Bryan Zwicker
1f33b7b9ca
Add octokit retry plugin
...
- Added octokit plugin for automatic retries
- Removed un-imported dependency causing version conflicts
- Update dist for action with new retry plugin
- Update license cache
2025-12-09 09:43:04 -05:00
Tyler Dixon
32da07cbb3
Merge pull request #751 from actions/copilot/update-eslint-dependencies
...
Consolidate ESLint 9 and TypeScript ESLint 8 dependency updates
2025-11-20 16:06:33 +00:00
copilot-swe-agent[bot]
255643a289
Update ESLint and TypeScript dependencies to latest major versions
...
Co-authored-by: TylerDixon <4308048+TylerDixon@users.noreply.github.com >
2025-11-20 15:41:52 +00:00
copilot-swe-agent[bot]
88e24e2557
Initial commit - Planning dependency updates
...
Co-authored-by: TylerDixon <4308048+TylerDixon@users.noreply.github.com >
2025-11-20 15:35:33 +00:00
copilot-swe-agent[bot]
71190c8125
Initial plan
2025-11-20 15:31:57 +00:00
Tyler Dixon
0f28223e02
Merge pull request #744 from actions/dependabot/github_actions/actions/setup-node-6
...
Bump actions/setup-node from 5 to 6
2025-11-20 15:10:39 +00:00
Tyler Dixon
269f617ef1
Merge pull request #743 from actions/dependabot/npm_and_yarn/multi-a28ee524ce
...
Bump jest and @types/jest
2025-11-20 15:09:51 +00:00
dependabot[bot]
c6e5475358
Bump jest and @types/jest
...
Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest ) and [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest ). These dependencies needed to be updated together.
Updates `jest` from 29.7.0 to 30.2.0
- [Release notes](https://github.com/jestjs/jest/releases )
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest )
Updates `@types/jest` from 29.5.14 to 30.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest )
---
updated-dependencies:
- dependency-name: jest
dependency-version: 30.2.0
dependency-type: direct:development
update-type: version-update:semver-major
- dependency-name: "@types/jest"
dependency-version: 30.0.0
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-20 15:08:39 +00:00
Tyler Dixon
21e1d549ac
Merge pull request #741 from actions/dependabot/github_actions/github/codeql-action-4
...
Bump github/codeql-action from 3 to 4
2025-11-20 15:06:47 +00:00
Tyler Dixon
cdd363fe52
Merge pull request #748 from actions/dependabot/github_actions/actions/upload-artifact-5
...
Bump actions/upload-artifact from 4 to 5
2025-11-18 16:17:33 +00:00
Tyler Dixon
bda83083db
Merge pull request #750 from actions/dependabot/npm_and_yarn/js-yaml-3.14.2
...
Bump js-yaml from 3.14.1 to 3.14.2
2025-11-17 20:57:24 +00:00
dependabot[bot]
521b1ce8aa
Bump js-yaml from 3.14.1 to 3.14.2
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) from 3.14.1 to 3.14.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/3.14.1...3.14.2 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 3.14.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-17 20:06:45 +00:00
dependabot[bot]
29a98fecbd
Bump actions/upload-artifact from 4 to 5
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-27 13:34:47 +00:00
dependabot[bot]
27b30237e4
Bump actions/setup-node from 5 to 6
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 5 to 6.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-14 13:03:56 +00:00
Aarya B C
4fda2e598c
Merge pull request #742 from actions/dependabot/npm_and_yarn/ts-jest-29.4.5
...
Bump ts-jest from 29.4.1 to 29.4.5
2025-10-10 18:07:05 +00:00
dependabot[bot]
6a3986b73a
Bump ts-jest from 29.4.1 to 29.4.5
...
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest ) from 29.4.1 to 29.4.5.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases )
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.4.1...v29.4.5 )
---
updated-dependencies:
- dependency-name: ts-jest
dependency-version: 29.4.5
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-10 13:04:15 +00:00
dependabot[bot]
bb2c9aa5f7
Bump github/codeql-action from 3 to 4
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-08 13:03:44 +00:00
Tara Nelson
8a84a858ea
Merge pull request #616 from actions/dependabot/npm_and_yarn/typescript-eslint/parser-7.18.0
...
build(deps-dev): bump @typescript-eslint/parser from 7.14.1 to 7.18.0
2025-09-26 20:52:46 +00:00
Natasha Issayeva
9c46794006
Merge pull request #726 from actions/dependabot/github_actions/actions/setup-node-5
...
