mirror of https://github.com/actions/setup-go.git
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
* fix: resolve brace-expansion high-severity vulnerability, refresh license cache, rebuild dist - Regenerated package-lock.json to pick up brace-expansion@5.0.9 (fixes GHSA-rgw5-rvv9-x895, a DoS via unbounded intermediate arrays), which is already permitted by minimatch's existing ^5.0.8 semver range. - Refreshed .licenses/npm cache to match the updated dependency tree. - Added minimatch to the licensed.yml reviewed list: its detected license text doesn't cleanly match Blue Oak 1.0.0, which is already in the allowed list. - Rebuilt dist/setup and dist/cache-save from source. npm audit --audit-level=high now reports 0 vulnerabilities; licensed status reports 0 errors; npm run pre-checkin passes locally. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: narrow audit dependency updates --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> |
3 weeks ago | |
|---|---|---|
| .. | ||
| @actions | 2 months ago | |
| @azure | 2 months ago | |
| @nodable | 2 months ago | |
| @protobuf-ts | 8 months ago | |
| @typespec | 2 months ago | |
| agent-base.dep.yml | 8 months ago | |
| anynum.dep.yml | 2 months ago | |
| balanced-match-1.0.2.dep.yml | 2 months ago | |
| balanced-match-4.0.4.dep.yml | 2 months ago | |
| brace-expansion-1.1.18.dep.yml | 3 weeks ago | |
| brace-expansion-5.0.9.dep.yml | 3 weeks ago | |
| concat-map.dep.yml | 4 years ago | |
| debug.dep.yml | 8 months ago | |
| events.dep.yml | 4 years ago | |
| fast-xml-builder.dep.yml | 3 months ago | |
| fast-xml-parser.dep.yml | 2 months ago | |
| http-proxy-agent.dep.yml | 8 months ago | |
| https-proxy-agent.dep.yml | 8 months ago | |
| is-unsafe.dep.yml | 2 months ago | |
| minimatch-3.1.5.dep.yml | 2 months ago | |
| minimatch-10.2.5.dep.yml | 2 months ago | |
| ms.dep.yml | 8 months ago | |
| path-expression-matcher.dep.yml | 2 months ago | |
| semver.dep.yml | 2 months ago | |
| strnum.dep.yml | 2 months ago | |
| tslib.dep.yml | 8 months ago | |
| tunnel.dep.yml | 6 years ago | |
| undici.dep.yml | 3 weeks ago | |
| xml-naming-0.1.0.dep.yml | 2 months ago | |
| xml-naming-0.3.0.dep.yml | 2 months ago | |