nna/npm-audit-action
3
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
232 Commits 1 Branch 2 Tags
414f093a36addf22f98c0b9eb0e32b0c3dda0081
Commit Graph

79 Commits

Author SHA1 Message Date
Naoki Oketani
414f093a36 Update to Node.js 20 compatibility 2025-05-01 12:05:25 +00:00
Naoki Oketani
3a2f56f628 chore(deps-dev): bump @vercel/ncc from 0.36.1 to 0.38.0 2023-10-09 20:54:54 +09:00
Naoki Oketani
686b7f2a2a chore(deps-dev): bump prettier from 2.8.7 to 3.0.3 2023-10-09 19:03:31 +09:00
Naoki Oketani
eb61a543f7 chore(deps-dev): bump jest from 29.5.0 to 29.7.0 2023-10-09 18:45:59 +09:00
Naoki Oketani
7df42b1e71 chore(deps-dev): bump typescript from 4.9.4 to 5.2.2 2023-10-09 18:35:38 +09:00
snyk-bot
343e8eed29 fix: upgrade @actions/core from 1.10.0 to 1.10.1 
Snyk has created this PR to upgrade @actions/core from 1.10.0 to 1.10.1.

See this package in npm:
https://www.npmjs.com/package/@actions/core

See this project in Snyk:
https://app.snyk.io/org/oke-py/project/c6e7d31d-2862-4162-9c76-afc8027c13b3?utm_source=github&utm_medium=referral&page=upgrade-pr
 2023-10-09 10:56:09 +09:00
snyk-bot
96dbf7337a fix: upgrade @octokit/rest from 19.0.11 to 19.0.13 
Snyk has created this PR to upgrade @octokit/rest from 19.0.11 to 19.0.13.

See this package in npm:
https://www.npmjs.com/package/@octokit/rest

See this project in Snyk:
https://app.snyk.io/org/oke-py/project/c6e7d31d-2862-4162-9c76-afc8027c13b3?utm_source=github&utm_medium=referral&page=upgrade-pr
 2023-10-09 10:46:13 +09:00
Naoki Oketani
0cebbe6ab6 chore(deps-dev): bump graphql from 16.6.0 to 16.8.1 2023-10-09 01:31:57 +00:00
snyk-bot
9759466e6a fix: upgrade @octokit/rest from 19.0.5 to 19.0.11 
Snyk has created this PR to upgrade @octokit/rest from 19.0.5 to 19.0.11.

See this package in npm:
https://www.npmjs.com/package/@octokit/rest

See this project in Snyk:
https://app.snyk.io/org/oke-py/project/c6e7d31d-2862-4162-9c76-afc8027c13b3?utm_source=github&utm_medium=referral&page=upgrade-pr
 2023-06-26 15:15:59 +00:00
Naoki Oketani
0cbdd1f2f3 refactor: replace axios call with octokit 2023-04-22 13:29:59 +00:00
oke-py
225a86c216 2.4.4 2023-01-02 02:46:08 +00:00
oke-py
e9f4193777 2.4.3 2023-01-02 02:27:47 +00:00
oke-py
24a371a262 2.4.2 2022-12-30 01:29:40 +00:00
Naoki Oketani
086a272a06 chore(package): bump graphql from 16.5.0 to 16.6.0 2022-12-30 09:48:30 +09:00
Naoki Oketani
fb555ab6c0 chore(package): bump @vercel/ncc from 0.34.0 to 0.36.0 2022-12-30 09:45:26 +09:00
Naoki Oketani
c942dbff6c chore(package): bump prettier from 2.7.1 to 2.8.1 2022-12-30 09:42:12 +09:00
Naoki Oketani
f9bdcdef4d chore(package): bump @typescript-eslint/parser from 5.46.1 to 5.47.1 2022-12-30 09:38:44 +09:00
oke-py
808cdb44d5 2.4.1 2022-12-24 01:15:06 +00:00
Naoki Oketani
2d5d6a8bb4 chore(package): bump @octokit/rest from 18.12.0 to 19.0.5 2022-12-23 21:34:57 +09:00
Naoki Oketani
fdd783bbc7 chore(package): bump eslint from 8.19.0 to 8.30.0 2022-12-18 14:19:43 +09:00
Naoki Oketani
b3d30b2367 chore(package): bump jest from 27.2.5 to 29.3.1 2022-12-18 14:09:18 +09:00
Naoki Oketani
84a239a23d chore(package): bump @actions/github from 5.0.3 to 5.1.1 2022-12-11 16:13:15 +09:00
Naoki Oketani
25d0ce465a chore(package): bump axios from 0.27.2 to 1.2.1 2022-12-11 13:20:46 +09:00
Naoki Oketani
eb5e3041a4 chore(package): bump @typescript-eslint/parser from 5.30.5 to 5.46.0 2022-12-11 13:10:05 +09:00
Naoki Oketani
686d6554cd chore(package): bump @types/node from 16.11.43 to 18.11.13 2022-12-11 13:06:22 +09:00
Naoki Oketani
6302adc652 chore(package): bump typescript from 3.9.10 to 4.9.4 2022-12-11 13:06:14 +09:00
Naoki Oketani
a59f3e9eb1 release: 2.4.0 2022-12-10 22:32:38 +09:00
Naoki Oketani
c9382a0fb4 update @actions/core not to use deprecated commands 
https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
 2022-12-10 21:53:13 +09:00
Snyk bot
317d6dc36c fix: package.json & package-lock.json to reduce vulnerabilities (#129) 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ACTIONSCORE-2980270
 2022-08-15 12:02:11 +09:00
Naoki Oketani
c2ee44bdb9 update dependencies (#126) 
* update dependencies

