actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
1,345 Commits 90 Branches 61 Tags
c45cbd720fc73d3afa92e33dedf0a5a7e88bb7c2
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico BuilesandGitHub 2425542aca Merge pull request #638 from actions/fix-purls 
Replace pip -> pypi in PURL examples
 2023-12-11 17:25:43 +01:00
Federico Builes b39e17ba5e Replace pip -> pypi in PURL examples 2023-12-11 17:23:19 +01:00
Federico BuilesandGitHub b8a398b675 Merge pull request #636 from actions/dependabot/npm_and_yarn/nodemon-3.0.2 
Bump nodemon from 3.0.1 to 3.0.2
 2023-12-11 06:04:47 +01:00
Federico BuilesandGitHub 1612de9646 Merge pull request #637 from actions/dependabot/npm_and_yarn/types/jest-29.5.11 
Bump @types/jest from 29.5.8 to 29.5.11
 2023-12-11 06:04:33 +01:00
Federico BuilesandGitHub 359e1ffa80 Merge pull request #629 from actions/dependabot/npm_and_yarn/prettier-3.1.0 
Bump prettier from 3.0.3 to 3.1.0
 2023-12-04 08:58:13 +01:00
Federico BuilesandGitHub 63e1558807 Merge pull request #630 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.13.1 
Bump @typescript-eslint/parser from 6.10.0 to 6.13.1
 2023-12-04 08:57:52 +01:00
Federico Builes 01bc87099b bumping version 2023-11-28 08:11:14 +01:00
Federico BuilesandGitHub 4b4f0de8e1 Merge pull request #623 from actions/fix-advisory-filters 
Fix GHSA Filtering
 2023-11-28 08:10:11 +01:00
Federico Builes a93fa86c77 Fixing test name. 2023-11-28 08:08:29 +01:00
Federico BuilesandGitHub 550520e2c5 Merge pull request #624 from actions/dependabot/npm_and_yarn/typescript-5.3.2 
Bump typescript from 5.2.2 to 5.3.2
 2023-11-27 07:22:56 +01:00
Federico BuilesandGitHub 2d0fb60634 Merge pull request #625 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.12.0 
Bump @typescript-eslint/eslint-plugin from 6.11.0 to 6.12.0
 2023-11-27 07:22:47 +01:00
Federico Builes a6d4686316 adding dist 2023-11-24 14:40:48 +01:00
Federico Builes 4366dbae42 Advisory filters should not drop entire dependencies. 2023-11-24 14:40:18 +01:00
Federico Builes 50dafeb5e4 Tiny logic refactor. 2023-11-24 14:37:30 +01:00
Federico BuilesandGitHub 1cbb048907 Merge pull request #620 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.11.0 
Bump @typescript-eslint/eslint-plugin from 6.10.0 to 6.11.0
 2023-11-20 08:33:40 +01:00
Federico BuilesandGitHub 5991d7a97d Merge pull request #619 from actions/dependabot/npm_and_yarn/types/node-16.18.62 
Bump @types/node from 16.18.61 to 16.18.62
 2023-11-20 08:27:56 +01:00
Federico Builes 7bbfa034e7 bumping to 3.1.3 2023-11-13 17:57:44 +01:00
Federico BuilesandGitHub 26f1ad9120 Merge pull request #617 from theztefan/purl-encoding-error 
Fixes purl "version must be percent-encoded"
 2023-11-13 17:55:23 +01:00
Federico BuilesandGitHub fde92acd08 Merge pull request #611 from actions/fix-https-proxy 
Fix proxy failures in 3.1.1
 2023-11-08 09:14:57 +01:00
Federico Builes a89dd96450 adding dist 2023-11-08 08:49:49 +01:00
Federico Builes 76891836b1 revert octokit changes 2023-11-08 08:47:43 +01:00
Federico Builes fc5e2db757 go back to Node 16 to skip using fetch API 2023-11-08 08:36:27 +01:00
Federico Builes ded987cb3b Downgrade usage of retries. 
