actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity
1,485 Commits 90 Branches 61 Tags
f419e37c19fcb9f0cac9d97b2bc30681614d009d
Commit Graph
1485 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot]andGitHub 0043ed5ccb Bump prettier from 3.2.4 to 3.2.5 
Bumps [prettier](https://github.com/prettier/prettier) from 3.2.4 to 3.2.5.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.2.4...3.2.5)

---
updated-dependencies:
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-02-05 01:24:36 +00:00
dependabot[bot]andGitHub 52933765bf Bump @types/jest from 29.5.11 to 29.5.12 
Bumps [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) from 29.5.11 to 29.5.12.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: "@types/jest"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-02-05 01:24:18 +00:00
dependabot[bot]andGitHub 6a6f26102b Bump @typescript-eslint/parser from 6.18.1 to 6.20.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 6.18.1 to 6.20.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.20.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-02-05 01:24:11 +00:00
tgrall 8f3df4d674 fix ci failure on format-check 2024-02-02 06:09:20 +01:00
tgrall 98e8293881 Update Readme and action.yml based on review comments 2024-02-01 06:03:53 +01:00
Justin HolguínandGitHub 748888b3fd Merge pull request #665 from actions/dependabot/npm_and_yarn/prettier-3.2.4 
Bump prettier from 3.1.1 to 3.2.4
 2024-01-31 14:19:36 -08:00
Justin HolguínandGitHub 4dffb75625 Run prettier --write 2024-01-31 22:09:37 +00:00
Justin HolguínandGitHub 9e50351924 Merge pull request #678 from actions/juxtin/codeql-ignore-dist 
Use manual codeql config
 2024-01-31 13:49:51 -08:00
Justin HolguínandGitHub 0812876f7c Update codeql.yml 2024-01-31 13:44:54 -08:00
Justin HolguínandGitHub 4f37a60d4f Create codeql.yml 2024-01-31 13:36:31 -08:00
dependabot[bot]andGitHub c0518321c3 Bump prettier from 3.1.1 to 3.2.4 
Bumps [prettier](https://github.com/prettier/prettier) from 3.1.1 to 3.2.4.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.1.1...3.2.4)

---
updated-dependencies:
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-31 18:57:22 +00:00
Justin HolguínandGitHub 0229309241 Merge pull request #673 from actions/dependabot/npm_and_yarn/nodemon-3.0.3 
Bump nodemon from 3.0.2 to 3.0.3
 2024-01-31 10:56:20 -08:00
Jon JanegoandGitHub c664fc5964 Update examples.md 
spelling
 2024-01-31 12:43:08 -06:00
Federico BuilesandGitHub a7da313c35 Merge pull request #675 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.19.1 
Bump @typescript-eslint/eslint-plugin from 6.18.1 to 6.19.1
 2024-01-29 07:50:12 +01:00
Federico BuilesandGitHub 8953f45584 Merge pull request #674 from actions/dependabot/npm_and_yarn/types/node-20.11.10 
Bump @types/node from 20.11.5 to 20.11.10
 2024-01-29 07:49:59 +01:00
dependabot[bot]andGitHub d93026fc89 Bump @typescript-eslint/eslint-plugin from 6.18.1 to 6.19.1 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 6.18.1 to 6.19.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.19.1/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-29 01:35:06 +00:00
dependabot[bot]andGitHub 5a2ac62566 Bump @types/node from 20.11.5 to 20.11.10 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.11.5 to 20.11.10.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-29 01:34:51 +00:00
dependabot[bot]andGitHub 0f007f69b1 Bump nodemon from 3.0.2 to 3.0.3 
Bumps [nodemon](https://github.com/remy/nodemon) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/remy/nodemon/releases)
- [Commits](https://github.com/remy/nodemon/compare/v3.0.2...v3.0.3)

