actions/dependency-review-action
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
595 Commits 1 Branch 0 Tags
dff2fdff0fa7541faeb63f712ccbf95b7206350b
Commit Graph

595 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dependabot[bot]
dff2fdff0f Bump octokit from 2.0.7 to 2.0.9 
Bumps [octokit](https://github.com/octokit/octokit.js) from 2.0.7 to 2.0.9.
- [Release notes](https://github.com/octokit/octokit.js/releases)
- [Commits](https://github.com/octokit/octokit.js/compare/v2.0.7...v2.0.9)

---
updated-dependencies:
- dependency-name: octokit
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-14 06:56:20 +00:00
Federico Builes
12a171cf96 Merge pull request #288 from actions/dependabot/npm_and_yarn/octokit/request-error-3.0.2 
Bump @octokit/request-error from 3.0.1 to 3.0.2
 2022-10-14 08:55:30 +02:00
dependabot[bot]
3156cf8998 Bump @octokit/request-error from 3.0.1 to 3.0.2 
Bumps [@octokit/request-error](https://github.com/octokit/request-error.js) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](https://github.com/octokit/request-error.js/compare/v3.0.1...v3.0.2)

---
updated-dependencies:
- dependency-name: "@octokit/request-error"
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-14 01:25:21 +00:00
cnagadya
fd675ced9c v2.5.0 release 
Co-authored-by: Henri Maurer <hmaurer@github.com>
Co-authored-by: Federico Builes <febuiles@github.com>
 2022-10-13 15:00:15 +00:00
Federico Builes
f7d03d8b76 Merge pull request #284 from actions/cn/license-api-fallback 
Use GH Licenses API to retrieve null licenses
 2022-10-13 16:54:33 +02:00
Federico Builes
7e41a6f1ee Removing unnecessary beforeAll block 
Mocks are removed in Jest automatically due to our
Jest config file.

Co-authored-by: Christine Nagadya <cnagadya@github.com>
Co-authored-by: Henri Maurer <hmaurer@github.com>
 2022-10-13 16:52:54 +02:00
cnagadya
4c0961eff6 Add tests for GitHub License API fallback 2022-10-13 11:57:38 +00:00
cnagadya
d1e9a12830 Resolve conflicts 2022-10-13 11:06:40 +00:00
cnagadya
2e3713aab8 Optimise setGHLicenses 
Co-authored-by: Henri Maurer <hmaurer@github.com>
Co-authored-by: Federico Builes <febuiles@github.com>
 2022-10-13 11:03:34 +00:00
cnagadya
ba9d7c1389 Retrieve null licenses from licenses API 2022-10-13 11:03:34 +00:00
Federico Builes
0cd2781117 Merge pull request #286 from actions/dependabot/npm_and_yarn/ansi-styles-6.2.1 
Bump ansi-styles from 6.2.0 to 6.2.1
 2022-10-13 12:28:39 +02:00
Federico Builes
129f0ad973 adding dist 2022-10-13 12:26:58 +02:00
dependabot[bot]
0a88a4704b Bump ansi-styles from 6.2.0 to 6.2.1 
Bumps [ansi-styles](https://github.com/chalk/ansi-styles) from 6.2.0 to 6.2.1.
- [Release notes](https://github.com/chalk/ansi-styles/releases)
- [Commits](https://github.com/chalk/ansi-styles/compare/v6.2.0...v6.2.1)

---
updated-dependencies:
- dependency-name: ansi-styles
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-13 06:12:45 +00:00
Federico Builes
18069caed8 Merge pull request #287 from actions/dependabot/npm_and_yarn/got-12.5.2 
Bump got from 12.5.1 to 12.5.2
 2022-10-13 08:12:07 +02:00
dependabot[bot]
61cee4b12b Bump got from 12.5.1 to 12.5.2 
Bumps [got](https://github.com/sindresorhus/got) from 12.5.1 to 12.5.2.
- [Release notes](https://github.com/sindresorhus/got/releases)
- [Commits](https://github.com/sindresorhus/got/compare/v12.5.1...v12.5.2)

---
updated-dependencies:
- dependency-name: got
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-13 01:25:32 +00:00
Federico Builes
94670a1af8 Merge pull request #282 from actions/dependabot/npm_and_yarn/eslint-plugin-github-4.4.0 
Bump eslint-plugin-github from 4.3.7 to 4.4.0
 2022-10-12 08:05:50 +02:00
Federico Builes
577d9714ad Merge pull request #283 from actions/dependabot/npm_and_yarn/ansi-styles-6.2.0 
Bump ansi-styles from 6.1.1 to 6.2.0
 2022-10-12 08:02:05 +02:00
Federico Builes
9ce6cb532b adding dist 2022-10-12 08:01:53 +02:00
dependabot[bot]
0b980b1ccd Bump ansi-styles from 6.1.1 to 6.2.0 
Bumps [ansi-styles](https://github.com/chalk/ansi-styles) from 6.1.1 to 6.2.0.
- [Release notes](https://github.com/chalk/ansi-styles/releases)
- [Commits](https://github.com/chalk/ansi-styles/compare/v6.1.1...v6.2.0)

