actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
1,419 Commits 90 Branches 61 Tags
8f3df4d67496d1a64d7e1d123cc9fbcd4f1d41fa
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico Builes 935098a950 updating @types/node to Node 20 2024-01-22 07:54:40 +01:00
Federico BuilesandGitHub b658b91622 Merge pull request #669 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.6.3 
Bump eslint-plugin-jest from 27.6.0 to 27.6.3
 2024-01-22 07:40:35 +01:00
Federico BuilesandGitHub 0381eac2bc Merge pull request #667 from actions/dependabot/npm_and_yarn/eslint-plugin-prettier-5.1.3 
Bump eslint-plugin-prettier from 5.1.2 to 5.1.3
 2024-01-22 07:36:52 +01:00
Federico Builes 4cd9eb2d23 Updating docs to point to v4. 2024-01-18 14:23:52 +01:00
Federico Builes 4901385134 bump to 4.0.0 2024-01-18 13:57:38 +01:00
Federico BuilesandGitHub dbf82a4a5e Merge pull request #639 from takost/takost/update-to-node-20 
Update action to node20
 2024-01-18 13:52:05 +01:00
Federico BuilesandGitHub 78aeb2a948 Merge pull request #663 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.18.1 
Bump @typescript-eslint/parser from 6.18.0 to 6.18.1
 2024-01-15 06:39:13 +01:00
Federico BuilesandGitHub 9560737c5e Merge pull request #661 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.18.1 
Bump @typescript-eslint/eslint-plugin from 6.18.0 to 6.18.1
 2024-01-15 06:37:15 +01:00
Federico BuilesandGitHub 4125f47f7e Merge pull request #660 from actions/dependabot/npm_and_yarn/types/node-16.18.70 
Bump @types/node from 16.18.62 to 16.18.70
 2024-01-15 06:37:05 +01:00
Federico BuilesandGitHub f0b304d0bc Merge pull request #653 from actions/dependabot/npm_and_yarn/got-14.0.0 
Bump got from 13.0.0 to 14.0.0
 2024-01-09 13:24:33 +01:00
Federico BuilesandGitHub e41543eaf0 Merge pull request #656 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.18.0 
Bump @typescript-eslint/parser from 6.16.0 to 6.18.0
 2024-01-08 11:50:44 +01:00
Federico BuilesandGitHub b5f60d5e37 Merge pull request #657 from actions/dependabot/npm_and_yarn/typescript-5.3.3 
Bump typescript from 5.3.2 to 5.3.3
 2024-01-08 11:45:16 +01:00
Federico BuilesandGitHub 45fc3f5adc Merge pull request #655 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.18.0 
Bump @typescript-eslint/eslint-plugin from 6.15.0 to 6.18.0
 2024-01-08 11:44:58 +01:00
Federico BuilesandGitHub c8593625f2 Merge pull request #654 from actions/dependabot/npm_and_yarn/eslint-plugin-prettier-5.1.2 
Bump eslint-plugin-prettier from 5.0.1 to 5.1.2
 2024-01-08 11:44:42 +01:00
Federico BuilesandGitHub 8a49820431 Merge pull request #646 from actions/dependabot/npm_and_yarn/prettier-3.1.1 
Bump prettier from 3.1.0 to 3.1.1
 2024-01-01 08:02:27 -05:00
Federico BuilesandGitHub a10a70d24c Merge pull request #645 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.16.0 
Bump @typescript-eslint/parser from 6.13.1 to 6.16.0
 2024-01-01 08:02:14 -05:00
Federico BuilesandGitHub 2597ca4eee Merge pull request #640 from actions/dependabot/npm_and_yarn/eslint-8.56.0 
Bump eslint from 8.53.0 to 8.56.0
 2023-12-28 12:27:10 -05:00
Federico BuilesandGitHub 94f992f10e Merge pull request #644 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.15.0 
Bump @typescript-eslint/eslint-plugin from 6.12.0 to 6.15.0
 2023-12-28 10:36:29 -05:00
Federico BuilesandGitHub 2425542aca Merge pull request #638 from actions/fix-purls 
Replace pip -> pypi in PURL examples
 2023-12-11 17:25:43 +01:00
Federico Builes b39e17ba5e Replace pip -> pypi in PURL examples 2023-12-11 17:23:19 +01:00
Federico BuilesandGitHub b8a398b675 Merge pull request #636 from actions/dependabot/npm_and_yarn/nodemon-3.0.2 
Bump nodemon from 3.0.1 to 3.0.2
