Commit graph

169 commits

Author SHA1 Message Date
Daz DeBoer
64a4451e28
Merge pull request #71 from gradle/dependabot/npm_and_yarn/json5-1.0.2
Bump json5 from 1.0.1 to 1.0.2
2023-02-18 16:34:20 -07:00
Daz DeBoer
664dcf59c9
Merge pull request #70 from gradle/dependabot/npm_and_yarn/qs-6.11.0
Bump qs from 6.10.1 to 6.11.0
2023-02-18 16:34:06 -07:00
Paul Merlin
dabb1b52d3
Merge pull request #73 from obfusk/patch-2
fix typo: diffoscope not DiffScope
2023-02-07 17:52:58 +01:00
FC Stegerman (they/them)
777fab02ef
fix typo: diffoscope not DiffScope 2023-01-28 18:59:03 +00:00
Nelson Osacky
6c56157398
Merge pull request #72 from gradle/no/checkout-3
Update README to use `checkout@v3`
2023-01-26 18:13:42 +01:00
Nelson Osacky
a63eded8e0
Update workflows to v3 2023-01-18 22:28:07 +01:00
Nelson Osacky
fafd5fd8de
Update README to use checkout@v3 2023-01-18 22:26:08 +01:00
dependabot[bot]
959bfac6da
Bump json5 from 1.0.1 to 1.0.2
Bumps [json5](https://github.com/json5/json5) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](https://github.com/json5/json5/compare/v1.0.1...v1.0.2)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-01-07 04:28:39 +00:00
dependabot[bot]
ffa46e5c87
Bump qs from 6.10.1 to 6.11.0
Bumps [qs](https://github.com/ljharb/qs) from 6.10.1 to 6.11.0.
- [Release notes](https://github.com/ljharb/qs/releases)
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.10.1...v6.11.0)

---
updated-dependencies:
- dependency-name: qs
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-06 19:02:35 +00:00
Róbert Papp
0be4b39706
Be more explicit about what each action input means. 2022-11-04 14:10:04 +00:00
Daz DeBoer
9aa31f26bc
Merge pull request #67 from gradle/dd/update-deps
Update dependencies with security alerts
2022-10-24 10:23:52 -06:00
Daz DeBoer
5d6ea91421
Extend timeout for Jest tests 2022-10-24 10:16:09 -06:00
Daz DeBoer
db7df1f188
Update dependencies with vulnerabilities 2022-10-24 10:15:15 -06:00
Jonathan Leitschuh
859c33240b
Merge pull request #53 from KengoTODA/node-16 2021-12-22 20:05:22 -05:00
Kengo TODA
d0ffc95aad ci: install node v16 instead of v12 2021-12-23 06:49:39 +08:00
Kengo TODA
6793660673 Merge remote-tracking branch 'upstream/master' into node-16 2021-12-23 06:49:02 +08:00
dependabot[bot]
781fa15ada
Merge pull request #54 from gradle/dependabot/npm_and_yarn/ansi-regex-5.0.1 2021-12-22 16:40:32 +00:00
dependabot[bot]
7606dd0c9b
Bump ansi-regex from 5.0.0 to 5.0.1
Bumps [ansi-regex](https://github.com/chalk/ansi-regex) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/chalk/ansi-regex/releases)
- [Commits](https://github.com/chalk/ansi-regex/compare/v5.0.0...v5.0.1)

---
updated-dependencies:
- dependency-name: ansi-regex
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-12-22 16:38:08 +00:00
Jonathan Leitschuh
a816b24745
Update check-dist to run against master 2021-12-22 11:30:33 -05:00
Jonathan Leitschuh
8ee3e0ee03
Create check-dist.yml 2021-12-22 11:29:25 -05:00
Kengo TODA
094d8354f0 fix: bump up nodejs to v16 2021-12-22 06:35:31 +08:00
Jonathan Leitschuh
84d7e182ae
Merge pull request #48 from gradle/dependabot/npm_and_yarn/tmpl-1.0.5 2021-09-22 10:33:38 -04:00
dependabot[bot]
8ad53c429f
Bump tmpl from 1.0.4 to 1.0.5
Bumps [tmpl](https://github.com/daaku/nodejs-tmpl) from 1.0.4 to 1.0.5.
- [Release notes](https://github.com/daaku/nodejs-tmpl/releases)
- [Commits](https://github.com/daaku/nodejs-tmpl/commits/v1.0.5)

---
updated-dependencies:
- dependency-name: tmpl
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-09-21 16:21:15 +00:00
Jonathan Leitschuh
1a5936fd6e
Merge pull request #47 from gradle/dependabot/npm_and_yarn/path-parse-1.0.7 2021-09-01 14:02:28 -04:00
dependabot[bot]
19e76703da
Bump path-parse from 1.0.6 to 1.0.7
Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/jbgutierrez/path-parse/releases)
- [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7)

