Commit Graph

44 Commits

Author SHA1 Message Date
Jim Kane
9afa3450dd Update eslint from 8.57.1 to 10.0.3 with flat config migration
ESLint 10 drops the legacy eslintrc format, so migrate to flat config.
- Replace .eslintrc.json and .eslintignore with eslint.config.js
- Remove eslint-plugin-github (incompatible with eslint 10; its internal
  config only provided 3 DOM rules unused by this project)
- Update @typescript-eslint/* to 8.57.2 and eslint-plugin-jest to 29.x
- Add globals package for environment globals in flat config
2026-03-25 14:06:45 -05:00
dependabot[bot]
21c6681597 Bump @actions/github from 8.0.1 to 9.0.0
Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) from 8.0.1 to 9.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

---
updated-dependencies:
- dependency-name: "@actions/github"
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-25 13:15:32 -05:00
Jim Kane
05fe388b9a Bump @actions/core from 1.10.1 to 3.0.0 and @actions/exec from 1.1.1 to 3.0.0
Both packages moved to ESM-only in v3, so this migrates the project
from CommonJS to ESM: adds "type": "module" to package.json, switches
tsconfig to module/moduleResolution "nodenext", adds .js extensions to
all relative imports, and reconfigures Jest for ESM support.
2026-03-25 13:07:48 -05:00
dependabot[bot]
87dc662f0d Bump flatted in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [flatted](https://github.com/WebReflection/flatted).


Updates `flatted` from 3.4.1 to 3.4.2
- [Commits](https://github.com/WebReflection/flatted/compare/v3.4.1...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-23 09:45:45 -05:00
dependabot[bot]
e1d8955f3b Bump picomatch and @types/picomatch
Bumps [picomatch](https://github.com/micromatch/picomatch) and [@types/picomatch](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/picomatch). These dependencies needed to be updated together.

Updates `picomatch` from 2.3.1 to 4.0.3
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...4.0.3)

Updates `@types/picomatch` from 2.3.3 to 4.0.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/picomatch)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: "@types/picomatch"
  dependency-version: 4.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-16 10:44:32 -05:00
Jim Kane
902c3ad313 Bump eslint from ^8.56.0 to ^8.57.0 to satisfy @typescript-eslint peer deps 2026-03-13 14:35:20 -05:00
Jim Kane
bf00a58d83 Upgrade eslint toolchain to fix minimatch vulnerabilities
Upgrade @typescript-eslint/* (6.x→8.x), eslint-plugin-github (4.x→5.x),
and eslint-plugin-jest (27.x→28.x) to resolve minimatch 9.0.0–9.0.6
ReDoS vulnerabilities. Remove deprecated eslint rules that were moved to
@stylistic in @typescript-eslint v8 (func-call-spacing, semi,
type-annotation-spacing, camelcase) and rename no-empty-interface to
no-empty-object-type. Resolves all remaining npm audit vulnerabilities.
2026-03-13 13:26:50 -05:00
Jim Kane
ed72718963 Upgrade @actions/* packages to fix undici vulnerability
Upgrade @actions/core (1.x→2.x), @actions/exec (1.x→2.x), and
@actions/github (6.0.0→8.0.1) to resolve undici <6.23.0 unbounded
decompression chain vulnerability. Add skipLibCheck to tsconfig.json
for compatibility with @octokit/core@7 type declarations.
2026-03-13 13:19:08 -05:00
dependabot[bot]
ecb2e254c2 Bump prettier from 2.8.8 to 3.8.1
Bumps [prettier](https://github.com/prettier/prettier) from 2.8.8 to 3.8.1.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/2.8.8...3.8.1)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.8.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 12:31:40 -05:00
dependabot[bot]
e61913c25f Bump @vercel/ncc from 0.38.1 to 0.38.4
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.38.1 to 0.38.4.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.38.1...0.38.4)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-version: 0.38.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 12:16:40 -05:00
dependabot[bot]
9540bef0d9 Bump jest-circus from 29.7.0 to 30.2.0
Bumps [jest-circus](https://github.com/jestjs/jest/tree/HEAD/packages/jest-circus) from 29.7.0 to 30.2.0.
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest-circus)

---
updated-dependencies:
- dependency-name: jest-circus
  dependency-version: 30.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 12:07:32 -05:00
dependabot[bot]
77d41cf00c Bump jest and @types/jest
Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) and [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest). These dependencies needed to be updated together.

Updates `jest` from 29.7.0 to 30.2.0
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.2.0/packages/jest)

Updates `@types/jest` from 29.5.11 to 30.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-version: 30.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
- dependency-name: "@types/jest"
  dependency-version: 30.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 12:01:52 -05:00
dependabot[bot]
8cfe3ef770 Bump ts-jest from 29.1.2 to 29.4.6
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.1.2 to 29.4.6.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.4.6)

