mirror of
https://github.com/dependabot/fetch-metadata.git
synced 2026-03-12 18:07:12 -04:00
Make typescript compile to "es2022" (#609)
Keeping back in `"es6"` is causing an issue over in a Dependabot PR where another library wants to use newer Javascript features. The reason `"es6"` was the previous target is because GitHub actions used to use node 12, which didn't support some of the newer versions. But now that GitHub Actions is on Node 20, which supports `"es2022"`, it's safe to let Typescript compile using this much newer syntax.
This commit is contained in:
Jeff Widman
323
dist/index.js
generated
vendored
323
dist/index.js
generated
vendored
@@ -10085,17 +10085,17 @@ function set(updatedDependencies) {
|
|||||||
const dependencyType = maxDependencyTypes(updatedDependencies);
|
const dependencyType = maxDependencyTypes(updatedDependencies);
|
||||||
const updateType = maxSemver(updatedDependencies);
|
const updateType = maxSemver(updatedDependencies);
|
||||||
const firstDependency = updatedDependencies[0];
|
const firstDependency = updatedDependencies[0];
|
||||||
const directory = firstDependency === null || firstDependency === void 0 ? void 0 : firstDependency.directory;
|
const directory = firstDependency?.directory;
|
||||||
const ecosystem = firstDependency === null || firstDependency === void 0 ? void 0 : firstDependency.packageEcosystem;
|
const ecosystem = firstDependency?.packageEcosystem;
|
||||||
const target = firstDependency === null || firstDependency === void 0 ? void 0 : firstDependency.targetBranch;
|
const target = firstDependency?.targetBranch;
|
||||||
const prevVersion = firstDependency === null || firstDependency === void 0 ? void 0 : firstDependency.prevVersion;
|
const prevVersion = firstDependency?.prevVersion;
|
||||||
const newVersion = firstDependency === null || firstDependency === void 0 ? void 0 : firstDependency.newVersion;
|
const newVersion = firstDependency?.newVersion;
|
||||||
const compatScore = firstDependency === null || firstDependency === void 0 ? void 0 : firstDependency.compatScore;
|
const compatScore = firstDependency?.compatScore;
|
||||||
const maintainerChanges = firstDependency === null || firstDependency === void 0 ? void 0 : firstDependency.maintainerChanges;
|
const maintainerChanges = firstDependency?.maintainerChanges;
|
||||||
const dependencyGroup = firstDependency === null || firstDependency === void 0 ? void 0 : firstDependency.dependencyGroup;
|
const dependencyGroup = firstDependency?.dependencyGroup;
|
||||||
const alertState = firstDependency === null || firstDependency === void 0 ? void 0 : firstDependency.alertState;
|
const alertState = firstDependency?.alertState;
|
||||||
const ghsaId = firstDependency === null || firstDependency === void 0 ? void 0 : firstDependency.ghsaId;
|
const ghsaId = firstDependency?.ghsaId;
|
||||||
const cvss = firstDependency === null || firstDependency === void 0 ? void 0 : firstDependency.cvss;
|
const cvss = firstDependency?.cvss;
|
||||||
core.startGroup(`Outputting metadata for ${(0, pluralize_1.default)('updated dependency', updatedDependencies.length, true)}`);
|
core.startGroup(`Outputting metadata for ${(0, pluralize_1.default)('updated dependency', updatedDependencies.length, true)}`);
|
||||||
core.info(`outputs.dependency-names: ${dependencyNames}`);
|
core.info(`outputs.dependency-names: ${dependencyNames}`);
|
||||||
core.info(`outputs.dependency-type: ${dependencyType}`);
|
core.info(`outputs.dependency-type: ${dependencyType}`);
|
||||||
@@ -10175,15 +10175,6 @@ var __importStar = (this && this.__importStar) || function (mod) {
|
|||||||
__setModuleDefault(result, mod);
|
__setModuleDefault(result, mod);
|
||||||
return result;
|
return result;
|
||||||
};
|
};
|
||||||
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
||||||
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
||||||
