Commit Graph
180 Commits
Author SHA1 Message Date
dependabot[bot]andConor Sloan abf929b7e4 Bump super-linter/super-linter from 5 to 6
Bumps [super-linter/super-linter](https://github.com/super-linter/super-linter) from 5 to 6.
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](https://github.com/super-linter/super-linter/compare/v5...v6)

---
updated-dependencies:
- dependency-name: super-linter/super-linter
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-10 11:24:48 +01:00
Conor SloanandGitHub b8bd8fe389 Merge pull request #158 from actions/conorsloan/send-auth-to-ghcr-lookup-endpoint
Send auth token to fetch container registry URL API endpoint
2024-08-09 15:45:58 +01:00
Conor Sloan ffcb1087c4 send auth token to get container registry url endpoint 2024-08-09 14:49:07 +01:00
Conor SloanandGitHub f7d49cfdd1 Merge pull request #157 from actions/conorsloan/dump-response-body-on-unexpected-ghcr-response
Include information from GHCR response bodies in error reporting
2024-08-08 16:48:54 +01:00
Conor Sloan bebbbc6eee parse GHCR error format for errors 2024-08-08 14:07:54 +01:00
Conor Sloan 2bbf08d922 print response body when an http request to ghcr returns unexpected status 2024-08-08 11:45:25 +01:00
Conor SloanandGitHub 2bc8c192b1 Merge pull request #156 from actions/conorsloan/attest-before-publish
Generate provenance attestation before performing upload to ghcr
2024-08-07 21:48:38 +01:00
Conor Sloan c1f237b012 Generate provenance attestation before performing upload to ghcr
This allows us to check in the backend that a valid attestation exists for a package version before we allow the upload to succeed.
In doing this, we can perform an integrity check that the attestation is valid and all action packages have valid attestations.
2024-08-07 17:13:39 +01:00
Sneha KripanandanandGitHub 8215ec2f64 Merge pull request #154 from actions/dependabot/npm_and_yarn/types/jest-29.5.12
Bump @types/jest from 29.5.11 to 29.5.12
2024-08-06 09:39:03 -04:00
dependabot[bot]andGitHub 5de4baf048 Bump @types/jest from 29.5.11 to 29.5.12
Bumps [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) from 29.5.11 to 29.5.12.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-05 22:25:35 +00:00
Sneha KripanandanandGitHub 9c2a630347 Merge pull request #152 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-28.6.0
Bump eslint-plugin-jest from 27.6.3 to 28.6.0
2024-08-05 15:16:15 -04:00
dependabot[bot]andGitHub 8e9002fe5a Bump eslint-plugin-jest from 27.6.3 to 28.6.0
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 27.6.3 to 28.6.0.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v27.6.3...v28.6.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-01 22:17:15 +00:00
Sneha KripanandanandGitHub e2e9fea210 Merge pull request #150 from actions/dependabot/npm_and_yarn/eslint-plugin-prettier-5.2.1
Bump eslint-plugin-prettier from 5.1.3 to 5.2.1
2024-08-01 09:07:01 -04:00
dependabot[bot]andGitHub b757396339 Bump eslint-plugin-prettier from 5.1.3 to 5.2.1
Bumps [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) from 5.1.3 to 5.2.1.
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-plugin-prettier/compare/v5.1.3...v5.2.1)

---
updated-dependencies:
- dependency-name: eslint-plugin-prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-01 12:59:46 +00:00
Sneha KripanandanandGitHub ef67e6d74f Merge pull request #149 from actions/dependabot/npm_and_yarn/prettier-3.3.3
Bump prettier from 3.2.4 to 3.3.3
2024-08-01 08:58:29 -04:00
dependabot[bot]andGitHub cd067bec7f Bump prettier from 3.2.4 to 3.3.3
Bumps [prettier](https://github.com/prettier/prettier) from 3.2.4 to 3.3.3.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.2.4...3.3.3)

---
updated-dependencies:
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-31 22:23:15 +00:00
Sneha KripanandanandGitHub 36524bea42 Merge pull request #87 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.21.0
Bump @typescript-eslint/parser from 6.19.0 to 6.21.0
2024-07-31 13:55:44 -04:00
Sneha KripanandanandGitHub d623812b29 Merge branch 'main' into dependabot/npm_and_yarn/typescript-eslint/parser-6.21.0 2024-07-31 13:50:29 -04:00
Sneha KripanandanandGitHub 1354f92349 Merge pull request #147 from actions/dependabot/npm_and_yarn/ts-jest-29.2.3
Bump ts-jest from 29.1.1 to 29.2.3
2024-07-31 13:45:56 -04:00
dependabot[bot]andGitHub 23baf08c4c Bump ts-jest from 29.1.1 to 29.2.3
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.1.1 to 29.2.3.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.1...v29.2.3)