---
updated-dependencies:
- dependency-name: ts-jest
  dependency-version: 29.4.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 11:54:18 -05:00
dependabot[bot]
e4202729dc Bump @types/node from 24.12.0 to 25.3.5
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.12.0 to 25.3.5.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 25.3.5
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-13 11:46:56 -05:00
Jim Kane
574b2dd533 Update undici to 5.29
Apply a minor update for some security fixes.
2026-03-13 11:04:49 -05:00
Jim Kane
100f86e19c Update minimatch to 3.1.5 2026-03-13 11:04:49 -05:00
Sascha Bratton
3ff8f27d73 feat: update action runtime to node24 2026-03-13 10:34:06 -05:00
Jim Kane
35e46e8bd7 Revert "Bump js-yaml"
This reverts commit b5fede031a.
2026-03-13 10:34:06 -05:00
Jim Kane
a9a7242588 Revert "Bump the npm_and_yarn group across 1 directory with 4 updates"
This reverts commit 830398a356.
2026-03-13 10:34:06 -05:00
Jim Kane
8ae120554f Revert "Bump ts-jest from 29.1.2 to 29.4.6"
This reverts commit 70697a7a15.
2026-03-13 10:34:06 -05:00
Jim Kane
ff146a16a3 Revert "Bump @types/node from 20.11.6 to 25.3.3"
This reverts commit 6db5b1d3ff.
2026-03-13 10:34:06 -05:00
Jim Kane
2afba9d1bc Revert "Bump @actions/core from 1.10.1 to 3.0.0"
This reverts commit c39dd878c0.
2026-03-13 10:34:06 -05:00
dependabot[bot]
c39dd878c0 Bump @actions/core from 1.10.1 to 3.0.0
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.10.1 to 3.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 16:04:37 -05:00
dependabot[bot]
6db5b1d3ff Bump @types/node from 20.11.6 to 25.3.3
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.11.6 to 25.3.3.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 25.3.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 14:57:58 -05:00
dependabot[bot]
70697a7a15 Bump ts-jest from 29.1.2 to 29.4.6
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.1.2 to 29.4.6.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.4.6)

---
updated-dependencies:
- dependency-name: ts-jest
  dependency-version: 29.4.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 14:52:18 -05:00
dependabot[bot]
830398a356 Bump the npm_and_yarn group across 1 directory with 4 updates
Bumps the npm_and_yarn group with 3 updates in the / directory: [@octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest.js), [@octokit/request](https://github.com/octokit/request.js) and [braces](https://github.com/micromatch/braces).


Updates `@octokit/plugin-paginate-rest` from 9.1.5 to 9.2.2
- [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases)
- [Commits](https://github.com/octokit/plugin-paginate-rest.js/compare/v9.1.5...v9.2.2)

Updates `@octokit/request` from 8.1.6 to 8.4.1
- [Release notes](https://github.com/octokit/request.js/releases)
- [Commits](https://github.com/octokit/request.js/compare/v8.1.6...v8.4.1)

Updates `@octokit/request-error` from 5.0.1 to 5.1.1
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](https://github.com/octokit/request-error.js/compare/v5.0.1...v5.1.1)

Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: "@octokit/plugin-paginate-rest"
  dependency-version: 9.2.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request"
  dependency-version: 8.4.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request-error"
  dependency-version: 5.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 13:44:51 -05:00
dependabot[bot]
b5fede031a Bump js-yaml
Bumps [js-yaml](https://github.com/nodeca/js-yaml) to 4.1.1 and updates ancestor dependency . These dependencies need to be updated together.


Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)

Updates `js-yaml` from 3.14.1 to 3.14.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: direct:development
- dependency-name: js-yaml
  dependency-version: 3.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 13:38:31 -05:00
Michal Dorner
2f74457227
Update all dependencies 2024-01-24 22:50:18 +01:00
Michal Dorner
8ec7be4734
Update to nodejs 20 2023-12-04 20:54:44 +01:00
Michal Dorner
513ea69ce3
Update @actions/core to v1.10.0
See https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
2022-10-12 21:15:02 +02:00
Michal Dorner
ce8f47aa7f
Fix incorrect handling of Unicode characters in exec() 2022-10-11 23:01:54 +02:00
Michal Dorner
17e486d015 Update eslint package 2022-06-09 22:36:15 +02:00
JJ Merelo
38e0a049f6 ⬆️ in a number of deps
To take care of deprecated upstream deps and somesuch
2022-02-01 07:55:41 +01:00
JJ Merelo
b55f63c13c Fix resulting dep errors 🐛 2022-02-01 07:48:18 +01:00
JJ Merelo
816eb040ab Run audit fix with --force 2022-02-01 07:38:06 +01:00
Michal Dorner
b4eabb6049 Use picomatch + impl followups from #48 2020-11-09 00:45:53 +01:00
Michal Dorner
b37d4e9e86
Use micromatch instead of minimatch (#46)
* Use micromatch instead of minimatch

micromatch claims to support full Bash 4.3 spec and it actually passes all the tests. 
For example this fixes processing of '!(**/*.tsx|**/*.less)' pattern - needed by #45

* Update CHANGELOG.md
2020-10-23 12:33:44 +02:00
Michal Dorner
7d201829e2
Support reusable paths blocks via yaml anchors (#13)
* Add support for nested arrays of path expressions

* Remove pull_request trigger type options

Default value is fine: opened, synchronize, reopened

* Add CHANGELOG

* Update README
2020-06-19 23:39:06 +02:00
Michal Dorner
1cbb925a17
Change detection via git + rename githubToken to token (#9) 2020-05-26 17:16:09 +02:00
Michal Dorner
0c9e16cc6d
Update dependencies (#6) 2020-05-23 14:23:31 +02:00
Michal Dorner
29d498d99d
Fix globbing, update metadata, update ncc (#4)
* Enable minimatch dot option
It's not a default globbing behavior, however for our use-case is much more convenient to match those files.

* Update README and package.json
2020-05-21 13:46:48 +02:00
Michal Dorner
4e726dd036 Implement fetching, filtering and tests 2020-05-21 00:31:16 +02:00
dependabot[bot]
d475d5da26
Bump acorn from 5.7.3 to 5.7.4 (#1)
Bumps [acorn](https://github.com/acornjs/acorn) from 5.7.3 to 5.7.4.
- [Release notes](https://github.com/acornjs/acorn/releases)
- [Commits](https://github.com/acornjs/acorn/compare/5.7.3...5.7.4)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-05-20 17:05:57 +02:00
Michal Dorner
b78de5e86b Initial commit 2020-05-20 17:03:08 +02:00