This commit reverts:

f7363549ac
76b050a607
8dc52cdbed
 2023-11-08 08:35:44 +01:00
Federico Builes 9f45b2463b bumping to 3.1.1 2023-11-06 08:03:41 +01:00
Federico BuilesandGitHub 559513a56c Merge pull request #606 from actions/dependabot/npm_and_yarn/actions/github-6.0.0 
Bump @actions/github from 5.1.1 to 6.0.0
 2023-11-06 07:55:54 +01:00
Federico Builes 8edc431d7d Merge branch 'main' into dependabot/npm_and_yarn/actions/github-6.0.0 2023-11-06 07:52:53 +01:00
Federico BuilesandGitHub 3e8322e4bb Merge pull request #605 from actions/dependabot/npm_and_yarn/yaml-2.3.4 
Bump yaml from 2.3.3 to 2.3.4
 2023-11-06 07:51:31 +01:00
Federico Builes 5a55885447 adding dist 2023-11-06 07:50:51 +01:00
Federico Builes f952b5a2c5 Merge branch 'main' into dependabot/npm_and_yarn/yaml-2.3.4 2023-11-06 07:48:24 +01:00
Federico BuilesandGitHub 8678cfac42 Merge pull request #607 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.9.1 
Bump @typescript-eslint/eslint-plugin from 6.9.0 to 6.9.1
 2023-11-06 07:47:08 +01:00
Federico Builes aa8e70d588 adding dist 2023-11-06 07:46:52 +01:00
Federico Builes 3331d25f9d adding dist 2023-11-06 07:42:40 +01:00
Federico BuilesandGitHub b2a5ead1f7 Merge pull request #604 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.9.1 
Bump @typescript-eslint/parser from 6.8.0 to 6.9.1
 2023-11-06 07:41:16 +01:00
Federico BuilesandGitHub 79f0a0b62b Merge pull request #603 from actions/dependabot/npm_and_yarn/actions/core-1.10.1 
Bump @actions/core from 1.10.0 to 1.10.1
 2023-11-06 07:40:58 +01:00
Federico Builes fc44602899 adding dist 2023-11-06 07:40:46 +01:00
Federico BuilesandGitHub 11e0dead9a Merge pull request #598 from actions/dependabot/npm_and_yarn/packageurl-js-1.2.0 
Bump packageurl-js from 1.0.2 to 1.2.0
 2023-10-30 09:43:41 +01:00
Federico Builes 3c1cb72dcd updating dist 2023-10-30 09:31:26 +01:00
Federico BuilesandGitHub 570a2b5dcd Merge pull request #597 from actions/dependabot/npm_and_yarn/eslint-8.52.0 
Bump eslint from 8.51.0 to 8.52.0
 2023-10-30 09:28:21 +01:00
Federico BuilesandGitHub a7e01b8d9c Merge pull request #599 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.9.0 
Bump @typescript-eslint/eslint-plugin from 6.8.0 to 6.9.0
 2023-10-30 09:28:05 +01:00
Federico BuilesandGitHub 0631089c32 Merge pull request #596 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.6.0 
Bump eslint-plugin-jest from 27.4.2 to 27.6.0
 2023-10-30 09:24:44 +01:00
Federico BuilesandGitHub 0b8ffde994 Merge pull request #600 from actions/dependabot/npm_and_yarn/types/spdx-satisfies-0.1.1 
Bump @types/spdx-satisfies from 0.1.0 to 0.1.1
 2023-10-30 09:23:36 +01:00
Federico BuilesandGitHub 68d57cd360 Merge pull request #601 from actions/dependabot/github_actions/actions/setup-node-4 
Bump actions/setup-node from 3 to 4
 2023-10-30 09:22:44 +01:00
Federico BuilesandGitHub e65eb02ccf Merge pull request #591 from actions/dependabot/npm_and_yarn/typescript-5.2.2 
Bump typescript from 4.9.5 to 5.2.2
 2023-10-23 12:27:41 +02:00
Federico Builes 88953c2b16 updating dist 2023-10-23 12:26:03 +02:00
Federico BuilesandGitHub d97416955e Merge pull request #594 from actions/dependabot/npm_and_yarn/babel/traverse-7.23.2 
Bump @babel/traverse from 7.23.0 to 7.23.2
 2023-10-23 06:57:28 +02:00
Federico BuilesandGitHub 89ff65dbf7 Merge pull request #589 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.10.1 
Bump eslint-plugin-github from 4.9.2 to 4.10.1
 2023-10-23 05:18:52 +02:00
Federico BuilesandGitHub c3c32181a9 Merge pull request #592 from actions/dependabot/npm_and_yarn/types/spdx-expression-parse-3.0.4 
Bump @types/spdx-expression-parse from 3.0.3 to 3.0.4
 2023-10-23 05:18:42 +02:00
