dependabot[bot]
21c6681597
Bump @actions/github from 8.0.1 to 9.0.0
...
Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github ) from 8.0.1 to 9.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github )
---
updated-dependencies:
- dependency-name: "@actions/github"
dependency-version: 9.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 13:15:32 -05:00
Jim Kane
05fe388b9a
Bump @actions/core from 1.10.1 to 3.0.0 and @actions/exec from 1.1.1 to 3.0.0
...
Both packages moved to ESM-only in v3, so this migrates the project
from CommonJS to ESM: adds "type": "module" to package.json, switches
tsconfig to module/moduleResolution "nodenext", adds .js extensions to
all relative imports, and reconfigures Jest for ESM support.
2026-03-25 13:07:48 -05:00
dependabot[bot]
87dc662f0d
Bump flatted in the npm_and_yarn group across 1 directory
...
Bumps the npm_and_yarn group with 1 update in the / directory: [flatted](https://github.com/WebReflection/flatted ).
Updates `flatted` from 3.4.1 to 3.4.2
- [Commits](https://github.com/WebReflection/flatted/compare/v3.4.1...v3.4.2 )
---
updated-dependencies:
- dependency-name: flatted
dependency-version: 3.4.2
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-23 09:45:45 -05:00
dependabot[bot]
e1d8955f3b
Bump picomatch and @types/picomatch
...
Bumps [picomatch](https://github.com/micromatch/picomatch ) and [@types/picomatch](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/picomatch ). These dependencies needed to be updated together.
Updates `picomatch` from 2.3.1 to 4.0.3
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...4.0.3 )
Updates `@types/picomatch` from 2.3.3 to 4.0.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/picomatch )
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 4.0.3
dependency-type: direct:production
update-type: version-update:semver-major
- dependency-name: "@types/picomatch"
dependency-version: 4.0.2
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-16 10:44:32 -05:00
Jim Kane
81ce039e30
Merge pull request #32 from DartHealth/fix/vulnerable-dependencies
2026-03-16 09:58:51 -05:00
Jim Kane
902c3ad313
Bump eslint from ^8.56.0 to ^8.57.0 to satisfy @typescript-eslint peer deps
2026-03-13 14:35:20 -05:00
Jim Kane
bf00a58d83
Upgrade eslint toolchain to fix minimatch vulnerabilities
...
Upgrade @typescript-eslint/* (6.x→8.x), eslint-plugin-github (4.x→5.x),
and eslint-plugin-jest (27.x→28.x) to resolve minimatch 9.0.0–9.0.6
ReDoS vulnerabilities. Remove deprecated eslint rules that were moved to
@stylistic in @typescript-eslint v8 (func-call-spacing, semi,
type-annotation-spacing, camelcase) and rename no-empty-interface to
no-empty-object-type. Resolves all remaining npm audit vulnerabilities.
2026-03-13 13:26:50 -05:00
Jim Kane
ed72718963
Upgrade @actions/* packages to fix undici vulnerability
...
Upgrade @actions/core (1.x→2.x), @actions/exec (1.x→2.x), and
@actions/github (6.0.0→8.0.1) to resolve undici <6.23.0 unbounded
decompression chain vulnerability. Add skipLibCheck to tsconfig.json
for compatibility with @octokit/core@7 type declarations.
2026-03-13 13:19:08 -05:00
dependabot[bot]
ecb2e254c2
Bump prettier from 2.8.8 to 3.8.1
...
Bumps [prettier](https://github.com/prettier/prettier ) from 2.8.8 to 3.8.1.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/2.8.8...3.8.1 )
---
updated-dependencies:
- dependency-name: prettier
dependency-version: 3.8.1
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 12:31:40 -05:00
dependabot[bot]
e61913c25f
Bump @vercel/ncc from 0.38.1 to 0.38.4
...
Bumps [@vercel/ncc](https://github.com/vercel/ncc ) from 0.38.1 to 0.38.4.
- [Release notes](https://github.com/vercel/ncc/releases )
- [Commits](https://github.com/vercel/ncc/compare/0.38.1...0.38.4 )
---
updated-dependencies:
- dependency-name: "@vercel/ncc"
dependency-version: 0.38.4
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 12:16:40 -05:00
dependabot[bot]
9540bef0d9
Bump jest-circus from 29.7.0 to 30.2.0
...
Bumps [jest-circus](https://github.com/jestjs/jest/tree/HEAD/packages/jest-circus ) from 29.7.0 to 30.2.0.
