ee66ea100d
* Initial plan * Implement PR review comment fixes: semver library, error handling, case-insensitive matching, and rows scoping Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> * Fix formatting and rebuild dist folder Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> * Fix fail-closed logic and remove redundant @types/semver Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> * Apply review feedback: fix empty range handling, add trimming, implement range check caching Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> * Apply review feedback: align fail-closed behavior for empty version, fix TypeScript typing, normalize cache keys Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> * Fix linter errors, optimize cache keys, and improve trimming logic Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> * Add fail-open option for patch selection and optimize with preTrimmed flag Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> * Enforce fail-closed with explicit validation, fix debug messages, normalize cache keys Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> * Fix unreachable ternary in debug message and eliminate duplicate trim operation Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> * Normalize eco comparison and add preNormalized option to avoid duplicate range conversion Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> * Remove unnecessary cache, fix function signature, and correct semver comment Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> * Make includePrerelease conditional based on version type to preserve range semantics Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> * Improve debug message to report both invalid version and range when applicable Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> * Convert to JSDoc, add explicit type annotation, and remove redundant initializer Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
68 lines
1.9 KiB
JSON
68 lines
1.9 KiB
JSON
{
|
|
"name": "dependency-review-action",
|
|
"version": "4.8.2",
|
|
"private": true,
|
|
"description": "A GitHub Action for Dependency Review",
|
|
"main": "lib/main.js",
|
|
"scripts": {
|
|
"build": "tsc -p tsconfig.build.json",
|
|
"format": "prettier --write '**/*.ts'",
|
|
"format-check": "prettier --check '**/*.ts'",
|
|
"lint": "eslint src/**/*.ts",
|
|
"package": "ncc build --source-map --license licenses.txt",
|
|
"test": "jest",
|
|
"all": "npm run build && npm run format && npm run lint && npm run package && npm test"
|
|
},
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git+https://github.com/github/dependency-review-action.git"
|
|
},
|
|
"keywords": [
|
|
"actions",
|
|
"node",
|
|
"setup"
|
|
],
|
|
"author": "GitHub",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@actions/artifact": "^5.0.1",
|
|
"@actions/core": "^1.11.1",
|
|
"@actions/github": "^6.0.1",
|
|
"@octokit/plugin-retry": "^6.1.0",
|
|
"@octokit/request-error": "^5.1.1",
|
|
"@octokit/types": "12.5.0",
|
|
"@onebeyond/spdx-license-satisfies": "^1.0.1",
|
|
"ansi-styles": "^6.2.1",
|
|
"got": "^14.4.7",
|
|
"jest": "^29.7.0",
|
|
"octokit": "^3.1.2",
|
|
"semver": "^7.7.4",
|
|
"spdx-expression-parse": "^3.0.1",
|
|
"spdx-satisfies": "^6.0.0",
|
|
"ts-jest": "^29.4.1",
|
|
"yaml": "^2.8.1",
|
|
"zod": "^3.24.1"
|
|
},
|
|
"devDependencies": {
|
|
"@types/jest": "^29.5.14",
|
|
"@types/node": "^20",
|
|
"@types/spdx-expression-parse": "^3.0.4",
|
|
"@typescript-eslint/eslint-plugin": "^6.21.0",
|
|
"@typescript-eslint/parser": "^6.21.0",
|
|
"@vercel/ncc": "^0.38.3",
|
|
"esbuild-register": "^3.6.0",
|
|
"eslint": "^8.57.0",
|
|
"eslint-plugin-github": "^4.10.2",
|
|
"eslint-plugin-jest": "^28.8.3",
|
|
"eslint-plugin-prettier": "^5.5.4",
|
|
"js-yaml": "^4.1.1",
|
|
"nodemon": "^3.1.10",
|
|
"prettier": "3.6.2",
|
|
"typescript": "^5.9.2"
|
|
},
|
|
"overrides": {
|
|
"cross-spawn": ">=7.0.5",
|
|
"@octokit/request-error@5.0.1": "5.1.1"
|
|
}
|
|
}
|