Aparna Jyothi
da434008b8
npm run format
11 months ago
Aparna Jyothi
565ba0f11a
update node24
11 months ago
Aparna Jyothi
af03c14274
check failure fix
12 months ago
Aparna Jyothi
c3e3067955
Merge remote-tracking branch 'origin/main' into node24-fix
12 months ago
Aparna Jyothi
22d9ca5e06
upgrade @types/node
12 months ago
Matthew Hughes
e75c3e80bc
Bump `form-data` to bring in fix for critical vulnerability ( #618 )
...
The vulnerability:
$ npm audit --audit-level=high
# npm audit report
form-data >=4.0.0 <4.0.4 || <2.5.4
Severity: critical
form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4
form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4
fix available via `npm audit fix`
node_modules/@azure/core-http/node_modules/form-data
node_modules/@types/node-fetch/node_modules/form-data
node_modules/form-data
1 critical severity vulnerability
To address all issues, run:
npm audit fix
This change is the result of from running `npm audit fix` and then
using[1] to update licenses via `licensed cache`.
It doesn't look like `dependabot` previously raised any PRs for this
dependency, so this bumps it from `4.0.0` to `4.0.4`, see the
changelog[2] for details.
Link: https://github.com/licensee/licensed [1]
Link: https://github.com/form-data/form-data/blob/v4.0.4/CHANGELOG.md [2]
12 months ago
Aparna Jyothi
b184a007c8
fix for check failures
12 months ago
dependabot[bot]
7c0b336c9a
Bump typescript from 5.4.2 to 5.8.3 ( #538 )
...
* Bump typescript from 5.4.2 to 5.7.3
Bumps [typescript](https://github.com/microsoft/TypeScript ) from 5.4.2 to 5.7.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml )
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.4.2...v5.7.3 )
---
updated-dependencies:
- dependency-name: typescript
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* Fix low security alert
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>
1 year ago
dependabot[bot]
6f26dcc668
Bump undici from 5.28.5 to 5.29.0 ( #594 )
...
* Bump undici from 5.28.5 to 5.29.0
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.5 to 5.29.0.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.5...v5.29.0 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 5.29.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Fix CI failures
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>
1 year ago
dependabot[bot]
fa96338abe
Bump @actions/tool-cache from 2.0.1 to 2.0.2 ( #591 )
...
* Bump @actions/tool-cache from 2.0.1 to 2.0.2
Bumps [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache ) from 2.0.1 to 2.0.2.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache )
---
updated-dependencies:
- dependency-name: "@actions/tool-cache"
dependency-version: 2.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* Fix failures
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>
1 year ago
dependabot[bot]
bb65d8857b
Bump ts-jest from 29.1.2 to 29.3.2 ( #582 )
...
* Bump ts-jest from 29.1.2 to 29.3.2
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest ) from 29.1.2 to 29.3.2.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases )
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.3.2 )
---
updated-dependencies:
- dependency-name: ts-jest
dependency-version: 29.3.2
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* fix check failures
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>
1 year ago
dependabot[bot]
7f17e836c0
Bump @actions/glob from 0.4.0 to 0.5.0 ( #573 )
...
* Bump @actions/glob from 0.4.0 to 0.5.0
Bumps [@actions/glob](https://github.com/actions/toolkit/tree/HEAD/packages/glob ) from 0.4.0 to 0.5.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/glob/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/glob )
---
updated-dependencies:
- dependency-name: "@actions/glob"
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* fix for check failures
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>
1 year ago
aparnajyothi-y
691cc3533f
upgrade actions/cache to 4.0.3 ( #574 )
1 year ago
dependabot[bot]
0aaccfd150
Bump undici from 5.28.4 to 5.28.5 ( #541 )
...
* Bump undici from 5.28.4 to 5.28.5
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.4 to 5.28.5.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5 )
---
updated-dependencies:
- dependency-name: undici
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Bump undici from 5.28.4 to 5.28.5
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.4 to 5.28.5.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5 )
---
updated-dependencies:
- dependency-name: undici
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Fix failures
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>
1 year ago
aparnajyothi-y
c4c1141886
upgrade actions/cache to 4.0.2 ( #568 )
1 year ago
dependabot[bot]
1d82324e53
Bump semver from 7.6.0 to 7.6.3 ( #535 )
...
* Bump semver from 7.6.0 to 7.6.3
Bumps [semver](https://github.com/npm/node-semver ) from 7.6.0 to 7.6.3.
- [Release notes](https://github.com/npm/node-semver/releases )
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md )
- [Commits](https://github.com/npm/node-semver/compare/v7.6.0...v7.6.3 )
---
updated-dependencies:
- dependency-name: semver
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* fix for check-dist and license failures
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>
2 years ago
Bassem Dghaidi
f81f022188
Use the new cache service: upgrade `@actions/cache` to `^4.0.0` ( #531 )
...
* Use new cache service
* Add licensed output
* Review licenses & update types
2 years ago
dependabot[bot]
0a12ed9d6a
Bump braces from 3.0.2 to 3.0.3 ( #487 )
...
* Bump braces from 3.0.2 to 3.0.3
Bumps [braces](https://github.com/micromatch/braces ) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3 )
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Bump undici from 5.28.3 to 5.28.4
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>
2 years ago
dependabot[bot]
be1aa1186e
Bump undici from 5.28.2 to 5.28.3 ( #465 )
...
* Bump undici from 5.28.2 to 5.28.3
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.2 to 5.28.3.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.2...v5.28.3 )
---
updated-dependencies:
- dependency-name: undici
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* fixed check failures and update dependencies
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>
2 years ago
Dmitry Shibanov
0c52d547c9
Update dependencies for node20 ( #445 )
3 years ago
Dusan Trickovic
b1c343484c
Fix licensing for Semver 6.3.1
3 years ago
dependabot[bot]
db8764c1e2
Bump tough-cookie and @azure/ms-rest-js ( #392 )
3 years ago
Nikolai Laevskii
fac708d667
Bump @actions/cache dependency to v3.2.1 ( #374 )
3 years ago
Dmitry Shibanov
dd84a9531a
Update xml2js ( #370 )
3 years ago
Francesco Renzi
514ae57904
Update @actions/core to 1.10.0
4 years ago
Vladimir Safonkin
75be648571
Fix license
4 years ago
Vladimir Safonkin
bb9cf42688
Fix license
4 years ago
Vladimir Safonkin
97919d33f5
Fix license
4 years ago
Vladimir Safonkin
df0583a96c
Fix license
4 years ago
Vladimir Safonkin
5ea2b37572
Fix license
4 years ago
Vladimir Safonkin
e52a7c55ca
Update license
4 years ago
IvanZosimov
b22fbbc292
Implementation of caching functionality for setup-go action ( #228 )
4 years ago
Dmitry Shibanov
bfdd3570ce
Implement "check-latest" flag to check if pre-cached version is latest one ( #186 )
5 years ago
Thomas Boop
37335c7bb2
Swap to Environment Files ( #76 )
...
* Swap to env files
6 years ago
Thomas Boop
4047b11da0
Manually review dependencies
6 years ago
Thomas Boop
23a9878ae4
Add Licensed workflow and configuration files
6 years ago