Commit Graph

211 Commits

Author SHA1 Message Date
Michael Waddell
e05077052f updating unit test 2022-02-21 19:36:58 -06:00
Michael Waddell
ba0ddd7fd8 disabling by default 2022-02-21 19:36:02 -06:00
Michael Waddell
dd76591256 Merge branch 'flag-security-alerts' into get_compat_score 2022-02-21 19:27:14 -06:00
Michael Waddell
6d854e50fd Merge branch 'main' into get_compat_score 2022-02-21 19:22:05 -06:00
Michael Waddell
b7b7f7f8a3 rebuilding index.js 2022-02-21 19:19:19 -06:00
Michael Waddell
e935ee51d1 linting 2022-02-21 19:16:52 -06:00
Michael Waddell
cfcd55c7b9 Make new "get-alerts" functionality off by default 2022-02-21 19:09:53 -06:00
Michael Waddell
582a0e6a5f Merge branch 'main' into flag-security-alerts 2022-02-21 17:41:40 -06:00
Barry Gordon
6f13a2523f Merge pull request #157 from dependabot/dependabot/npm_and_yarn/typescript-4.5.5
Bump typescript from 4.3.5 to 4.5.5
2022-02-21 21:06:14 +00:00
Barry Gordon
91c778d976 Fix new Typescript rules 2022-02-21 20:22:22 +00:00
dependabot[bot]
594834dde7 Bump typescript from 4.3.5 to 4.5.5
Bumps [typescript](https://github.com/Microsoft/TypeScript) from 4.3.5 to 4.5.5.
- [Release notes](https://github.com/Microsoft/TypeScript/releases)
- [Commits](https://github.com/Microsoft/TypeScript/compare/v4.3.5...v4.5.5)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 20:11:22 +00:00
github-actions[bot]
54c7e6cb13 Merge pull request #155 from dependabot/dependabot/npm_and_yarn/actions/core-1.6.0
Bump @actions/core from 1.4.0 to 1.6.0
2022-02-21 20:09:30 +00:00
Barry Gordon
b54d201a0f Bump dist/ files 2022-02-21 20:06:08 +00:00
dependabot[bot]
dda05aa595 Bump @actions/core from 1.4.0 to 1.6.0
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.4.0 to 1.6.0.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 20:06:00 +00:00
github-actions[bot]
e826c4a007 Merge pull request #156 from dependabot/dependabot/npm_and_yarn/dotenv-16.0.0
Bump dotenv from 10.0.0 to 16.0.0
2022-02-21 18:22:29 +00:00
github-actions[bot]
de9051138e Merge pull request #158 from dependabot/dependabot/npm_and_yarn/eslint-plugin-promise-6.0.0
Bump eslint-plugin-promise from 5.1.0 to 6.0.0
2022-02-21 18:21:36 +00:00
dependabot[bot]
9efec6574f Bump eslint-plugin-promise from 5.1.0 to 6.0.0
Bumps [eslint-plugin-promise](https://github.com/xjamundx/eslint-plugin-promise) from 5.1.0 to 6.0.0.
- [Release notes](https://github.com/xjamundx/eslint-plugin-promise/releases)
- [Changelog](https://github.com/xjamundx/eslint-plugin-promise/blob/development/CHANGELOG.md)
- [Commits](https://github.com/xjamundx/eslint-plugin-promise/commits)

---
updated-dependencies:
- dependency-name: eslint-plugin-promise
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 18:16:06 +00:00
github-actions[bot]
a9c06367b4 Merge pull request #159 from dependabot/dependabot/npm_and_yarn/node-fetch-2.6.7
Bump node-fetch from 2.6.1 to 2.6.7
2022-02-21 18:04:10 +00:00
Barry Gordon
2b32e7f6a1 Bump dist/ files 2022-02-21 18:03:21 +00:00
Barry Gordon
4f3ec532ac Allow CI to be built on demand 2022-02-21 17:53:57 +00:00
dependabot[bot]
ece6c60000 Bump node-fetch from 2.6.1 to 2.6.7
Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.1 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](https://github.com/node-fetch/node-fetch/compare/v2.6.1...v2.6.7)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 17:49:29 +00:00
github-actions[bot]
1a44fa2600 Merge pull request #160 from dependabot/dependabot/npm_and_yarn/tmpl-1.0.5
Bump tmpl from 1.0.4 to 1.0.5
2022-02-21 17:47:21 +00:00
dependabot[bot]
c0c7d38871 Bump tmpl from 1.0.4 to 1.0.5
Bumps [tmpl](https://github.com/daaku/nodejs-tmpl) from 1.0.4 to 1.0.5.
- [Release notes](https://github.com/daaku/nodejs-tmpl/releases)
- [Commits](https://github.com/daaku/nodejs-tmpl/commits/v1.0.5)

---
updated-dependencies:
- dependency-name: tmpl
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 17:40:29 +00:00
github-actions[bot]
9cb17be92d Merge pull request #154 from dependabot/dependabot/npm_and_yarn/nock-13.2.4
Bump nock from 13.1.1 to 13.2.4
2022-02-21 17:36:41 +00:00
dependabot[bot]
be2f37f21c Bump dotenv from 10.0.0 to 16.0.0
Bumps [dotenv](https://github.com/motdotla/dotenv) from 10.0.0 to 16.0.0.
- [Release notes](https://github.com/motdotla/dotenv/releases)
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](https://github.com/motdotla/dotenv/compare/v10.0.0...v16.0.0)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 17:29:56 +00:00
github-actions[bot]
afb92b2831 Merge pull request #153 from dependabot/dependabot/npm_and_yarn/types/yargs-17.0.8
Bump @types/yargs from 17.0.2 to 17.0.8
2022-02-21 17:28:55 +00:00
dependabot[bot]
2c945ce4ce Bump @types/yargs from 17.0.2 to 17.0.8
Bumps [@types/yargs](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/yargs) from 17.0.2 to 17.0.8.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/yargs)

