actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 3 Packages Projects Releases Wiki Activity
321 Commits 90 Branches 61 Tags
aef949f026f4e0b36e8f36b32910a2d69c65306a
Commit Graph
321 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tiago Pascoal aef949f026 Show vulnerabities and license information on the job summary. 
Users can see the results that were found directly on the job summary

All the results are grouped by manifest.

It shows a table with vulnerable packages, together with package version,
the vulnerabily info and it's severity.

Shows info about package licenses, which packages have a non allowed license,
and the list of packages with unknown licenses.
 2022-08-04 15:35:07 +00:00
Federico Builes 90edb6f286 Merge pull request #174 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.7.0 
Bump eslint-plugin-jest from 26.6.0 to 26.7.0
 2022-08-01 17:33:21 +02:00
Federico Builes 76cb47a13a Merge pull request #175 from actions/dependabot/npm_and_yarn/types/node-16.11.47 
Bump @types/node from 16.11.46 to 16.11.47
 2022-08-01 17:33:11 +02:00
dependabot[bot] 8c65c50f8e Bump @types/node from 16.11.46 to 16.11.47 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.46 to 16.11.47.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-01 01:56:27 +00:00
dependabot[bot] 15dae1771a Bump eslint-plugin-jest from 26.6.0 to 26.7.0 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 26.6.0 to 26.7.0.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v26.6.0...v26.7.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-08-01 01:56:18 +00:00
Federico Builes 0517f5ae3d Merge pull request #172 from actions/dependabot/npm_and_yarn/types/node-16.11.46 
Bump @types/node from 16.11.45 to 16.11.46
 2022-07-29 14:32:13 +02:00
Federico Builes a7ed04cb6d Merge pull request #173 from actions/dependabot/npm_and_yarn/got-12.3.0 
Bump got from 12.2.0 to 12.3.0
 2022-07-29 14:23:49 +02:00
dependabot[bot] 5956ba4d37 Bump got from 12.2.0 to 12.3.0 
Bumps [got](https://github.com/sindresorhus/got) from 12.2.0 to 12.3.0.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v12.2.0...v12.3.0)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-29 01:27:53 +00:00
dependabot[bot] ee739211c3 Bump @types/node from 16.11.45 to 16.11.46 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.45 to 16.11.46.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-29 01:27:43 +00:00
Federico Builes 2427b83fb6 Merge pull request #171 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.31.0 
Bump @typescript-eslint/parser from 5.30.7 to 5.31.0
 2022-07-26 12:45:30 +02:00
dependabot[bot] e004499203 Bump @typescript-eslint/parser from 5.30.7 to 5.31.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.30.7 to 5.31.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.31.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-26 09:30:36 +00:00
Federico Builes 15e8301141 Merge pull request #170 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.31.0 
Bump @typescript-eslint/eslint-plugin from 5.30.7 to 5.31.0
 2022-07-26 11:29:43 +02:00
dependabot[bot] 074e15f1d2 Bump @typescript-eslint/eslint-plugin from 5.30.7 to 5.31.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.30.7 to 5.31.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.31.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-26 01:49:44 +00:00
Federico Builes 28bd35e115 Merge pull request #167 from actions/dependabot/npm_and_yarn/zod-3.17.10 
Bump zod from 3.17.9 to 3.17.10
 2022-07-26 03:00:59 +02:00
Federico Builes 1a8b866371 adding dist 2022-07-26 02:59:21 +02:00
dependabot[bot] 7414ae2b68 Bump zod from 3.17.9 to 3.17.10 
Bumps [zod](https://github.com/colinhacks/zod) from 3.17.9 to 3.17.10.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/master/CHANGELOG.md)
- [Commits](https://github.com/colinhacks/zod/compare/v3.17.9...v3.17.10)

---
updated-dependencies:
- dependency-name: zod
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-26 00:54:13 +00:00
Federico Builes 25a2578e41 Merge pull request #169 from actions/dependabot/npm_and_yarn/got-12.2.0 
Bump got from 12.1.0 to 12.2.0
 2022-07-26 02:53:24 +02:00
Federico Builes 5a348f087a Merge pull request #168 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.3.7 
Bump eslint-plugin-github from 4.3.6 to 4.3.7
 2022-07-26 02:53:05 +02:00
dependabot[bot] 4d7937d9b8 Bump got from 12.1.0 to 12.2.0 
Bumps [got](https://github.com/sindresorhus/got) from 12.1.0 to 12.2.0.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v12.1.0...v12.2.0)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-25 01:54:31 +00:00
dependabot[bot] 4b57fa2745 Bump eslint-plugin-github from 4.3.6 to 4.3.7 
Bumps [eslint-plugin-github](https://github.com/github/eslint-plugin-github) from 4.3.6 to 4.3.7.
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](https://github.com/github/eslint-plugin-github/compare/v4.3.6...v4.3.7)

---
updated-dependencies:
- dependency-name: eslint-plugin-github
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-25 01:53:49 +00:00
Federico Builes b15d68a617 Merge pull request #163 from actions/dependabot/npm_and_yarn/zod-3.17.9 
Bump zod from 3.17.4 to 3.17.9
 2022-07-19 13:29:36 +02:00
Federico Builes 86ba360860 updating dist 2022-07-19 05:28:23 -06:00
dependabot[bot] 1c643b69e3 Bump zod from 3.17.4 to 3.17.9 
Bumps [zod](https://github.com/colinhacks/zod) from 3.17.4 to 3.17.9.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/master/CHANGELOG.md)
- [Commits](https://github.com/colinhacks/zod/compare/v3.17.4...v3.17.9)