return new (P || (P = Promise))(function (resolve, reject) {
|
|
||||||
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
||||||
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
||||||
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
||||||
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
||||||
});
|
|
||||||
};
|
|
||||||
Object.defineProperty(exports, "__esModule", ({ value: true }));
|
Object.defineProperty(exports, "__esModule", ({ value: true }));
|
||||||
exports.calculateUpdateType = exports.parse = void 0;
|
exports.calculateUpdateType = exports.parse = void 0;
|
||||||
const YAML = __importStar(__nccwpck_require__(8815));
|
const YAML = __importStar(__nccwpck_require__(8815));
|
||||||
@@ -10215,36 +10206,46 @@ function branchNameToDirectoryName(chunks, delimiter, updatedDependencies, depen
|
|||||||
});
|
});
|
||||||
return `/${chunks.slice(sliceStart, sliceEnd).join('/')}`;
|
return `/${chunks.slice(sliceStart, sliceEnd).join('/')}`;
|
||||||
}
|
}
|
||||||
function parse(commitMessage, body, branchName, mainBranch, lookup, getScore) {
|
async function parse(commitMessage, body, branchName, mainBranch, lookup, getScore) {
|
||||||
var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k;
|
const bumpFragment = commitMessage.match(/^Bumps .* from (?<from>v?\d[^ ]*) to (?<to>v?\d[^ ]*)\.$/m);
|
||||||
return __awaiter(this, void 0, void 0, function* () {
|
const updateFragment = commitMessage.match(/^Update .* requirement from \S*? ?(?<from>v?\d\S*) to \S*? ?(?<to>v?\d\S*)$/m);
|
||||||
const bumpFragment = commitMessage.match(/^Bumps .* from (?<from>v?\d[^ ]*) to (?<to>v?\d[^ ]*)\.$/m);
|
const yamlFragment = commitMessage.match(/^-{3}\n(?<dependencies>[\S|\s]*?)\n^\.{3}\n/m);
|
||||||
const updateFragment = commitMessage.match(/^Update .* requirement from \S*? ?(?<from>v?\d\S*) to \S*? ?(?<to>v?\d\S*)$/m);
|
const groupName = commitMessage.match(/dependency-group:\s(?<name>\S*)/m);
|
||||||
const yamlFragment = commitMessage.match(/^-{3}\n(?<dependencies>[\S|\s]*?)\n^\.{3}\n/m);
|
const newMaintainer = !!body.match(/Maintainer changes/m);
|
||||||
const groupName = commitMessage.match(/dependency-group:\s(?<name>\S*)/m);
|
const lookupFn = lookup ?? (() => Promise.resolve({ alertState: '', ghsaId: '', cvss: 0 }));
|
||||||
const newMaintainer = !!body.match(/Maintainer changes/m);
|
const scoreFn = getScore ?? (() => Promise.resolve(0));
|
||||||
const lookupFn = lookup !== null && lookup !== void 0 ? lookup : (() => Promise.resolve({ alertState: '', ghsaId: '', cvss: 0 }));
|
if (yamlFragment?.groups && branchName.startsWith('dependabot')) {
|
||||||
const scoreFn = getScore !== null && getScore !== void 0 ? getScore : (() => Promise.resolve(0));
|
const data = YAML.parse(yamlFragment.groups.dependencies);
|
||||||
if ((yamlFragment === null || yamlFragment === void 0 ? void 0 : yamlFragment.groups) && branchName.startsWith('dependabot')) {
|
// Since we are on the `dependabot` branch (9 letters), the 10th letter in the branch name is the delimiter
|
||||||
const data = YAML.parse(yamlFragment.groups.dependencies);
|
const delim = branchName[10];
|
||||||
// Since we are on the `dependabot` branch (9 letters), the 10th letter in the branch name is the delimiter
|
const chunks = branchName.split(delim);
|
||||||
const delim = branchName[10];
|
const prev = bumpFragment?.groups?.from ?? (updateFragment?.groups?.from ?? '');
|
||||||
const chunks = branchName.split(delim);
|
const next = bumpFragment?.groups?.to ?? (updateFragment?.groups?.to ?? '');
|
||||||
const prev = (_b = (_a = bumpFragment === null || bumpFragment === void 0 ? void 0 : bumpFragment.groups) === null || _a === void 0 ? void 0 : _a.from) !== null && _b !== void 0 ? _b : ((_d = (_c = updateFragment === null || updateFragment === void 0 ? void 0 : updateFragment.groups) === null || _c === void 0 ? void 0 : _c.from) !== null && _d !== void 0 ? _d : '');
