Priya Gupta
83e99e7384
Upgrade actions/checkout to v5 and actions/setup-go to v6 in README.md
2025-09-02 21:54:12 +05:30
Aparna Jyothi
4cf7c0560d
node update from the workflows
2025-09-02 21:53:45 +05:30
Aparna Jyothi
4fc21c0d5d
npm run format
2025-08-20 10:26:44 +05:30
Aparna Jyothi
da434008b8
npm run format
2025-08-20 10:25:25 +05:30
Aparna Jyothi
565ba0f11a
update node24
2025-08-19 17:55:57 +05:30
Aparna Jyothi
7ca6144633
package-lock.json update
2025-08-19 16:23:34 +05:30
Aparna Jyothi
af03c14274
check failure fix
2025-08-14 19:11:11 +05:30
Aparna Jyothi
c3e3067955
Merge remote-tracking branch 'origin/main' into node24-fix
2025-08-14 19:05:12 +05:30
Aparna Jyothi
d7ffe7f414
update package.json version
2025-08-14 18:58:44 +05:30
Aparna Jyothi
22d9ca5e06
upgrade @types/node
2025-08-14 18:56:26 +05:30
Matthew Hughes
e75c3e80bc
Bump form-data to bring in fix for critical vulnerability ( #618 )
...
The vulnerability:
$ npm audit --audit-level=high
# npm audit report
form-data >=4.0.0 <4.0.4 || <2.5.4
Severity: critical
form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4
form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4
fix available via `npm audit fix`
node_modules/@azure/core-http/node_modules/form-data
node_modules/@types/node-fetch/node_modules/form-data
node_modules/form-data
1 critical severity vulnerability
To address all issues, run:
npm audit fix
This change is the result of from running `npm audit fix` and then
using[1] to update licenses via `licensed cache`.
It doesn't look like `dependabot` previously raised any PRs for this
dependency, so this bumps it from `4.0.0` to `4.0.4`, see the
changelog[2] for details.
Link: https://github.com/licensee/licensed [1]
Link: https://github.com/form-data/form-data/blob/v4.0.4/CHANGELOG.md [2]
2025-08-13 12:02:46 -05:00
Aparna Jyothi
b184a007c8
fix for check failures
2025-08-13 11:17:09 +05:30
Salman Muin Kayser Chishti
96c2b3c9c1
package updates
2025-08-08 07:31:10 +01:00
Salman Muin Kayser Chishti
60b6f6b09a
format
2025-08-08 07:04:05 +01:00
Salman Muin Kayser Chishti
abe7d6b8af
Node 24 upgrade
...
Doing an upgrade for node 24, node 24 is stricter with types so need to add a type for achitecture
2025-07-31 11:28:58 +01:00
dependabot[bot]
8e57b58e57
Bump eslint-plugin-jest from 28.11.0 to 29.0.1 ( #603 )
...
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest ) from 28.11.0 to 29.0.1.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases )
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v28.11.0...v29.0.1 )
---
updated-dependencies:
- dependency-name: eslint-plugin-jest
dependency-version: 29.0.1
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-16 16:31:11 -05:00
dependabot[bot]
7c0b336c9a
Bump typescript from 5.4.2 to 5.8.3 ( #538 )
...
* Bump typescript from 5.4.2 to 5.7.3
Bumps [typescript](https://github.com/microsoft/TypeScript ) from 5.4.2 to 5.7.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml )
- [Commits](https://github.com/microsoft/TypeScript/compare/v5.4.2...v5.7.3 )
---
updated-dependencies:
- dependency-name: typescript
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* Fix low security alert
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>
2025-07-10 19:26:25 -05:00
dependabot[bot]
6f26dcc668
Bump undici from 5.28.5 to 5.29.0 ( #594 )
...
* Bump undici from 5.28.5 to 5.29.0
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.5 to 5.29.0.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.5...v5.29.0 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 5.29.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Fix CI failures
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>
2025-07-08 10:07:25 -05:00
dependabot[bot]
8d4083a006
Bump @typescript-eslint/parser from 5.62.0 to 8.32.0 ( #590 )
...
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser ) from 5.62.0 to 8.32.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.32.0/packages/parser )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
dependency-version: 8.32.0
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-07 13:56:18 -05:00
dependabot[bot]
fa96338abe
Bump @actions/tool-cache from 2.0.1 to 2.0.2 ( #591 )
...
