actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
1,176 Commits 90 Branches 61 Tags
abc80cf6a00a2aeb62aa6d7a37533168d259f554
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico BuilesandGitHub 15e91a3980 Merge pull request #554 from actions/dependabot/npm_and_yarn/eslint-8.48.0 
Bump eslint from 8.47.0 to 8.48.0
 2023-08-28 08:52:43 -05:00
Federico BuilesandGitHub c7d2795410 Merge pull request #553 from actions/dependabot/npm_and_yarn/prettier-3.0.2 
Bump prettier from 3.0.1 to 3.0.2
 2023-08-28 08:52:32 -05:00
Federico BuilesandGitHub c17dea4c51 Merge pull request #549 from actions/dependabot/npm_and_yarn/types/node-16.18.41 
Bump @types/node from 16.18.39 to 16.18.41
 2023-08-23 15:16:07 +02:00
Federico BuilesandGitHub 727ca667a3 Merge pull request #550 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.4.0 
Bump @typescript-eslint/eslint-plugin from 6.3.0 to 6.4.0
 2023-08-23 15:15:56 +02:00
Federico BuilesandGitHub 84cd472b61 Merge pull request #551 from oerd/update-inputs-documentation-and-links 
Fix(docs): Correct action input name
 2023-08-22 17:02:07 +02:00
Federico Builes 32037a1d97 bumping to 3.0.8 2023-08-15 10:11:44 +02:00
Federico BuilesandGitHub f6fff72a32 Merge pull request #540 from sgmurphy/comment-on-failure 
Add `on-failure` option to `comment-summary-in-pr` setting
 2023-08-15 10:08:44 +02:00
Federico BuilesandGitHub 61ee12c097 Merge pull request #548 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.3.0 
Bump @typescript-eslint/eslint-plugin from 6.2.0 to 6.3.0
 2023-08-14 06:39:45 +02:00
Federico BuilesandGitHub 7d5babfc38 Merge pull request #547 from actions/dependabot/npm_and_yarn/eslint-8.47.0 
Bump eslint from 8.46.0 to 8.47.0
 2023-08-14 06:39:28 +02:00
Federico Builes 7d90b4f05f bumping to 3.0.7 2023-08-09 15:27:02 +02:00
Federico BuilesandGitHub 02aa4b66a7 Merge pull request #544 from adrienpessu/main 
Add an option to deny packages or groups of packages
 2023-08-09 15:25:21 +02:00
Federico BuilesandGitHub fe2a482baf Apply suggestions from code review 2023-08-09 15:24:26 +02:00
Federico BuilesandAdrien Pessu 0e6dece6c7 update more dependencies 2023-08-07 14:07:26 +02:00
Federico BuilesandAdrien Pessu 6af66592ad dependbot updates 2023-08-07 14:07:26 +02:00
Federico BuilesandGitHub 328a08ea42 Merge pull request #541 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.2.1 
Bump @typescript-eslint/parser from 6.2.0 to 6.2.1
 2023-08-07 10:20:46 +02:00
Federico BuilesandGitHub 3f88e84ced Merge pull request #542 from actions/dependabot/npm_and_yarn/prettier-3.0.1 
Bump prettier from 3.0.0 to 3.0.1
 2023-08-07 10:07:55 +02:00
Federico BuilesandGitHub 1e70f06e66 Merge pull request #537 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.2.0 
Bump @typescript-eslint/eslint-plugin from 5.60.1 to 6.2.0
 2023-07-31 18:03:04 +02:00
Federico Builes 0ea885e7c5 update more dependencies 2023-07-31 18:01:31 +02:00
Federico BuilesandGitHub fc8a06c798 Merge pull request #526 from actions/dependabot/npm_and_yarn/prettier-3.0.0 
Bump prettier from 2.8.8 to 3.0.0
 2023-07-31 08:40:45 +02:00
Federico Builes 8c593e9822 dependbot updates 2023-07-31 08:39:38 +02:00
Federico BuilesandGitHub 98d4fd7247 Merge pull request #534 from rajbos/main 
Make GHES support / setup more clear
 2023-07-19 16:27:05 +02:00
Federico BuilesandGitHub 0a68c5dfa6 Update README.md 2023-07-19 16:26:44 +02:00
Federico BuilesandGitHub f015f96b55 Update README.md 2023-07-19 16:26:39 +02:00
Federico BuilesandGitHub 7599c4bc8e Merge pull request #519 from actions/dependabot/npm_and_yarn/octokit/plugin-retry-5.0.4 
Bump @octokit/plugin-retry from 5.0.2 to 5.0.4
 2023-06-26 15:38:01 +02:00
Federico Builes 0f4e96f7e8 adding build files 2023-06-26 15:36:01 +02:00
Federico BuilesandGitHub 328eb79003 Merge pull request #518 from actions/dependabot/npm_and_yarn/octokit-2.1.0 
Bump octokit from 2.0.19 to 2.1.0