Federico BuilesandGitHub ead6e4616f Merge pull request #593 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.8.0 
Bump @typescript-eslint/parser from 6.7.3 to 6.8.0
 2023-10-23 05:18:25 +02:00
Federico BuilesandGitHub 954314c2b1 Merge pull request #590 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.8.0 
Bump @typescript-eslint/eslint-plugin from 6.7.5 to 6.8.0
 2023-10-23 05:11:58 +02:00
Federico BuilesandGitHub 04e56a4409 Merge pull request #586 from actions/dependabot/npm_and_yarn/yaml-2.3.3 
Bump yaml from 2.3.2 to 2.3.3
 2023-10-16 05:39:42 +02:00
Federico Builes af51c4b700 adding dist 2023-10-16 03:44:04 +02:00
Federico BuilesandGitHub 382d2873a9 Merge pull request #585 from actions/dependabot/npm_and_yarn/types/spdx-expression-parse-3.0.3 
Bump @types/spdx-expression-parse from 3.0.2 to 3.0.3
 2023-10-16 03:42:54 +02:00
Federico BuilesandGitHub 212ded88b2 Merge pull request #584 from actions/dependabot/npm_and_yarn/eslint-plugin-prettier-5.0.1 
Bump eslint-plugin-prettier from 5.0.0 to 5.0.1
 2023-10-16 03:41:10 +02:00
Federico BuilesandGitHub 7ec89343e1 Merge pull request #587 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.7.5 
Bump @typescript-eslint/eslint-plugin from 6.7.2 to 6.7.5
 2023-10-16 03:40:22 +02:00
Federico BuilesandGitHub 536cc3d4b6 Merge pull request #588 from actions/dependabot/npm_and_yarn/types/node-16.18.58 
Bump @types/node from 16.18.54 to 16.18.58
 2023-10-16 03:40:11 +02:00
Federico Builes 7e65a9bb48 Merge branch 'update-octokit' 2023-10-09 13:39:21 +02:00
Federico Builes b91ea51364 updating dist. 2023-10-09 13:34:29 +02:00
Federico Builes 76b050a607 Use octokit-rest for the PR comments client. 2023-10-09 13:34:14 +02:00
Federico Builes e6d6badddb Update jest. 2023-10-09 13:33:55 +02:00
Federico Builes f7363549ac use octokit plugins 2023-10-09 13:20:24 +02:00
Federico Builes f71a906c2e Update plugins. 2023-10-09 13:17:54 +02:00
Federico Builes 03ace23f96 Update Node JS version. 2023-10-09 12:36:16 +02:00
Federico Builes 0564d6f4de adding dist 2023-10-09 11:41:16 +02:00
Federico Builes 69a61b613b updating dist 2023-10-09 11:36:34 +02:00
Federico Builes 53eb1ebcf5 Merge branch 'update-request-errors' 2023-10-09 11:36:00 +02:00
Federico Builes 8dc52cdbed update tests 2023-10-09 11:23:53 +02:00
Federico BuilesandGitHub e8634671a4 Merge pull request #583 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.4.2 
Bump eslint-plugin-jest from 27.2.3 to 27.4.2
 2023-10-09 10:25:41 +02:00
Federico BuilesandGitHub 69ecf4db79 Merge pull request #582 from actions/dependabot/npm_and_yarn/eslint-8.51.0 
Bump eslint from 8.48.0 to 8.51.0
 2023-10-09 10:25:28 +02:00
Federico Builes e51d18ae1e updating dist 2023-10-05 17:15:27 +02:00
Federico Builes 62f26a66d6 bumping zod 2023-10-05 17:14:25 +02:00
Federico BuilesandGitHub 2f836bbce6 Merge pull request #580 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.7.3 
Bump @typescript-eslint/parser from 6.6.0 to 6.7.3
 2023-10-01 21:21:28 -05:00
Federico BuilesandGitHub 8325453339 Merge pull request #579 from actions/dependabot/npm_and_yarn/vercel/ncc-0.38.0 
Bump @vercel/ncc from 0.36.1 to 0.38.0
 2023-10-01 21:13:34 -05:00
Federico BuilesandGitHub 4e41165d4b Merge pull request #577 from jsoref/modernize-versions 
Modernize versions
 2023-09-27 13:46:13 -05:00
Federico BuilesandGitHub 64a6d1a0b8 Merge pull request #571 from actions/dependabot/npm_and_yarn/types/node-16.18.54 
Bump @types/node from 16.18.48 to 16.18.54
 2023-09-26 12:24:33 -05:00
Federico BuilesandGitHub 364de25b16 Merge pull request #573 from actions/dependabot/npm_and_yarn/prettier-3.0.3 
Bump prettier from 3.0.2 to 3.0.3
 2023-09-26 12:24:18 -05:00
