Commit Graph

205 Commits

Author SHA1 Message Date
dependabot[bot]
21c6681597 Bump @actions/github from 8.0.1 to 9.0.0
Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) from 8.0.1 to 9.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

---
updated-dependencies:
- dependency-name: "@actions/github"
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 13:15:32 -05:00
Jim Kane
05fe388b9a Bump @actions/core from 1.10.1 to 3.0.0 and @actions/exec from 1.1.1 to 3.0.0
Both packages moved to ESM-only in v3, so this migrates the project
from CommonJS to ESM: adds "type": "module" to package.json, switches
tsconfig to module/moduleResolution "nodenext", adds .js extensions to
all relative imports, and reconfigures Jest for ESM support.
2026-03-25 13:07:48 -05:00
dependabot[bot]
87dc662f0d Bump flatted in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [flatted](https://github.com/WebReflection/flatted).


Updates `flatted` from 3.4.1 to 3.4.2
- [Commits](https://github.com/WebReflection/flatted/compare/v3.4.1...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-23 09:45:45 -05:00
dependabot[bot]
e1d8955f3b Bump picomatch and @types/picomatch
Bumps [picomatch](https://github.com/micromatch/picomatch) and [@types/picomatch](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/picomatch). These dependencies needed to be updated together.

Updates `picomatch` from 2.3.1 to 4.0.3
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...4.0.3)

Updates `@types/picomatch` from 2.3.3 to 4.0.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/picomatch)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: "@types/picomatch"
  dependency-version: 4.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-16 10:44:32 -05:00
Jim Kane
81ce039e30
Merge pull request #32 from DartHealth/fix/vulnerable-dependencies 2026-03-16 09:58:51 -05:00
Jim Kane
902c3ad313 Bump eslint from ^8.56.0 to ^8.57.0 to satisfy @typescript-eslint peer deps 2026-03-13 14:35:20 -05:00
Jim Kane
bf00a58d83 Upgrade eslint toolchain to fix minimatch vulnerabilities
Upgrade @typescript-eslint/* (6.x→8.x), eslint-plugin-github (4.x→5.x),
and eslint-plugin-jest (27.x→28.x) to resolve minimatch 9.0.0–9.0.6
ReDoS vulnerabilities. Remove deprecated eslint rules that were moved to
@stylistic in @typescript-eslint v8 (func-call-spacing, semi,
type-annotation-spacing, camelcase) and rename no-empty-interface to
no-empty-object-type. Resolves all remaining npm audit vulnerabilities.
2026-03-13 13:26:50 -05:00
Jim Kane
ed72718963 Upgrade @actions/* packages to fix undici vulnerability
Upgrade @actions/core (1.x→2.x), @actions/exec (1.x→2.x), and
@actions/github (6.0.0→8.0.1) to resolve undici <6.23.0 unbounded
decompression chain vulnerability. Add skipLibCheck to tsconfig.json
for compatibility with @octokit/core@7 type declarations.
2026-03-13 13:19:08 -05:00
dependabot[bot]
ecb2e254c2 Bump prettier from 2.8.8 to 3.8.1
Bumps [prettier](https://github.com/prettier/prettier) from 2.8.8 to 3.8.1.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/2.8.8...3.8.1)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.8.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 12:31:40 -05:00
dependabot[bot]
e61913c25f Bump @vercel/ncc from 0.38.1 to 0.38.4
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.38.1 to 0.38.4.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.38.1...0.38.4)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-version: 0.38.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 12:16:40 -05:00
dependabot[bot]
9540bef0d9 Bump jest-circus from 29.7.0 to 30.2.0
Bumps [jest-circus](https://github.com/jestjs/jest/tree/HEAD/packages/jest-circus) from 29.7.0 to 30.2.0.
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest-circus)

---
updated-dependencies:
- dependency-name: jest-circus
  dependency-version: 30.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 12:07:32 -05:00
dependabot[bot]
77d41cf00c Bump jest and @types/jest
Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) and [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest). These dependencies needed to be updated together.

