actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
1,323 Commits 90 Branches 61 Tags
a6d46863160cf427c41af940d53b8d32b289fe40
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico Builes a6d4686316 adding dist 2023-11-24 14:40:48 +01:00
Federico Builes 4366dbae42 Advisory filters should not drop entire dependencies. 2023-11-24 14:40:18 +01:00
Federico Builes 50dafeb5e4 Tiny logic refactor. 2023-11-24 14:37:30 +01:00
Federico Builes 7bbfa034e7 bumping to 3.1.3 2023-11-13 17:57:44 +01:00
Federico BuilesandGitHub 26f1ad9120 Merge pull request #617 from theztefan/purl-encoding-error 
Fixes purl "version must be percent-encoded"
 2023-11-13 17:55:23 +01:00
Federico BuilesandGitHub fde92acd08 Merge pull request #611 from actions/fix-https-proxy 
Fix proxy failures in 3.1.1
 2023-11-08 09:14:57 +01:00
Federico Builes a89dd96450 adding dist 2023-11-08 08:49:49 +01:00
Federico Builes 76891836b1 revert octokit changes 2023-11-08 08:47:43 +01:00
Federico Builes fc5e2db757 go back to Node 16 to skip using fetch API 2023-11-08 08:36:27 +01:00
Federico Builes ded987cb3b Downgrade usage of retries. 
This commit reverts:

f7363549ac
76b050a607
8dc52cdbed
 2023-11-08 08:35:44 +01:00
Federico Builes 9f45b2463b bumping to 3.1.1 2023-11-06 08:03:41 +01:00
Federico BuilesandGitHub 559513a56c Merge pull request #606 from actions/dependabot/npm_and_yarn/actions/github-6.0.0 
Bump @actions/github from 5.1.1 to 6.0.0
 2023-11-06 07:55:54 +01:00
Federico Builes 8edc431d7d Merge branch 'main' into dependabot/npm_and_yarn/actions/github-6.0.0 2023-11-06 07:52:53 +01:00
Federico BuilesandGitHub 3e8322e4bb Merge pull request #605 from actions/dependabot/npm_and_yarn/yaml-2.3.4 
Bump yaml from 2.3.3 to 2.3.4
 2023-11-06 07:51:31 +01:00
Federico Builes 5a55885447 adding dist 2023-11-06 07:50:51 +01:00
Federico Builes f952b5a2c5 Merge branch 'main' into dependabot/npm_and_yarn/yaml-2.3.4 2023-11-06 07:48:24 +01:00
Federico BuilesandGitHub 8678cfac42 Merge pull request #607 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.9.1 
Bump @typescript-eslint/eslint-plugin from 6.9.0 to 6.9.1
 2023-11-06 07:47:08 +01:00
Federico Builes aa8e70d588 adding dist 2023-11-06 07:46:52 +01:00
Federico Builes 3331d25f9d adding dist 2023-11-06 07:42:40 +01:00
Federico BuilesandGitHub b2a5ead1f7 Merge pull request #604 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.9.1 
Bump @typescript-eslint/parser from 6.8.0 to 6.9.1
 2023-11-06 07:41:16 +01:00
Federico BuilesandGitHub 79f0a0b62b Merge pull request #603 from actions/dependabot/npm_and_yarn/actions/core-1.10.1 
Bump @actions/core from 1.10.0 to 1.10.1
 2023-11-06 07:40:58 +01:00
Federico Builes fc44602899 adding dist 2023-11-06 07:40:46 +01:00
Federico BuilesandGitHub 11e0dead9a Merge pull request #598 from actions/dependabot/npm_and_yarn/packageurl-js-1.2.0 
Bump packageurl-js from 1.0.2 to 1.2.0
 2023-10-30 09:43:41 +01:00
Federico Builes 3c1cb72dcd updating dist 2023-10-30 09:31:26 +01:00
Federico BuilesandGitHub 570a2b5dcd Merge pull request #597 from actions/dependabot/npm_and_yarn/eslint-8.52.0 
Bump eslint from 8.51.0 to 8.52.0
 2023-10-30 09:28:21 +01:00
Federico BuilesandGitHub a7e01b8d9c Merge pull request #599 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.9.0 
Bump @typescript-eslint/eslint-plugin from 6.8.0 to 6.9.0
 2023-10-30 09:28:05 +01:00
Federico BuilesandGitHub 0631089c32 Merge pull request #596 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.6.0 