Federico BuilesandGitHub 6c530dbedd Merge pull request #570 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.7.2 
Bump @typescript-eslint/eslint-plugin from 6.4.0 to 6.7.2
 2023-09-18 14:42:50 -05:00
Federico BuilesandGitHub 9c66f1b1b1 Merge pull request #569 from actions/dependabot/npm_and_yarn/esbuild-register-3.5.0 
Bump esbuild-register from 3.4.2 to 3.5.0
 2023-09-18 14:39:13 -05:00
Federico BuilesandGitHub 079b962af9 Merge pull request #564 from actions/dependabot/npm_and_yarn/zod-3.22.2 
Bump zod from 3.21.4 to 3.22.2
 2023-09-11 07:17:25 -05:00
Federico Builes e6b5e83d4e adding dist 2023-09-11 07:16:56 -05:00
Federico BuilesandGitHub 3c40a50e4b Merge pull request #565 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.6.0 
Bump @typescript-eslint/parser from 6.2.1 to 6.6.0
 2023-09-11 07:13:54 -05:00
Federico BuilesandGitHub 886d1fcf5f Merge pull request #563 from actions/dependabot/github_actions/actions/checkout-4 
Bump actions/checkout from 3 to 4
 2023-09-11 07:13:45 -05:00
Federico Builes 51da82b3f5 updating package-lock.json 2023-09-07 16:44:36 -05:00
Federico Builes 5e4b90e080 add dist 2023-09-07 09:06:46 -05:00
Federico BuilesGitHubJustin Holguín
 		7d0e0f61e8 Update src/dependency-graph.ts 
Co-authored-by: Justin Holguín <[email protected]>
 2023-09-07 07:08:21 -05:00
Federico BuilesandGitHub 511675e747 Merge pull request #558 from actions/dependabot/npm_and_yarn/types/node-16.18.48 
Bump @types/node from 16.18.41 to 16.18.48
 2023-09-05 16:15:52 -04:00
Federico BuilesandGitHub dcdbff2f84 Merge pull request #557 from actions/dependabot/npm_and_yarn/yaml-2.3.2 
Bump yaml from 2.3.1 to 2.3.2
 2023-09-05 11:55:49 -04:00
Federico Builes 29513b58ad updating dist 2023-09-05 08:28:43 -05:00
Federico BuilesandGitHub 15e91a3980 Merge pull request #554 from actions/dependabot/npm_and_yarn/eslint-8.48.0 
Bump eslint from 8.47.0 to 8.48.0
 2023-08-28 08:52:43 -05:00
Federico BuilesandGitHub c7d2795410 Merge pull request #553 from actions/dependabot/npm_and_yarn/prettier-3.0.2 
Bump prettier from 3.0.1 to 3.0.2
 2023-08-28 08:52:32 -05:00
Federico BuilesandGitHub c17dea4c51 Merge pull request #549 from actions/dependabot/npm_and_yarn/types/node-16.18.41 
Bump @types/node from 16.18.39 to 16.18.41
 2023-08-23 15:16:07 +02:00
Federico BuilesandGitHub 727ca667a3 Merge pull request #550 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.4.0 
Bump @typescript-eslint/eslint-plugin from 6.3.0 to 6.4.0
 2023-08-23 15:15:56 +02:00
Federico BuilesandGitHub 84cd472b61 Merge pull request #551 from oerd/update-inputs-documentation-and-links 
Fix(docs): Correct action input name
 2023-08-22 17:02:07 +02:00
Federico Builes 32037a1d97 bumping to 3.0.8 2023-08-15 10:11:44 +02:00
Federico BuilesandGitHub f6fff72a32 Merge pull request #540 from sgmurphy/comment-on-failure 
Add `on-failure` option to `comment-summary-in-pr` setting
 2023-08-15 10:08:44 +02:00
Federico BuilesandGitHub 61ee12c097 Merge pull request #548 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.3.0 
Bump @typescript-eslint/eslint-plugin from 6.2.0 to 6.3.0
 2023-08-14 06:39:45 +02:00
Federico BuilesandGitHub 7d5babfc38 Merge pull request #547 from actions/dependabot/npm_and_yarn/eslint-8.47.0 
Bump eslint from 8.46.0 to 8.47.0
 2023-08-14 06:39:28 +02:00
Federico Builes 7d90b4f05f bumping to 3.0.7 2023-08-09 15:27:02 +02:00
Federico BuilesandGitHub 02aa4b66a7 Merge pull request #544 from adrienpessu/main 
Add an option to deny packages or groups of packages
 2023-08-09 15:25:21 +02:00
Federico BuilesandGitHub fe2a482baf Apply suggestions from code review 2023-08-09 15:24:26 +02:00
Federico BuilesandAdrien Pessu 0e6dece6c7 update more dependencies 2023-08-07 14:07:26 +02:00