* update devDependencies
 2022-07-09 18:36:20 +09:00
Naoki Oketani
fb1ae3934f 2.3.0 2022-07-09 18:12:31 +09:00
Naoki Oketani
b3151e9e51 2.2.0 2022-05-12 07:45:34 +09:00
Naoki Oketani
c0410c237f Adds 'info', 'none' as a valid argument for audit-level (#120) 
* Adds 'info', 'none' as a valid argument for audit-level

* 2.1.0
 2022-04-12 08:19:34 +09:00
Naoki Oketani
e3662da326 Update default runtime to node16 (#118) 
* Update default runtime to node16

* update dependencies

* 2.0.0
 2022-03-26 15:31:24 +09:00
Naoki Oketani
02cb9c4d3b fix CVE-2022-0235 (#108) 
* npm audit fix

* npm run all

* 1.8.4

* update README and daily action to use v1.8.4
 2022-01-25 12:30:57 +09:00
Naoki Oketani
8196a9cc90 Release v1.8.3 (#105) 
* 1.8.3

* update README and daily action to use v1.8.3
 2022-01-15 18:33:23 +09:00
Naoki Oketani
b58fe17512 Release v1.8.2 (#101) 
* 1.8.2

* update README and daily action to use v1.8.2
 2021-10-16 18:26:12 +09:00
Naoki Oketani
303bff6b61 Bump axios from 0.21.4 to 0.23.0 (#100) 2021-10-16 18:21:41 +09:00
Naoki Oketani
5d929bbe92 update devDependencies (#99) 
* Bump jest, jest-circus from 27.2.2 to 27.2.5

* Bump ts-jest from 27.0.5 to 27.0.6

* Bump graphql from 15.5.0 to 15.6.1

* Bump eslint-plugin-github from 4.3.0 to 4.3.2

* Bump eslint-plugin-jest from 24.4.2 to 25.2.1

* Bump typescript from 3.9.7 to 3.9.10

* Bump @types/node from 14.14.20 to 14.17.27
 2021-10-16 18:15:34 +09:00
Naoki Oketani
e3228ef09e Bump axios from 0.21.2 to 0.21.4 (#97) 2021-10-10 12:36:10 +09:00
Naoki Oketani
e434d1ce70 update dependencies (#96) 
* Bump @actions/core from 1.3.0 to 1.6.0

* Bump @actions/github from 4.0.0 to 5.0.0

* Bump @octokit/rest from 18.5.6 to 18.12.0

* Bump strip-ansi from 6.0.0 to 6.0.1
 2021-10-09 12:22:18 +09:00
Naoki Oketani
9d3f4c8708 Bump patch verstion to 1.8.1 2021-10-08 21:21:58 +09:00
Naoki Oketani
b279a61c36 Bump minor version to 1.8.0 2021-10-03 09:28:58 +09:00
Naoki Oketani
cf7f895e0d Bump patch version to 1.7.4 2021-09-26 21:36:59 +09:00
Naoki Oketani
5b1038c826 update dependencies (#89) 
* Bump ansi-regex from 5.0.0 to 5.0.1 (fix CVE-2021-3807)

* Bump tmpl from 1.0.4 to 1.0.5 (fix CVE-2021-3777)

* update: eslint related dependencies

* chore: replace deprecated @zeit/ncc with @vercel/ncc
 2021-09-26 21:33:48 +09:00
dependabot[bot]
e285e411e1 Bump axios from 0.21.1 to 0.21.2 (#88) 
Bumps [axios](https://github.com/axios/axios) from 0.21.1 to 0.21.2.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/master/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v0.21.1...v0.21.2)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2021-09-26 20:14:36 +09:00
Naoki Oketani
5d4cffea6d fix dependencies' vulnerabilities (#86) 
* [fix] `npm audit fix`

* [fix] `npm update`

* [fix] update jest, jest-circus, ts-jest

* 1.7.3
 2021-06-03 07:45:50 +09:00
Naoki Oketani
1f505b760c 1.7.2 2021-05-09 17:24:03 +09:00
Naoki Oketani
9cc679ca2e upgrade(modules): npm update $module 2021-01-06 14:57:25 +09:00
Naoki Oketani
5838edf6c1 upgrade(package.json): npm version 1.7.1 2021-01-06 13:49:13 +09:00