Bump actions/setup-node from 4 to 5
2025-09-26 18:28:24 +00:00
dependabot[bot]
42ac57756a
Bump actions/setup-node from 4 to 5
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4 to 5.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-26 18:27:31 +00:00
Natasha Issayeva
7ce80ae6d0
Merge pull request #714 from actions/dependabot/github_actions/actions/checkout-5
...
Bump actions/checkout from 4 to 5
2025-09-26 18:26:11 +00:00
Natasha Issayeva
cd45b24d3b
Merge pull request #730 from actions/dependabot/npm_and_yarn/types/node-24.5.2
...
Bump @types/node from 24.0.12 to 24.5.2
2025-09-26 18:25:08 +00:00
Natasha Issayeva
7cc0ede90c
Merge pull request #722 from actions/dependabot/npm_and_yarn/concurrently-9.2.1
...
Bump concurrently from 9.2.0 to 9.2.1
2025-09-26 18:21:34 +00:00
Natasha Issayeva
9a40b41cc3
Merge pull request #721 from actions/dependabot/npm_and_yarn/prettier-3.6.2
...
Bump prettier from 3.3.2 to 3.6.2
2025-09-26 18:20:48 +00:00
dependabot[bot]
be342b6e9d
Bump @types/node from 24.0.12 to 24.5.2
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 24.0.12 to 24.5.2.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 24.5.2
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-09-18 13:05:01 +00:00
dependabot[bot]
e8ddc30e26
Bump concurrently from 9.2.0 to 9.2.1
...
Bumps [concurrently](https://github.com/open-cli-tools/concurrently ) from 9.2.0 to 9.2.1.
- [Release notes](https://github.com/open-cli-tools/concurrently/releases )
- [Commits](https://github.com/open-cli-tools/concurrently/compare/v9.2.0...v9.2.1 )
---
updated-dependencies:
- dependency-name: concurrently
dependency-version: 9.2.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-26 01:08:12 +00:00
dependabot[bot]
ad0756e728
Bump prettier from 3.3.2 to 3.6.2
...
Bumps [prettier](https://github.com/prettier/prettier ) from 3.3.2 to 3.6.2.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.3.2...3.6.2 )
---
updated-dependencies:
- dependency-name: prettier
dependency-version: 3.6.2
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-26 01:03:10 +00:00
Tara Nelson
767fb93a84
Bump @typescript-eslint/parser to 7.18
2025-08-22 21:10:01 +00:00
Tara Nelson
4515659e2b
Merge pull request #707 from actions/dependabot/npm_and_yarn/concurrently-9.2.0
...
Bump concurrently from 8.2.2 to 9.2.0
2025-08-22 20:51:59 +00:00
dependabot[bot]
8443cd2d07
Bump concurrently from 8.2.2 to 9.2.0
...
Bumps [concurrently](https://github.com/open-cli-tools/concurrently ) from 8.2.2 to 9.2.0.
- [Release notes](https://github.com/open-cli-tools/concurrently/releases )
- [Commits](https://github.com/open-cli-tools/concurrently/compare/v8.2.2...v9.2.0 )
---
updated-dependencies:
- dependency-name: concurrently
dependency-version: 9.2.0
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-22 20:33:37 +00:00
Tara Nelson
b6b03930ed
Merge pull request #705 from actions/dependabot/npm_and_yarn/octokit/request-10.0.3
...
Bump @octokit/request from 9.2.2 to 10.0.3
2025-08-22 20:30:58 +00:00
dependabot[bot]
3acd5a449d
Update licensed cache and dist/ directory
2025-08-22 19:56:29 +00:00
dependabot[bot]
29fef8c373
Bump @octokit/request from 9.2.2 to 10.0.3
...
Bumps [@octokit/request](https://github.com/octokit/request.js ) from 9.2.2 to 10.0.3.