 2023-12-11 06:04:47 +01:00
Federico BuilesandGitHub 1612de9646 Merge pull request #637 from actions/dependabot/npm_and_yarn/types/jest-29.5.11 
Bump @types/jest from 29.5.8 to 29.5.11
 2023-12-11 06:04:33 +01:00
Federico BuilesandGitHub 359e1ffa80 Merge pull request #629 from actions/dependabot/npm_and_yarn/prettier-3.1.0 
Bump prettier from 3.0.3 to 3.1.0
 2023-12-04 08:58:13 +01:00
Federico BuilesandGitHub 63e1558807 Merge pull request #630 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.13.1 
Bump @typescript-eslint/parser from 6.10.0 to 6.13.1
 2023-12-04 08:57:52 +01:00
Federico Builes 01bc87099b bumping version 2023-11-28 08:11:14 +01:00
Federico BuilesandGitHub 4b4f0de8e1 Merge pull request #623 from actions/fix-advisory-filters 
Fix GHSA Filtering
 2023-11-28 08:10:11 +01:00
Federico Builes a93fa86c77 Fixing test name. 2023-11-28 08:08:29 +01:00
Federico BuilesandGitHub 550520e2c5 Merge pull request #624 from actions/dependabot/npm_and_yarn/typescript-5.3.2 
Bump typescript from 5.2.2 to 5.3.2
 2023-11-27 07:22:56 +01:00
Federico BuilesandGitHub 2d0fb60634 Merge pull request #625 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.12.0 
Bump @typescript-eslint/eslint-plugin from 6.11.0 to 6.12.0
 2023-11-27 07:22:47 +01:00
Federico Builes a6d4686316 adding dist 2023-11-24 14:40:48 +01:00
Federico Builes 4366dbae42 Advisory filters should not drop entire dependencies. 2023-11-24 14:40:18 +01:00
Federico Builes 50dafeb5e4 Tiny logic refactor. 2023-11-24 14:37:30 +01:00
Federico BuilesandGitHub 1cbb048907 Merge pull request #620 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.11.0 
Bump @typescript-eslint/eslint-plugin from 6.10.0 to 6.11.0
 2023-11-20 08:33:40 +01:00
Federico BuilesandGitHub 5991d7a97d Merge pull request #619 from actions/dependabot/npm_and_yarn/types/node-16.18.62 
Bump @types/node from 16.18.61 to 16.18.62
 2023-11-20 08:27:56 +01:00
Federico Builes 7bbfa034e7 bumping to 3.1.3 2023-11-13 17:57:44 +01:00
Federico BuilesandGitHub 26f1ad9120 Merge pull request #617 from theztefan/purl-encoding-error 
Fixes purl "version must be percent-encoded"
 2023-11-13 17:55:23 +01:00
Federico BuilesandGitHub fde92acd08 Merge pull request #611 from actions/fix-https-proxy 
Fix proxy failures in 3.1.1
 2023-11-08 09:14:57 +01:00
Federico Builes a89dd96450 adding dist 2023-11-08 08:49:49 +01:00
Federico Builes 76891836b1 revert octokit changes 2023-11-08 08:47:43 +01:00
Federico Builes fc5e2db757 go back to Node 16 to skip using fetch API 2023-11-08 08:36:27 +01:00
Federico Builes ded987cb3b Downgrade usage of retries. 
This commit reverts:

f7363549ac
76b050a607
8dc52cdbed
 2023-11-08 08:35:44 +01:00
Federico Builes 9f45b2463b bumping to 3.1.1 2023-11-06 08:03:41 +01:00
Federico BuilesandGitHub 559513a56c Merge pull request #606 from actions/dependabot/npm_and_yarn/actions/github-6.0.0 
Bump @actions/github from 5.1.1 to 6.0.0
 2023-11-06 07:55:54 +01:00
Federico Builes 8edc431d7d Merge branch 'main' into dependabot/npm_and_yarn/actions/github-6.0.0 2023-11-06 07:52:53 +01:00
Federico BuilesandGitHub 3e8322e4bb Merge pull request #605 from actions/dependabot/npm_and_yarn/yaml-2.3.4 
Bump yaml from 2.3.3 to 2.3.4
 2023-11-06 07:51:31 +01:00
Federico Builes 5a55885447 adding dist 2023-11-06 07:50:51 +01:00
Federico Builes f952b5a2c5 Merge branch 'main' into dependabot/npm_and_yarn/yaml-2.3.4 2023-11-06 07:48:24 +01:00
Federico BuilesandGitHub 8678cfac42 Merge pull request #607 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.9.1 
Bump @typescript-eslint/eslint-plugin from 6.9.0 to 6.9.1
 2023-11-06 07:47:08 +01:00
Federico Builes aa8e70d588 adding dist 2023-11-06 07:46:52 +01:00