|
const dependencyGroup = groupName?.groups?.name ?? '';
|
||||||
const next = (_f = (_e = bumpFragment === null || bumpFragment === void 0 ? void 0 : bumpFragment.groups) === null || _e === void 0 ? void 0 : _e.to) !== null && _f !== void 0 ? _f : ((_h = (_g = updateFragment === null || updateFragment === void 0 ? void 0 : updateFragment.groups) === null || _g === void 0 ? void 0 : _g.to) !== null && _h !== void 0 ? _h : '');
|
if (data['updated-dependencies']) {
|
||||||
const dependencyGroup = (_k = (_j = groupName === null || groupName === void 0 ? void 0 : groupName.groups) === null || _j === void 0 ? void 0 : _j.name) !== null && _k !== void 0 ? _k : '';
|
const dirname = branchNameToDirectoryName(chunks, delim, data['updated-dependencies'], dependencyGroup);
|
||||||
if (data['updated-dependencies']) {
|
return await Promise.all(data['updated-dependencies'].map(async (dependency, index) => {
|
||||||
const dirname = branchNameToDirectoryName(chunks, delim, data['updated-dependencies'], dependencyGroup);
|
const lastVersion = index === 0 ? prev : '';
|
||||||
return yield Promise.all(data['updated-dependencies'].map((dependency, index) => __awaiter(this, void 0, void 0, function* () {
|
const nextVersion = index === 0 ? next : '';
|
||||||
const lastVersion = index === 0 ? prev : '';
|
const updateType = dependency['update-type'] || calculateUpdateType(lastVersion, nextVersion);
|
||||||
const nextVersion = index === 0 ? next : '';
|
return {
|
||||||
const updateType = dependency['update-type'] || calculateUpdateType(lastVersion, nextVersion);
|
dependencyName: dependency['dependency-name'],
|
||||||
return Object.assign({ dependencyName: dependency['dependency-name'], dependencyType: dependency['dependency-type'], updateType, directory: dirname, packageEcosystem: chunks[1], targetBranch: mainBranch, prevVersion: lastVersion, newVersion: nextVersion, compatScore: yield scoreFn(dependency['dependency-name'], lastVersion, nextVersion, chunks[1]), maintainerChanges: newMaintainer, dependencyGroup }, yield lookupFn(dependency['dependency-name'], lastVersion, dirname));
|
dependencyType: dependency['dependency-type'],
|
||||||
})));
|
updateType,
|
||||||
}
|
directory: dirname,
|
||||||
|
packageEcosystem: chunks[1],
|
||||||
|
targetBranch: mainBranch,
|
||||||
|
prevVersion: lastVersion,
|
||||||
|
newVersion: nextVersion,
|
||||||
|
compatScore: await scoreFn(dependency['dependency-name'], lastVersion, nextVersion, chunks[1]),
|
||||||
|
maintainerChanges: newMaintainer,
|
||||||
|
dependencyGroup,
|
||||||
|
...await lookupFn(dependency['dependency-name'], lastVersion, dirname)
|
||||||
|
};
|
||||||
|
}));
|
||||||
}
|
}
|
||||||
return Promise.resolve([]);
|
}
|
||||||
});
|
return Promise.resolve([]);
|
||||||
}
|
}
|
||||||
exports.parse = parse;
|
exports.parse = parse;
|
||||||
function calculateUpdateType(lastVersion, nextVersion) {
|
function calculateUpdateType(lastVersion, nextVersion) {
|
||||||
@@ -10283,12 +10284,12 @@ function parseNwo(nwo) {
|
|||||||
exports.parseNwo = parseNwo;
|
exports.parseNwo = parseNwo;
|
||||||
function getBranchNames(context) {
|
function getBranchNames(context) {
|
||||||
const { pull_request: pr } = context.payload;
|
const { pull_request: pr } = context.payload;
|
||||||
return { headName: (pr === null || pr === void 0 ? void 0 : pr.head.ref) || '', baseName: pr === null || pr === void 0 ? void 0 : pr.base.ref };
|
return { headName: pr?.head.ref || '', baseName: pr?.base.ref };
|
||||||
}
|
}
|
||||||
exports.getBranchNames = getBranchNames;
|
exports.getBranchNames = getBranchNames;
|
||||||
function getBody(context) {
|
function getBody(context) {
|
||||||
const { pull_request: pr } = context.payload;
|
const { pull_request: pr } = context.payload;
|
||||||
return (pr === null || pr === void 0 ? void 0 : pr.body) || '';
|