---
updated-dependencies:
- dependency-name: path-parse
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-08-11 20:53:58 +00:00
Paul Merlin
a9ea690346
Merge pull request #45 from KengoTODA/housekeeping
Housekeeping updates
2021-07-23 15:42:51 +02:00
Paul Merlin
89eda1fdc0 Pin glob-parent >= vulnerability fix
Signed-off-by: Paul Merlin <paul@gradle.com>
2021-07-23 15:40:13 +02:00
Paul Merlin
f63d9b21bb Update @actions/core to 1.4.0
Signed-off-by: Paul Merlin <paul@gradle.com>
2021-07-23 15:36:10 +02:00
Paul Merlin
67ba652d17 Update dev dependencies
Signed-off-by: Paul Merlin <paul@gradle.com>
2021-07-23 15:33:33 +02:00
Kengo TODA
6e994e34b8 chore: update metadata in package.json 2021-07-20 20:52:04 +08:00
Kengo TODA
5e787a2abc test: bump up Jest to v27 introducing new defaults
https://jestjs.io/blog/2021/05/25/jest-27
2021-07-20 20:48:16 +08:00
Kengo TODA
370105cb75 build: bump up ncc to the latest ver 2021-07-20 20:39:25 +08:00
Jonathan Leitschuh
1ed3d1cbba
Merge pull request #41 from gradle/JLLeitschuh-patch-2 2021-06-01 11:29:49 -04:00
Jonathan Leitschuh
fdd7f0e28e
Update RELEASING.md 2021-05-28 09:15:58 -04:00
Jonathan Leitschuh
ef08c68850
Merge pull request #38 from gradle/dependabot/npm_and_yarn/hosted-git-info-2.8.9
Bump hosted-git-info from 2.8.8 to 2.8.9
2021-05-18 11:33:04 -04:00
Jonathan Leitschuh
2649583add
Merge pull request #37 from gradle/dependabot/npm_and_yarn/lodash-4.17.21
Bump lodash from 4.17.20 to 4.17.21
2021-05-18 11:31:23 -04:00
dependabot[bot]
c0c53eb6ba
Bump lodash from 4.17.20 to 4.17.21
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.20...4.17.21)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-18 14:12:57 +00:00
Jonathan Leitschuh
d01b023719
Merge pull request #39 from KengoTODA/retry 2021-05-18 10:12:03 -04:00
Kengo TODA
aeee4bda64 fix: introduce retry to stabilize the workflow 2021-05-14 17:16:58 +08:00
Kengo TODA
3e5f126fb7 test: reproduce the problem by jest 2021-05-14 17:13:50 +08:00
dependabot[bot]
d15ec7e0e5
Bump hosted-git-info from 2.8.8 to 2.8.9
Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9.
- [Release notes](https://github.com/npm/hosted-git-info/releases)
- [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md)
- [Commits](https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9)

Signed-off-by: dependabot[bot] <support@github.com>
2021-05-11 10:14:46 +00:00
Jonathan Leitschuh
12b3fff2c3
Merge pull request #36 from gradle/dependabot/npm_and_yarn/y18n-4.0.1
Bump y18n from 4.0.0 to 4.0.1
2021-04-01 09:09:52 -04:00
dependabot[bot]
35d7137ff5
Bump y18n from 4.0.0 to 4.0.1
Bumps [y18n](https://github.com/yargs/y18n) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/yargs/y18n/releases)
- [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md)
- [Commits](https://github.com/yargs/y18n/commits)

Signed-off-by: dependabot[bot] <support@github.com>
2021-03-31 10:34:18 +00:00
Jonathan Leitschuh
a48b2ea114
Create codeql-analysis.yml 2021-02-04 17:38:04 -05:00
Jonathan Leitschuh
7fac2d2c0a
Merge pull request #34 from gradle/dependabot/npm_and_yarn/node-notifier-8.0.1
Bump node-notifier from 8.0.0 to 8.0.1
2020-12-22 11:43:36 -05:00
dependabot[bot]
cd6c78a359
Bump node-notifier from 8.0.0 to 8.0.1
Bumps [node-notifier](https://github.com/mikaelbr/node-notifier) from 8.0.0 to 8.0.1.
- [Release notes](https://github.com/mikaelbr/node-notifier/releases)
- [Changelog](https://github.com/mikaelbr/node-notifier/blob/v8.0.1/CHANGELOG.md)
- [Commits](https://github.com/mikaelbr/node-notifier/compare/v8.0.0...v8.0.1)

Signed-off-by: dependabot[bot] <support@github.com>
2020-12-22 11:57:15 +00:00
Jonathan Leitschuh
2a9956c214
Merge pull request #31 from gradle/dependabot/npm_and_yarn/actions/core-1.2.6 2020-10-01 15:11:30 -04:00
dependabot[bot]
923a185f07
Bump @actions/core from 1.2.5 to 1.2.6
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

Signed-off-by: dependabot[bot] <support@github.com>
2020-10-01 17:28:28 +00:00
Jonathan Leitschuh
aa698a7603
Merge pull request #30 from gradle/eskatos/upgrade-deps 2020-09-22 13:33:47 -04:00
paul
d48df5be4b Upgrade dependencies
and deal with the fallouts

Signed-off-by: Paul Merlin <paul@gradle.com>
2020-09-22 18:02:50 +02:00