actions/component-detection-dependency-submission-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
NaN Commits 1 Branch 0 Tags
80ff314cbefbac5cc5bc20119cd96b643fd0faaf
Commit Graph

49 Commits

Author SHA1 Message Date
Justin Holguín
2857c71253 Fix tests by using jest-babel 2024-09-27 20:07:32 +00:00
Justin Hutchings
9b4a8182c2 Change octokit from Actions specific one to generic one 2024-08-26 22:49:12 +00:00
dependabot[bot]
d8d3455ed6 Bump the npm_and_yarn group with 4 updates 
Bumps the npm_and_yarn group with 4 updates: [tar](https://github.com/isaacs/node-tar), [yaml](https://github.com/eemeli/yaml), [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) and [undici](https://github.com/nodejs/undici).


Updates `tar` from 6.1.13 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v6.1.13...v6.2.1)

Updates `yaml` from 2.2.1 to 2.2.2
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.2.1...v2.2.2)

Updates `@babel/traverse` from 7.20.5 to 7.24.5
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.24.5/packages/babel-traverse)

Updates `undici` from 5.21.0 to 5.28.4
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.21.0...v5.28.4)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: yaml
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@babel/traverse"
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-07 20:32:29 +00:00
dependabot[bot]
34535ba482 Bump eslint from 8.40.0 to 8.46.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.40.0 to 8.46.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.40.0...v8.46.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-31 13:26:37 +00:00
dependabot[bot]
b8dd335ebd Bump @types/jest from 29.5.0 to 29.5.1 
Bumps [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) from 29.5.0 to 29.5.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-08 16:53:10 +00:00
dependabot[bot]
b0c43e3bfe Bump eslint from 8.38.0 to 8.40.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.38.0 to 8.40.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.38.0...v8.40.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-05-08 14:10:23 +00:00
Justin Hutchings
fcd8b671dc Merge pull request #8 from advanced-security/dependabot/npm_and_yarn/github/dependency-submission-toolkit-1.2.10 
Bump @github/dependency-submission-toolkit from 1.2.8 to 1.2.10
 2023-04-07 16:36:18 -07:00
dependabot[bot]
993666f762 Bump jest and @types/jest 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) and [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest). These dependencies needed to be updated together.

Updates `jest` from 29.4.2 to 29.5.0
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.5.0/packages/jest)

Updates `@types/jest` from 29.4.0 to 29.5.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-07 23:32:14 +00:00
dependabot[bot]
ae7e494eac Bump @github/dependency-submission-toolkit from 1.2.8 to 1.2.10 
Bumps [@github/dependency-submission-toolkit](https://github.com/github/dependency-submission-toolkit) from 1.2.8 to 1.2.10.
- [Release notes](https://github.com/github/dependency-submission-toolkit/releases)
- [Commits](https://github.com/github/dependency-submission-toolkit/compare/v1.2.8...v1.2.10)

---
updated-dependencies:
- dependency-name: "@github/dependency-submission-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-07 23:28:19 +00:00
dependabot[bot]
1c4b470cd1 Bump @types/glob from 8.0.1 to 8.1.0 
Bumps [@types/glob](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/glob) from 8.0.1 to 8.1.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/glob)

---
updated-dependencies:
- dependency-name: "@types/glob"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-07 23:28:11 +00:00
Justin Hutchings
8d1e4e5664 Merge pull request #13 from advanced-security/dependabot/npm_and_yarn/eslint-8.38.0 
Bump eslint from 8.34.0 to 8.38.0
 2023-04-07 16:27:36 -07:00
dependabot[bot]
f8b002de02 Bump eslint from 8.34.0 to 8.38.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.34.0 to 8.38.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.34.0...v8.38.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-07 23:24:54 +00:00
dependabot[bot]
556b9b9daf Bump ts-jest from 29.0.5 to 29.1.0 
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.0.5 to 29.1.0.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.0.5...v29.1.0)

---
updated-dependencies:
- dependency-name: ts-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-04-07 23:23:50 +00:00
Justin Hutchings
bcaa41e34f Update docs for ownership change (#2) 
* Add files to prepare for ownership change

* Fix tests

* Update repo name

* Update dependencies

* Attempt to fix permissions issues blocking test

* Update permissions

* Add environment variable

* Fix variable name

* Update test.yml

* Update test.yml
 2023-04-07 16:21:17 -07:00
dependabot[bot]
db972bc58b Bump @vercel/ncc from 0.36.0 to 0.36.1 
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.36.0 to 0.36.1.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.36.0...0.36.1)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-15 00:20:32 +00:00
dependabot[bot]
1838b199f2 Bump jest and @types/jest 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) and [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest). These dependencies needed to be updated together.

Updates `jest` from 29.3.1 to 29.4.2
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.4.2/packages/jest)

Updates `@types/jest` from 29.2.6 to 29.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-15 00:16:54 +00:00
dependabot[bot]
247087dbbb Bump eslint from 8.32.0 to 8.34.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.32.0 to 8.34.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.32.0...v8.34.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-13 11:21:36 +00:00
Justin Hutchings
eb5000d83f Merge pull request #2 from jhutchings1/dependabot/npm_and_yarn/eslint-8.32.0 
Bump eslint from 8.29.0 to 8.32.0
 2023-01-22 12:52:39 -08:00
Justin Hutchings
2be4283f9e Merge pull request #4 from jhutchings1/dependabot/npm_and_yarn/github/dependency-submission-toolkit-1.2.8 
Bump @github/dependency-submission-toolkit from 1.2.7 to 1.2.8
 2023-01-22 12:52:27 -08:00
dependabot[bot]
af6d383e1c Bump eslint from 8.29.0 to 8.32.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.29.0 to 8.32.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.29.0...v8.32.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-22 20:29:17 +00:00
dependabot[bot]
9a9ab16d9f Bump @github/dependency-submission-toolkit from 1.2.7 to 1.2.8 
Bumps [@github/dependency-submission-toolkit](https://github.com/github/dependency-submission-toolkit) from 1.2.7 to 1.2.8.
- [Release notes](https://github.com/github/dependency-submission-toolkit/releases)
- [Commits](https://github.com/github/dependency-submission-toolkit/compare/v1.2.7...v1.2.8)

