min summary generation 2024-06-04 11:21:14 -07:00
Eli Reisman 1988567896 re-apply set output for comment-content 2024-06-04 11:20:29 -07:00
Justin HutchingsandEli Reisman 1e26117d02 Fix extra whitespace in list 2024-06-04 11:20:27 -07:00
Justin HutchingsandEli Reisman b1e704b9d6 Fix bug where I replaced the comment in the wrong spot 2024-06-04 11:20:19 -07:00
Justin HutchingsandEli Reisman 48fae2e703 Add min-comment to fix max-comment length issue 2024-06-04 11:20:10 -07:00
Jon JanegoandGitHub 8d625cd32e Merge pull request #777 from actions/jonjanego-issue-templates 
Create issue templates
 2024-06-04 11:41:12 -05:00
Jon JanegoandGitHub 3afc0d4eaa Merge pull request #778 from actions/jonjanego-contribution-updates 
Updates to the contribution guidelines
 2024-06-04 09:59:36 -05:00
Jon JanegoandGitHub bc8dee91fe Update CONTRIBUTING.md 
being consistent about using forks, minor style updates
 2024-06-04 09:58:59 -05:00
Jon JanegoGitHubBarry Gordon
 		0669e2939d Update CONTRIBUTING.md 
Co-authored-by: Barry Gordon <[email protected]>
 2024-06-04 09:45:14 -05:00
Jon JanegoandGitHub fd46ab736e Update CONTRIBUTING.md 
fixing example code for consistency
 2024-06-04 09:01:11 -05:00
Jon JanegoandGitHub 551e0b82bd Update CONTRIBUTING.md 
fixing a sentence fragment
 2024-06-04 08:59:20 -05:00
Jon JanegoandGitHub fbfa3f19c8 Update SECURITY.md 
linking to the main bounty site instead of h1
 2024-06-03 16:59:30 -05:00
Jon JanegoandGitHub 89204de987 Create config.yml 2024-06-03 16:48:33 -05:00
Jon JanegoandGitHub 6d4e634e06 Create issue templates 
issue templates for bugs and feature requests
 2024-06-03 16:43:33 -05:00