- [Release notes](https://github.com/jestjs/jest/releases )
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest-circus )
---
updated-dependencies:
- dependency-name: jest-circus
dependency-version: 30.2.0
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 12:07:32 -05:00
dependabot[bot]
77d41cf00c
Bump jest and @types/jest
...
Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest ) and [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest ). These dependencies needed to be updated together.
Updates `jest` from 29.7.0 to 30.2.0
- [Release notes](https://github.com/jestjs/jest/releases )
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest )
Updates `@types/jest` from 29.5.11 to 30.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest )
---
updated-dependencies:
- dependency-name: jest
dependency-version: 30.2.0
dependency-type: direct:development
update-type: version-update:semver-major
- dependency-name: "@types/jest"
dependency-version: 30.0.0
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 12:01:52 -05:00
dependabot[bot]
8cfe3ef770
Bump ts-jest from 29.1.2 to 29.4.6
...
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest ) from 29.1.2 to 29.4.6.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases )
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.4.6 )
---
updated-dependencies:
- dependency-name: ts-jest
dependency-version: 29.4.6
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 11:54:18 -05:00
dependabot[bot]
e4202729dc
Bump @types/node from 24.12.0 to 25.3.5
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 24.12.0 to 25.3.5.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.3.5
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 11:46:56 -05:00
Jim Kane
e7f0fb9f5a
Enable dependabot
...
Use dependabot to create PRs for dependency updates in npm and in github
actions.
2026-03-13 11:39:53 -05:00
Jim Kane
574b2dd533
Update undici to 5.29
...
Apply a minor update for some security fixes.
2026-03-13 11:04:49 -05:00
Jim Kane
100f86e19c
Update minimatch to 3.1.5
2026-03-13 11:04:49 -05:00
Sascha Bratton
3ff8f27d73
feat: update action runtime to node24
2026-03-13 10:34:06 -05:00
Ward Peeters
c4622efe57
Add missing predicate-quantifier
2026-03-13 10:34:06 -05:00
Jim Kane
8b4e0ca761
Revert "Add missing predicate-quantifier"
...
This reverts commit db5b44dca0 .
2026-03-13 10:34:06 -05:00
Jim Kane
ad01a08e58
Revert "Enable dependabot updates"
...
This reverts commit b1abac83a2 .
2026-03-13 10:34:06 -05:00
Jim Kane
35e46e8bd7
Revert "Bump js-yaml"
...
This reverts commit b5fede031a .
2026-03-13 10:34:06 -05:00
Jim Kane
a9a7242588
Revert "Bump the npm_and_yarn group across 1 directory with 4 updates"
...
This reverts commit 830398a356 .
2026-03-13 10:34:06 -05:00
Jim Kane
8ae120554f
Revert "Bump ts-jest from 29.1.2 to 29.4.6"
...
This reverts commit 70697a7a15 .
2026-03-13 10:34:06 -05:00
Jim Kane
ff146a16a3
Revert "Bump @types/node from 20.11.6 to 25.3.3"
...
This reverts commit 6db5b1d3ff .
2026-03-13 10:34:06 -05:00
Jim Kane
2afba9d1bc
Revert "Bump @actions/core from 1.10.1 to 3.0.0"
...
This reverts commit c39dd878c0 .
2026-03-13 10:34:06 -05:00
dependabot[bot]
c39dd878c0
Bump @actions/core from 1.10.1 to 3.0.0
...
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core ) from 1.10.1 to 3.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core )
---
updated-dependencies:
- dependency-name: "@actions/core"
dependency-version: 3.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 16:04:37 -05:00
dependabot[bot]
6db5b1d3ff
Bump @types/node from 20.11.6 to 25.3.3
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 20.11.6 to 25.3.3.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.3.3
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 14:57:58 -05:00
dependabot[bot]
70697a7a15
Bump ts-jest from 29.1.2 to 29.4.6
...
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest ) from 29.1.2 to 29.4.6.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases )
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.4.6 )
---
updated-dependencies:
- dependency-name: ts-jest
dependency-version: 29.4.6
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 14:52:18 -05:00
dependabot[bot]
830398a356
Bump the npm_and_yarn group across 1 directory with 4 updates
...
Bumps the npm_and_yarn group with 3 updates in the / directory: [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js ), [@octokit/request](https://github.com/octokit/request.js ) and [braces](https://github.com/micromatch/braces ).
