dependabot/fetch-metadata
2
0
Fork 0
mirror of https://github.com/dependabot/fetch-metadata.git synced 2026-03-12 18:07:12 -04:00
Code Issues Packages Projects Releases Wiki Activity
393 Commits 8 Branches 28 Tags
aa1a97eee810838d0f4ce9c9d7edb2a6d620705d
Commit Graph

393 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jeff Widman
aa1a97eee8 run npm ci to regenerate dist/ folder 2022-12-05 06:38:23 +00:00
dependabot[bot]
73290048cf Bump yaml from 2.1.1 to 2.1.3 
Bumps [yaml](https://github.com/eemeli/yaml) from 2.1.1 to 2.1.3.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.1.1...v2.1.3)

---
updated-dependencies:
- dependency-name: yaml
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-02 01:58:03 +00:00
Barry Gordon
0222e03079 Merge pull request #291 from dependabot/dependabot/npm_and_yarn/decode-uri-component-0.2.2 
Bump decode-uri-component from 0.2.0 to 0.2.2
 2022-12-02 01:57:12 +00:00
dependabot[bot]
11d031bf72 Bump decode-uri-component from 0.2.0 to 0.2.2 
Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2.
- [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases)
- [Commits](https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.2)

---
updated-dependencies:
- dependency-name: decode-uri-component
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-02 01:56:19 +00:00
Barry Gordon
f43e701c21 Merge pull request #289 from dependabot/dependabot/npm_and_yarn/types/node-18.11.10 
Bump @types/node from 18.11.9 to 18.11.10
 2022-12-02 01:55:35 +00:00
dependabot[bot]
0d16ca1150 Bump @types/node from 18.11.9 to 18.11.10 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 18.11.9 to 18.11.10.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-02 01:54:51 +00:00
Barry Gordon
adee94d76d Merge pull request #286 from dependabot/dependabot/npm_and_yarn/yargs-and-types/yargs-17.6.2 
Bump yargs and @types/yargs
 2022-12-02 01:54:05 +00:00
dependabot[bot]
9d00663c73 Bump yargs and @types/yargs 
Bumps [yargs](https://github.com/yargs/yargs) and [@types/yargs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/yargs). These dependencies needed to be updated together.

Updates `yargs` from 17.6.0 to 17.6.2
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/yargs/yargs/compare/v17.6.0...v17.6.2)

Updates `@types/yargs` from 17.0.13 to 17.0.15
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/yargs)

---
updated-dependencies:
- dependency-name: yargs
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: "@types/yargs"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-01 20:05:12 +00:00
Barry Gordon
cce7e2c4f4 Merge pull request #290 from dependabot/dependabot/npm_and_yarn/typescript-eslint/parser-5.45.0 
Bump @typescript-eslint/parser from 5.38.0 to 5.45.0
 2022-12-01 20:03:20 +00:00
dependabot[bot]
8cf0e3d755 Bump @typescript-eslint/parser from 5.38.0 to 5.45.0 
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.38.0 to 5.45.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.45.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-01 20:02:28 +00:00
Barry Gordon
77f501d9c7 Merge pull request #287 from dependabot/dependabot/npm_and_yarn/eslint-plugin-promise-6.1.1 
Bump eslint-plugin-promise from 6.0.1 to 6.1.1
 2022-12-01 20:01:06 +00:00
dependabot[bot]
c2126bac03 Bump eslint-plugin-promise from 6.0.1 to 6.1.1 
Bumps [eslint-plugin-promise](https://github.com/eslint-community/eslint-plugin-promise) from 6.0.1 to 6.1.1.
- [Release notes](https://github.com/eslint-community/eslint-plugin-promise/releases)
- [Changelog](https://github.com/eslint-community/eslint-plugin-promise/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint-community/eslint-plugin-promise/compare/v6.0.1...v6.1.1)

---
updated-dependencies:
- dependency-name: eslint-plugin-promise
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-12-01 12:01:15 +00:00
Jeff Widman
ec8c26ab81 Merge pull request #283 from dependabot/clarify-release-notes 
Clarify release notes slightly
 2022-11-03 08:53:12 -07:00
Jeff Widman
bc97c90bca Clarify release notes slightly 
Clarify a few things I had to think through more than I should have during the release process
 2022-11-02 16:09:06 -07:00
Jeff Widman
47f7a65c97 Merge pull request #284 from dependabot/fetch-all-instead-of-pull 
Don't assume `git pull` fetches all branches/tags
 2022-11-02 16:08:00 -07:00
Jeff Widman
0e0e56882f Don't assume git pull fetches all branches/tags 
While running a release, at this point in the instructions I was on the `v1.3.5-release-notes` branch.

