mirror of https://github.com/actions/setup-go.git
dependabot/npm_and_yarn/js-yaml-3.15.2
main
dependabot/npm_and_yarn/nock-14.0.16
dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-8.64.0
dependabot/npm_and_yarn/typescript-eslint/parser-8.64.0
dependabot/npm_and_yarn/eslint-plugin-jest-29.15.4
dependabot/npm_and_yarn/prettier-3.9.5
tool-config-auto-update
releases/v6
releases/v5
restore-v4-release
Testv5
dependabot/npm_and_yarn/eslint-config-prettier-10.1.8
node24-fix
node24
test-macos-x64-runner
add-publish-immutable-actions
restore-v3-release
thboop/node16update
releases/v1
master
goenv
matcher
binpath
v2-proxy
ethomson/update_description
v1
v2-beta
v1.0.0
v1.0.1
v1.0.2
v1.1.0
v1.1.1
v1.1.2
v1.1.3
v2
v2.0.1
v2.0.2
v2.0.3
v2.1.0
v2.1.1
v2.1.2
v2.1.3
v2.1.4
v2.1.5
v2.2.0
v3
v3.0.0
v3.1.0
v3.2.0
v3.2.1
v3.3.0
v3.3.1
v3.4.0
v3.5.0
v3.6.0
v3.6.1
v4
v4.0.0
v4.0.1
v4.1.0
v4.2.0
v4.2.1
v4.3.0
v5
v5.0.0
v5.0.1
v5.0.2
v5.1.0
v5.2.0
v5.3.0
v5.4.0
v5.5.0
v5.6.0
v6
v6.0.0
v6.1.0
v6.2.0
v6.3.0
v6.4.0
v6.5.0
v7
v7.0.0
${ noResults }
1 Commits (dc28465ac2d76b6228c0ad15f9089be60579a04b)
| Author | SHA1 | Message | Date |
|---|---|---|---|
|
|
fba3fb4ead
|
fix: resolve audit/license failures (#784)
* fix: resolve brace-expansion high-severity vulnerability, refresh license cache, rebuild dist - Regenerated package-lock.json to pick up brace-expansion@5.0.9 (fixes GHSA-rgw5-rvv9-x895, a DoS via unbounded intermediate arrays), which is already permitted by minimatch's existing ^5.0.8 semver range. - Refreshed .licenses/npm cache to match the updated dependency tree. - Added minimatch to the licensed.yml reviewed list: its detected license text doesn't cleanly match Blue Oak 1.0.0, which is already in the allowed list. - Rebuilt dist/setup and dist/cache-save from source. npm audit --audit-level=high now reports 0 vulnerabilities; licensed status reports 0 errors; npm run pre-checkin passes locally. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: narrow audit dependency updates --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> |
3 weeks ago |