Updates `jest` from 29.7.0 to 30.2.0
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest)

Updates `@types/jest` from 29.5.11 to 30.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-version: 30.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
- dependency-name: "@types/jest"
  dependency-version: 30.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 12:01:52 -05:00
dependabot[bot]
8cfe3ef770 Bump ts-jest from 29.1.2 to 29.4.6
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.1.2 to 29.4.6.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.4.6)

---
updated-dependencies:
- dependency-name: ts-jest
  dependency-version: 29.4.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 11:54:18 -05:00
dependabot[bot]
e4202729dc Bump @types/node from 24.12.0 to 25.3.5
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.12.0 to 25.3.5.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 25.3.5
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 11:46:56 -05:00
Jim Kane
e7f0fb9f5a Enable dependabot
Use dependabot to create PRs for dependency updates in npm and in github
actions.
2026-03-13 11:39:53 -05:00
Jim Kane
574b2dd533 Update undici to 5.29
Apply a minor update for some security fixes.
2026-03-13 11:04:49 -05:00
Jim Kane
100f86e19c Update minimatch to 3.1.5 2026-03-13 11:04:49 -05:00
Sascha Bratton
3ff8f27d73 feat: update action runtime to node24 2026-03-13 10:34:06 -05:00
Ward Peeters
c4622efe57 Add missing predicate-quantifier 2026-03-13 10:34:06 -05:00
Jim Kane
8b4e0ca761 Revert "Add missing predicate-quantifier"
This reverts commit db5b44dca0.
2026-03-13 10:34:06 -05:00
Jim Kane
ad01a08e58 Revert "Enable dependabot updates"
This reverts commit b1abac83a2.
2026-03-13 10:34:06 -05:00
Jim Kane
35e46e8bd7 Revert "Bump js-yaml"
This reverts commit b5fede031a.
2026-03-13 10:34:06 -05:00
Jim Kane
a9a7242588 Revert "Bump the npm_and_yarn group across 1 directory with 4 updates"
This reverts commit 830398a356.
2026-03-13 10:34:06 -05:00
Jim Kane
8ae120554f Revert "Bump ts-jest from 29.1.2 to 29.4.6"
This reverts commit 70697a7a15.
2026-03-13 10:34:06 -05:00
Jim Kane
ff146a16a3 Revert "Bump @types/node from 20.11.6 to 25.3.3"
This reverts commit 6db5b1d3ff.
2026-03-13 10:34:06 -05:00
Jim Kane
2afba9d1bc Revert "Bump @actions/core from 1.10.1 to 3.0.0"
This reverts commit c39dd878c0.
2026-03-13 10:34:06 -05:00
dependabot[bot]
c39dd878c0 Bump @actions/core from 1.10.1 to 3.0.0
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.10.1 to 3.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 16:04:37 -05:00
dependabot[bot]
6db5b1d3ff Bump @types/node from 20.11.6 to 25.3.3
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.11.6 to 25.3.3.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 25.3.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 14:57:58 -05:00
dependabot[bot]
70697a7a15 Bump ts-jest from 29.1.2 to 29.4.6
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.1.2 to 29.4.6.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.4.6)

---
updated-dependencies:
- dependency-name: ts-jest
  dependency-version: 29.4.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 14:52:18 -05:00
dependabot[bot]
830398a356 Bump the npm_and_yarn group across 1 directory with 4 updates
Bumps the npm_and_yarn group with 3 updates in the / directory: [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js), [@octokit/request](https://github.com/octokit/request.js) and [braces](https://github.com/micromatch/braces).