Federico Builes 3331d25f9d adding dist 2023-11-06 07:42:40 +01:00
Federico BuilesandGitHub b2a5ead1f7 Merge pull request #604 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.9.1 
Bump @typescript-eslint/parser from 6.8.0 to 6.9.1
 2023-11-06 07:41:16 +01:00
Federico BuilesandGitHub 79f0a0b62b Merge pull request #603 from actions/dependabot/npm_and_yarn/actions/core-1.10.1 
Bump @actions/core from 1.10.0 to 1.10.1
 2023-11-06 07:40:58 +01:00
Federico Builes fc44602899 adding dist 2023-11-06 07:40:46 +01:00
Federico BuilesandGitHub 11e0dead9a Merge pull request #598 from actions/dependabot/npm_and_yarn/packageurl-js-1.2.0 
Bump packageurl-js from 1.0.2 to 1.2.0
 2023-10-30 09:43:41 +01:00
Federico Builes 3c1cb72dcd updating dist 2023-10-30 09:31:26 +01:00
Federico BuilesandGitHub 570a2b5dcd Merge pull request #597 from actions/dependabot/npm_and_yarn/eslint-8.52.0 
Bump eslint from 8.51.0 to 8.52.0
 2023-10-30 09:28:21 +01:00
Federico BuilesandGitHub a7e01b8d9c Merge pull request #599 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.9.0 
Bump @typescript-eslint/eslint-plugin from 6.8.0 to 6.9.0
 2023-10-30 09:28:05 +01:00
Federico BuilesandGitHub 0631089c32 Merge pull request #596 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.6.0 
Bump eslint-plugin-jest from 27.4.2 to 27.6.0
 2023-10-30 09:24:44 +01:00
Federico BuilesandGitHub 0b8ffde994 Merge pull request #600 from actions/dependabot/npm_and_yarn/types/spdx-satisfies-0.1.1 
Bump @types/spdx-satisfies from 0.1.0 to 0.1.1
 2023-10-30 09:23:36 +01:00
Federico BuilesandGitHub 68d57cd360 Merge pull request #601 from actions/dependabot/github_actions/actions/setup-node-4 
Bump actions/setup-node from 3 to 4
 2023-10-30 09:22:44 +01:00
Federico BuilesandGitHub e65eb02ccf Merge pull request #591 from actions/dependabot/npm_and_yarn/typescript-5.2.2 
Bump typescript from 4.9.5 to 5.2.2
 2023-10-23 12:27:41 +02:00
Federico Builes 88953c2b16 updating dist 2023-10-23 12:26:03 +02:00
Federico BuilesandGitHub d97416955e Merge pull request #594 from actions/dependabot/npm_and_yarn/babel/traverse-7.23.2 
Bump @babel/traverse from 7.23.0 to 7.23.2
 2023-10-23 06:57:28 +02:00
Federico BuilesandGitHub 89ff65dbf7 Merge pull request #589 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.10.1 
Bump eslint-plugin-github from 4.9.2 to 4.10.1
 2023-10-23 05:18:52 +02:00
Federico BuilesandGitHub c3c32181a9 Merge pull request #592 from actions/dependabot/npm_and_yarn/types/spdx-expression-parse-3.0.4 
Bump @types/spdx-expression-parse from 3.0.3 to 3.0.4
 2023-10-23 05:18:42 +02:00
Federico BuilesandGitHub ead6e4616f Merge pull request #593 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.8.0 
Bump @typescript-eslint/parser from 6.7.3 to 6.8.0
 2023-10-23 05:18:25 +02:00
Federico BuilesandGitHub 954314c2b1 Merge pull request #590 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.8.0 
Bump @typescript-eslint/eslint-plugin from 6.7.5 to 6.8.0
 2023-10-23 05:11:58 +02:00
Federico BuilesandGitHub 04e56a4409 Merge pull request #586 from actions/dependabot/npm_and_yarn/yaml-2.3.3 
Bump yaml from 2.3.2 to 2.3.3
 2023-10-16 05:39:42 +02:00
Federico Builes af51c4b700 adding dist 2023-10-16 03:44:04 +02:00
Federico BuilesandGitHub 382d2873a9 Merge pull request #585 from actions/dependabot/npm_and_yarn/types/spdx-expression-parse-3.0.3 
Bump @types/spdx-expression-parse from 3.0.2 to 3.0.3
 2023-10-16 03:42:54 +02:00
Federico BuilesandGitHub 212ded88b2 Merge pull request #584 from actions/dependabot/npm_and_yarn/eslint-plugin-prettier-5.0.1 
Bump eslint-plugin-prettier from 5.0.0 to 5.0.1
 2023-10-16 03:41:10 +02:00
