2022-03-31 18:31:39 +02:00
|
|
|
{
|
|
|
|
|
"name": "dependency-review-action",
|
2026-03-02 16:13:56 -08:00
|
|
|
"version": "4.9.0",
|
2022-03-31 18:31:39 +02:00
|
|
|
"private": true,
|
|
|
|
|
"description": "A GitHub Action for Dependency Review",
|
|
|
|
|
"main": "lib/main.js",
|
|
|
|
|
"scripts": {
|
2023-02-27 16:05:03 +00:00
|
|
|
"build": "tsc -p tsconfig.build.json",
|
2022-03-31 18:31:39 +02:00
|
|
|
"format": "prettier --write '**/*.ts'",
|
|
|
|
|
"format-check": "prettier --check '**/*.ts'",
|
|
|
|
|
"lint": "eslint src/**/*.ts",
|
|
|
|
|
"package": "ncc build --source-map --license licenses.txt",
|
|
|
|
|
"test": "jest",
|
|
|
|
|
"all": "npm run build && npm run format && npm run lint && npm run package && npm test"
|
|
|
|
|
},
|
|
|
|
|
"repository": {
|
|
|
|
|
"type": "git",
|
|
|
|
|
"url": "git+https://github.com/github/dependency-review-action.git"
|
|
|
|
|
},
|
|
|
|
|
"keywords": [
|
|
|
|
|
"actions",
|
|
|
|
|
"node",
|
|
|
|
|
"setup"
|
|
|
|
|
],
|
|
|
|
|
"author": "GitHub",
|
|
|
|
|
"license": "MIT",
|
|
|
|
|
"dependencies": {
|
2026-01-05 15:39:34 -08:00
|
|
|
"@actions/artifact": "^5.0.1",
|
2025-07-14 01:52:01 +00:00
|
|
|
"@actions/core": "^1.11.1",
|
|
|
|
|
"@actions/github": "^6.0.1",
|
2025-01-23 21:07:39 +00:00
|
|
|
"@octokit/plugin-retry": "^6.1.0",
|
2025-03-12 10:57:15 +00:00
|
|
|
"@octokit/request-error": "^5.1.1",
|
2025-03-13 14:34:23 +00:00
|
|
|
"@octokit/types": "12.5.0",
|
2024-06-05 11:06:49 -07:00
|
|
|
"@onebeyond/spdx-license-satisfies": "^1.0.1",
|
2022-10-13 06:12:45 +00:00
|
|
|
"ansi-styles": "^6.2.1",
|
2025-07-14 01:52:01 +00:00
|
|
|
"got": "^14.4.7",
|
2023-10-09 13:33:55 +02:00
|
|
|
"jest": "^29.7.0",
|
2024-01-04 16:51:50 +00:00
|
|
|
"octokit": "^3.1.2",
|
Implement review fixes: semver library, scoping, case-insensitive matching, error logging, and configurable fail behavior (#7)
* Initial plan
* Implement PR review comment fixes: semver library, error handling, case-insensitive matching, and rows scoping
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
* Fix formatting and rebuild dist folder
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
* Fix fail-closed logic and remove redundant @types/semver
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
* Apply review feedback: fix empty range handling, add trimming, implement range check caching
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
* Apply review feedback: align fail-closed behavior for empty version, fix TypeScript typing, normalize cache keys
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
* Fix linter errors, optimize cache keys, and improve trimming logic
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
* Add fail-open option for patch selection and optimize with preTrimmed flag
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
* Enforce fail-closed with explicit validation, fix debug messages, normalize cache keys
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
* Fix unreachable ternary in debug message and eliminate duplicate trim operation
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
* Normalize eco comparison and add preNormalized option to avoid duplicate range conversion
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
* Remove unnecessary cache, fix function signature, and correct semver comment
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
* Make includePrerelease conditional based on version type to preserve range semantics
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
* Improve debug message to report both invalid version and range when applicable
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
* Convert to JSDoc, add explicit type annotation, and remove redundant initializer
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
2026-02-08 16:05:04 -05:00
|
|
|
"semver": "^7.7.4",
|
2026-02-19 05:22:14 +00:00
|
|
|
"spdx-expression-parse": "^4.0.0",
|
2025-05-05 19:06:50 -04:00
|
|
|
"spdx-satisfies": "^6.0.0",
|
2025-08-18 10:31:31 -07:00
|
|
|
"ts-jest": "^29.4.1",
|
|
|
|
|
"yaml": "^2.8.1",
|
2025-01-23 21:07:39 +00:00
|
|
|
"zod": "^3.24.1"
|
2022-03-31 18:31:39 +02:00
|
|
|
},
|
|
|
|
|
"devDependencies": {
|
2025-11-07 12:39:28 +08:00
|
|
|
"@types/jest": "^29.5.14",
|
2024-01-22 07:54:40 +01:00
|
|
|
"@types/node": "^20",
|
2023-10-23 03:13:32 +00:00
|
|
|
"@types/spdx-expression-parse": "^3.0.4",
|
2024-02-12 05:29:22 +00:00
|
|
|
"@typescript-eslint/eslint-plugin": "^6.21.0",
|
2024-02-12 01:14:01 +00:00
|
|
|
"@typescript-eslint/parser": "^6.21.0",
|
2024-11-18 01:28:26 +00:00
|
|
|
"@vercel/ncc": "^0.38.3",
|
2025-01-23 21:07:39 +00:00
|
|
|
"esbuild-register": "^3.6.0",
|
2024-03-25 01:27:32 +00:00
|
|
|
"eslint": "^8.57.0",
|
2024-04-01 01:25:22 +00:00
|
|
|
"eslint-plugin-github": "^4.10.2",
|
2024-10-21 15:16:32 -07:00
|
|
|
"eslint-plugin-jest": "^28.8.3",
|
2025-08-18 10:31:31 -07:00
|
|
|
"eslint-plugin-prettier": "^5.5.4",
|
2025-11-17 22:03:38 +00:00
|
|
|
"js-yaml": "^4.1.1",
|
2025-07-14 01:52:01 +00:00
|
|
|
"nodemon": "^3.1.10",
|
|
|
|
|
"prettier": "3.6.2",
|
2025-08-18 10:31:31 -07:00
|
|
|
"typescript": "^5.9.2"
|
2024-11-19 22:26:34 +00:00
|
|
|
},
|
|
|
|
|
"overrides": {
|
2025-03-12 10:57:15 +00:00
|
|
|
"cross-spawn": ">=7.0.5",
|
|
|
|
|
"@octokit/request-error@5.0.1": "5.1.1"
|
2022-03-31 18:31:39 +02:00
|
|
|
}
|
2026-01-05 15:39:34 -08:00
|
|
|
}
|