actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
609 Commits 1 Branch 0 Tags
32276cb73d47a9c19b35c9ca7ca8081255bc5ddd
Commit Graph

609 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico Builes
32276cb73d Merge pull request #298 from actions/dependabot/npm_and_yarn/types/node-16.11.68 
Bump @types/node from 16.11.66 to 16.11.68
 2022-10-19 07:49:08 +02:00
Federico Builes
fe226ac019 Merge pull request #297 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.3 
Bump eslint-plugin-jest from 27.1.2 to 27.1.3
 2022-10-19 07:48:52 +02:00
dependabot[bot]
b759175bdb Bump @types/node from 16.11.66 to 16.11.68 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.66 to 16.11.68.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-19 01:34:58 +00:00
dependabot[bot]
6af054f363 Bump eslint-plugin-jest from 27.1.2 to 27.1.3 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 27.1.2 to 27.1.3.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v27.1.2...v27.1.3)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-19 01:34:46 +00:00
Federico Builes
6f32cb0afd Merge pull request #296 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.40.1 
Bump @typescript-eslint/parser from 5.40.0 to 5.40.1
 2022-10-18 10:05:25 +02:00
dependabot[bot]
2791afab72 Bump @typescript-eslint/parser from 5.40.0 to 5.40.1 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.40.0 to 5.40.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.40.1/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-18 06:54:19 +00:00
Federico Builes
a8b5c8c24e Merge pull request #295 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.40.1 
Bump @typescript-eslint/eslint-plugin from 5.40.0 to 5.40.1
 2022-10-18 08:53:31 +02:00
dependabot[bot]
12a250de95 Bump @typescript-eslint/eslint-plugin from 5.40.0 to 5.40.1 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.40.0 to 5.40.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.40.1/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-18 01:26:32 +00:00
Federico Builes
917e5af203 Merge pull request #291 from actions/dependabot/npm_and_yarn/types/node-16.11.66 
Bump @types/node from 16.11.65 to 16.11.66
 2022-10-17 07:28:53 +02:00
Federico Builes
ba6dba6225 Merge pull request #292 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.2 
Bump eslint-plugin-jest from 27.1.1 to 27.1.2
 2022-10-17 07:26:25 +02:00
dependabot[bot]
63154658bc Bump eslint-plugin-jest from 27.1.1 to 27.1.2 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 27.1.1 to 27.1.2.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v27.1.1...v27.1.2)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-17 01:51:39 +00:00
dependabot[bot]
f84c5813e5 Bump @types/node from 16.11.65 to 16.11.66 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.65 to 16.11.66.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-17 01:51:15 +00:00
Federico Builes
0e5d083be1 Merge pull request #289 from actions/dependabot/npm_and_yarn/octokit-2.0.9 
Bump octokit from 2.0.7 to 2.0.9
 2022-10-14 09:09:30 +02:00
Federico Builes
2f428eec67 adding dist 2022-10-14 09:03:58 +02:00
dependabot[bot]
dff2fdff0f Bump octokit from 2.0.7 to 2.0.9 
Bumps [octokit](https://github.com/octokit/octokit.js) from 2.0.7 to 2.0.9.
- [Release notes](https://github.com/octokit/octokit.js/releases)
- [Commits](https://github.com/octokit/octokit.js/compare/v2.0.7...v2.0.9)

---
updated-dependencies:
- dependency-name: octokit
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-14 06:56:20 +00:00
Federico Builes
12a171cf96 Merge pull request #288 from actions/dependabot/npm_and_yarn/octokit/request-error-3.0.2 
Bump @octokit/request-error from 3.0.1 to 3.0.2
 2022-10-14 08:55:30 +02:00
dependabot[bot]
3156cf8998 Bump @octokit/request-error from 3.0.1 to 3.0.2 
Bumps [@octokit/request-error](https://github.com/octokit/request-error.js) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](https://github.com/octokit/request-error.js/compare/v3.0.1...v3.0.2)

---
updated-dependencies:
- dependency-name: "@octokit/request-error"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-14 01:25:21 +00:00
cnagadya
fd675ced9c v2.5.0 release 
Co-authored-by: Henri Maurer <hmaurer@github.com>
Co-authored-by: Federico Builes <febuiles@github.com>
 2022-10-13 15:00:15 +00:00
Federico Builes
f7d03d8b76 Merge pull request #284 from actions/cn/license-api-fallback 
Use GH Licenses API to retrieve null licenses
 2022-10-13 16:54:33 +02:00
Federico Builes
7e41a6f1ee Removing unnecessary beforeAll block 
Mocks are removed in Jest automatically due to our
Jest config file.

Co-authored-by: Christine Nagadya <cnagadya@github.com>
Co-authored-by: Henri Maurer <hmaurer@github.com>
 2022-10-13 16:52:54 +02:00
cnagadya
4c0961eff6 Add tests for GitHub License API fallback 2022-10-13 11:57:38 +00:00
cnagadya
d1e9a12830 Resolve conflicts 2022-10-13 11:06:40 +00:00
cnagadya
2e3713aab8 Optimise setGHLicenses 
Co-authored-by: Henri Maurer <hmaurer@github.com>
Co-authored-by: Federico Builes <febuiles@github.com>
 2022-10-13 11:03:34 +00:00
cnagadya
ba9d7c1389 Retrieve null licenses from licenses API 2022-10-13 11:03:34 +00:00
Federico Builes
0cd2781117 Merge pull request #286 from actions/dependabot/npm_and_yarn/ansi-styles-6.2.1 
Bump ansi-styles from 6.2.0 to 6.2.1
 2022-10-13 12:28:39 +02:00
Federico Builes
129f0ad973 adding dist 2022-10-13 12:26:58 +02:00
dependabot[bot]
0a88a4704b Bump ansi-styles from 6.2.0 to 6.2.1 
Bumps [ansi-styles](https://github.com/chalk/ansi-styles) from 6.2.0 to 6.2.1.
- [Release notes](https://github.com/chalk/ansi-styles/releases)
- [Commits](https://github.com/chalk/ansi-styles/compare/v6.2.0...v6.2.1)

