Commit Graph
7 Commits
Author SHA1 Message Date
dependabot[bot]andGitHub 9662062446 build(deps-dev): bump js-yaml from 4.2.0 to 4.3.1
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.2.0 to 4.3.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.2.0...4.3.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.3.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-12 03:05:41 +00:00
Joel Male 0aba98e44b fix: resolve security vulnerabilities in dependencies
- Upgraded @actions/core 1.x -> 2.x (removes bundled vulnerable undici)
- Upgraded @actions/github 6.x -> 7.x (ESM-compatible with ncc)
- Upgraded @actions/http-client to ^4.0.1
- Upgraded @typescript-eslint/parser to ^7.x (matches plugin version)
- Upgraded uuid dev dep to ^11.1.1
- Added npm overrides and yarn resolutions to pin undici >= 6.26.0, braces >= 3.0.3, micromatch >= 4.0.8
- Rebuilt dist with updated dependencies

Resolves: undici CVE-2026-1526, CVE-2026-2229, braces CVE-2024-4068, micromatch CVE-2024-4067
2026-06-02 09:42:18 +10:00
Joel Male 14b045decf feat: finish updates & adding github event support 2024-03-28 13:00:21 +10:00
Joel Male 3af123dc1e chore: fixing errors 2024-03-28 12:43:14 +10:00
Joel Male 34d5f1531a chore: update actions 2024-03-28 12:37:39 +10:00
Joel Male c54aaa0ec6 chore: updating deps 2024-03-28 12:25:32 +10:00
Joel Male 3cee2ba3f1 feat: updates & github event support 2024-03-28 12:00:41 +10:00