actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
297 Commits 90 Branches 61 Tags
ca03cb626b451abbc2ef646c8cbca8d7986fb9d5
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico BuilesandGitHub 0c672b9f6f Merge pull request #161 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.30.7 
Bump @typescript-eslint/eslint-plugin from 5.30.6 to 5.30.7
 2022-07-19 13:11:11 +02:00
Federico BuilesandGitHub bd0f0459f8 Merge pull request #160 from actions/dependabot/npm_and_yarn/eslint-8.20.0 
Bump eslint from 8.19.0 to 8.20.0
 2022-07-18 15:02:44 +02:00
Federico BuilesandGitHub ace98b5898 Merge pull request #159 from actions/dependabot/npm_and_yarn/types/node-16.11.45 
Bump @types/node from 16.11.44 to 16.11.45
 2022-07-18 15:02:24 +02:00
Federico BuilesandGitHub 264bf85801 Merge pull request #158 from actions/dependabot/npm_and_yarn/zod-3.17.4 
Bump zod from 3.17.3 to 3.17.4
 2022-07-18 15:01:30 +02:00
Federico Builes 0e2da932f6 updating dist files 2022-07-18 07:00:33 -06:00
Federico Builes f83d7f264c Merge branch 'main' into dependabot/npm_and_yarn/zod-3.17.4 2022-07-18 07:00:01 -06:00
Federico BuilesandGitHub d0e46c9613 Merge pull request #157 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-26.6.0 
Bump eslint-plugin-jest from 26.5.3 to 26.6.0
 2022-07-18 14:59:20 +02:00
Federico Builes 2ef513a94a Update example tag text. 2022-07-14 09:39:56 +02:00
Federico Builes abd8ae5da7 Make CONTRIBUTING.md examples easier to copy/paste. 2022-07-14 09:35:44 +02:00
Federico Builes 94145f3150 Bumping the version to 2.0.4. 
Missed the version changes in the previous release.
 2022-07-14 09:31:49 +02:00
Federico Builes af8d39d8a3 Bumping the version to 2.0.3. 2022-07-14 09:14:17 +02:00
Federico BuilesandGitHub b83777ffd0 Merge pull request #156 from actions/dependabot/npm_and_yarn/types/node-16.11.44 
Bump @types/node from 16.11.43 to 16.11.44
 2022-07-14 09:11:42 +02:00
Federico BuilesandGitHub 1dc503a722 Merge pull request #155 from kachick/fix-154 
Ignore removed changes in license checker
 2022-07-14 09:10:17 +02:00
Federico BuilesandGitHub bced8aa1b2 Merge pull request #153 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.30.6 
Bump @typescript-eslint/parser from 5.30.5 to 5.30.6
 2022-07-12 09:07:41 +02:00
Federico BuilesandGitHub cfcdef93a4 Merge pull request #152 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.30.6 
Bump @typescript-eslint/eslint-plugin from 5.30.5 to 5.30.6
 2022-07-12 09:03:21 +02:00
Federico BuilesandGitHub 467931ed7e Merge pull request #151 from actions/dependabot/npm_and_yarn/octokit/request-error-3.0.0 
Bump @octokit/request-error from 2.1.0 to 3.0.0
 2022-07-11 10:52:17 +02:00
Federico Builes 29c7e47bc6 adding dist folder 2022-07-11 10:49:16 +02:00
Federico BuilesandGitHub f187f64fc9 Merge pull request #139 from actions/dependabot/npm_and_yarn/eslint-8.19.0 
Bump eslint from 8.18.0 to 8.19.0
