Tags: actions/stale
Tags
Fix 24 high severity vulnerabilities by overriding brace-expansion to… … 5.0.8 (#1351) * Bump fast-xml-parser from 5.9.3 to 5.10.1 Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.9.3 to 5.10.1. - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.9.3...v5.10.1) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-version: 5.10.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * chore: update dependencies and remove unused packages - Updated `balanced-match` to version 4.0.4 in `package-lock.json`. - Updated `brace-expansion` to version 5.0.8 in `package-lock.json` and `package.json`. - Removed unused nested dependencies of `balanced-match` and `brace-expansion` from `package-lock.json`. - Adjusted `overrides` in `package.json` to reflect the new version of `brace-expansion`. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: chiranjib-swain <chiranjib-swain@github.com>
Fix 24 high severity vulnerabilities by overriding brace-expansion to… … 5.0.8 (#1351) * Bump fast-xml-parser from 5.9.3 to 5.10.1 Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.9.3 to 5.10.1. - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v5.9.3...v5.10.1) --- updated-dependencies: - dependency-name: fast-xml-parser dependency-version: 5.10.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * chore: update dependencies and remove unused packages - Updated `balanced-match` to version 4.0.4 in `package-lock.json`. - Updated `brace-expansion` to version 5.0.8 in `package-lock.json` and `package.json`. - Removed unused nested dependencies of `balanced-match` and `brace-expansion` from `package-lock.json`. - Adjusted `overrides` in `package.json` to reflect the new version of `brace-expansion`. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: chiranjib-swain <chiranjib-swain@github.com>
Bump undici to 6.27.0 via override, clean up stale license files, and… … version to 10.4.0. (#1342) * build(deps): bump undici and @actions/github Bumps [undici](https://github.com/nodejs/undici) to 6.27.0 and updates ancestor dependency [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github). These dependencies need to be updated together. Updates `undici` from 6.25.0 to 6.27.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v6.25.0...v6.27.0) Updates `@actions/github` from 7.0.0 to 9.1.1 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github) --- updated-dependencies: - dependency-name: undici dependency-version: 6.27.0 dependency-type: indirect - dependency-name: "@actions/github" dependency-version: 9.1.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * chore: bump version to 10.4.0 and update dependencies - Updated version from 10.3.0 to 10.4.0 in package.json - Changed @actions/github dependency version from ^9.1.1 to ^7.0.0 - Added overrides for undici to require version >=6.27.0 * fix: update undici override to specific version 6.27.0 --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: chiranjib-swain <chiranjib-swain@github.com>
Bump undici to 6.27.0 via override, clean up stale license files, and… … version to 10.4.0. (#1342) * build(deps): bump undici and @actions/github Bumps [undici](https://github.com/nodejs/undici) to 6.27.0 and updates ancestor dependency [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github). These dependencies need to be updated together. Updates `undici` from 6.25.0 to 6.27.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v6.25.0...v6.27.0) Updates `@actions/github` from 7.0.0 to 9.1.1 - [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github) --- updated-dependencies: - dependency-name: undici dependency-version: 6.27.0 dependency-type: indirect - dependency-name: "@actions/github" dependency-version: 9.1.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * chore: bump version to 10.4.0 and update dependencies - Updated version from 10.3.0 to 10.4.0 in package.json - Changed @actions/github dependency version from ^9.1.1 to ^7.0.0 - Added overrides for undici to require version >=6.27.0 * fix: update undici override to specific version 6.27.0 --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: chiranjib-swain <chiranjib-swain@github.com>
chore: upgrade dependencies and bump version to 10.3.0 (#1335) Agent-Logs-Url: https://github.com/actions/stale/sessions/af04c6aa-aaef-4c90-afb1-a26bd3c983c5 Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: chiranjib-swain <196914770+chiranjib-swain@users.noreply.github.com>
build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#1313) * build(deps-dev): bump lodash from 4.17.21 to 4.17.23 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): update undici to 6.23.0, fast-xml-parser to 5.3.4, and @actions/http-client to 3.0.2 --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: chiranjib-swain <chiranjib-swain@github.com>
build(deps): bump actions/checkout from 4 to 6 (#1306) Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Upgrade to node 24 (#1279) * Upgrade to node 24 * package updates and compiled * audit fix * update package * package.json version update * documentation update to the latest release version --------- Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>
build(deps): bump @actions/cache from 3.2.2 to 4.0.0 (#1194) * build(deps): bump @actions/cache from 3.2.2 to 4.0.0 Bumps [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) from 3.2.2 to 4.0.0. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/@actions/cache@4.0.0/packages/cache) --- updated-dependencies: - dependency-name: "@actions/cache" dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * fix-check failures * check failure fix * fix * fix - licensed check failures * license update * license update * license update * licensed review --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>
PreviousNext