Updates `@octokit/plugin-paginate-rest` from 9.1.5 to 9.2.2
- [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases)
- [Commits](https://github.com/octokit/plugin-paginate-rest.js/compare/v9.1.5...v9.2.2)

Updates `@octokit/request` from 8.1.6 to 8.4.1
- [Release notes](https://github.com/octokit/request.js/releases)
- [Commits](https://github.com/octokit/request.js/compare/v8.1.6...v8.4.1)

Updates `@octokit/request-error` from 5.0.1 to 5.1.1
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](https://github.com/octokit/request-error.js/compare/v5.0.1...v5.1.1)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: "@octokit/plugin-paginate-rest"
  dependency-version: 9.2.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request"
  dependency-version: 8.4.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request-error"
  dependency-version: 5.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 13:44:51 -05:00
dependabot[bot]
b5fede031a Bump js-yaml
Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 4.1.1 and updates ancestor dependency . These dependencies need to be updated together.


Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)

Updates `js-yaml` from 3.14.1 to 3.14.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: direct:development
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 13:38:31 -05:00
Jim Kane
b1abac83a2 Enable dependabot updates
Add a dependabot configuration to create PRs for dependency updates.
2026-03-10 13:35:05 -05:00
Ward Peeters
db5b44dca0 Add missing predicate-quantifier 2026-03-10 13:30:14 -05:00
Michal Dorner
de90cc6fb3
Update dist and CHANGELOG for v3.0.2 2024-03-02 23:11:12 +01:00
Michal Dorner
cf89abdbae
Merge pull request #224 from petermetz/feat-filter-predicate-quantifier
feat: add config parameter for predicate quantifier
2024-03-02 22:28:32 +01:00
Peter Somogyvari
f90d5265d6
feat: add config parameter for predicate quantifier
Setting the new 'predicate-quantifier' configuration parameter to 'every'
makes it so that all the patterns have to match a file for it to be
considered changed.

This can be leveraged to ensure that you only build & test software changes
that have real impact on the behavior of the code, e.g. you can set up your
build to run when Typescript/Rust/etc. files are changed but markdown
changes in the diff will be ignored and you consume less resources to build.

The default behavior does not change by the introduction of this feature
so upgrading can be done safely knowing that existing workflows will not
break.

Signed-off-by: Peter Somogyvari <peter.somogyvari@accenture.com>
2024-02-22 12:48:55 -08:00
Michal Dorner
ebc4d7e9eb
Update CHANGELOG for v3.0.1 2024-02-15 09:20:42 +01:00
Michal Dorner
45f16f1875
Merge pull request #133 from frouioui/main
Compare base and ref when token is empty
2024-02-15 09:15:48 +01:00
Michal Dorner
5da0e4c086
Merge branch 'master' 2024-02-15 09:13:51 +01:00
Michal Dorner
1441771bbf
Update README.md
Add info about v3 release to What's New section
2024-01-25 08:13:18 +01:00
Michal Dorner
0bc4621a31
Bump major version to v3
Node version has been updated to 20 which might be a breaking change.
2024-01-25 07:48:07 +01:00
Michal Dorner
7267a8516b
Update CHANGELOG for v2.12.0 2024-01-24 22:53:50 +01:00
Michal Dorner
e36f1124bf
Merge pull request #215 from dorny/update-dependencies
Update all dependencies
2024-01-24 22:52:20 +01:00
Michal Dorner
2f74457227
Update all dependencies 2024-01-24 22:50:18 +01:00
Michal Dorner
67617953b4
Update examples in README to use checkout@v4 2024-01-24 15:51:01 +01:00
Michal Dorner
a35d8d6a33
Merge pull request #211 from chenrui333/node-20
chore(deps): bump checkout action to v4 and use setup-node to setup node and cache npm deps
2024-01-24 15:35:19 +01:00
Rui Chen
b5a5203f8b
chore(deps): bump checkout action to v4 and use setup-node to setup node and cache npm deps
Signed-off-by: Rui Chen <rui@chenrui.dev>
2023-12-08 20:07:04 -05:00
Michal Dorner
3c49e64ca2
Merge pull request #210 from dorny/use-nodejs-20
Update to nodejs 20
2023-12-04 21:00:07 +01:00
Michal Dorner
8ec7be4734
Update to nodejs 20 2023-12-04 20:54:44 +01:00
Michal Dorner
100a1198b2
Revert back to node16 2023-12-04 20:42:41 +01:00