 2022-07-06 11:09:37 +02:00
Federico BuilesandGitHub f3bcf122c7 Merge pull request #144 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.30.5 
Bump @typescript-eslint/eslint-plugin from 5.30.0 to 5.30.5
 2022-07-06 11:09:15 +02:00
Federico BuilesandGitHub c316251843 Merge pull request #146 from kachick/add-vscode-workspace-configs 
Enable prettier and recommend eslint in vscode workspace config
 2022-07-06 11:01:23 +02:00
Federico BuilesandGitHub d8e436b2d5 Merge pull request #143 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.30.5 
Bump @typescript-eslint/parser from 5.30.0 to 5.30.5
 2022-07-06 11:01:06 +02:00
Federico BuilesandGitHub 82d4814150 Merge pull request #142 from kachick/fix-lint-errors-and-add-ci 
Add CI workflow and fix lint errors
 2022-07-06 11:00:13 +02:00
Federico BuilesandGitHub 89de8ab245 Merge pull request #148 from actions/dependabot/npm_and_yarn/nodemon-2.0.19 
Bump nodemon from 2.0.18 to 2.0.19
 2022-07-06 10:41:04 +02:00
Federico BuilesandGitHub 1ea517b3fa Merge pull request #141 from kachick/use-fixed-major-version-for-node-types 
Use fixed major version for node types
 2022-07-06 10:38:56 +02:00
Federico BuilesandGitHub 2aef88c152 Merge pull request #145 from kachick/fix-typo-dangerouns 
Fix a typo s/dangerouns/dangerous/
 2022-07-06 10:26:18 +02:00
Federico BuilesandGitHub 26b7908701 Merge pull request #136 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.30.0 
Bump @typescript-eslint/eslint-plugin from 5.29.0 to 5.30.0
 2022-06-28 08:04:16 +02:00
Federico BuilesandGitHub 2ceda66c21 Merge pull request #135 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.30.0 
Bump @typescript-eslint/parser from 5.29.0 to 5.30.0
 2022-06-28 07:55:08 +02:00
Federico BuilesandGitHub 24ab96e8b8 Merge pull request #128 from actions/dependabot/npm_and_yarn/nodemon-2.0.18 
Bump nodemon from 2.0.16 to 2.0.18
 2022-06-24 08:37:57 +02:00
Federico BuilesandGitHub 81b5cbd111 Merge pull request #127 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.29.0 
Bump @typescript-eslint/parser from 5.28.0 to 5.29.0
 2022-06-21 07:50:03 +02:00
Federico BuilesandGitHub febb822f26 Merge pull request #126 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.29.0 
Bump @typescript-eslint/eslint-plugin from 5.28.0 to 5.29.0
 2022-06-21 07:48:11 +02:00
Federico BuilesandGitHub a9539be12a Merge pull request #123 from actions/dependabot/npm_and_yarn/typescript-4.7.4 
Bump typescript from 4.7.3 to 4.7.4
 2022-06-20 08:14:45 +02:00
Federico BuilesandGitHub 9c688a568f Merge pull request #124 from actions/dependabot/npm_and_yarn/eslint-8.18.0 
Bump eslint from 8.17.0 to 8.18.0
 2022-06-20 08:14:26 +02:00
Federico BuilesandGitHub 879687b22c Merge pull request #122 from actions/dependabot/npm_and_yarn/prettier-2.7.1 
Bump prettier from 2.7.0 to 2.7.1
 2022-06-17 07:40:15 +02:00
