d8d3455ed6
Bumps the npm_and_yarn group with 4 updates: [tar](https://github.com/isaacs/node-tar), [yaml](https://github.com/eemeli/yaml), [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) and [undici](https://github.com/nodejs/undici). Updates `tar` from 6.1.13 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](https://github.com/isaacs/node-tar/compare/v6.1.13...v6.2.1) Updates `yaml` from 2.2.1 to 2.2.2 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](https://github.com/eemeli/yaml/compare/v2.2.1...v2.2.2) Updates `@babel/traverse` from 7.20.5 to 7.24.5 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.5/packages/babel-traverse) Updates `undici` from 5.21.0 to 5.28.4 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v5.21.0...v5.28.4) --- updated-dependencies: - dependency-name: tar dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: yaml dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
46 lines
1.3 KiB
JSON
46 lines
1.3 KiB
JSON
{
|
|
"name": "component-detection-action",
|
|
"version": "1.0.0",
|
|
"description": "Component detection action",
|
|
"main": "index.ts",
|
|
"scripts": {
|
|
"lint": "eslint .",
|
|
"prepare": "ncc build index.ts -o dist --source-map --license licenses.txt",
|
|
"test": "node --experimental-vm-modules node_modules/jest/bin/jest.js",
|
|
"all": "npm run lint && npm run prepare && npm run test"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git+https://github.com/advanced-security/component-detection-dependency-submission-action.git"
|
|
},
|
|
"keywords": [
|
|
"GitHub",
|
|
"Actions",
|
|
"JavaScript"
|
|
],
|
|
"author": "",
|
|
"license": "MIT",
|
|
"bugs": {
|
|
"url": "https://github.com/advanced-security/component-detection-dependency-submission-action/issues"
|
|
},
|
|
"homepage": "https://github.com/advanced-security/component-detection-dependency-submission-action#readme",
|
|
"dependencies": {
|
|
"@actions/core": "^1.10.0",
|
|
"@actions/github": "^5.1.1",
|
|
"@github/dependency-submission-toolkit": "^1.2.10",
|
|
"cross-fetch": "^3.1.5",
|
|
"dotenv": "^16.0.3",
|
|
"fs": "^0.0.1-security",
|
|
"tar": "^6.2.1",
|
|
"yaml": "^2.2.2"
|
|
},
|
|
"devDependencies": {
|
|
"@types/glob": "^8.1.0",
|
|
"@types/jest": "^29.5.1",
|
|
"@vercel/ncc": "^0.36.1",
|
|
"eslint": "^8.46.0",
|
|
"jest": "^29.5.0",
|
|
"ts-jest": "^29.1.0"
|
|
}
|
|
}
|