---
updated-dependencies:
- dependency-name: zod
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-19 11:26:12 +00:00
Federico Builes cc90e94fd7 Merge pull request #162 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.30.7 
Bump @typescript-eslint/parser from 5.30.6 to 5.30.7
 2022-07-19 13:13:51 +02:00
dependabot[bot] ca03cb626b Bump @typescript-eslint/parser from 5.30.6 to 5.30.7 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.30.6 to 5.30.7.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.30.7/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-19 11:12:11 +00:00
Federico Builes 0c672b9f6f Merge pull request #161 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.30.7 
Bump @typescript-eslint/eslint-plugin from 5.30.6 to 5.30.7
 2022-07-19 13:11:11 +02:00
dependabot[bot] 9b38d34b70 Bump @typescript-eslint/eslint-plugin from 5.30.6 to 5.30.7 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.30.6 to 5.30.7.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.30.7/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-19 01:53:55 +00:00
Federico Builes bd0f0459f8 Merge pull request #160 from actions/dependabot/npm_and_yarn/eslint-8.20.0 
Bump eslint from 8.19.0 to 8.20.0
 2022-07-18 15:02:44 +02:00
Federico Builes ace98b5898 Merge pull request #159 from actions/dependabot/npm_and_yarn/types/node-16.11.45 
Bump @types/node from 16.11.44 to 16.11.45
 2022-07-18 15:02:24 +02:00
dependabot[bot] 79aa012b58 Bump @types/node from 16.11.44 to 16.11.45 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.44 to 16.11.45.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-18 13:01:56 +00:00
Federico Builes 264bf85801 Merge pull request #158 from actions/dependabot/npm_and_yarn/zod-3.17.4 
Bump zod from 3.17.3 to 3.17.4
 2022-07-18 15:01:30 +02:00
Federico Builes 0e2da932f6 updating dist files 2022-07-18 07:00:33 -06:00
dependabot[bot] 0a8934fb6a Bump eslint from 8.19.0 to 8.20.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.19.0 to 8.20.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.19.0...v8.20.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-18 13:00:14 +00:00
Federico Builes f83d7f264c Merge branch 'main' into dependabot/npm_and_yarn/zod-3.17.4 2022-07-18 07:00:01 -06:00
Federico Builes d0e46c9613 Merge pull request #157 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.6.0 
Bump eslint-plugin-jest from 26.5.3 to 26.6.0
 2022-07-18 14:59:20 +02:00
dependabot[bot] 22bb279ab1 Bump zod from 3.17.3 to 3.17.4 
Bumps [zod](https://github.com/colinhacks/zod) from 3.17.3 to 3.17.4.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Changelog](https://github.com/colinhacks/zod/blob/master/CHANGELOG.md)
- [Commits](https://github.com/colinhacks/zod/compare/v3.17.3...v3.17.4)

---
updated-dependencies:
- dependency-name: zod
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-18 01:53:03 +00:00
dependabot[bot] d33c19c38d Bump eslint-plugin-jest from 26.5.3 to 26.6.0 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 26.5.3 to 26.6.0.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v26.5.3...v26.6.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-18 01:52:43 +00:00
Federico Builes 2ef513a94a Update example tag text. 2022-07-14 09:39:56 +02:00
Federico Builes abd8ae5da7 Make CONTRIBUTING.md examples easier to copy/paste. 2022-07-14 09:35:44 +02:00
Federico Builes 94145f3150 Bumping the version to 2.0.4. 
Missed the version changes in the previous release.
v2.0.4 		2022-07-14 09:31:49 +02:00
Federico Builes af8d39d8a3 Bumping the version to 2.0.3. 2022-07-14 09:14:17 +02:00
Federico Builes b83777ffd0 Merge pull request #156 from actions/dependabot/npm_and_yarn/types/node-16.11.44 
Bump @types/node from 16.11.43 to 16.11.44
v2.0.3 		2022-07-14 09:11:42 +02:00
Federico Builes 1dc503a722 Merge pull request #155 from kachick/fix-154 
Ignore removed changes in license checker
 2022-07-14 09:10:17 +02:00
dependabot[bot] 8975a27eeb Bump @types/node from 16.11.43 to 16.11.44 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.43 to 16.11.44.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-14 01:36:49 +00:00
Kenichi Kamiya c003e7f8fc Add more test for added and removed pattern 2022-07-13 19:07:12 +09:00
Kenichi Kamiya ae4118f8fa Update build files with npm run all 2022-07-13 18:11:55 +09:00
Kenichi Kamiya c5d7bdcf7f Ignore removed changes in license checker 2022-07-13 18:11:10 +09:00
Federico Builes bced8aa1b2 Merge pull request #153 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.30.6 
Bump @typescript-eslint/parser from 5.30.5 to 5.30.6
 2022-07-12 09:07:41 +02:00
dependabot[bot] ba8e0b013b Bump @typescript-eslint/parser from 5.30.5 to 5.30.6 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.30.5 to 5.30.6.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.30.6/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2022-07-12 07:04:11 +00:00
Federico Builes cfcdef93a4 Merge pull request #152 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.30.6 
Bump @typescript-eslint/eslint-plugin from 5.30.5 to 5.30.6
 2022-07-12 09:03:21 +02:00