 2023-06-26 15:28:32 +02:00
Federico Builes 5bb28e508e npm i 2023-06-26 15:26:17 +02:00
Federico BuilesandGitHub 11a4a75728 Merge pull request #516 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.60.0 
Bump @typescript-eslint/eslint-plugin from 5.59.11 to 5.60.0
 2023-06-26 07:10:03 +02:00
Federico BuilesandGitHub a3753ba2c6 Merge pull request #520 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.2.2 
Bump eslint-plugin-jest from 27.2.1 to 27.2.2
 2023-06-26 07:03:16 +02:00
Federico BuilesandGitHub ec3136c4ba Merge pull request #517 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.60.0 
Bump @typescript-eslint/parser from 5.59.11 to 5.60.0
 2023-06-26 07:03:01 +02:00
Federico BuilesandGitHub c61b0a3941 Merge pull request #510 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.59.11 
Bump @typescript-eslint/eslint-plugin from 5.59.9 to 5.59.11
 2023-06-19 07:54:57 +02:00
Federico Builes 38c1dbdffa Merge branch 'main' into dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.59.11 2023-06-19 07:00:21 +02:00
Federico BuilesandGitHub 84fe280943 Merge pull request #512 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.59.11 
Bump @typescript-eslint/parser from 5.59.9 to 5.59.11
 2023-06-19 06:58:36 +02:00
Federico BuilesandGitHub cf65a75df3 Merge pull request #511 from actions/dependabot/npm_and_yarn/eslint-8.43.0 
Bump eslint from 8.41.0 to 8.43.0
 2023-06-19 06:58:17 +02:00
Federico BuilesandGitHub d561324ef9 Merge pull request #509 from actions/dependabot/npm_and_yarn/types/node-16.18.36 
Bump @types/node from 16.18.35 to 16.18.36
 2023-06-19 06:51:36 +02:00
Federico BuilesandGitHub 9617594ce4 Merge pull request #506 from actions/dependabot/npm_and_yarn/octokit-2.0.19 
update octokit, regenerate dist
 2023-06-12 07:29:57 +02:00
Federico Builes c10600ad00 update octokit, regenerate dist 2023-06-12 07:28:23 +02:00
Federico BuilesandGitHub 86477f1ea0 Merge pull request #504 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.59.9 
Bump @typescript-eslint/eslint-plugin from 5.59.8 to 5.59.9
 2023-06-12 07:19:03 +02:00
Federico BuilesandGitHub b6ef88155e Merge pull request #505 from actions/dependabot/npm_and_yarn/types/node-16.18.35 
Bump @types/node from 16.18.34 to 16.18.35
 2023-06-12 07:18:49 +02:00
Federico BuilesandGitHub 1c01b75438 Merge pull request #503 from actions/dependabot/npm_and_yarn/octokit/plugin-retry-5.0.2 
Bump @octokit/plugin-retry from 5.0.0 to 5.0.2
 2023-06-12 07:18:36 +02:00
Federico Builes 90de8e47b4 adding dist 2023-06-12 07:16:52 +02:00
Federico BuilesandGitHub 6d3699baca Merge pull request #502 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.59.9 
Bump @typescript-eslint/parser from 5.59.8 to 5.59.9
 2023-06-12 07:15:59 +02:00
Federico BuilesandGitHub 0342e75832 Merge pull request #500 from actions/dependabot/npm_and_yarn/octokit/plugin-retry-5.0.0 
Bump @octokit/plugin-retry from 4.1.3 to 5.0.0
 2023-06-05 07:14:34 +02:00
Federico Builes 3daf1c6551 Updating dist 2023-06-05 07:13:53 +02:00
Federico BuilesandGitHub 16cbdf9d97 Merge pull request #498 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.8.0 
Bump eslint-plugin-github from 4.7.0 to 4.8.0
 2023-06-05 07:09:55 +02:00
Federico BuilesandGitHub 59a0ce5dc2 Merge pull request #497 from actions/dependabot/npm_and_yarn/got-13.0.0 
Bump got from 12.6.0 to 13.0.0
 2023-06-05 07:08:54 +02:00
Federico BuilesandGitHub 1360a344cc Merge pull request #494 from actions/fix-purl-bug 
Empty PURLs should not block the action from running
 2023-05-31 17:11:07 +02:00
Federico Builes 123b58703a bumping to 3.0.6 2023-05-31 17:10:00 +02:00
Federico Builes cd559bc984 adding dist 2023-05-31 17:09:53 +02:00
Federico Builes 70f8094bec adding a test for empty PURLs 2023-05-31 16:24:19 +02:00
Federico Builes 0b306aef97 Don't try to create PURLs from empty strings. 2023-05-31 16:14:02 +02:00