return pr?.body || '';
|
||||||
}
|
}
|
||||||
exports.getBody = getBody;
|
exports.getBody = getBody;
|
||||||
|
|
||||||
@@ -10323,15 +10324,6 @@ var __importStar = (this && this.__importStar) || function (mod) {
|
|||||||
__setModuleDefault(result, mod);
|
__setModuleDefault(result, mod);
|
||||||
return result;
|
return result;
|
||||||
};
|
};
|
||||||
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
||||||
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
||||||
return new (P || (P = Promise))(function (resolve, reject) {
|
|
||||||
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
||||||
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
||||||
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
||||||
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
||||||
});
|
|
||||||
};
|
|
||||||
var __importDefault = (this && this.__importDefault) || function (mod) {
|
var __importDefault = (this && this.__importDefault) || function (mod) {
|
||||||
return (mod && mod.__esModule) ? mod : { "default": mod };
|
return (mod && mod.__esModule) ? mod : { "default": mod };
|
||||||
};
|
};
|
||||||
@@ -10340,50 +10332,45 @@ exports.getCompatibility = exports.trimSlashes = exports.getAlert = exports.getM
|
|||||||
const core = __importStar(__nccwpck_require__(7484));
|
const core = __importStar(__nccwpck_require__(7484));
|
||||||
const https_1 = __importDefault(__nccwpck_require__(5692));
|
const https_1 = __importDefault(__nccwpck_require__(5692));
|
||||||
const DEPENDABOT_LOGIN = 'dependabot[bot]';
|
const DEPENDABOT_LOGIN = 'dependabot[bot]';
|
||||||
function getMessage(client, context, skipCommitVerification = false, skipVerification = false) {
|
async function getMessage(client, context, skipCommitVerification = false, skipVerification = false) {
|
||||||
var _a;
|
if (skipVerification) {
|
||||||
return __awaiter(this, void 0, void 0, function* () {
|
core.debug('Skipping pull request verification');
|
||||||
if (skipVerification) {
|
}
|
||||||
core.debug('Skipping pull request verification');
|
else {
|
||||||
}
|
core.debug('Verifying the job is for an authentic Dependabot Pull Request');
|
||||||
else {
|
}
|
||||||
core.debug('Verifying the job is for an authentic Dependabot Pull Request');
|
const { pull_request: pr } = context.payload;
|
||||||
}
|
if (!pr) {
|
||||||
const { pull_request: pr } = context.payload;
|
core.warning("Event payload missing `pull_request` key. Make sure you're " +
|
||||||
if (!pr) {
|
'triggering this action on the `pull_request` or `pull_request_target` events.');
|
||||||
core.warning("Event payload missing `pull_request` key. Make sure you're " +
|
return false;
|
||||||
'triggering this action on the `pull_request` or `pull_request_target` events.');
|
}
|
||||||
return false;
|
// Don't bother hitting the API if the PR author isn't Dependabot unless verification is disabled
|
||||||
}
|
if (!skipVerification && pr.user.login !== DEPENDABOT_LOGIN) {
|
||||||
// Don't bother hitting the API if the PR author isn't Dependabot unless verification is disabled
|
core.debug(`PR author '${pr.user.login}' is not Dependabot.`);
|
||||||
if (!skipVerification && pr.user.login !== DEPENDABOT_LOGIN) {
|
return false;
|
||||||
core.debug(`PR author '${pr.user.login}' is not Dependabot.`);
|
}
|
||||||
return false;
|
const { data: commits } = await client.rest.pulls.listCommits({
|
||||||
}
|
owner: context.repo.owner,
|
||||||
const { data: commits } = yield client.rest.pulls.listCommits({
|
repo: context.repo.repo,
|
||||||
owner: context.repo.owner,
|
pull_number: pr.number
|
||||||
repo: context.repo.repo,
|
|
||||||
pull_number: pr.number
|
|
||||||
});
|
|
||||||
const { commit, author } = commits[0];
|
|
||||||
if (!skipVerification && (author === null || author === void 0 ? void 0 : author.login) !== DEPENDABOT_LOGIN) {
|
|
||||||
// TODO: Promote to setFailed
|