Federico BuilesandGitHub 17187536c0 Merge pull request #120 from actions/dependabot/npm_and_yarn/types/node-18.0.0 
Bump @types/node from 17.0.43 to 18.0.0
 2022-06-16 07:18:52 +02:00
Federico BuilesandGitHub c0faf55fe4 Merge pull request #119 from actions/dependabot/npm_and_yarn/actions/core-1.9.0 
Bump @actions/core from 1.8.2 to 1.9.0
 2022-06-16 07:18:37 +02:00
Federico Builes b6f6142660 adding dist files 2022-06-16 07:07:13 +02:00
Federico Builes 333e7ce17e Merge branch 'main' into dependabot/npm_and_yarn/actions/core-1.9.0 2022-06-16 07:06:25 +02:00
Federico BuilesandGitHub 4e9a45ca5b Merge pull request #121 from kachick/fix-duplicate-words 
Fix duplicate words in README
 2022-06-16 06:58:18 +02:00
Federico Builes 83be5f6c90 bumping version 2022-06-16 06:56:22 +02:00
Federico Builes 1c59cdf2a9 Fix the unknown licenses error message 2022-06-16 06:03:16 +02:00
Federico BuilesandGitHub 29fc7a23bd Merge pull request #117 from actions/readme-capitalisation 
Fixing branding in the readme
 2022-06-15 15:40:19 +02:00
Federico Builes aabd50a60d Bumping version to 2.0.1 2022-06-15 15:27:15 +02:00
Federico BuilesandGitHub 981c44c2a9 Merge pull request #116 from actions/unknown-licenses 
Unknown licenses
 2022-06-15 15:26:38 +02:00
Federico Builes c0d32934e8 Adding dist. 2022-06-15 15:25:21 +02:00
Federico Builes 963fe8045d Always print null licenses. 2022-06-15 15:22:35 +02:00
Federico Builes bf94d94f63 Remove old TODO. 2022-06-15 15:22:14 +02:00
Federico BuilesandGitHub 43ce5df965 Update CONTRIBUTING.md 2022-06-15 14:03:10 +02:00
Federico Builes 24bc5e9934 Updating the CONTRIBUTING.md docs. 2022-06-15 14:01:47 +02:00
Federico Builes 97790d29c7 update version in package.json 2022-06-15 11:55:10 +02:00
Federico BuilesandGitHub 74dbdf9819 Merge pull request #112 from actions/move-config-file 
Move configuration file location
 2022-06-15 11:53:18 +02:00
Federico Builes f3f3519b2a Merge branch 'main' into move-config-file 2022-06-15 06:43:18 +02:00
Federico BuilesandGitHub 216910dd9a Merge pull request #113 from actions/dependabot/npm_and_yarn/prettier-2.7.0 
Bump prettier from 2.6.2 to 2.7.0
 2022-06-15 06:42:57 +02:00
Federico BuilesandGitHub 3f246861d8 Merge pull request #114 from actions/dependabot/npm_and_yarn/types/node-17.0.43 
Bump @types/node from 17.0.42 to 17.0.43
 2022-06-15 05:36:17 +02:00
Federico Builes faa63c3cba adding dist 2022-06-15 05:21:16 +02:00
Federico Builes c6587b663d Updating README with instructions for unknown licenses. 2022-06-14 14:11:01 +02:00
Federico Builes 42e2bc1ed2 Handle unknown licenses. 2022-06-14 13:54:27 +02:00
Federico Builes 0b87f02bee Document how we test inputs 2022-06-14 13:00:18 +02:00
Federico BuilesandGitHub 00be2ce1fc Typos. 2022-06-14 12:27:56 +02:00
Federico BuilesandGitHub 2860b57e48 Update README.md 2022-06-14 12:24:27 +02:00
Federico BuilesandHenri Maurer fd6e756c7b Updating readConfig() to be more readable, get rid of typecasts. 
