actions/go-dependency-submission
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
NaN Commits 1 Branch 9 Tags
main
Commit Graph

32 Commits

Author SHA1 Message Date
Lewis Jones
af797f9868 Upgrade dependencies 
- @actions/core: ^1.9.1 → ^1.11.1 (minor bump within v1)
- @actions/github: ^6.0.0 → ^6.0.1 (patch bump within v6)
- Added "overrides": { "undici": "^6.24.0" } to force undici past the vulnerable range
 2026-04-20 15:29:12 +01:00
dependabot[bot]
235fcc6594 Bump js-yaml from 3.14.1 to 3.14.2 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.1 to 3.14.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/3.14.1...3.14.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-17 21:54:46 +00:00
Salman Muin Kayser Chishti
6fe75f51e7 Update Node and GitHub Actions versions to latest 
Bump Node.js engine requirement to >=24 in package.json and package-lock.json. Update action.yml to use node24. Upgrade actions/checkout to v4 and actions/setup-go to v5 in the workflow. These changes ensure compatibility with the latest Node.js and GitHub Actions tooling.
 2025-07-30 14:07:24 +01:00
dependabot[bot]
4bd7d52f51 Bump undici from 5.28.5 to 5.29.0 
Bumps [undici](https://github.com/nodejs/undici) from 5.28.5 to 5.29.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.28.5...v5.29.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 5.29.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-15 16:34:10 +00:00
Kevin Dangoor
8454e68228 Bump version to 2.0.3 2025-03-26 11:26:53 -04:00
Kevin Dangoor
9d7f10abd3 Bump @octokit/request to 8.4.1 
Stopgap until dependencies are also updated to use this version.
 2025-03-25 18:25:21 -04:00
Kevin Dangoor
e9e2e59767 Bump version to 2.0.2 
Also updates the CONTRIBUTING.md doc to include the release process.
 2025-03-24 17:55:11 -04:00
Kevin Dangoor
2ba7333c02 Add @babel/preset-typescript to enable TS support 2025-03-24 16:18:13 -04:00
Justin Holguín
6b820c79e5 Add babel 2025-03-21 21:00:28 +00:00
Justin Holguín
5aac9f3ac2 Update dependency-submission-toolkit to 2.0.5 2025-03-21 20:45:01 +00:00
dependabot[bot]
09f927f752 Bump @octokit/plugin-paginate-rest from 9.2.1 to 9.2.2 
Bumps [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js) from 9.2.1 to 9.2.2.
- [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases)
- [Commits](https://github.com/octokit/plugin-paginate-rest.js/compare/v9.2.1...v9.2.2)

---
updated-dependencies:
- dependency-name: "@octokit/plugin-paginate-rest"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-17 23:32:23 +00:00
Justin Holguín
edddf01ef3 Add prettier as an explicit dev dependency 2025-03-17 21:41:33 +00:00
dependabot[bot]
fef74437e1 Bump @octokit/request-error, @actions/github and @github/dependency-submission-toolkit 
Bumps [@octokit/request-error](https://github.com/octokit/request-error.js) to 5.1.1 and updates ancestor dependencies [@octokit/request-error](https://github.com/octokit/request-error.js), [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) and [@github/dependency-submission-toolkit](https://github.com/github/dependency-submission-toolkit). These dependencies need to be updated together.


Updates `@octokit/request-error` from 2.1.0 to 5.1.1
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](https://github.com/octokit/request-error.js/compare/v2.1.0...v5.1.1)

Updates `@actions/github` from 5.0.3 to 6.0.0
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

Updates `@github/dependency-submission-toolkit` from 1.2.10 to 2.0.4
- [Release notes](https://github.com/github/dependency-submission-toolkit/releases)
- [Commits](https://github.com/github/dependency-submission-toolkit/compare/v1.2.10...v2.0.4)

---
updated-dependencies:
- dependency-name: "@octokit/request-error"
  dependency-type: indirect
- dependency-name: "@actions/github"
  dependency-type: direct:production
- dependency-name: "@github/dependency-submission-toolkit"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-14 23:38:40 +00:00
dependabot[bot]
524f7d80b6 Bump undici from 5.28.4 to 5.28.5 
Bumps [undici](https://github.com/nodejs/undici) from 5.28.4 to 5.28.5.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5)