---
updated-dependencies:
- dependency-name: ansi-styles
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-13 06:12:45 +00:00
Federico Builes
18069caed8 Merge pull request #287 from actions/dependabot/npm_and_yarn/got-12.5.2 
Bump got from 12.5.1 to 12.5.2
 2022-10-13 08:12:07 +02:00
dependabot[bot]
61cee4b12b Bump got from 12.5.1 to 12.5.2 
Bumps [got](https://github.com/sindresorhus/got) from 12.5.1 to 12.5.2.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v12.5.1...v12.5.2)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-13 01:25:32 +00:00
Federico Builes
94670a1af8 Merge pull request #282 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.4.0 
Bump eslint-plugin-github from 4.3.7 to 4.4.0
 2022-10-12 08:05:50 +02:00
Federico Builes
577d9714ad Merge pull request #283 from actions/dependabot/npm_and_yarn/ansi-styles-6.2.0 
Bump ansi-styles from 6.1.1 to 6.2.0
 2022-10-12 08:02:05 +02:00
Federico Builes
9ce6cb532b adding dist 2022-10-12 08:01:53 +02:00
dependabot[bot]
0b980b1ccd Bump ansi-styles from 6.1.1 to 6.2.0 
Bumps [ansi-styles](https://github.com/chalk/ansi-styles) from 6.1.1 to 6.2.0.
- [Release notes](https://github.com/chalk/ansi-styles/releases)
- [Commits](https://github.com/chalk/ansi-styles/compare/v6.1.1...v6.2.0)

---
updated-dependencies:
- dependency-name: ansi-styles
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-12 01:41:51 +00:00
dependabot[bot]
bc5f6c2f39 Bump eslint-plugin-github from 4.3.7 to 4.4.0 
Bumps [eslint-plugin-github](https://github.com/github/eslint-plugin-github) from 4.3.7 to 4.4.0.
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](https://github.com/github/eslint-plugin-github/compare/v4.3.7...v4.4.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-github
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-12 01:41:43 +00:00
cnagadya
9c96258789 Update to 2.4.1 2022-10-11 13:42:40 +00:00
Federico Builes
f076f221f4 Merge pull request #280 from actions/format-bugs 
Fix display issues with versions and GHSAs
 2022-10-11 15:22:44 +02:00
Federico Builes
88b817ec8d adding dist 2022-10-11 15:20:02 +02:00
Federico Builes
2dd6c6a3d7 Fixing a bug with GHSA filtering. 
Co-authored-by: Christine Nagadya <cnagadya@github.com>
 2022-10-11 15:17:34 +02:00
Federico Builes
1d9bfbbddf Document the behavior of the GHSA filtering function. 2022-10-11 15:09:58 +02:00
Federico Builes
f632f5f79d adding dist 2022-10-11 14:51:27 +02:00
Federico Builes
ee42a6512f Show the dependency name instead of the manifest. 2022-10-11 14:50:55 +02:00
Federico Builes
6f58092362 Merge pull request #278 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.40.0 
Bump @typescript-eslint/eslint-plugin from 5.39.0 to 5.40.0
 2022-10-11 12:11:26 +02:00
dependabot[bot]
b81bfe53ce Bump @typescript-eslint/eslint-plugin from 5.39.0 to 5.40.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.39.0 to 5.40.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.40.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-11 10:10:06 +00:00
Federico Builes
5679c0f8be Merge pull request #277 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.40.0 
Bump @typescript-eslint/parser from 5.39.0 to 5.40.0
 2022-10-11 12:09:15 +02:00
dependabot[bot]
2018b3e66f Bump @typescript-eslint/parser from 5.39.0 to 5.40.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.39.0 to 5.40.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.40.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-11 08:50:56 +00:00
Federico Builes
463890c1ed Merge pull request #276 from actions/dependabot/npm_and_yarn/types/node-16.11.65 
Bump @types/node from 16.11.64 to 16.11.65
 2022-10-11 10:50:05 +02:00
dependabot[bot]
c9b9d23e75 Bump @types/node from 16.11.64 to 16.11.65 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.64 to 16.11.65.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-11 01:32:53 +00:00
Federico Builes
4c14cfe593 Merge pull request #275 from actions/dependabot/npm_and_yarn/eslint-8.25.0 
Bump eslint from 8.24.0 to 8.25.0
 2022-10-10 08:24:07 +02:00
dependabot[bot]
5b70fe08e7 Bump eslint from 8.24.0 to 8.25.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.24.0 to 8.25.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.24.0...v8.25.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-10 01:52:29 +00:00
Federico Builes
81216f689b Merge pull request #274 from actions/dependabot/npm_and_yarn/yaml-2.1.3 
Bump yaml from 2.1.2 to 2.1.3
 2022-10-06 14:43:54 +02:00