You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
setup-go/.licenses/npm
Haritha fba3fb4ead
fix: resolve audit/license failures (#784)
* fix: resolve brace-expansion high-severity vulnerability, refresh license cache, rebuild dist

- Regenerated package-lock.json to pick up brace-expansion@5.0.9 (fixes
  GHSA-rgw5-rvv9-x895, a DoS via unbounded intermediate arrays), which
  is already permitted by minimatch's existing ^5.0.8 semver range.
- Refreshed .licenses/npm cache to match the updated dependency tree.
- Added minimatch to the licensed.yml reviewed list: its detected
  license text doesn't cleanly match Blue Oak 1.0.0, which is already
  in the allowed list.
- Rebuilt dist/setup and dist/cache-save from source.

npm audit --audit-level=high now reports 0 vulnerabilities;
licensed status reports 0 errors; npm run pre-checkin passes locally.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix: narrow audit dependency updates

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
3 weeks ago
..
@actions chore(deps): bump @actions/cache to 6.2.0 (#771) 2 months ago
@azure Migrate to ESM and upgrade dependencies (#763) 2 months ago
@nodable Upgrade checkout refs and docs to v7 (#779) 2 months ago
@protobuf-ts Bump @actions/cache to v5 (#695) 8 months ago
@typespec Migrate to ESM and upgrade dependencies (#763) 2 months ago
agent-base.dep.yml Bump @actions/cache to v5 (#695) 8 months ago
anynum.dep.yml Migrate to ESM and upgrade dependencies (#763) 2 months ago
balanced-match-1.0.2.dep.yml Migrate to ESM and upgrade dependencies (#763) 2 months ago
balanced-match-4.0.4.dep.yml Migrate to ESM and upgrade dependencies (#763) 2 months ago
brace-expansion-1.1.18.dep.yml fix: resolve audit/license failures (#784) 3 weeks ago
brace-expansion-5.0.9.dep.yml fix: resolve audit/license failures (#784) 3 weeks ago
concat-map.dep.yml Implementation of caching functionality for setup-go action (#228) 4 years ago
debug.dep.yml Bump @actions/cache to v5 (#695) 8 months ago
events.dep.yml Implementation of caching functionality for setup-go action (#228) 4 years ago
fast-xml-builder.dep.yml chore: update @types/node and @typescript-eslint dependencies to latest versions (#755) 3 months ago
fast-xml-parser.dep.yml Upgrade checkout refs and docs to v7 (#779) 2 months ago
http-proxy-agent.dep.yml Bump @actions/cache to v5 (#695) 8 months ago
https-proxy-agent.dep.yml Bump @actions/cache to v5 (#695) 8 months ago
is-unsafe.dep.yml Upgrade checkout refs and docs to v7 (#779) 2 months ago
minimatch-3.1.5.dep.yml Migrate to ESM and upgrade dependencies (#763) 2 months ago
minimatch-10.2.5.dep.yml Migrate to ESM and upgrade dependencies (#763) 2 months ago
ms.dep.yml Bump @actions/cache to v5 (#695) 8 months ago
path-expression-matcher.dep.yml Upgrade checkout refs and docs to v7 (#779) 2 months ago
semver.dep.yml Migrate to ESM and upgrade dependencies (#763) 2 months ago
strnum.dep.yml Migrate to ESM and upgrade dependencies (#763) 2 months ago
tslib.dep.yml Bump @actions/cache to v5 (#695) 8 months ago
tunnel.dep.yml Add Licensed workflow and configuration files 6 years ago
undici.dep.yml fix: resolve audit/license failures (#784) 3 weeks ago
xml-naming-0.1.0.dep.yml Upgrade checkout refs and docs to v7 (#779) 2 months ago
xml-naming-0.3.0.dep.yml Upgrade checkout refs and docs to v7 (#779) 2 months ago