|
||||||
core.warning('It looks like this PR was not created by Dependabot, refusing to proceed.');
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
if (!skipVerification && !skipCommitVerification && !((_a = commit.verification) === null || _a === void 0 ? void 0 : _a.verified)) {
|
|
||||||
// TODO: Promote to setFailed
|
|
||||||
core.warning("Dependabot's commit signature is not verified, refusing to proceed.");
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
return commit.message;
|
|
||||||
});
|
});
|
||||||
|
const { commit, author } = commits[0];
|
||||||
|
if (!skipVerification && author?.login !== DEPENDABOT_LOGIN) {
|
||||||
|
// TODO: Promote to setFailed
|
||||||
|
core.warning('It looks like this PR was not created by Dependabot, refusing to proceed.');
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
if (!skipVerification && !skipCommitVerification && !commit.verification?.verified) {
|
||||||
|
// TODO: Promote to setFailed
|
||||||
|
core.warning("Dependabot's commit signature is not verified, refusing to proceed.");
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
return commit.message;
|
||||||
}
|
}
|
||||||
exports.getMessage = getMessage;
|
exports.getMessage = getMessage;
|
||||||
function getAlert(name, version, directory, client, context) {
|
async function getAlert(name, version, directory, client, context) {
|
||||||
var _a, _b, _c, _d, _e;
|
const alerts = await client.graphql(`
|
||||||
return __awaiter(this, void 0, void 0, function* () {
|
|
||||||
const alerts = yield client.graphql(`
|
|
||||||
{
|
{
|
||||||
repository(owner: "${context.repo.owner}", name: "${context.repo.repo}") {
|
repository(owner: "${context.repo.owner}", name: "${context.repo.repo}") {
|
||||||
vulnerabilityAlerts(first: 100) {
|
vulnerabilityAlerts(first: 100) {
|
||||||
@@ -10403,34 +10390,31 @@ function getAlert(name, version, directory, client, context) {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
}`);
|
}`);
|
||||||
const nodes = (_b = (_a = alerts === null || alerts === void 0 ? void 0 : alerts.repository) === null || _a === void 0 ? void 0 : _a.vulnerabilityAlerts) === null || _b === void 0 ? void 0 : _b.nodes;
|
const nodes = alerts?.repository?.vulnerabilityAlerts?.nodes;
|
||||||
const found = nodes.find(a => (version === '' || a.vulnerableRequirements === `= ${version}`) &&
|
const found = nodes.find(a => (version === '' || a.vulnerableRequirements === `= ${version}`) &&
|
||||||
trimSlashes(a.vulnerableManifestPath) === trimSlashes(`${directory}/${a.vulnerableManifestFilename}`) &&
|
trimSlashes(a.vulnerableManifestPath) === trimSlashes(`${directory}/${a.vulnerableManifestFilename}`) &&
|
||||||
a.securityVulnerability.package.name === name);
|
a.securityVulnerability.package.name === name);
|
||||||
return {
|
return {
|
||||||
alertState: (_c = found === null || found === void 0 ? void 0 : found.state) !== null && _c !== void 0 ? _c : '',
|
alertState: found?.state ?? '',
|
||||||
ghsaId: (_d = found === null || found === void 0 ? void 0 : found.securityAdvisory.ghsaId) !== null && _d !== void 0 ? _d : '',
|
ghsaId: found?.securityAdvisory.ghsaId ?? '',
|
||||||
cvss: (_e = found === null || found === void 0 ? void 0 : found.securityAdvisory.cvss.score) !== null && _e !== void 0 ? _e : 0.0
|
cvss: found?.securityAdvisory.cvss.score ?? 0.0
|
||||||
};
|
};
|
||||||
});
|
|
||||||
}
|
}
|
||||||
exports.getAlert = getAlert;
|
exports.getAlert = getAlert;
|
||||||
function trimSlashes(value) {
|
function trimSlashes(value) {
|
||||||
return value.replace(/^\/+/, '').replace(/\/+$/, '');
|
return value.replace(/^\/+/, '').replace(/\/+$/, '');
|
||||||
}
|
}
|
||||||
exports.trimSlashes = trimSlashes;
|
exports.trimSlashes = trimSlashes;
|
||||||
function getCompatibility(name, oldVersion, newVersion, ecosystem) {
|
async function getCompatibility(name, oldVersion, newVersion, ecosystem) {