Bump eslint-plugin-jest from 27.4.2 to 27.6.0
 2023-10-30 09:24:44 +01:00
Federico BuilesandGitHub 0b8ffde994 Merge pull request #600 from actions/dependabot/npm_and_yarn/types/spdx-satisfies-0.1.1 
Bump @types/spdx-satisfies from 0.1.0 to 0.1.1
 2023-10-30 09:23:36 +01:00
Federico BuilesandGitHub 68d57cd360 Merge pull request #601 from actions/dependabot/github_actions/actions/setup-node-4 
Bump actions/setup-node from 3 to 4
 2023-10-30 09:22:44 +01:00
Federico BuilesandGitHub e65eb02ccf Merge pull request #591 from actions/dependabot/npm_and_yarn/typescript-5.2.2 
Bump typescript from 4.9.5 to 5.2.2
 2023-10-23 12:27:41 +02:00
Federico Builes 88953c2b16 updating dist 2023-10-23 12:26:03 +02:00
Federico BuilesandGitHub d97416955e Merge pull request #594 from actions/dependabot/npm_and_yarn/babel/traverse-7.23.2 
Bump @babel/traverse from 7.23.0 to 7.23.2
 2023-10-23 06:57:28 +02:00
Federico BuilesandGitHub 89ff65dbf7 Merge pull request #589 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.10.1 
Bump eslint-plugin-github from 4.9.2 to 4.10.1
 2023-10-23 05:18:52 +02:00
Federico BuilesandGitHub c3c32181a9 Merge pull request #592 from actions/dependabot/npm_and_yarn/types/spdx-expression-parse-3.0.4 
Bump @types/spdx-expression-parse from 3.0.3 to 3.0.4
 2023-10-23 05:18:42 +02:00
Federico BuilesandGitHub ead6e4616f Merge pull request #593 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.8.0 
Bump @typescript-eslint/parser from 6.7.3 to 6.8.0
 2023-10-23 05:18:25 +02:00
Federico BuilesandGitHub 954314c2b1 Merge pull request #590 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.8.0 
Bump @typescript-eslint/eslint-plugin from 6.7.5 to 6.8.0
 2023-10-23 05:11:58 +02:00
Federico BuilesandGitHub 04e56a4409 Merge pull request #586 from actions/dependabot/npm_and_yarn/yaml-2.3.3 
Bump yaml from 2.3.2 to 2.3.3
 2023-10-16 05:39:42 +02:00
Federico Builes af51c4b700 adding dist 2023-10-16 03:44:04 +02:00
Federico BuilesandGitHub 382d2873a9 Merge pull request #585 from actions/dependabot/npm_and_yarn/types/spdx-expression-parse-3.0.3 
Bump @types/spdx-expression-parse from 3.0.2 to 3.0.3
 2023-10-16 03:42:54 +02:00
Federico BuilesandGitHub 212ded88b2 Merge pull request #584 from actions/dependabot/npm_and_yarn/eslint-plugin-prettier-5.0.1 
Bump eslint-plugin-prettier from 5.0.0 to 5.0.1
 2023-10-16 03:41:10 +02:00
Federico BuilesandGitHub 7ec89343e1 Merge pull request #587 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.7.5 
Bump @typescript-eslint/eslint-plugin from 6.7.2 to 6.7.5
 2023-10-16 03:40:22 +02:00
Federico BuilesandGitHub 536cc3d4b6 Merge pull request #588 from actions/dependabot/npm_and_yarn/types/node-16.18.58 
Bump @types/node from 16.18.54 to 16.18.58
 2023-10-16 03:40:11 +02:00
Federico Builes 7e65a9bb48 Merge branch 'update-octokit' 2023-10-09 13:39:21 +02:00
Federico Builes b91ea51364 updating dist. 2023-10-09 13:34:29 +02:00
Federico Builes 76b050a607 Use octokit-rest for the PR comments client. 2023-10-09 13:34:14 +02:00
Federico Builes e6d6badddb Update jest. 2023-10-09 13:33:55 +02:00
Federico Builes f7363549ac use octokit plugins 2023-10-09 13:20:24 +02:00
Federico Builes f71a906c2e Update plugins. 2023-10-09 13:17:54 +02:00
Federico Builes 03ace23f96 Update Node JS version. 2023-10-09 12:36:16 +02:00
Federico Builes 0564d6f4de adding dist 2023-10-09 11:41:16 +02:00
Federico Builes 69a61b613b updating dist 2023-10-09 11:36:34 +02:00
Federico Builes 53eb1ebcf5 Merge branch 'update-request-errors' 2023-10-09 11:36:00 +02:00