So `git pull` isn't guaranteed to pull updates on `main` etc.

Since we're going to checkout the release tag, a `fetch` is all we need here.
 2022-11-02 16:07:07 -07:00
Jeff Widman
7909d57ec2 Merge pull request #281 from dependabot/jeffwidman-patch-1 
Drop mention of "locally"
 2022-11-02 16:05:56 -07:00
Jeff Widman
ffb09c023c Drop mention of "locally" 
I saw "locally" and thought I had to do this on my laptop and couldn't do this in a codespace for some reason... 

But I tested and turns out a codespace is just fine, so remove mention of "locally"
 2022-11-02 16:05:04 -07:00
Jeff Widman
5ef0018793 Merge pull request #282 from dependabot/v1.3.5-release-notes 
v1.3.5 Release Notes
v1.3.5 		2022-11-02 15:58:33 -07:00
Jeff Widman
a9380d24b2 v1.3.5 2022-11-02 22:46:06 +00:00
Jeff Widman
404ba25b3f Merge pull request #280 from dependabot/drop-readme-from-bump-script 
Don't bump pin versions in `README.md`
 2022-11-02 15:42:20 -07:00
Jeff Widman
f40d4c77c9 Don't bump pin versions in README.md 
We'd rather suggest folks pin to the floating tag `v1` so they default to automatically updated.

If they'd rather pin deterministically, they should be pinning by SHA, not the full major/min/patch.

Related:
* https://github.com/dependabot/fetch-metadata/pull/246
* https://github.com/dependabot/fetch-metadata/pull/267#discussion_r983986989
 2022-11-02 14:54:28 -07:00
Jeff Widman
7db64c379f Merge pull request #252 from dependabot/document-release-steps 
Document steps for cutting a new release
 2022-11-02 14:06:07 -07:00
Jeff Widman
daa85e7aee Add mention of npm run build if dev deps need updating. 2022-11-02 13:56:14 -07:00
Jeff Widman
b768c4033e Document steps for cutting a new release 
Document the steps to cut/tag a new release of this action.
 2022-11-02 13:56:14 -07:00
Barry Gordon
9833f74bfb Merge pull request #273 from dependabot/dependabot/npm_and_yarn/yargs-and-types/yargs-17.6.0 
Bump yargs and @types/yargs
 2022-11-01 14:53:05 +00:00
dependabot[bot]
32b7ed324b Bump yargs and @types/yargs 
Bumps [yargs](https://github.com/yargs/yargs) and [@types/yargs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/yargs). These dependencies needed to be updated together.

Updates `yargs` from 17.5.1 to 17.6.0
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/yargs/yargs/compare/v17.5.1...v17.6.0)

Updates `@types/yargs` from 17.0.12 to 17.0.13
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/yargs)

---
updated-dependencies:
- dependency-name: yargs
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: "@types/yargs"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-11-01 14:52:13 +00:00
Barry Gordon
7942397165 Merge pull request #271 from dependabot/dependabot/npm_and_yarn/actions/github-5.1.1 
Bump @actions/github from 5.0.3 to 5.1.1
 2022-11-01 14:51:25 +00:00
github-actions
e670fb927e [dependabot skip] Update dist/ with build changes 2022-11-01 14:50:26 +00:00
dependabot[bot]
4491142f4c Bump @actions/github from 5.0.3 to 5.1.1 
Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) from 5.0.3 to 5.1.1.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

