upgrade micromatch within given dependent parent pkg bounds but past security vuln

Merge pull request #815 from actions/dependabot/npm_and_yarn/types/node-20.16.0
Bump @types/node from 20.11.28 to 20.16.0
2024-09-16 09:53:44 -07:00 · 2024-08-19 10:31:48 -07:00 · 2024-08-19 01:33:46 +00:00 · 2024-07-12 16:13:55 -05:00 · 2024-07-12 16:11:24 -05:00 · 2024-07-12 15:58:13 -05:00
2 changed files with 13 additions and 12 deletions
@@ -16,7 +16,7 @@ If you've encountered a problem, please let us know by [submitting an issue](htt

 ## Enhancements and feature requests

-If you've got an idea for a new feature, please submit as [an issue](https://github.com/actions/dependency-review-action/issues/new) so that the community can see it, and we can discuss it there. We may not be able to respond to every single issue, but will make a best effort!
+If you've got an idea for a new feature or a significant change to the code or its dependencies, please submit as [an issue](https://github.com/actions/dependency-review-action/issues/new) so that the community can see it, and we can discuss it there. We may not be able to respond to every single issue, but will make a best effort!

 If you'd like to make a contribution yourself, we ask that before significant effort is put into code changes, that we have agreement that the change aligns with our strategy for the action. Since this is a verified Action owned by GitHub we want to make sure that contributions are high quality, and that they maintain consistency with the rest of the action's behavior.

@@ -2105,11 +2105,11 @@
      }
    },
    "node_modules/@types/node": {
-      "version": "20.11.28",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-20.11.28.tgz",
-      "integrity": "sha512-M/GPWVS2wLkSkNHVeLkrF2fD5Lx5UC4PxA0uZcKc6QqbIQUJyW1jVjueJYi1z8n0I5PxYrtpnPnWglE+y9A0KA==",
+      "version": "20.16.0",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-20.16.0.tgz",
+      "integrity": "sha512-vDxceJcoZhIVh67S568bm1UGZO0DX0hpplJZxzeXMKwIPLn190ec5RRxQ69BKhX44SUGIxxgMdDY557lGLKprQ==",
      "dependencies": {
-        "undici-types": "~5.26.4"
+        "undici-types": "~6.19.2"
      }
    },
    "node_modules/@types/semver": {
@@ -6341,11 +6341,12 @@
      }
    },
    "node_modules/micromatch": {
-      "version": "4.0.5",
-      "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.5.tgz",
-      "integrity": "sha512-DMy+ERcEW2q8Z2Po+WNXuw3c5YaUSFjAO5GsJqfEl7UjvtIuFKO6ZrKvcItdy98dwFI2N1tg3zNIdKaQT+aNdA==",
+      "version": "4.0.8",
+      "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz",
+      "integrity": "sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==",
+      "license": "MIT",
      "dependencies": {
-        "braces": "^3.0.2",
+        "braces": "^3.0.3",
        "picomatch": "^2.3.1"
      },
      "engines": {
@@ -7913,9 +7914,9 @@
      }
    },
    "node_modules/undici-types": {
-      "version": "5.26.5",
-      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-5.26.5.tgz",
-      "integrity": "sha512-JlCMO+ehdEIKqlFxk6IfVoAUVmgz7cU7zD/h9XZ0qzeosSHmUJVOzSQvvYSYWXkFXC+IfLKSIffhv0sVZup6pA=="
+      "version": "6.19.6",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.19.6.tgz",
+      "integrity": "sha512-e/vggGopEfTKSvj4ihnOLTsqhrKRN3LeO6qSN/GxohhuRv8qH9bNQ4B8W7e/vFL+0XTnmHPB4/kegunZGA4Org=="
    },
    "node_modules/universal-github-app-jwt": {
      "version": "1.1.2",
Author	SHA1	Message	Date
Eli Reisman	8179e6abd6	upgrade micromatch within given dependent parent pkg bounds but past security vuln	2024-09-16 09:53:44 -07:00
Eli Reisman	526b7f2f9b	Merge pull request #815 from actions/dependabot/npm_and_yarn/types/node-20.16.0 Bump @types/node from 20.11.28 to 20.16.0	2024-08-19 10:31:48 -07:00
dependabot[bot]	e5cb30f678	Bump @types/node from 20.11.28 to 20.16.0 Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.11.28 to 20.16.0. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>	2024-08-19 01:33:46 +00:00
Jon Janego	90820aba8c	Merge pull request #793 from actions/jonjanego-patch-1 Update CONTRIBUTING.md	2024-07-12 16:13:55 -05:00
Jon Janego	7367319600	Merge pull request #794 from actions/jonjanego-patch-2 Create pull_request_template.md	2024-07-12 16:11:24 -05:00
Jon Janego	07d3c7257a	Update CONTRIBUTING.md minor wording	2024-07-12 15:58:13 -05:00