Federico BuilesandGitHub 554aaf5c3d Merge pull request #423 from theztefan/allow-list-dependencies 
Exclude dependencies from license checks
 2023-05-31 14:24:05 +02:00
Federico Builes c6e94c1336 External config files should use underscores, not dashes 2023-05-31 14:21:57 +02:00
Federico BuilesandGitHub 1f7c838fcb Merge pull request #492 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.59.8 
Bump @typescript-eslint/eslint-plugin from 5.59.6 to 5.59.8
 2023-05-30 08:10:28 +02:00
Federico BuilesandGitHub 861f696c44 Merge pull request #491 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.59.8 
Bump @typescript-eslint/parser from 5.59.7 to 5.59.8
 2023-05-30 07:31:16 +02:00
Federico BuilesandGitHub 854aa8a142 Merge pull request #485 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.59.7 
Bump @typescript-eslint/parser from 5.59.6 to 5.59.7
 2023-05-30 07:24:55 +02:00
Federico BuilesandGitHub 9fbf14f620 Merge pull request #484 from actions/dependabot/npm_and_yarn/types/node-16.18.34 
Bump @types/node from 16.18.32 to 16.18.34
 2023-05-30 07:24:43 +02:00
Federico BuilesandGitHub 64222d2efe Merge pull request #483 from actions/dependabot/npm_and_yarn/yaml-2.3.1 
Bump yaml from 2.2.2 to 2.3.1
 2023-05-30 07:24:34 +02:00
Federico Builes f2a3e1af33 updating dist 2023-05-30 07:23:40 +02:00
Federico BuilesandGitHub 4ee0db82cc Merge pull request #480 from actions/dependabot/npm_and_yarn/octokit-2.0.16 
Bump octokit from 2.0.14 to 2.0.16
 2023-05-22 07:35:59 +02:00
Federico Builes f303e9cd65 adding dist 2023-05-22 07:31:33 +02:00
Federico BuilesandGitHub fa8ddf1781 Merge pull request #482 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.59.6 
Bump @typescript-eslint/parser from 5.59.2 to 5.59.6
 2023-05-22 07:26:50 +02:00
Federico BuilesandGitHub fe724aebb5 Merge pull request #481 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.59.6 
Bump @typescript-eslint/eslint-plugin from 5.59.2 to 5.59.6
 2023-05-22 07:25:14 +02:00
Federico BuilesandGitHub 6ab307aa49 Merge pull request #479 from actions/dependabot/npm_and_yarn/types/node-16.18.32 
Bump @types/node from 16.18.26 to 16.18.32
 2023-05-22 07:24:49 +02:00
Federico BuilesandGitHub 7b02d77054 Merge pull request #478 from actions/dependabot/npm_and_yarn/eslint-8.41.0 
Bump eslint from 8.40.0 to 8.41.0
 2023-05-22 07:24:40 +02:00
Federico BuilesandGitHub 57c07f037a Merge pull request #473 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.59.2 
Bump @typescript-eslint/parser from 5.59.1 to 5.59.2
 2023-05-08 06:16:13 +02:00
Federico BuilesandGitHub 632eabaaf6 Merge pull request #474 from actions/dependabot/npm_and_yarn/eslint-8.40.0 
Bump eslint from 8.39.0 to 8.40.0
 2023-05-08 06:15:33 +02:00
Federico BuilesandGitHub d1f8348e2e Merge pull request #472 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.59.2 
Bump @typescript-eslint/eslint-plugin from 5.59.1 to 5.59.2
 2023-05-08 06:15:13 +02:00
Federico BuilesandGitHub 66da8857a8 Merge pull request #471 from actions/dependabot/npm_and_yarn/types/node-16.18.26 
Bump @types/node from 16.18.25 to 16.18.26
 2023-05-08 06:15:06 +02:00
Federico BuilesandGitHub 7d25be7d68 Merge pull request #467 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.59.1 
Bump @typescript-eslint/eslint-plugin from 5.59.0 to 5.59.1
 2023-05-01 13:47:42 +02:00
Federico BuilesandGitHub 57e6a1aeb8 Merge pull request #469 from actions/dependabot/npm_and_yarn/yaml-2.2.2 
Bump yaml from 2.2.1 to 2.2.2
 2023-05-01 13:47:23 +02:00
Federico Builes 8450611ed5 adding dist 2023-05-01 13:47:13 +02:00
Federico BuilesandGitHub 70370c1727 Merge pull request #468 from actions/dependabot/npm_and_yarn/types/node-16.18.25 
Bump @types/node from 16.18.24 to 16.18.25
 2023-05-01 13:44:58 +02:00
Federico BuilesandGitHub 1e46123a48 Merge pull request #466 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.59.1 
Bump @typescript-eslint/parser from 5.59.0 to 5.59.1