---
updated-dependencies:
- dependency-name: nodemon
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-29 01:34:40 +00:00
tgrall 05d861260a finalize testing 2024-01-28 15:54:59 +01:00
tgrall 2c526853b4 new debug test 2024-01-28 15:51:39 +01:00
tgrall 9e251a5913 dist 2024-01-28 15:00:36 +01:00
tgrall ee5bd475ba debug behavior 2024-01-28 14:59:04 +01:00
tgrall b0a705da21 Fix license printing bug in main.ts 2024-01-28 14:54:28 +01:00
tgrall 0bab6ffc2c Fix vulnerability check to print warnings instead 
of failing
 2024-01-28 14:54:14 +01:00
tgrall f91404ca86 set status to low when warn-only is set to true 2024-01-28 14:35:44 +01:00
tgrall d6f324d18a fix typo in readme 2024-01-28 14:24:12 +01:00
tgrall f1576849e6 package the action 2024-01-28 10:58:10 +01:00
tgrall fc49851780 merge from main and fix code review comment from @juxtin 2024-01-28 10:16:07 +01:00
Jon JanegoandGitHub d53388efe8 Merge pull request #671 from jonjanego/main 
Create stale.yaml
 2024-01-26 10:09:43 -06:00
Jon JanegoandGitHub 56991330a3 Update stale.yaml 
assigning explicit permissions
 2024-01-26 09:15:48 -06:00
Jon JanegoandGitHub a824acd5d7 Create stale.yaml 2024-01-25 13:49:10 -06:00
Federico Builes 935098a950 updating @types/node to Node 20 2024-01-22 07:54:40 +01:00
Federico BuilesandGitHub b658b91622 Merge pull request #669 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.6.3 
Bump eslint-plugin-jest from 27.6.0 to 27.6.3
 2024-01-22 07:40:35 +01:00
dependabot[bot]andGitHub d16453ab26 Bump eslint-plugin-jest from 27.6.0 to 27.6.3 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 27.6.0 to 27.6.3.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v27.6.0...v27.6.3)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-22 06:38:10 +00:00
Federico BuilesandGitHub 0381eac2bc Merge pull request #667 from actions/dependabot/npm_and_yarn/eslint-plugin-prettier-5.1.3 
Bump eslint-plugin-prettier from 5.1.2 to 5.1.3
 2024-01-22 07:36:52 +01:00
dependabot[bot]andGitHub 1967b21a03 Bump eslint-plugin-prettier from 5.1.2 to 5.1.3 
Bumps [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) from 5.1.2 to 5.1.3.
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-plugin-prettier/compare/v5.1.2...v5.1.3)

---
updated-dependencies:
- dependency-name: eslint-plugin-prettier
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-22 01:15:42 +00:00
Federico Builes 4cd9eb2d23 Updating docs to point to v4. 2024-01-18 14:23:52 +01:00
Federico Builes 4901385134 bump to 4.0.0 v4.0.0 2024-01-18 13:57:38 +01:00
Federico BuilesandGitHub dbf82a4a5e Merge pull request #639 from takost/takost/update-to-node-20 
Update action to node20
 2024-01-18 13:52:05 +01:00
Federico BuilesandGitHub 78aeb2a948 Merge pull request #663 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.18.1 
Bump @typescript-eslint/parser from 6.18.0 to 6.18.1
 2024-01-15 06:39:13 +01:00
dependabot[bot]andGitHub 4e510006f5 Bump @typescript-eslint/parser from 6.18.0 to 6.18.1 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 6.18.0 to 6.18.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.18.1/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-15 05:38:23 +00:00
Federico BuilesandGitHub 9560737c5e Merge pull request #661 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.18.1 
Bump @typescript-eslint/eslint-plugin from 6.18.0 to 6.18.1
 2024-01-15 06:37:15 +01:00
Federico BuilesandGitHub 4125f47f7e Merge pull request #660 from actions/dependabot/npm_and_yarn/types/node-16.18.70 
Bump @types/node from 16.18.62 to 16.18.70
 2024-01-15 06:37:05 +01:00
dependabot[bot]andGitHub 07cc93e0c8 Bump @typescript-eslint/eslint-plugin from 6.18.0 to 6.18.1 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 6.18.0 to 6.18.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.18.1/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-15 01:21:13 +00:00
dependabot[bot]andGitHub e2c203b8b7 Bump @types/node from 16.18.62 to 16.18.70 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.18.62 to 16.18.70.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-15 01:20:53 +00:00
Federico BuilesandGitHub f0b304d0bc Merge pull request #653 from actions/dependabot/npm_and_yarn/got-14.0.0 
Bump got from 13.0.0 to 14.0.0
 2024-01-09 13:24:33 +01:00
Federico BuilesandGitHub e41543eaf0 Merge pull request #656 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.18.0 
Bump @typescript-eslint/parser from 6.16.0 to 6.18.0
 2024-01-08 11:50:44 +01:00
dependabot[bot]andGitHub 8ded6194d1 Bump @typescript-eslint/parser from 6.16.0 to 6.18.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 6.16.0 to 6.18.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.18.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
 2024-01-08 10:46:03 +00:00
Federico BuilesandGitHub b5f60d5e37 Merge pull request #657 from actions/dependabot/npm_and_yarn/typescript-5.3.3 
Bump typescript from 5.3.2 to 5.3.3
 2024-01-08 11:45:16 +01:00
Federico BuilesandGitHub 45fc3f5adc Merge pull request #655 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.18.0 
Bump @typescript-eslint/eslint-plugin from 6.15.0 to 6.18.0
 2024-01-08 11:44:58 +01:00