- [Release notes](https://github.com/octokit/request.js/releases )
- [Commits](https://github.com/octokit/request.js/compare/v9.2.2...v10.0.3 )
---
updated-dependencies:
- dependency-name: "@octokit/request"
dependency-version: 10.0.3
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-22 19:55:59 +00:00
Mardav Wala
b7156dd039
Merge pull request #710 from KyFaSt/patch-1
...
Add Missing Languages to CodeQL Advanced Configuration
2025-08-18 15:23:15 +00:00
Mardav Wala
06f57cd265
Merge pull request #719 from actions/fix-missing-regex-anchor
...
Fix code scanning alert:`missing regex anchor`
2025-08-18 15:06:10 +00:00
Mardav Wala
b798067747
Remove fix-regex.test.js
2025-08-15 17:39:07 +00:00
Mardav Wala
ca20dc5da1
Add tests for regex fix functionality and enhance fix logic in fix-regex.js
2025-08-15 17:31:52 +00:00
Mardav Wala
3a231c99dc
Update fix-regex.js
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-08-15 13:08:00 -04:00
Mardav Wala
4afe1bcb60
Fix both code scanning alerts
...
1. Fixed misleading operator precedence by adding proper grouping:
- Changed /^text\/|charset=utf-8$/ to /^(text\/|charset=utf-8)$/
- This removes the misleading precedence warning
2. Fixed file system race condition in fix-regex.js:
- Removed fs.existsSync() check followed by file operations
- Now uses try/catch with proper ENOENT error handling
- Eliminates potential TOCTOU vulnerability
All tests pass and regex functionality is preserved.
2025-08-15 17:03:48 +00:00
Mardav Wala
974ac589f3
Fix regex pattern in @octokit/request files for correct operator precedence
2025-08-15 16:48:23 +00:00
Mardav Wala
76d5f294e7
Fix CI build issues
...
- Fixed ESLint violations in fix-regex.js by excluding it from linting
- Updated license cache files for new dependency versions
- All build checks now pass successfully
- Regex fix is working correctly in automated builds
2025-08-15 16:36:36 +00:00
Mardav Wala
5320cf31ca
chore: remove unused dependency 'patch-package' from package.json
2025-08-15 16:20:40 +00:00
Mardav Wala
a0490275a8
Automate regex fix for CI builds
...
- Updated build:package script to run fix-regex.js before bundling
- Updated postinstall script to apply fix after npm install
- Ensures CI builds will have the fix applied automatically
- Fixes misleading operator precedence in /^text\/|charset=utf-8$/ regex
2025-08-15 16:20:30 +00:00
Mardav Wala
fcb131f251
Fix regex with misleading operator precedence in @octokit/request dependency
...
- Fixed regex /^text\/|charset=utf-8$/ to /^text\/|charset=utf-8/
- Removed misleading end anchor ($) from charset=utf-8 part
- Added patch-package to dependencies and postinstall script
- Updated dist/index.js with fix applied to bundled dependencies
- All tests continue to pass
2025-08-15 16:05:10 +00:00
Mardav Wala
29996a4979
Merge pull request #717 from actions/alert-autofix-7
...
Potential fix for code scanning alert no. 7: Workflow does not contain permissions
2025-08-15 14:58:43 +00:00
Mardav Wala
e312ab5a70
Merge pull request #716 from actions/alert-autofix-5
...
Potential fix for code scanning alert no. 5: Workflow does not contain permissions
2025-08-15 14:58:13 +00:00
Mardav Wala
ab879ebbde
Merge pull request #715 from actions/alert-autofix-6
...
Potential fix for code scanning alert no. 6: Workflow does not contain permissions
2025-08-15 14:57:38 +00:00
Mardav Wala
a963d478cf
Remove redundant permissions section from test.yml
2025-08-14 18:52:07 -04:00
Mardav Wala
95a513fa21
Update licensed.yml
...
Remove unnecessary permissions declaration.
2025-08-14 18:51:32 -04:00
Mardav Wala
82cff4c773
Update .github/workflows/test.yml
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-08-14 18:50:25 -04:00