actions/component-detection-dependency-submission-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
196 Commits 1 Branch 0 Tags
61b2daa67fa1466435af473a8ddf7b2c2c438704
Commit Graph

196 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Justin Hutchings
61b2daa67f Rebuild dist 2024-08-26 22:49:31 +00:00
Justin Hutchings
9b4a8182c2 Change octokit from Actions specific one to generic one 2024-08-26 22:49:12 +00:00
Justin Hutchings
0f2d542cef Rebuild dist 2024-08-26 22:45:02 +00:00
Justin Hutchings
9ff0000670 Add debugging 2024-08-26 22:39:44 +00:00
Justin Hutchings
01216ee138 Add debugging 2024-08-26 22:35:19 +00:00
Justin Hutchings
a0e040ff7b Tweak GHES fix to make it off by default 2024-08-26 21:30:17 +00:00
Justin Hutchings
a0a4b55d4d Tweak GHES fix 2024-08-26 21:28:19 +00:00
Justin Hutchings
8511b070f0 Create fix for Add GitHub Enterprise Server support #42 2024-08-26 21:24:18 +00:00
Justin Hutchings
7303e5e522 Merge pull request #43 from advanced-security/dependabot/npm_and_yarn/test/npm_and_yarn-49b2ef70b2 
Bump the npm_and_yarn group across 1 directory with 4 updates
 2024-05-08 07:07:45 +10:00
Justin Hutchings
63a8d8de1e Merge pull request #44 from advanced-security/dependabot/npm_and_yarn/npm_and_yarn-49b2ef70b2 
Bump the npm_and_yarn group with 4 updates
 2024-05-08 07:06:27 +10:00
dependabot[bot]
d8d3455ed6 Bump the npm_and_yarn group with 4 updates 
Bumps the npm_and_yarn group with 4 updates: [tar](https://github.com/isaacs/node-tar), [yaml](https://github.com/eemeli/yaml), [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) and [undici](https://github.com/nodejs/undici).


Updates `tar` from 6.1.13 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v6.1.13...v6.2.1)

Updates `yaml` from 2.2.1 to 2.2.2
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.2.1...v2.2.2)

Updates `@babel/traverse` from 7.20.5 to 7.24.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.24.5/packages/babel-traverse)

Updates `undici` from 5.21.0 to 5.28.4
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.21.0...v5.28.4)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: yaml
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-07 20:32:29 +00:00
dependabot[bot]
2e5dd5d452 Bump the npm_and_yarn group across 1 directory with 4 updates 
Bumps the npm_and_yarn group with 4 updates in the /test directory: [tar](https://github.com/isaacs/node-tar), [yaml](https://github.com/eemeli/yaml), [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) and [undici](https://github.com/nodejs/undici).


Updates `tar` from 6.1.13 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v6.1.13...v6.2.1)

Updates `yaml` from 2.2.1 to 2.2.2
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.2.1...v2.2.2)

Updates `@babel/traverse` from 7.20.5 to 7.24.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.24.5/packages/babel-traverse)

Updates `undici` from 5.10.0 to 5.28.4
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.10.0...v5.28.4)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: yaml
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-07 20:32:23 +00:00
Justin Hutchings
3ea8a853fc Merge pull request #39 from advanced-security/dependabot/github_actions/actions/setup-node-3.7.0 
Bump actions/setup-node from 3.6.0 to 3.7.0
 2024-05-08 06:30:55 +10:00
Justin Hutchings
d2ad702059 Add grouping, disable version updates for npm 2024-05-08 06:29:56 +10:00
Justin Hutchings
384d6ea0b6 Merge pull request #41 from advanced-security/dependabot/npm_and_yarn/eslint-8.46.0 
Bump eslint from 8.40.0 to 8.46.0
 2024-05-08 06:26:37 +10:00
dependabot[bot]
34535ba482 Bump eslint from 8.40.0 to 8.46.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.40.0 to 8.46.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.40.0...v8.46.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-31 13:26:37 +00:00
Lane Seppala
efe25be749 Merge pull request #23 from felickz/patch-1 
Readme to v0.0.2
 2023-07-18 11:40:42 -06:00
dependabot[bot]
e1ef448669 Bump actions/setup-node from 3.6.0 to 3.7.0 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3.6.0...v3.7.0)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-06 13:36:32 +00:00
Lane Seppala
d05bcf1b85 Merge pull request #14 from lseppala/lsep/purl-qualifiers 
Fix encoding of PURL qualifiers
 2023-06-02 10:51:37 -06:00
Lane Seppala
5961fd4755 Defensively guard against dangling ? from qualifiers 2023-06-02 16:07:51 +00:00
Lane Seppala
83edbc93dd Qualifiers are a map of string key-value pairs 2023-06-02 15:24:39 +00:00
Chad Bentz
2a225a4eaf Readme to v0.0.2 2023-05-12 14:48:18 -04:00
Lane Seppala
5a8ce4ad8c Merge pull request #15 from advanced-security/dependabot/npm_and_yarn/types/jest-29.5.1 
Bump @types/jest from 29.5.0 to 29.5.1
 2023-05-11 14:57:08 -06:00
dependabot[bot]
b8dd335ebd Bump @types/jest from 29.5.0 to 29.5.1 
Bumps [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) from 29.5.0 to 29.5.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-08 16:53:10 +00:00
Lane Seppala
08766c4e76 Merge pull request #22 from advanced-security/dependabot/npm_and_yarn/eslint-8.40.0 
Bump eslint from 8.38.0 to 8.40.0
 2023-05-08 10:52:35 -06:00
Lane Seppala
85c7fa27c0 Merge pull request #20 from felickz/main 
Add Windows support ( closes #19)
 2023-05-08 10:51:53 -06:00
Chad Bentz
9b5bb33c5e run prepare on non windows machine 2023-05-08 10:19:21 -04:00
dependabot[bot]
b0c43e3bfe Bump eslint from 8.38.0 to 8.40.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.38.0 to 8.40.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.38.0...v8.40.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-08 14:10:23 +00:00
Chad Bentz
cdeac4436f npm run prepare 2023-05-05 00:47:37 -04:00
Chad Bentz
eea402190d Merge pull request #1 from felickz/windows 
Windows
 2023-05-05 00:25:34 -04:00
Chad Bentz
8a403ce453 add debug logs 2023-05-05 00:21:28 -04:00
Chad Bentz
df3fb46172 set proper path to exe on win 2023-05-05 00:03:32 -04:00
Chad Bentz
6dc027ab22 Detect OS when installing 2023-05-04 22:57:27 -04:00
Justin Hutchings
aaade1b507 Remove unneeded devcontainer 2023-04-07 23:39:23 +00:00
Justin Hutchings
fcd8b671dc Merge pull request #8 from advanced-security/dependabot/npm_and_yarn/github/dependency-submission-toolkit-1.2.10 
Bump @github/dependency-submission-toolkit from 1.2.8 to 1.2.10
 2023-04-07 16:36:18 -07:00
Justin Hutchings
c1fc8be9d9 Merge pull request #12 from advanced-security/dependabot/npm_and_yarn/jest-and-types/jest-29.5.0 
Bump jest and @types/jest
 2023-04-07 16:34:27 -07:00
Justin Hutchings
2706f2e970 Rebuild dist 2023-04-07 23:33:46 +00:00
dependabot[bot]
993666f762 Bump jest and @types/jest 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) and [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest). These dependencies needed to be updated together.