---
updated-dependencies:
- dependency-name: ts-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-31 17:09:35 +00:00
Sneha KripanandanandGitHub 7fee9b1717 Merge pull request #146 from actions/dependabot/npm_and_yarn/types/node-22.0.0
Bump @types/node from 20.11.13 to 22.0.0
2024-07-31 13:08:10 -04:00
dependabot[bot]andGitHub 6f395ba687 Bump @types/node from 20.11.13 to 22.0.0
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.11.13 to 22.0.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-31 17:02:46 +00:00
Sneha KripanandanandGitHub e7734cb142 Merge pull request #145 from actions/dependabot/npm_and_yarn/braces-3.0.3
Bump braces from 3.0.2 to 3.0.3
2024-07-31 13:01:30 -04:00
dependabot[bot]andGitHub d669870b09 Bump braces from 3.0.2 to 3.0.3
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-31 16:50:48 +00:00
Sneha KripanandanandGitHub 81207d4b2c Merge pull request #117 from actions/dependabot/npm_and_yarn/follow-redirects-1.15.6
Bump follow-redirects from 1.15.3 to 1.15.6
2024-07-31 12:49:22 -04:00
dependabot[bot]andGitHub 011940d503 Bump follow-redirects from 1.15.3 to 1.15.6
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.3 to 1.15.6.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.3...v1.15.6)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-31 16:29:22 +00:00
Sneha KripanandanandGitHub 5d5043a13c Merge pull request #97 from actions/dependabot/npm_and_yarn/eslint-8.57.0
Bump eslint from 8.54.0 to 8.57.0
2024-07-31 12:26:52 -04:00
dependabot[bot]andGitHub 37578f447e Bump eslint from 8.54.0 to 8.57.0
Bumps [eslint](https://github.com/eslint/eslint) from 8.54.0 to 8.57.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.54.0...v8.57.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-31 16:12:09 +00:00
Sneha KripanandanandGitHub b7462ded63 Merge branch 'main' into dependabot/npm_and_yarn/typescript-eslint/parser-6.21.0 2024-07-31 11:59:15 -04:00
Sneha KripanandanandGitHub de2db00ca6 Merge pull request #92 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.21.0
Bump @typescript-eslint/eslint-plugin from 6.20.0 to 6.21.0
2024-07-31 11:57:51 -04:00
dependabot[bot]andConor Sloan 1660fcacaa Bump @typescript-eslint/eslint-plugin from 6.20.0 to 6.21.0
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 6.20.0 to 6.21.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.21.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-07-31 16:50:25 +01:00
Conor SloanandGitHub cf36a13357 Merge pull request #144 from actions/conorsloan/minor-readme-update
Update README.md
2024-07-30 17:56:27 +01:00
Conor SloanandGitHub d0e1c8dd23 Update README.md 2024-07-30 17:48:02 +01:00
Conor SloanandGitHub a67b4b908a Merge pull request #143 from actions/conorsloan/add-readme-disclaimer
add disclaimer to readme
2024-07-30 17:39:05 +01:00
Conor SloanandGitHub 3a114e3b75 Update README.md 2024-07-30 17:25:31 +01:00
Conor SloanandGitHub 287eff5a0a Update README.md 2024-07-30 17:20:03 +01:00
Conor SloanandGitHub b54ac768df Update README.md 2024-07-30 17:12:06 +01:00
Conor SloanandGitHub 9bd8f2e9c0 Update README.md 2024-07-30 17:03:18 +01:00
Conor SloanandGitHub bc99e92f1f Update README.md 2024-07-30 16:56:30 +01:00
Conor SloanandGitHub 638fb07f1a Update README.md 2024-07-30 16:48:33 +01:00
Conor SloanandGitHub 58addcb0cc Update README.md 2024-07-30 16:36:28 +01:00
Conor Sloan 5c92b3920b add disclaimer 2024-07-30 15:33:26 +01:00
Conor SloanandGitHub d627a3342b Merge pull request #115 from immutable-actions/conorsloan/attestation-finishing-touches
Attestation finishing touches for staffship
2024-04-15 16:55:51 +01:00
Conor Sloan 3d3a333728 remove async in parser 2024-04-15 16:11:50 +01:00
Conor Sloan 18cf56a126 move checking of git checkout out of parse logic 2024-04-15 15:43:26 +01:00
Conor Sloan 881fd1c540 fix fs helper git test 2024-04-15 14:03:10 +01:00
Conor Sloan 17c0582657 check github_ref tag and sha are checked out on parse 2024-04-15 13:45:54 +01:00
Conor Sloan 507635d01b only write attestation for non-private repos 2024-04-15 12:26:26 +01:00
Conor Sloan 6dc0f68595 get visibility when grabbing repo information 2024-04-15 12:03:02 +01:00
Conor SloanandGitHub 96609b599a Merge pull request #110 from immutable-actions/add-with-to-self-publish
Update release.yml
2024-04-09 21:32:29 +01:00