|
||||||
return __awaiter(this, void 0, void 0, function* () {
|
const svg = await new Promise((resolve) => {
|
||||||
const svg = yield new Promise((resolve) => {
|
https_1.default.get(`https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=${name}&package-manager=${ecosystem}&previous-version=${oldVersion}&new-version=${newVersion}`, res => {
|
||||||
https_1.default.get(`https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=${name}&package-manager=${ecosystem}&previous-version=${oldVersion}&new-version=${newVersion}`, res => {
|
let data = '';
|
||||||
let data = '';
|
res.on('data', chunk => { data += chunk.toString('utf8'); });
|
||||||
res.on('data', chunk => { data += chunk.toString('utf8'); });
|
res.on('end', () => { resolve(data); });
|
||||||
res.on('end', () => { resolve(data); });
|
}).on('error', () => { resolve(''); });
|
||||||
}).on('error', () => { resolve(''); });
|
|
||||||
});
|
|
||||||
const scoreChunk = svg.match(/<title>compatibility: (?<score>\d+)%<\/title>/m);
|
|
||||||
return (scoreChunk === null || scoreChunk === void 0 ? void 0 : scoreChunk.groups) ? parseInt(scoreChunk.groups.score) : 0;
|
|
||||||
});
|
});
|
||||||
|
const scoreChunk = svg.match(/<title>compatibility: (?<score>\d+)%<\/title>/m);
|
||||||
|
return scoreChunk?.groups ? parseInt(scoreChunk.groups.score) : 0;
|
||||||
}
|
}
|
||||||
exports.getCompatibility = getCompatibility;
|
exports.getCompatibility = getCompatibility;
|
||||||
|
|
||||||
@@ -10465,15 +10449,6 @@ var __importStar = (this && this.__importStar) || function (mod) {
|
|||||||
__setModuleDefault(result, mod);
|
__setModuleDefault(result, mod);
|
||||||
return result;
|
return result;
|
||||||
};
|
};
|
||||||
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
||||||
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
||||||
return new (P || (P = Promise))(function (resolve, reject) {
|
|
||||||
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
||||||
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
||||||
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
||||||
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
||||||
});
|
|
||||||
};
|
|
||||||
Object.defineProperty(exports, "__esModule", ({ value: true }));
|
Object.defineProperty(exports, "__esModule", ({ value: true }));
|
||||||
exports.run = void 0;
|
exports.run = void 0;
|
||||||
const core = __importStar(__nccwpck_require__(7484));
|
const core = __importStar(__nccwpck_require__(7484));
|
||||||
@@ -10483,54 +10458,52 @@ const verifiedCommits = __importStar(__nccwpck_require__(461));
|
|||||||
const updateMetadata = __importStar(__nccwpck_require__(9777));
|
const updateMetadata = __importStar(__nccwpck_require__(9777));
|
||||||
const output = __importStar(__nccwpck_require__(6033));
|
const output = __importStar(__nccwpck_require__(6033));
|
||||||
const util = __importStar(__nccwpck_require__(9180));
|
const util = __importStar(__nccwpck_require__(9180));
|
||||||
function run() {
|
async function run() {
|
||||||
return __awaiter(this, void 0, void 0, function* () {
|
const token = core.getInput('github-token');
|
||||||
const token = core.getInput('github-token');
|
if (!token) {
|
||||||
if (!token) {
|
/* eslint-disable no-template-curly-in-string */
|
||||||
/* eslint-disable no-template-curly-in-string */
|
core.setFailed('github-token is not set! Please add \'github-token: "${{ secrets.GITHUB_TOKEN }}"\' to your workflow file.');
|
||||||
core.setFailed('github-token is not set! Please add \'github-token: "${{ secrets.GITHUB_TOKEN }}"\' to your workflow file.');
|
/* eslint-enable no-template-curly-in-string */
|
||||||
/* eslint-enable no-template-curly-in-string */
|
return;
|
||||||
|
}
|
||||||
|
try {
|
||||||
|
const githubClient = github.getOctokit(token);
|
||||||
|
// Validate the job
|
||||||
|