Updates `jest` from 29.4.2 to 29.5.0
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.5.0/packages/jest)

Updates `@types/jest` from 29.4.0 to 29.5.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-07 23:32:14 +00:00
Justin Hutchings
ab80ace1b8 Merge pull request #4 from advanced-security/dependabot/npm_and_yarn/types/glob-8.1.0 
Bump @types/glob from 8.0.1 to 8.1.0
 2023-04-07 16:31:27 -07:00
dependabot[bot]
ae7e494eac Bump @github/dependency-submission-toolkit from 1.2.8 to 1.2.10 
Bumps [@github/dependency-submission-toolkit](https://github.com/github/dependency-submission-toolkit) from 1.2.8 to 1.2.10.
- [Release notes](https://github.com/github/dependency-submission-toolkit/releases)
- [Commits](https://github.com/github/dependency-submission-toolkit/compare/v1.2.8...v1.2.10)

---
updated-dependencies:
- dependency-name: "@github/dependency-submission-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-07 23:28:19 +00:00
dependabot[bot]
1c4b470cd1 Bump @types/glob from 8.0.1 to 8.1.0 
Bumps [@types/glob](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/glob) from 8.0.1 to 8.1.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/glob)

---
updated-dependencies:
- dependency-name: "@types/glob"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-07 23:28:11 +00:00
Justin Hutchings
8d1e4e5664 Merge pull request #13 from advanced-security/dependabot/npm_and_yarn/eslint-8.38.0 
Bump eslint from 8.34.0 to 8.38.0
 2023-04-07 16:27:36 -07:00
Justin Hutchings
8b5433ac68 Merge pull request #10 from advanced-security/dependabot/npm_and_yarn/ts-jest-29.1.0 
Bump ts-jest from 29.0.5 to 29.1.0
 2023-04-07 16:27:09 -07:00
dependabot[bot]
f8b002de02 Bump eslint from 8.34.0 to 8.38.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.34.0 to 8.38.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.34.0...v8.38.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-07 23:24:54 +00:00
dependabot[bot]
556b9b9daf Bump ts-jest from 29.0.5 to 29.1.0 
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.0.5 to 29.1.0.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.0.5...v29.1.0)

---
updated-dependencies:
- dependency-name: ts-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-07 23:23:50 +00:00
Justin Hutchings
3e1863157a Fix name 2023-04-07 16:22:20 -07:00
Justin Hutchings
bcaa41e34f Update docs for ownership change (#2) 
* Add files to prepare for ownership change

* Fix tests

* Update repo name

* Update dependencies

* Attempt to fix permissions issues blocking test

* Update permissions

* Add environment variable

* Fix variable name

* Update test.yml

* Update test.yml
 2023-04-07 16:21:17 -07:00
Justin Hutchings
786282e813 Update to unique name 2023-04-07 15:07:03 -07:00
Justin Hutchings
95e753ca72 Merge pull request #7 from jhutchings1/dependabot/npm_and_yarn/vercel/ncc-0.36.1 
Bump @vercel/ncc from 0.36.0 to 0.36.1
 2023-02-14 16:22:40 -08:00
dependabot[bot]
db972bc58b Bump @vercel/ncc from 0.36.0 to 0.36.1 
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.36.0 to 0.36.1.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.36.0...0.36.1)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-15 00:20:32 +00:00