Federico Builes 8dc52cdbed update tests 2023-10-09 11:23:53 +02:00
Federico BuilesandGitHub e8634671a4 Merge pull request #583 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.4.2 
Bump eslint-plugin-jest from 27.2.3 to 27.4.2
 2023-10-09 10:25:41 +02:00
Federico BuilesandGitHub 69ecf4db79 Merge pull request #582 from actions/dependabot/npm_and_yarn/eslint-8.51.0 
Bump eslint from 8.48.0 to 8.51.0
 2023-10-09 10:25:28 +02:00
Federico Builes e51d18ae1e updating dist 2023-10-05 17:15:27 +02:00
Federico Builes 62f26a66d6 bumping zod 2023-10-05 17:14:25 +02:00
Federico BuilesandGitHub 2f836bbce6 Merge pull request #580 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.7.3 
Bump @typescript-eslint/parser from 6.6.0 to 6.7.3
 2023-10-01 21:21:28 -05:00
Federico BuilesandGitHub 8325453339 Merge pull request #579 from actions/dependabot/npm_and_yarn/vercel/ncc-0.38.0 
Bump @vercel/ncc from 0.36.1 to 0.38.0
 2023-10-01 21:13:34 -05:00
Federico BuilesandGitHub 4e41165d4b Merge pull request #577 from jsoref/modernize-versions 
Modernize versions
 2023-09-27 13:46:13 -05:00
Federico BuilesandGitHub 64a6d1a0b8 Merge pull request #571 from actions/dependabot/npm_and_yarn/types/node-16.18.54 
Bump @types/node from 16.18.48 to 16.18.54
 2023-09-26 12:24:33 -05:00
Federico BuilesandGitHub 364de25b16 Merge pull request #573 from actions/dependabot/npm_and_yarn/prettier-3.0.3 
Bump prettier from 3.0.2 to 3.0.3
 2023-09-26 12:24:18 -05:00
Federico BuilesandGitHub 6c530dbedd Merge pull request #570 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.7.2 
Bump @typescript-eslint/eslint-plugin from 6.4.0 to 6.7.2
 2023-09-18 14:42:50 -05:00
Federico BuilesandGitHub 9c66f1b1b1 Merge pull request #569 from actions/dependabot/npm_and_yarn/esbuild-register-3.5.0 
Bump esbuild-register from 3.4.2 to 3.5.0
 2023-09-18 14:39:13 -05:00
Federico BuilesandGitHub 079b962af9 Merge pull request #564 from actions/dependabot/npm_and_yarn/zod-3.22.2 
Bump zod from 3.21.4 to 3.22.2
 2023-09-11 07:17:25 -05:00
Federico Builes e6b5e83d4e adding dist 2023-09-11 07:16:56 -05:00
Federico BuilesandGitHub 3c40a50e4b Merge pull request #565 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.6.0 
Bump @typescript-eslint/parser from 6.2.1 to 6.6.0
 2023-09-11 07:13:54 -05:00
Federico BuilesandGitHub 886d1fcf5f Merge pull request #563 from actions/dependabot/github_actions/actions/checkout-4 
Bump actions/checkout from 3 to 4
 2023-09-11 07:13:45 -05:00
Federico Builes 51da82b3f5 updating package-lock.json 2023-09-07 16:44:36 -05:00
Federico Builes 5e4b90e080 add dist 2023-09-07 09:06:46 -05:00
Federico BuilesGitHubJustin Holguín
 		7d0e0f61e8 Update src/dependency-graph.ts 
Co-authored-by: Justin Holguín <[email protected]>
 2023-09-07 07:08:21 -05:00
Federico BuilesandGitHub 511675e747 Merge pull request #558 from actions/dependabot/npm_and_yarn/types/node-16.18.48 
Bump @types/node from 16.18.41 to 16.18.48
 2023-09-05 16:15:52 -04:00
Federico BuilesandGitHub dcdbff2f84 Merge pull request #557 from actions/dependabot/npm_and_yarn/yaml-2.3.2 
Bump yaml from 2.3.1 to 2.3.2
 2023-09-05 11:55:49 -04:00
Federico Builes 29513b58ad updating dist 2023-09-05 08:28:43 -05:00
Federico BuilesandGitHub 15e91a3980 Merge pull request #554 from actions/dependabot/npm_and_yarn/eslint-8.48.0 
Bump eslint from 8.47.0 to 8.48.0
 2023-08-28 08:52:43 -05:00
Federico BuilesandGitHub c7d2795410 Merge pull request #553 from actions/dependabot/npm_and_yarn/prettier-3.0.2 