---
updated-dependencies:
- dependency-name: ansi-styles
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-12 01:41:51 +00:00
dependabot[bot]
bc5f6c2f39 Bump eslint-plugin-github from 4.3.7 to 4.4.0 
Bumps [eslint-plugin-github](https://github.com/github/eslint-plugin-github) from 4.3.7 to 4.4.0.
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](https://github.com/github/eslint-plugin-github/compare/v4.3.7...v4.4.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-github
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-12 01:41:43 +00:00
cnagadya
9c96258789 Update to 2.4.1 2022-10-11 13:42:40 +00:00
Federico Builes
f076f221f4 Merge pull request #280 from actions/format-bugs 
Fix display issues with versions and GHSAs
 2022-10-11 15:22:44 +02:00
Federico Builes
88b817ec8d adding dist 2022-10-11 15:20:02 +02:00
Federico Builes
2dd6c6a3d7 Fixing a bug with GHSA filtering. 
Co-authored-by: Christine Nagadya <cnagadya@github.com>
 2022-10-11 15:17:34 +02:00
Federico Builes
1d9bfbbddf Document the behavior of the GHSA filtering function. 2022-10-11 15:09:58 +02:00
Federico Builes
f632f5f79d adding dist 2022-10-11 14:51:27 +02:00
Federico Builes
ee42a6512f Show the dependency name instead of the manifest. 2022-10-11 14:50:55 +02:00
Federico Builes
6f58092362 Merge pull request #278 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.40.0 
Bump @typescript-eslint/eslint-plugin from 5.39.0 to 5.40.0
 2022-10-11 12:11:26 +02:00
dependabot[bot]
b81bfe53ce Bump @typescript-eslint/eslint-plugin from 5.39.0 to 5.40.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.39.0 to 5.40.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.40.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-11 10:10:06 +00:00
Federico Builes
5679c0f8be Merge pull request #277 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.40.0 
Bump @typescript-eslint/parser from 5.39.0 to 5.40.0
 2022-10-11 12:09:15 +02:00
dependabot[bot]
2018b3e66f Bump @typescript-eslint/parser from 5.39.0 to 5.40.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.39.0 to 5.40.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.40.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-11 08:50:56 +00:00
Federico Builes
463890c1ed Merge pull request #276 from actions/dependabot/npm_and_yarn/types/node-16.11.65 
Bump @types/node from 16.11.64 to 16.11.65
 2022-10-11 10:50:05 +02:00
dependabot[bot]
c9b9d23e75 Bump @types/node from 16.11.64 to 16.11.65 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.64 to 16.11.65.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-11 01:32:53 +00:00
Federico Builes
4c14cfe593 Merge pull request #275 from actions/dependabot/npm_and_yarn/eslint-8.25.0 
Bump eslint from 8.24.0 to 8.25.0
 2022-10-10 08:24:07 +02:00
dependabot[bot]
5b70fe08e7 Bump eslint from 8.24.0 to 8.25.0 
Bumps [eslint](https://github.com/eslint/eslint) from 8.24.0 to 8.25.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.24.0...v8.25.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-10 01:52:29 +00:00
Federico Builes
81216f689b Merge pull request #274 from actions/dependabot/npm_and_yarn/yaml-2.1.3 
Bump yaml from 2.1.2 to 2.1.3
 2022-10-06 14:43:54 +02:00
Federico Builes
afbc15c97f updating dist files 2022-10-06 14:41:07 +02:00
dependabot[bot]
8d974c4ee8 Bump yaml from 2.1.2 to 2.1.3 
Bumps [yaml](https://github.com/eemeli/yaml) from 2.1.2 to 2.1.3.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.1.2...v2.1.3)

---
updated-dependencies:
- dependency-name: yaml
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-06 11:19:30 +00:00
Federico Builes
cdad98596a Merge pull request #273 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.1 
Bump eslint-plugin-jest from 27.1.0 to 27.1.1
 2022-10-06 13:18:40 +02:00
dependabot[bot]
0a0eb39992 Bump eslint-plugin-jest from 27.1.0 to 27.1.1 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 27.1.0 to 27.1.1.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v27.1.0...v27.1.1)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-06 01:41:12 +00:00
Federico Builes
df3ceaf7f0 Merge pull request #269 from actions/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.39.0 
Bump @typescript-eslint/eslint-plugin from 5.38.1 to 5.39.0
 2022-10-05 13:17:37 +02:00
dependabot[bot]
1997789b86 Bump @typescript-eslint/eslint-plugin from 5.38.1 to 5.39.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.38.1 to 5.39.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.39.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-05 11:01:03 +00:00
Federico Builes
584e620d09 Merge pull request #270 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-5.39.0 
Bump @typescript-eslint/parser from 5.38.1 to 5.39.0
 2022-10-05 13:00:23 +02:00
Federico Builes
1fa34689ad Merge pull request #271 from actions/dependabot/npm_and_yarn/types/node-16.11.64 
Bump @types/node from 16.11.63 to 16.11.64
 2022-10-05 13:00:15 +02:00
Federico Builes
de2814d20e Merge pull request #272 from actions/dependabot/npm_and_yarn/eslint-plugin-jest-27.1.0 
Bump eslint-plugin-jest from 27.0.4 to 27.1.0
 2022-10-05 08:17:58 +02:00
dependabot[bot]
eabc27054f Bump eslint-plugin-jest from 27.0.4 to 27.1.0 
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 27.0.4 to 27.1.0.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases)
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v27.0.4...v27.1.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-jest
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-05 01:54:54 +00:00
dependabot[bot]
b486e073e9 Bump @types/node from 16.11.63 to 16.11.64 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.63 to 16.11.64.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-05 01:54:43 +00:00
dependabot[bot]
03321307df Bump @typescript-eslint/parser from 5.38.1 to 5.39.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.38.1 to 5.39.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.39.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-05 01:51:49 +00:00
Federico Builes
cc2a6ab32f Merge pull request #268 from actions/dependabot/npm_and_yarn/yaml-2.1.2 
Bump yaml from 2.1.1 to 2.1.2
 2022-10-03 11:32:30 +02:00
Federico Builes
5de8be4c40 Merge branch 'main' into dependabot/npm_and_yarn/yaml-2.1.2 
# Conflicts:
#	dist/index.js.map
 2022-10-03 11:31:02 +02:00