* Bump @actions/tool-cache from 2.0.1 to 2.0.2
Bumps [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache ) from 2.0.1 to 2.0.2.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache )
---
updated-dependencies:
- dependency-name: "@actions/tool-cache"
dependency-version: 2.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* Fix failures
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>
2025-06-18 17:01:53 -05:00
dependabot[bot]
4de67c04ab
Bump @types/jest from 29.5.12 to 29.5.14 ( #589 )
...
Bumps [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest ) from 29.5.12 to 29.5.14.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest )
---
updated-dependencies:
- dependency-name: "@types/jest"
dependency-version: 29.5.14
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-11 11:22:57 -05:00
Josh Soref
d35c59abb0
chore: update discussions url ( #527 )
2025-05-07 12:33:58 -05:00
Priya Gupta
29694d72cd
Add manifest validation and improve error handling ( #586 )
2025-05-05 22:00:04 -05:00
dependabot[bot]
78535dd5f2
Bump eslint-plugin-jest from 27.9.0 to 28.11.0 ( #537 )
...
* Bump eslint-plugin-jest from 27.9.0 to 28.11.0
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest ) from 27.9.0 to 28.11.0.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases )
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v27.9.0...v28.11.0 )
---
updated-dependencies:
- dependency-name: eslint-plugin-jest
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
* check failures fix
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>
2025-05-05 13:34:43 -05:00
dependabot[bot]
bb65d8857b
Bump ts-jest from 29.1.2 to 29.3.2 ( #582 )
...
* Bump ts-jest from 29.1.2 to 29.3.2
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest ) from 29.1.2 to 29.3.2.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases )
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.3.2 )
---
updated-dependencies:
- dependency-name: ts-jest
dependency-version: 29.3.2
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* fix check failures
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>
2025-04-30 10:37:00 -05:00
dependabot[bot]
7f17e836c0
Bump @actions/glob from 0.4.0 to 0.5.0 ( #573 )
...
* Bump @actions/glob from 0.4.0 to 0.5.0
Bumps [@actions/glob](https://github.com/actions/toolkit/tree/HEAD/packages/glob ) from 0.4.0 to 0.5.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/glob/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/glob )
---
updated-dependencies:
- dependency-name: "@actions/glob"
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* fix for check failures
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>
2025-04-29 12:31:28 -05:00
Priya Gupta
dca8468d37
Update self-hosted environment validation and bump undici version ( #556 )
...
* Fix self-hosted environment check
* Update isSelfHosted logic
2025-04-01 10:32:30 -05:00
aparnajyothi-y
691cc3533f
upgrade actions/cache to 4.0.3 ( #574 )
2025-04-01 10:24:42 -05:00
dependabot[bot]
0aaccfd150
Bump undici from 5.28.4 to 5.28.5 ( #541 )
...
* Bump undici from 5.28.4 to 5.28.5
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.4 to 5.28.5.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5 )
---
updated-dependencies:
- dependency-name: undici
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Bump undici from 5.28.4 to 5.28.5
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.4 to 5.28.5.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5 )
---
updated-dependencies:
- dependency-name: undici
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Fix failures
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>
2025-03-18 10:29:43 -05:00
aparnajyothi-y
c4c1141886
upgrade actions/cache to 4.0.2 ( #568 )
2025-03-11 10:19:54 -05:00
dependabot[bot]
5a083d0e9a
Bump eslint-config-prettier from 8.10.0 to 10.0.1 ( #536 )
...
Bumps [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier ) from 8.10.0 to 10.0.1.
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases )
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/eslint-config-prettier/compare/v8.10.0...v10.0.1 )
---
updated-dependencies:
- dependency-name: eslint-config-prettier
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-21 15:47:58 -06:00
dependabot[bot]
1d82324e53
Bump semver from 7.6.0 to 7.6.3 ( #535 )
...
* Bump semver from 7.6.0 to 7.6.3
Bumps [semver](https://github.com/npm/node-semver ) from 7.6.0 to 7.6.3.
- [Release notes](https://github.com/npm/node-semver/releases )
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md )
- [Commits](https://github.com/npm/node-semver/compare/v7.6.0...v7.6.3 )
---
updated-dependencies:
- dependency-name: semver
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* fix for check-dist and license failures
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>
2025-01-21 15:45:59 -06:00
dependabot[bot]
f111f3307d
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 ( #534 )
...
Bumps [actions/publish-immutable-action](https://github.com/actions/publish-immutable-action ) from 0.0.3 to 0.0.4.