Federico BuilesandGitHub 7ec89343e1 Merge pull request #587 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.7.5 
Bump @typescript-eslint/eslint-plugin from 6.7.2 to 6.7.5
 2023-10-16 03:40:22 +02:00
Federico BuilesandGitHub 536cc3d4b6 Merge pull request #588 from actions/dependabot/npm_and_yarn/types/node-16.18.58 
Bump @types/node from 16.18.54 to 16.18.58
 2023-10-16 03:40:11 +02:00
Federico Builes 7e65a9bb48 Merge branch 'update-octokit' 2023-10-09 13:39:21 +02:00
Federico Builes b91ea51364 updating dist. 2023-10-09 13:34:29 +02:00
Federico Builes 76b050a607 Use octokit-rest for the PR comments client. 2023-10-09 13:34:14 +02:00
Federico Builes e6d6badddb Update jest. 2023-10-09 13:33:55 +02:00
Federico Builes f7363549ac use octokit plugins 2023-10-09 13:20:24 +02:00
Federico Builes f71a906c2e Update plugins. 2023-10-09 13:17:54 +02:00
Federico Builes 03ace23f96 Update Node JS version. 2023-10-09 12:36:16 +02:00
Federico Builes 0564d6f4de adding dist 2023-10-09 11:41:16 +02:00
Federico Builes 69a61b613b updating dist 2023-10-09 11:36:34 +02:00
Federico Builes 53eb1ebcf5 Merge branch 'update-request-errors' 2023-10-09 11:36:00 +02:00
Federico Builes 8dc52cdbed update tests 2023-10-09 11:23:53 +02:00
Federico BuilesandGitHub e8634671a4 Merge pull request #583 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.4.2 
Bump eslint-plugin-jest from 27.2.3 to 27.4.2
 2023-10-09 10:25:41 +02:00
Federico BuilesandGitHub 69ecf4db79 Merge pull request #582 from actions/dependabot/npm_and_yarn/eslint-8.51.0 
Bump eslint from 8.48.0 to 8.51.0
 2023-10-09 10:25:28 +02:00
Federico Builes e51d18ae1e updating dist 2023-10-05 17:15:27 +02:00
Federico Builes 62f26a66d6 bumping zod 2023-10-05 17:14:25 +02:00
Federico BuilesandGitHub 2f836bbce6 Merge pull request #580 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.7.3 
Bump @typescript-eslint/parser from 6.6.0 to 6.7.3
 2023-10-01 21:21:28 -05:00
Federico BuilesandGitHub 8325453339 Merge pull request #579 from actions/dependabot/npm_and_yarn/vercel/ncc-0.38.0 
Bump @vercel/ncc from 0.36.1 to 0.38.0
 2023-10-01 21:13:34 -05:00
Federico BuilesandGitHub 4e41165d4b Merge pull request #577 from jsoref/modernize-versions 
Modernize versions
 2023-09-27 13:46:13 -05:00
Federico BuilesandGitHub 64a6d1a0b8 Merge pull request #571 from actions/dependabot/npm_and_yarn/types/node-16.18.54 
Bump @types/node from 16.18.48 to 16.18.54
 2023-09-26 12:24:33 -05:00
Federico BuilesandGitHub 364de25b16 Merge pull request #573 from actions/dependabot/npm_and_yarn/prettier-3.0.3 
Bump prettier from 3.0.2 to 3.0.3
 2023-09-26 12:24:18 -05:00
Federico BuilesandGitHub 6c530dbedd Merge pull request #570 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.7.2 
Bump @typescript-eslint/eslint-plugin from 6.4.0 to 6.7.2
 2023-09-18 14:42:50 -05:00
Federico BuilesandGitHub 9c66f1b1b1 Merge pull request #569 from actions/dependabot/npm_and_yarn/esbuild-register-3.5.0 
Bump esbuild-register from 3.4.2 to 3.5.0
 2023-09-18 14:39:13 -05:00
Federico BuilesandGitHub 079b962af9 Merge pull request #564 from actions/dependabot/npm_and_yarn/zod-3.22.2 
Bump zod from 3.21.4 to 3.22.2
 2023-09-11 07:17:25 -05:00
Federico Builes e6b5e83d4e adding dist 2023-09-11 07:16:56 -05:00
Federico BuilesandGitHub 3c40a50e4b Merge pull request #565 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.6.0 
Bump @typescript-eslint/parser from 6.2.1 to 6.6.0
 2023-09-11 07:13:54 -05:00
Federico BuilesandGitHub 886d1fcf5f Merge pull request #563 from actions/dependabot/github_actions/actions/checkout-4 
Bump actions/checkout from 3 to 4
 2023-09-11 07:13:45 -05:00
Federico Builes 51da82b3f5 updating package-lock.json 2023-09-07 16:44:36 -05:00