---
updated-dependencies:
- dependency-name: "@github/dependency-submission-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-22 20:29:17 +00:00
dependabot[bot]
9246b1abd3 Bump @types/glob from 8.0.0 to 8.0.1 
Bumps [@types/glob](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/glob) from 8.0.0 to 8.0.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/glob)

---
updated-dependencies:
- dependency-name: "@types/glob"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-01-22 20:29:16 +00:00
Justin Hutchings
5db9416322 Hook up the front end 2023-01-22 01:06:08 +00:00
Justin Hutchings
e2c79b684b Stub component detection download and execution 2023-01-21 21:56:51 +00:00
Justin Hutchings
2e4172a352 Stub release download code 2023-01-20 19:38:27 +00:00
Justin Hutchings
d967f286bb Fix type errors 2023-01-20 01:43:53 +00:00
Justin Hutchings
109baa63fd Fix typescript errors 2023-01-20 00:43:26 +00:00
Justin Hutchings
05ff2bfe02 Fix typescript errors 2023-01-20 00:41:22 +00:00
Justin Hutchings
e15547e52e Update built assets 2023-01-20 00:35:07 +00:00
Justin Hutchings
6de9c7319f Convert from spdx parser to yaml - boilerplate 2023-01-19 20:10:29 +00:00
Justin Hutchings
83dc76315e Merge branch 'main' into dependency-fix 2022-12-06 15:48:20 -08:00
dependabot[bot]
9bb9a15640 Bump jest from 29.1.2 to 29.3.1 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) from 29.1.2 to 29.3.1.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.3.1/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-06 23:45:29 +00:00
dependabot[bot]
2592144c28 Bump @vercel/ncc from 0.34.0 to 0.36.0 
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.34.0 to 0.36.0.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.34.0...0.36.0)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-06 23:44:29 +00:00
Justin Hutchings
bf4a11a1fb Merge pull request #34 from jhutchings1/dependabot/npm_and_yarn/eslint-8.29.0 
Bump eslint from 8.24.0 to 8.29.0
 2022-12-06 15:43:47 -08:00
dependabot[bot]
fb599e9542 Bump eslint from 8.24.0 to 8.29.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.24.0 to 8.29.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.24.0...v8.29.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-05 21:20:19 +00:00
dependabot[bot]
f225c3002b Bump @github/dependency-submission-toolkit from 1.2.3 to 1.2.7 
Bumps [@github/dependency-submission-toolkit](https://github.com/github/dependency-submission-toolkit) from 1.2.3 to 1.2.7.
- [Release notes](https://github.com/github/dependency-submission-toolkit/releases)
- [Commits](https://github.com/github/dependency-submission-toolkit/compare/v1.2.3...v1.2.7)

---
updated-dependencies:
- dependency-name: "@github/dependency-submission-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-28 21:49:33 +00:00
dependabot[bot]
a3bc6eb3c7 Bump @github/dependency-submission-toolkit from 1.2.2 to 1.2.3 
Bumps [@github/dependency-submission-toolkit](https://github.com/github/dependency-submission-toolkit) from 1.2.2 to 1.2.3.
- [Release notes](https://github.com/github/dependency-submission-toolkit/releases)
- [Commits](https://github.com/github/dependency-submission-toolkit/compare/v1.2.2...v1.2.3)

---
updated-dependencies:
- dependency-name: "@github/dependency-submission-toolkit"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-05 22:20:48 +00:00
dependabot[bot]
042a93c85c Bump eslint from 8.5.0 to 8.24.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.5.0 to 8.24.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.5.0...v8.24.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-05 03:52:44 +00:00
dependabot[bot]
f0a3d22d5d Bump @vercel/ncc from 0.31.1 to 0.34.0 
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.31.1 to 0.34.0.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.31.1...0.34.0)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-05 03:48:26 +00:00
Justin Hutchings
ebedcc1fe4 Merge pull request #17 from jhutchings1/dependabot/npm_and_yarn/actions/core-1.10.0 
Bump @actions/core from 1.6.0 to 1.10.0
 2022-10-04 20:47:26 -07:00
dependabot[bot]
2912044087 Bump jest from 27.4.5 to 29.1.2 
Bumps [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest) from 27.4.5 to 29.1.2.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.1.2/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-04 23:42:33 +00:00
dependabot[bot]
6917ba48be Bump @actions/core from 1.6.0 to 1.10.0 
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.6.0 to 1.10.0.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-04 23:39:49 +00:00
Justin Hutchings
7c3b372567 Fix encoding issues 2022-10-04 14:35:19 -07:00
Justin Hutchings
ab368561f7 Add character decoding 2022-10-04 14:26:24 -07:00
Justin Hutchings
168c9a869c Update context 2022-10-04 09:44:26 -07:00
Justin Hutchings
d6bc80051e Update stub implementation 2022-10-04 09:19:29 -07:00
Justin Hutchings
07788c269f Remove malware package for the actual dependency 2022-08-25 12:25:30 -07:00
Justin Hutchings
aa7e545573 Initial attempt (untested) 2022-08-25 11:50:14 -07:00
Justin Hutchings
1467e01173 Initial commit 2022-08-25 09:12:00 -07:00