const commitMessage = await verifiedCommits.getMessage(githubClient, github.context, core.getBooleanInput('skip-commit-verification'), core.getBooleanInput('skip-verification'));
|
||||||
|
const branchNames = util.getBranchNames(github.context);
|
||||||
|
const body = util.getBody(github.context);
|
||||||
|
let alertLookup;
|
||||||
|
if (core.getInput('alert-lookup')) {
|
||||||
|
alertLookup = (name, version, directory) => verifiedCommits.getAlert(name, version, directory, githubClient, github.context);
|
||||||
|
}
|
||||||
|
const scoreLookup = core.getInput('compat-lookup') ? verifiedCommits.getCompatibility : undefined;
|
||||||
|
if (commitMessage) {
|
||||||
|
// Parse metadata
|
||||||
|
core.info('Parsing Dependabot metadata');
|
||||||
|
const updatedDependencies = await updateMetadata.parse(commitMessage, body, branchNames.headName, branchNames.baseName, alertLookup, scoreLookup);
|
||||||
|
if (updatedDependencies.length > 0) {
|
||||||
|
output.set(updatedDependencies);
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
core.setFailed('PR does not contain metadata, nothing to do.');
|
||||||
|
}
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
core.setFailed('PR is not from Dependabot, nothing to do.');
|
||||||
|
}
|
||||||
|
}
|
||||||
|
catch (error) {
|
||||||
|
if (error instanceof request_error_1.RequestError) {
|
||||||
|
core.setFailed(`Api Error: (${error.status}) ${error.message}`);
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
try {
|
if (error instanceof Error) {
|
||||||
const githubClient = github.getOctokit(token);
|
core.setFailed(error.message);
|
||||||
// Validate the job
|
|
||||||
const commitMessage = yield verifiedCommits.getMessage(githubClient, github.context, core.getBooleanInput('skip-commit-verification'), core.getBooleanInput('skip-verification'));
|
|
||||||
const branchNames = util.getBranchNames(github.context);
|
|
||||||
const body = util.getBody(github.context);
|
|
||||||
let alertLookup;
|
|
||||||
if (core.getInput('alert-lookup')) {
|
|
||||||
alertLookup = (name, version, directory) => verifiedCommits.getAlert(name, version, directory, githubClient, github.context);
|
|
||||||
}
|
|
||||||
const scoreLookup = core.getInput('compat-lookup') ? verifiedCommits.getCompatibility : undefined;
|
|
||||||
if (commitMessage) {
|
|
||||||
// Parse metadata
|
|
||||||
core.info('Parsing Dependabot metadata');
|
|
||||||
const updatedDependencies = yield updateMetadata.parse(commitMessage, body, branchNames.headName, branchNames.baseName, alertLookup, scoreLookup);
|
|
||||||
if (updatedDependencies.length > 0) {
|
|
||||||
output.set(updatedDependencies);
|
|
||||||
}
|
|
||||||
else {
|
|
||||||
core.setFailed('PR does not contain metadata, nothing to do.');
|
|
||||||
}
|
|
||||||
}
|
|
||||||
else {
|
|
||||||
core.setFailed('PR is not from Dependabot, nothing to do.');
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
catch (error) {
|
else {
|
||||||
if (error instanceof request_error_1.RequestError) {
|
core.setFailed('There was an unexpected error.');
|
||||||
core.setFailed(`Api Error: (${error.status}) ${error.message}`);
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
if (error instanceof Error) {
|
|
||||||
core.setFailed(error.message);
|
|
||||||
}
|
|
||||||
else {
|
|
||||||
core.setFailed('There was an unexpected error.');
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
});
|
}
|
||||||
}
|
}
|
||||||
exports.run = run;
|
exports.run = run;
|
||||||
run();
|
run();
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
{
|
{
|
||||||
"compilerOptions": {
|
"compilerOptions": {
|
||||||
"target": "es6",
|
"target": "es2022",
|
||||||
"module": "commonjs",
|
"module": "commonjs",
|
||||||
"moduleResolution": "node",
|
"moduleResolution": "node",
|
||||||
"outDir": "./lib",
|
"outDir": "./lib",
|
||||||
|
|||||||
Reference in New Issue
Block a user