---
updated-dependencies:
- dependency-name: "@actions/github"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-11-01 14:49:32 +00:00
Barry Gordon
dc39bf9eff Merge pull request #274 from dependabot/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.42.0 
Bump @typescript-eslint/eslint-plugin from 5.38.0 to 5.42.0
 2022-11-01 14:48:46 +00:00
dependabot[bot]
07cf42993d Bump @typescript-eslint/eslint-plugin from 5.38.0 to 5.42.0 
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 5.38.0 to 5.42.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v5.42.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-11-01 14:47:55 +00:00
Barry Gordon
417b3bd986 Merge pull request #272 from dependabot/dependabot/npm_and_yarn/actions/core-1.10.0 
Bump @actions/core from 1.9.1 to 1.10.0
 2022-11-01 14:46:59 +00:00
github-actions
2c682a41d7 [dependabot skip] Update dist/ with build changes 2022-11-01 14:46:03 +00:00
dependabot[bot]
4c596dac43 Bump @actions/core from 1.9.1 to 1.10.0 
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.9.1 to 1.10.0.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-11-01 14:45:05 +00:00
Mattt
308b50cd65 Merge pull request #276 from dependabot/mattt/fix-linter-warnings 
Fix object-shorthand linter warnings
 2022-11-01 06:56:16 -07:00
Mattt
e99f596f42 npm run build 2022-11-01 06:31:23 -07:00
Mattt
023b335ed9 Fix object-shorthand linter warnings 2022-11-01 05:48:25 -07:00
Barry Gordon
7503c61823 Merge pull request #275 from dependabot/dependabot/npm_and_yarn/types/node-18.11.9 
Bump @types/node from 18.7.18 to 18.11.9
 2022-11-01 12:44:19 +00:00
dependabot[bot]
d09039dc87 Bump @types/node from 18.7.18 to 18.11.9 
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 18.7.18 to 18.11.9.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-11-01 12:06:29 +00:00
Landon Grindheim
ae81da92fd Merge pull request #250 from rribeiro1/fix-docs 
docs: fix auto-merge example
 2022-10-11 16:31:13 -04:00
Rafael Ribeiro
3f9eabc222 Merge branch 'main' into fix-docs 2022-10-11 22:15:52 +02:00
Nish Sinha
e800623615 Merge pull request #267 from dependabot/v1.3.4-release-notes 
v1.3.4 Release Notes
 2022-09-30 16:53:34 -04:00
Nish Sinha
bfc19f43c1 v1.3.4 v1.3.4 2022-09-29 14:21:51 -04:00
Barry Gordon
4367f5862b Merge pull request #258 from dependabot/dependabot/npm_and_yarn/yaml-2.1.1 
Bump yaml from 2.0.1 to 2.1.1
 2022-09-22 11:23:54 +01:00
Barry Gordon
00ab600844 Manually bump dist/ 2022-09-22 11:23:04 +01:00
dependabot[bot]
bdbe81d735 Bump yaml from 2.0.1 to 2.1.1 
Bumps [yaml](https://github.com/eemeli/yaml) from 2.0.1 to 2.1.1.
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](https://github.com/eemeli/yaml/compare/v2.0.1...v2.1.1)

---
updated-dependencies:
- dependency-name: yaml
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-09-22 07:55:35 +00:00
Barry Gordon
5fc325ad56 Merge pull request #257 from dependabot/dependabot/npm_and_yarn/typescript-4.8.3 
Bump typescript from 4.6.3 to 4.8.3
 2022-09-22 08:54:41 +01:00
dependabot[bot]
c91309cd90 Bump typescript from 4.6.3 to 4.8.3 
Bumps [typescript](https://github.com/Microsoft/TypeScript) from 4.6.3 to 4.8.3.
- [Release notes](https://github.com/Microsoft/TypeScript/releases)
- [Commits](https://github.com/Microsoft/TypeScript/compare/v4.6.3...v4.8.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-09-22 07:53:31 +00:00
Barry Gordon
264d039a3f Merge pull request #266 from dependabot/dependabot/npm_and_yarn/ts-node-10.9.1 
Bump ts-node from 10.7.0 to 10.9.1
 2022-09-22 08:52:33 +01:00