dependabot[bot] and Conor Sloan
abf929b7e4
Bump super-linter/super-linter from 5 to 6
...
Bumps [super-linter/super-linter](https://github.com/super-linter/super-linter ) from 5 to 6.
- [Release notes](https://github.com/super-linter/super-linter/releases )
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md )
- [Commits](https://github.com/super-linter/super-linter/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: super-linter/super-linter
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-10 11:24:48 +01:00
Conor Sloan and GitHub
b8bd8fe389
Merge pull request #158 from actions/conorsloan/send-auth-to-ghcr-lookup-endpoint
...
Send auth token to fetch container registry URL API endpoint
2024-08-09 15:45:58 +01:00
Conor Sloan
ffcb1087c4
send auth token to get container registry url endpoint
2024-08-09 14:49:07 +01:00
Conor Sloan and GitHub
f7d49cfdd1
Merge pull request #157 from actions/conorsloan/dump-response-body-on-unexpected-ghcr-response
...
Include information from GHCR response bodies in error reporting
2024-08-08 16:48:54 +01:00
Conor Sloan
bebbbc6eee
parse GHCR error format for errors
2024-08-08 14:07:54 +01:00
Conor Sloan
2bbf08d922
print response body when an http request to ghcr returns unexpected status
2024-08-08 11:45:25 +01:00
Conor Sloan and GitHub
2bc8c192b1
Merge pull request #156 from actions/conorsloan/attest-before-publish
...
Generate provenance attestation before performing upload to ghcr
2024-08-07 21:48:38 +01:00
Conor Sloan
c1f237b012
Generate provenance attestation before performing upload to ghcr
...
This allows us to check in the backend that a valid attestation exists for a package version before we allow the upload to succeed.
In doing this, we can perform an integrity check that the attestation is valid and all action packages have valid attestations.
2024-08-07 17:13:39 +01:00
Sneha Kripanandan and GitHub
8215ec2f64
Merge pull request #154 from actions/dependabot/npm_and_yarn/types/jest-29.5.12
...
Bump @types/jest from 29.5.11 to 29.5.12
2024-08-06 09:39:03 -04:00
dependabot[bot] and GitHub
5de4baf048
Bump @types/jest from 29.5.11 to 29.5.12
...
Bumps [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest ) from 29.5.11 to 29.5.12.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest )
---
updated-dependencies:
- dependency-name: "@types/jest"
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-05 22:25:35 +00:00
Sneha Kripanandan and GitHub
9c2a630347
Merge pull request #152 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-28.6.0
...
Bump eslint-plugin-jest from 27.6.3 to 28.6.0
2024-08-05 15:16:15 -04:00
dependabot[bot] and GitHub
8e9002fe5a
Bump eslint-plugin-jest from 27.6.3 to 28.6.0
...
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest ) from 27.6.3 to 28.6.0.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases )
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v27.6.3...v28.6.0 )
---
updated-dependencies:
- dependency-name: eslint-plugin-jest
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-01 22:17:15 +00:00
Sneha Kripanandan and GitHub
e2e9fea210
Merge pull request #150 from actions/dependabot/npm_and_yarn/eslint-plugin-prettier-5.2.1
...
Bump eslint-plugin-prettier from 5.1.3 to 5.2.1
2024-08-01 09:07:01 -04:00
dependabot[bot] and GitHub
b757396339
Bump eslint-plugin-prettier from 5.1.3 to 5.2.1
...
Bumps [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier ) from 5.1.3 to 5.2.1.
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases )
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/master/CHANGELOG.md )
- [Commits](https://github.com/prettier/eslint-plugin-prettier/compare/v5.1.3...v5.2.1 )
---
updated-dependencies:
- dependency-name: eslint-plugin-prettier
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-08-01 12:59:46 +00:00
Sneha Kripanandan and GitHub
ef67e6d74f
Merge pull request #149 from actions/dependabot/npm_and_yarn/prettier-3.3.3
...
Bump prettier from 3.2.4 to 3.3.3
2024-08-01 08:58:29 -04:00
dependabot[bot] and GitHub
cd067bec7f
Bump prettier from 3.2.4 to 3.3.3
...
Bumps [prettier](https://github.com/prettier/prettier ) from 3.2.4 to 3.3.3.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.2.4...3.3.3 )
---
updated-dependencies:
- dependency-name: prettier
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-31 22:23:15 +00:00
Sneha Kripanandan and GitHub
36524bea42
Merge pull request #87 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-6.21.0
...
Bump @typescript-eslint/parser from 6.19.0 to 6.21.0
2024-07-31 13:55:44 -04:00
Sneha Kripanandan and GitHub
d623812b29
Merge branch 'main' into dependabot/npm_and_yarn/typescript-eslint/parser-6.21.0
2024-07-31 13:50:29 -04:00
Sneha Kripanandan and GitHub
1354f92349
Merge pull request #147 from actions/dependabot/npm_and_yarn/ts-jest-29.2.3
...
Bump ts-jest from 29.1.1 to 29.2.3
2024-07-31 13:45:56 -04:00
dependabot[bot] and GitHub
23baf08c4c
Bump ts-jest from 29.1.1 to 29.2.3
...
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest ) from 29.1.1 to 29.2.3.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases )
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.1...v29.2.3 )
---
updated-dependencies:
- dependency-name: ts-jest
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-31 17:09:35 +00:00
Sneha Kripanandan and GitHub
7fee9b1717
Merge pull request #146 from actions/dependabot/npm_and_yarn/types/node-22.0.0
...