Co-authored-by: Henri Maurer <[email protected]>
 2022-06-14 11:29:13 +02:00
Federico Builes f83a407eb9 Use the correct name for allowlists. 2022-06-14 09:46:59 +02:00
Federico Builes b0e1f384d7 Linting YAML 2022-06-14 09:05:05 +02:00
Federico Builes c973154c92 Dashes instead of underscores. 2022-06-14 07:50:25 +02:00
Federico Builes 3355ec4be5 adding dist 2022-06-14 07:44:17 +02:00
Federico Builes 76ad37608d Adding more tests for the config file. 2022-06-14 07:42:51 +02:00
Federico Builes 3eff3f5918 let => const 2022-06-14 07:42:13 +02:00
Federico Builes 7278093fa0 Clarify some of the error messages. 2022-06-14 07:41:37 +02:00
Federico Builes b5b49104d4 Adding the config definition to action.yml 2022-06-14 07:40:16 +02:00
Federico Builes e56fe29417 Remove old config file. 2022-06-14 07:38:45 +02:00
Federico Builes cc3101831d Updating dist. 2022-06-14 07:04:33 +02:00
Federico Builes ef97470a0f Don't set the defaults in the test :/ 2022-06-14 07:04:26 +02:00
Federico Builes efecf6fd09 Remove the variables from env so they don't default to empty strings. 2022-06-14 06:49:18 +02:00
Federico Builes 24d7ef3c5d Use an empty config options type. 2022-06-14 06:48:58 +02:00
Federico Builes 01fa67b82e adding dist 2022-06-14 06:26:18 +02:00
Federico Builes 1791775ce6 temp commit 2022-06-14 05:57:43 +02:00
Federico BuilesandGitHub 92f1ecaaea Merge pull request #106 from actions/adding-lists 
Adding allow and deny lists
 2022-06-14 04:45:37 +02:00
Federico BuilesandGitHub 47d4ff9127 Merge pull request #111 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.28.0 
Bump @typescript-eslint/parser from 5.27.1 to 5.28.0
 2022-06-14 04:45:19 +02:00
Federico BuilesandGitHub d616ba30f2 Merge pull request #110 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.28.0 
Bump @typescript-eslint/eslint-plugin from 5.27.1 to 5.28.0
 2022-06-14 04:43:24 +02:00
Federico Builes eebebcdc2a Use real PURLs in tests 2022-06-13 20:19:01 +02:00
Federico Builes 571f236610 Improved wording on license messages. 2022-06-13 20:08:16 +02:00
Federico Builes fe78920139 Document unwanted behavior for a future refactoring. 2022-06-13 20:04:39 +02:00
Federico BuilesandGitHub bd115a9b66 Merge pull request #108 from actions/dependabot/npm_and_yarn/types/node-17.0.42 
Bump @types/node from 17.0.40 to 17.0.42
 2022-06-13 11:36:18 +02:00
Federico Builes 21412fec7b fixing dist check 2022-06-09 10:46:00 +02:00
Federico Builes 0777fbe61e Updating dist. 2022-06-09 10:42:56 +02:00
Federico Builes cc22dcd654 Use undefined instead of null when dealing with lists. 2022-06-09 10:42:31 +02:00
Federico Builes 6b5518a9ed Adding more docs to licenses.ts 2022-06-09 10:33:05 +02:00
Federico Builes 20cca5c0c4 The default settings should not use []. 2022-06-08 18:28:10 +02:00
Federico Builes a51db20961 Use null for unspecified values when filtering licenses. 2022-06-08 18:21:28 +02:00
Federico Builes a7d02aef82 adding dist 2022-06-08 17:47:06 +02:00
Federico Builes 4ac3d318ab Refactoring on PR feedback. 2022-06-08 17:45:42 +02:00
Federico Builes 25271922eb Clarify variable names. 2022-06-08 15:53:14 +02:00
Federico Builes 4474253eb8 Merge branch 'main' into adding-lists 2022-06-07 06:23:53 +02:00
Federico BuilesandGitHub 1a7225bc91 Merge pull request #104 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.27.1 
Bump @typescript-eslint/parser from 5.27.0 to 5.27.1
 2022-06-07 06:20:33 +02:00
Federico BuilesandGitHub 4ebaca3419 Merge pull request #105 from actions/dependabot/npm_and_yarn/yaml-2.1.1 
Bump yaml from 2.1.0 to 2.1.1
 2022-06-07 06:20:17 +02:00
Federico Builes a96d28f120 Remove configuration docs until we have a proper release. 2022-06-07 06:19:22 +02:00
Federico BuilesandGitHub c187f6f12d Merge pull request #103 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.27.1 
Bump @typescript-eslint/eslint-plugin from 5.27.0 to 5.27.1
 2022-06-07 06:15:32 +02:00
Federico Builes 56e63b1bc5 adding dist 2022-06-06 20:32:46 +02:00
Federico Builes 2ae9a2d51b Add logic for denied licenses. 2022-06-06 20:32:46 +02:00
Federico Builes 1261e18905 Clarify license tests. 2022-06-06 20:32:46 +02:00
Federico Builes dc7b0a2788 Show an error when disallowed dependencies show up. 2022-06-06 20:32:46 +02:00