Haritha
fba3fb4ead
fix: resolve audit/license failures ( #784 )
...
* fix: resolve brace-expansion high-severity vulnerability, refresh license cache, rebuild dist
- Regenerated package-lock.json to pick up brace-expansion@5.0.9 (fixes
GHSA-rgw5-rvv9-x895, a DoS via unbounded intermediate arrays), which
is already permitted by minimatch's existing ^5.0.8 semver range.
- Refreshed .licenses/npm cache to match the updated dependency tree.
- Added minimatch to the licensed.yml reviewed list: its detected
license text doesn't cleanly match Blue Oak 1.0.0, which is already
in the allowed list.
- Rebuilt dist/setup and dist/cache-save from source.
npm audit --audit-level=high now reports 0 vulnerabilities;
licensed status reports 0 errors; npm run pre-checkin passes locally.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
* fix: narrow audit dependency updates
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-08-19 10:06:05 -05:00
Haritha
924ae3a1cd
chore: bump version to 6.5.0 in package.json and package-lock.json ( #762 )
...
* chore: bump version to 6.5.0 in package.json and package-lock.json
* chore: update README.md for improved clarity and structure
* License update
2026-06-23 12:03:17 -05:00
Copilot
78961f6f84
chore: update @actions dependencies and refresh license cache ( #744 )
...
Agent-Logs-Url: https://github.com/actions/setup-go/sessions/0e15a7f6-9e3f-4b17-98fc-7c6501a56b31
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: priyagupta108 <147705955+priyagupta108@users.noreply.github.com >
2026-04-13 14:45:08 -05:00
dependabot[bot]
27fdb267c1
Bump minimatch from 3.1.2 to 3.1.5 ( #727 )
...
* Bump minimatch from 3.1.2 to 3.1.5
Bumps [minimatch](https://github.com/isaacs/minimatch ) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 3.1.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Check failure fix
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: gowridurgad <gowridurgad@gmail.com >
2026-03-02 15:43:24 -06:00
dependabot[bot]
6f26dcc668
Bump undici from 5.28.5 to 5.29.0 ( #594 )
...
* Bump undici from 5.28.5 to 5.29.0
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.5 to 5.29.0.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.5...v5.29.0 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 5.29.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Fix CI failures
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com >
2025-07-08 10:07:25 -05:00
dependabot[bot]
0aaccfd150
Bump undici from 5.28.4 to 5.28.5 ( #541 )
...
* Bump undici from 5.28.4 to 5.28.5
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.4 to 5.28.5.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5 )
---
updated-dependencies:
- dependency-name: undici
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Bump undici from 5.28.4 to 5.28.5
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.4 to 5.28.5.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5 )
---
updated-dependencies:
- dependency-name: undici
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Fix failures
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com >
2025-03-18 10:29:43 -05:00
dependabot[bot]
0a12ed9d6a
Bump braces from 3.0.2 to 3.0.3 ( #487 )
...
* Bump braces from 3.0.2 to 3.0.3
Bumps [braces](https://github.com/micromatch/braces ) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3 )
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Bump undici from 5.28.3 to 5.28.4
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com >
2024-06-27 13:16:26 -05:00
dependabot[bot]
be1aa1186e
Bump undici from 5.28.2 to 5.28.3 ( #465 )
...
* Bump undici from 5.28.2 to 5.28.3
Bumps [undici](https://github.com/nodejs/undici ) from 5.28.2 to 5.28.3.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v5.28.2...v5.28.3 )
---
updated-dependencies:
- dependency-name: undici
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* fixed check failures and update dependencies
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com >
2024-03-21 15:04:22 -05:00
Dmitry Shibanov
0c52d547c9
Update dependencies for node20 ( #445 )
2023-12-05 17:50:42 +01:00