---
updated-dependencies:
- dependency-name: undici
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-21 23:57:53 +00:00
dependabot[bot]
57a7494bef Bump braces from 3.0.2 to 3.0.3 
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-19 22:09:37 +00:00
dependabot[bot]
59b9adda7a Bump undici from 5.28.3 to 5.28.4 
Bumps [undici](https://github.com/nodejs/undici) from 5.28.3 to 5.28.4.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4)

---
updated-dependencies:
- dependency-name: undici
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-04-04 17:16:42 +00:00
Federico Builes
5223bcc5d4 bumping to 2.0.1 2024-02-19 09:47:06 +01:00
dependabot[bot]
8d6b550076 Bump undici from 5.26.3 to 5.28.3 
Bumps [undici](https://github.com/nodejs/undici) from 5.26.3 to 5.28.3.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.26.3...v5.28.3)

---
updated-dependencies:
- dependency-name: undici
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-02-16 17:56:57 +00:00
Tatyana Kostromskaya
48da37c7b0 Update version 2024-01-10 13:51:15 +00:00
dependabot[bot]
1f1e6536fd Bump @babel/traverse from 7.17.10 to 7.23.2 
Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.17.10 to 7.23.2.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.23.2/packages/babel-traverse)

---
updated-dependencies:
- dependency-name: "@babel/traverse"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-10-17 04:03:25 +00:00
dependabot[bot]
b423ed5efd Bump undici from 5.19.1 to 5.26.3 
Bumps [undici](https://github.com/nodejs/undici) from 5.19.1 to 5.26.3.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.19.1...v5.26.3)

---
updated-dependencies:
- dependency-name: undici
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-10-16 15:14:06 +00:00
dependabot[bot]
4897662a1b Bump word-wrap from 1.2.3 to 1.2.4 
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4.
- [Release notes](https://github.com/jonschlinkert/word-wrap/releases)
- [Commits](https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4)

---
updated-dependencies:
- dependency-name: word-wrap
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-07-19 17:27:34 +00:00
Justin Holguín
d7966ef64e Update dependency-submission-toolkit 2023-03-22 23:35:52 +00:00
dependabot[bot]
fd87e17f94 Bump json5 from 1.0.1 to 1.0.2 
Bumps [json5](https://github.com/json5/json5) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](https://github.com/json5/json5/compare/v1.0.1...v1.0.2)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-17 05:46:28 +00:00
dependabot[bot]
78efaf639c Bump undici from 5.9.1 to 5.19.1 
Bumps [undici](https://github.com/nodejs/undici) from 5.9.1 to 5.19.1.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.9.1...v5.19.1)

---
updated-dependencies:
- dependency-name: undici
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-17 00:09:43 +00:00
dependabot[bot]
ef79eb4942 Bump @actions/core from 1.8.2 to 1.9.1 
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.8.2 to 1.9.1.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-19 07:58:44 +00:00
dependabot[bot]
67952530be Bump undici from 5.8.0 to 5.9.1 
Bumps [undici](https://github.com/nodejs/undici) from 5.8.0 to 5.9.1.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.8.0...v5.9.1)

---
updated-dependencies:
- dependency-name: undici
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-08-18 20:01:31 +00:00
dependabot[bot]
d101b09c67 Bump undici from 5.5.1 to 5.8.0 
Bumps [undici](https://github.com/nodejs/undici) from 5.5.1 to 5.8.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.5.1...v5.8.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-07-21 21:01:02 +00:00
Lane Seppala
0281eb47c2 Use dependency-submission-toolkit published on npmjs.com 2022-06-28 11:20:49 -06:00
Lane Seppala
be130df09a Correctly identify dependency versions chosen by Go 2022-06-16 22:46:09 -06:00
dependabot[bot]
3b03ea373e Bump undici from 5.2.0 to 5.5.1 
Bumps [undici](https://github.com/nodejs/undici) from 5.2.0 to 5.5.1.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.2.0...v5.5.1)

---
updated-dependencies:
- dependency-name: undici
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-06-17 01:59:00 +00:00
Lane Seppala
054f21a184 Release public version of the Go Dependency Submission action 2022-06-15 16:36:38 -06:00