 2023-05-01 13:44:30 +02:00
Federico BuilesandGitHub 9bc0593cb7 Merge pull request #462 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.59.0 
Bump @typescript-eslint/eslint-plugin from 5.57.1 to 5.59.0
 2023-04-24 13:32:54 +02:00
Federico BuilesandGitHub f6e0fab375 Merge pull request #465 from actions/dependabot/npm_and_yarn/prettier-2.8.8 
Bump prettier from 2.8.7 to 2.8.8
 2023-04-24 13:31:03 +02:00
Federico BuilesandGitHub 51fa253565 Merge pull request #464 from actions/dependabot/npm_and_yarn/eslint-8.39.0 
Bump eslint from 8.38.0 to 8.39.0
 2023-04-24 13:30:54 +02:00
Federico BuilesandGitHub 2dffe8e22c Merge pull request #463 from actions/dependabot/npm_and_yarn/types/node-16.18.24 
Bump @types/node from 16.18.23 to 16.18.24
 2023-04-24 13:30:43 +02:00
Federico BuilesandGitHub e263d60b8b Merge pull request #461 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.59.0 
Bump @typescript-eslint/parser from 5.57.1 to 5.59.0
 2023-04-24 13:30:07 +02:00
Federico BuilesandGitHub b206cbf92e Merge pull request #453 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.57.1 
Bump @typescript-eslint/eslint-plugin from 5.57.0 to 5.57.1
 2023-04-10 07:48:03 +02:00
Federico BuilesandGitHub 041e4f1437 Merge pull request #454 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.57.1 
Bump @typescript-eslint/parser from 5.57.0 to 5.57.1
 2023-04-10 07:47:09 +02:00
Federico BuilesandGitHub c883e5a202 Merge pull request #455 from actions/dependabot/npm_and_yarn/eslint-8.38.0 
Bump eslint from 8.37.0 to 8.38.0
 2023-04-10 07:46:57 +02:00
Federico BuilesandGitHub 8938bd9ef0 Merge pull request #451 from actions/fix-external-config 
Fix default values for fail-on-severity
 2023-04-10 07:41:00 +02:00
Federico Builes 73625ad716 Merge branch 'allow-list-dependencies' of github.com:theztefan/dependency-review-action into allow-list-dependencies 2023-04-06 22:01:49 +02:00
Federico Builes 654eb5ca1c Updating README.md 2023-04-06 21:42:26 +02:00
Federico Builes 9885d0c74c Remove default values in action.yml 2023-04-06 21:33:35 +02:00
Federico Builes cebb5b1214 Don't use underscore for inline configs. 2023-04-06 21:33:24 +02:00
Federico Builes 50b918791f Update README. 2023-04-06 17:59:34 +02:00
Federico Builes 3f6a17c81c Update examples to use underscores instead of dashes. 2023-04-06 17:58:58 +02:00
Federico Builes 2c065db296 Add a test-helpers file. 2023-04-06 17:32:42 +02:00
Federico Builes ff46a4b16e Fixing failing test. 2023-04-06 17:11:29 +02:00
Federico Builes 153f274eb4 Mock octokit. 2023-04-06 17:11:16 +02:00
Federico Builes 0041d7fa41 Add a failing test. 2023-04-06 16:21:52 +02:00
Federico Builes 97c9465751 separate tests for external configs 2023-04-05 15:14:57 +02:00
Federico BuilesandGitHub 8b0d4b3327 Merge pull request #446 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.57.0 
Bump @typescript-eslint/eslint-plugin from 5.56.0 to 5.57.0
 2023-04-03 11:05:13 +02:00
Federico BuilesandGitHub 8c24360582 Merge pull request #448 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.7.0 
Bump eslint-plugin-github from 4.6.1 to 4.7.0
 2023-04-03 11:04:36 +02:00
Federico BuilesandGitHub b7ce9d546d Merge pull request #447 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.57.0 
Bump @typescript-eslint/parser from 5.56.0 to 5.57.0
 2023-04-03 07:02:10 +02:00
Federico BuilesandGitHub 5875c70f8f Merge pull request #449 from actions/dependabot/npm_and_yarn/types/node-16.18.23 
Bump @types/node from 16.18.21 to 16.18.23
 2023-04-03 07:01:49 +02:00
Federico BuilesandGitHub 43274f6899 Merge pull request #450 from actions/dependabot/npm_and_yarn/eslint-8.37.0 
Bump eslint from 8.36.0 to 8.37.0
 2023-04-03 07:01:31 +02:00
Federico BuilesandGitHub 91eae64e0c Merge pull request #442 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.56.0 
Bump @typescript-eslint/eslint-plugin from 5.55.0 to 5.56.0
 2023-03-27 07:57:20 +02:00