Updates `@octokit/plugin-paginate-rest` from 9.1.5 to 9.2.2
- [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases )
- [Commits](https://github.com/octokit/plugin-paginate-rest.js/compare/v9.1.5...v9.2.2 )
Updates `@octokit/request` from 8.1.6 to 8.4.1
- [Release notes](https://github.com/octokit/request.js/releases )
- [Commits](https://github.com/octokit/request.js/compare/v8.1.6...v8.4.1 )
Updates `@octokit/request-error` from 5.0.1 to 5.1.1
- [Release notes](https://github.com/octokit/request-error.js/releases )
- [Commits](https://github.com/octokit/request-error.js/compare/v5.0.1...v5.1.1 )
Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3 )
---
updated-dependencies:
- dependency-name: "@octokit/plugin-paginate-rest"
dependency-version: 9.2.2
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: "@octokit/request"
dependency-version: 8.4.1
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: "@octokit/request-error"
dependency-version: 5.1.1
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: braces
dependency-version: 3.0.3
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 13:44:51 -05:00
dependabot[bot]
b5fede031a
Bump js-yaml
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) to 4.1.1 and updates ancestor dependency . These dependencies need to be updated together.
Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1 )
Updates `js-yaml` from 3.14.1 to 3.14.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 4.1.1
dependency-type: direct:development
- dependency-name: js-yaml
dependency-version: 3.14.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 13:38:31 -05:00
Jim Kane
b1abac83a2
Enable dependabot updates
...
Add a dependabot configuration to create PRs for dependency updates.
2026-03-10 13:35:05 -05:00
Ward Peeters
db5b44dca0
Add missing predicate-quantifier
2026-03-10 13:30:14 -05:00
Michal Dorner
de90cc6fb3
Update dist and CHANGELOG for v3.0.2
2024-03-02 23:11:12 +01:00
Michal Dorner
cf89abdbae
Merge pull request #224 from petermetz/feat-filter-predicate-quantifier
...
feat: add config parameter for predicate quantifier
2024-03-02 22:28:32 +01:00
Peter Somogyvari
f90d5265d6
feat: add config parameter for predicate quantifier
...
Setting the new 'predicate-quantifier' configuration parameter to 'every'
makes it so that all the patterns have to match a file for it to be
considered changed.
This can be leveraged to ensure that you only build & test software changes
that have real impact on the behavior of the code, e.g. you can set up your
build to run when Typescript/Rust/etc. files are changed but markdown
changes in the diff will be ignored and you consume less resources to build.
The default behavior does not change by the introduction of this feature
so upgrading can be done safely knowing that existing workflows will not
break.
Signed-off-by: Peter Somogyvari <peter.somogyvari@accenture.com>
2024-02-22 12:48:55 -08:00
Michal Dorner
ebc4d7e9eb
Update CHANGELOG for v3.0.1
2024-02-15 09:20:42 +01:00
Michal Dorner
45f16f1875
Merge pull request #133 from frouioui/main
...
Compare base and ref when token is empty
2024-02-15 09:15:48 +01:00
Michal Dorner
5da0e4c086
Merge branch 'master'
2024-02-15 09:13:51 +01:00
Michal Dorner
1441771bbf
Update README.md
...
Add info about v3 release to What's New section
2024-01-25 08:13:18 +01:00
Michal Dorner
0bc4621a31
Bump major version to v3
...
Node version has been updated to 20 which might be a breaking change.
2024-01-25 07:48:07 +01:00
Michal Dorner
7267a8516b
Update CHANGELOG for v2.12.0
2024-01-24 22:53:50 +01:00
Michal Dorner
e36f1124bf
Merge pull request #215 from dorny/update-dependencies
...
Update all dependencies
2024-01-24 22:52:20 +01:00
Michal Dorner
2f74457227
Update all dependencies
2024-01-24 22:50:18 +01:00
Michal Dorner
67617953b4
Update examples in README to use checkout@v4
2024-01-24 15:51:01 +01:00
Michal Dorner
a35d8d6a33
Merge pull request #211 from chenrui333/node-20
...
chore(deps): bump checkout action to v4 and use setup-node to setup node and cache npm deps
2024-01-24 15:35:19 +01:00
Rui Chen
b5a5203f8b
chore(deps): bump checkout action to v4 and use setup-node to setup node and cache npm deps
...
Signed-off-by: Rui Chen <rui@chenrui.dev>
2023-12-08 20:07:04 -05:00
Michal Dorner
3c49e64ca2
Merge pull request #210 from dorny/use-nodejs-20
...
Update to nodejs 20
2023-12-04 21:00:07 +01:00
Michal Dorner
8ec7be4734
Update to nodejs 20
2023-12-04 20:54:44 +01:00
Michal Dorner
100a1198b2
Revert back to node16
2023-12-04 20:42:41 +01:00