- [Release notes](https://github.com/actions/publish-immutable-action/releases )
- [Commits](https://github.com/actions/publish-immutable-action/compare/0.0.3...v0.0.4 )
---
updated-dependencies:
- dependency-name: actions/publish-immutable-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-20 21:09:38 -06:00
HarithaVattikuti
3d10edb4c2
Add new permission section ( #533 )
2025-01-16 08:47:07 -06:00
HarithaVattikuti
43e13893cf
Configure Dependabot settings ( #530 )
...
* Create dependabot.yml
* Format file
2025-01-15 14:16:55 -06:00
Bassem Dghaidi
f81f022188
Use the new cache service: upgrade @actions/cache to ^4.0.0 ( #531 )
...
* Use new cache service
* Add licensed output
* Review licenses & update types
2025-01-15 14:06:31 -06:00
Tobias
3041bf56c9
feat: fallback to "raw" endpoint for manifest when rate limit is reached ( #496 )
...
* feat: fallback to "raw" endpoint for manifest when rate limit is reached
* add information about raw access to the README
* prettier
* update cross-spawn to 7.0.6 to fix vulnerability
2024-11-25 12:37:21 -06:00
Priya Gupta
41dfa10bad
Enhance workflows and Upgrade micromatch Dependency ( #510 )
...
* Update workflows and bump dependencies
* Add test for Go 1.22 and 1.23
* Update Go versions in local-cache setup and include macos-latest with ARM64 architecture
2024-10-23 22:39:31 -05:00
John Wesley Walker III
941977282c
Revise isGhes logic ( #511 )
...
* Revise `isGhes` logic
* ran `npm run format`
* added unit test
* tweaked unit test
* ran `npm run format`
2024-10-21 11:56:08 -05:00
Joel Ambass
d60b41a563
Merge pull request #502 from actions/Jcambass-patch-1
...
Upgrade IA Publish
2024-09-26 08:24:19 +02:00
Joel Ambass
e09f57f6a9
Upgrade IA Publish
2024-09-16 17:20:25 +02:00
Joel Ambass
df1a11710e
Merge pull request #500 from actions/Jcambass-patch-1
...
Add workflow file for publishing releases to immutable action package
2024-09-11 10:48:12 +02:00
Joel Ambass
49582f6476
Add workflow file for publishing releases to immutable action package
...
This workflow file publishes new action releases to the immutable action package of the same name as this repo.
This is part of the Immutable Actions project which is not yet fully released to the public. First party actions like this one are part of our initial testing of this feature.
2024-09-11 10:43:06 +02:00
Zxilly
b26d40294f
fix: add arch to cache key ( #493 )
2024-08-26 15:19:57 -05:00
dependabot[bot]
0a12ed9d6a
Bump braces from 3.0.2 to 3.0.3 ( #487 )
...
* Bump braces from 3.0.2 to 3.0.3
Bumps [braces](https://github.com/micromatch/braces ) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3 )
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* Bump undici from 5.28.3 to 5.28.4
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>
2024-06-27 13:16:26 -05:00
HarithaVattikuti
4ab57d7ea2
Fix versions check failure ( #479 )
...
* Update to latest Go versions
* Updated versions
* Update test data
* Update test data
2024-05-10 11:25:20 -05:00
Masahiro Furudate
cdcb360436
Remove the description of the old go.mod specification ( #458 )
...
* Fix emoji rendering
* Fix quoting
* Remove the description of the old go.mod specification
* Remove the single quotes from `go-version-file`
* Fix README
* Add description about patch versions to README
* Revert "Remove the single quotes from `go-version-file`"
This reverts commit ca4321abee075cc5dac53a3ef10d60b107460c56.
2024-04-18 08:33:57 -05:00
Andy Brody
99176a8f9a
Update README.md with V5 release notes ( #459 )
2024-04-15 09:19:11 -05:00
dependabot[bot]
be1aa1186e
Bump undici from 5.28.2 to 5.28.3 ( #465 )
...
* Bump undici from 5.28.2 to 5.28.3
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.2 to 5.28.3.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.2...v5.28.3 )
---
updated-dependencies:
- dependency-name: undici
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
* fixed check failures and update dependencies
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>
2024-03-21 15:04:22 -05:00
Rui Chen
6c1fd22b67
docs: bump actions/setup-go to v5 ( #449 )
...
Signed-off-by: Rui Chen <rui@chenrui.dev>
2024-01-29 10:18:45 -06:00