Bump prettier from 3.0.1 to 3.0.2
 2023-08-28 08:52:32 -05:00
Federico BuilesandGitHub c17dea4c51 Merge pull request #549 from actions/dependabot/npm_and_yarn/types/node-16.18.41 
Bump @types/node from 16.18.39 to 16.18.41
 2023-08-23 15:16:07 +02:00
Federico BuilesandGitHub 727ca667a3 Merge pull request #550 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.4.0 
Bump @typescript-eslint/eslint-plugin from 6.3.0 to 6.4.0
 2023-08-23 15:15:56 +02:00
Federico BuilesandGitHub 84cd472b61 Merge pull request #551 from oerd/update-inputs-documentation-and-links 
Fix(docs): Correct action input name
 2023-08-22 17:02:07 +02:00
Federico Builes 32037a1d97 bumping to 3.0.8 2023-08-15 10:11:44 +02:00
Federico BuilesandGitHub f6fff72a32 Merge pull request #540 from sgmurphy/comment-on-failure 
Add `on-failure` option to `comment-summary-in-pr` setting
 2023-08-15 10:08:44 +02:00
Federico BuilesandGitHub 61ee12c097 Merge pull request #548 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.3.0 
Bump @typescript-eslint/eslint-plugin from 6.2.0 to 6.3.0
 2023-08-14 06:39:45 +02:00
Federico BuilesandGitHub 7d5babfc38 Merge pull request #547 from actions/dependabot/npm_and_yarn/eslint-8.47.0 
Bump eslint from 8.46.0 to 8.47.0
 2023-08-14 06:39:28 +02:00
Federico Builes 7d90b4f05f bumping to 3.0.7 2023-08-09 15:27:02 +02:00
Federico BuilesandGitHub 02aa4b66a7 Merge pull request #544 from adrienpessu/main 
Add an option to deny packages or groups of packages
 2023-08-09 15:25:21 +02:00
Federico BuilesandGitHub fe2a482baf Apply suggestions from code review 2023-08-09 15:24:26 +02:00
Federico BuilesandAdrien Pessu 0e6dece6c7 update more dependencies 2023-08-07 14:07:26 +02:00
Federico BuilesandAdrien Pessu 6af66592ad dependbot updates 2023-08-07 14:07:26 +02:00
Federico BuilesandGitHub 328a08ea42 Merge pull request #541 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.2.1 
Bump @typescript-eslint/parser from 6.2.0 to 6.2.1
 2023-08-07 10:20:46 +02:00
Federico BuilesandGitHub 3f88e84ced Merge pull request #542 from actions/dependabot/npm_and_yarn/prettier-3.0.1 
Bump prettier from 3.0.0 to 3.0.1
 2023-08-07 10:07:55 +02:00
Federico BuilesandGitHub 1e70f06e66 Merge pull request #537 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.2.0 
Bump @typescript-eslint/eslint-plugin from 5.60.1 to 6.2.0
 2023-07-31 18:03:04 +02:00
Federico Builes 0ea885e7c5 update more dependencies 2023-07-31 18:01:31 +02:00
Federico BuilesandGitHub fc8a06c798 Merge pull request #526 from actions/dependabot/npm_and_yarn/prettier-3.0.0 
Bump prettier from 2.8.8 to 3.0.0
 2023-07-31 08:40:45 +02:00
Federico Builes 8c593e9822 dependbot updates 2023-07-31 08:39:38 +02:00
Federico BuilesandGitHub 98d4fd7247 Merge pull request #534 from rajbos/main 
Make GHES support / setup more clear
 2023-07-19 16:27:05 +02:00
Federico BuilesandGitHub 0a68c5dfa6 Update README.md 2023-07-19 16:26:44 +02:00
Federico BuilesandGitHub f015f96b55 Update README.md 2023-07-19 16:26:39 +02:00
Federico BuilesandGitHub 7599c4bc8e Merge pull request #519 from actions/dependabot/npm_and_yarn/octokit/plugin-retry-5.0.4 
Bump @octokit/plugin-retry from 5.0.2 to 5.0.4
 2023-06-26 15:38:01 +02:00
Federico Builes 0f4e96f7e8 adding build files 2023-06-26 15:36:01 +02:00
Federico BuilesandGitHub 328eb79003 Merge pull request #518 from actions/dependabot/npm_and_yarn/octokit-2.1.0 
Bump octokit from 2.0.19 to 2.1.0
 2023-06-26 15:28:32 +02:00