Bump @types/node from 20.11.13 to 22.0.0
2024-07-31 13:08:10 -04:00
dependabot[bot] and GitHub
6f395ba687
Bump @types/node from 20.11.13 to 22.0.0
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 20.11.13 to 22.0.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-31 17:02:46 +00:00
Sneha Kripanandan and GitHub
e7734cb142
Merge pull request #145 from actions/dependabot/npm_and_yarn/braces-3.0.3
...
Bump braces from 3.0.2 to 3.0.3
2024-07-31 13:01:30 -04:00
dependabot[bot] and GitHub
d669870b09
Bump braces from 3.0.2 to 3.0.3
...
Bumps [braces](https://github.com/micromatch/braces ) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3 )
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-31 16:50:48 +00:00
Sneha Kripanandan and GitHub
81207d4b2c
Merge pull request #117 from actions/dependabot/npm_and_yarn/follow-redirects-1.15.6
...
Bump follow-redirects from 1.15.3 to 1.15.6
2024-07-31 12:49:22 -04:00
dependabot[bot] and GitHub
011940d503
Bump follow-redirects from 1.15.3 to 1.15.6
...
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects ) from 1.15.3 to 1.15.6.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases )
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.3...v1.15.6 )
---
updated-dependencies:
- dependency-name: follow-redirects
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-31 16:29:22 +00:00
Sneha Kripanandan and GitHub
5d5043a13c
Merge pull request #97 from actions/dependabot/npm_and_yarn/eslint-8.57.0
...
Bump eslint from 8.54.0 to 8.57.0
2024-07-31 12:26:52 -04:00
dependabot[bot] and GitHub
37578f447e
Bump eslint from 8.54.0 to 8.57.0
...
Bumps [eslint](https://github.com/eslint/eslint ) from 8.54.0 to 8.57.0.
- [Release notes](https://github.com/eslint/eslint/releases )
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md )
- [Commits](https://github.com/eslint/eslint/compare/v8.54.0...v8.57.0 )
---
updated-dependencies:
- dependency-name: eslint
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-31 16:12:09 +00:00
Sneha Kripanandan and GitHub
b7462ded63
Merge branch 'main' into dependabot/npm_and_yarn/typescript-eslint/parser-6.21.0
2024-07-31 11:59:15 -04:00
Sneha Kripanandan and GitHub
de2db00ca6
Merge pull request #92 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-6.21.0
...
Bump @typescript-eslint/eslint-plugin from 6.20.0 to 6.21.0
2024-07-31 11:57:51 -04:00
dependabot[bot] and Conor Sloan
1660fcacaa
Bump @typescript-eslint/eslint-plugin from 6.20.0 to 6.21.0
...
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin ) from 6.20.0 to 6.21.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.21.0/packages/eslint-plugin )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-31 16:50:25 +01:00
Conor Sloan and GitHub
cf36a13357
Merge pull request #144 from actions/conorsloan/minor-readme-update
...
Update README.md
2024-07-30 17:56:27 +01:00
Conor Sloan and GitHub
d0e1c8dd23
Update README.md
2024-07-30 17:48:02 +01:00
Conor Sloan and GitHub
a67b4b908a
Merge pull request #143 from actions/conorsloan/add-readme-disclaimer
...
add disclaimer to readme
2024-07-30 17:39:05 +01:00
Conor Sloan and GitHub
3a114e3b75
Update README.md
2024-07-30 17:25:31 +01:00
Conor Sloan and GitHub
287eff5a0a
Update README.md
2024-07-30 17:20:03 +01:00
Conor Sloan and GitHub
b54ac768df
Update README.md
2024-07-30 17:12:06 +01:00
Conor Sloan and GitHub
9bd8f2e9c0
Update README.md
2024-07-30 17:03:18 +01:00
Conor Sloan and GitHub
bc99e92f1f
Update README.md
2024-07-30 16:56:30 +01:00
Conor Sloan and GitHub
638fb07f1a
Update README.md
2024-07-30 16:48:33 +01:00
Conor Sloan and GitHub
58addcb0cc
Update README.md
2024-07-30 16:36:28 +01:00
Conor Sloan
5c92b3920b
add disclaimer
2024-07-30 15:33:26 +01:00
Conor Sloan and GitHub
d627a3342b
Merge pull request #115 from immutable-actions/conorsloan/attestation-finishing-touches
...
Attestation finishing touches for staffship
2024-04-15 16:55:51 +01:00
Conor Sloan
3d3a333728
remove async in parser
2024-04-15 16:11:50 +01:00
Conor Sloan
18cf56a126
move checking of git checkout out of parse logic
2024-04-15 15:43:26 +01:00
Conor Sloan
881fd1c540
fix fs helper git test
2024-04-15 14:03:10 +01:00
Conor Sloan
17c0582657
check github_ref tag and sha are checked out on parse
2024-04-15 13:45:54 +01:00
Conor Sloan
507635d01b
only write attestation for non-private repos
2024-04-15 12:26:26 +01:00
Conor Sloan
6dc0f68595
get visibility when grabbing repo information
2024-04-15 12:03:02 +01:00
Conor Sloan and GitHub
96609b599a
Merge pull request #110 from immutable-actions/add-with-to-self-publish
...
Update release.yml
2024-04-09 21:32:29 +01:00