---
updated-dependencies:
- dependency-name: "@types/yargs"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 17:15:10 +00:00
dependabot[bot]
3e328c39f0 Bump nock from 13.1.1 to 13.2.4
Bumps [nock](https://github.com/nock/nock) from 13.1.1 to 13.2.4.
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/main/CHANGELOG.md)
- [Commits](https://github.com/nock/nock/compare/v13.1.1...v13.2.4)

---
updated-dependencies:
- dependency-name: nock
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 17:15:04 +00:00
github-actions[bot]
af76bb34a8 Merge pull request #152 from dependabot/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-4.33.0
Bump @typescript-eslint/eslint-plugin from 4.29.0 to 4.33.0
2022-02-21 17:13:53 +00:00
dependabot[bot]
e6499d3c82 Bump @typescript-eslint/eslint-plugin from 4.29.0 to 4.33.0
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 4.29.0 to 4.33.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.33.0/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 17:11:23 +00:00
github-actions[bot]
19488f5811 Merge pull request #148 from dependabot/dependabot/npm_and_yarn/vercel/ncc-0.33.3
Bump @vercel/ncc from 0.29.0 to 0.33.3
2022-02-21 17:10:04 +00:00
Barry Gordon
20dbdf78a4 Update dist 2022-02-21 17:09:09 +00:00
github-actions[bot]
60f093b1ca Merge pull request #151 from dependabot/dependabot/npm_and_yarn/types/jest-27.4.0
Bump @types/jest from 26.0.24 to 27.4.0
2022-02-21 16:54:51 +00:00
dependabot[bot]
fb925e42e6 Bump @types/jest from 26.0.24 to 27.4.0
Bumps [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) from 26.0.24 to 27.4.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest)

---
updated-dependencies:
- dependency-name: "@types/jest"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 16:53:32 +00:00
dependabot[bot]
c60f53fe9e Bump @vercel/ncc from 0.29.0 to 0.33.3
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.29.0 to 0.33.3.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.29.0...0.33.3)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 16:53:26 +00:00
github-actions[bot]
c8f93bd5bf Merge pull request #149 from dependabot/dependabot/npm_and_yarn/typescript-eslint/parser-4.33.0
Bump @typescript-eslint/parser from 4.29.0 to 4.33.0
2022-02-21 16:52:47 +00:00
github-actions[bot]
7a5a96cd7c Merge pull request #147 from dependabot/dependabot/npm_and_yarn/types/node-17.0.19
Bump @types/node from 16.4.10 to 17.0.19
2022-02-21 16:52:27 +00:00
github-actions[bot]
b557012efa Merge pull request #142 from dependabot/dependabot/npm_and_yarn/ts-node-10.5.0
Bump ts-node from 10.1.0 to 10.5.0
2022-02-21 16:41:37 +00:00
dependabot[bot]
c6468a05e2 Bump @typescript-eslint/parser from 4.29.0 to 4.33.0
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 4.29.0 to 4.33.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.33.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 16:34:54 +00:00
github-actions[bot]
2d5ba0a0f2 Merge pull request #129 from dependabot/dependabot/npm_and_yarn/eslint-plugin-import-2.25.4
Bump eslint-plugin-import from 2.23.4 to 2.25.4
2022-02-21 16:34:14 +00:00
dependabot[bot]
8e508ab50d Bump ts-node from 10.1.0 to 10.5.0
Bumps [ts-node](https://github.com/TypeStrong/ts-node) from 10.1.0 to 10.5.0.
- [Release notes](https://github.com/TypeStrong/ts-node/releases)
- [Commits](https://github.com/TypeStrong/ts-node/compare/v10.1.0...v10.5.0)

---
updated-dependencies:
- dependency-name: ts-node
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 16:31:07 +00:00
dependabot[bot]
3eb092f681 Bump eslint-plugin-import from 2.23.4 to 2.25.4
Bumps [eslint-plugin-import](https://github.com/import-js/eslint-plugin-import) from 2.23.4 to 2.25.4.
- [Release notes](https://github.com/import-js/eslint-plugin-import/releases)
- [Changelog](https://github.com/import-js/eslint-plugin-import/blob/main/CHANGELOG.md)
- [Commits](https://github.com/import-js/eslint-plugin-import/compare/v2.23.4...v2.25.4)

---
updated-dependencies:
- dependency-name: eslint-plugin-import
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 16:31:07 +00:00
github-actions[bot]
e5809f8bda Merge pull request #126 from dependabot/dependabot/npm_and_yarn/yargs-17.3.1
Bump yargs from 17.0.1 to 17.3.1
2022-02-21 16:30:10 +00:00
dependabot[bot]
c17a91c604 Bump yargs from 17.0.1 to 17.3.1
Bumps [yargs](https://github.com/yargs/yargs) from 17.0.1 to 17.3.1.
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/yargs/yargs/compare/v17.0.1...v17.3.1)

---
updated-dependencies:
- dependency-name: yargs
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 16:26:16 +00:00
Barry Gordon
12c5ca3f21 Merge pull request #145 from pangaeatech/update-readme
Updated README to list supported `dependency-type` values
2022-02-21 16:21:35 +00:00
Barry Gordon
4aac23922b Merge pull request #137 from pangaeatech/use_author
Check PR Author instead of Action Actor
2022-02-21 15:59:18 +00:00
dependabot[bot]
b00372a4d2 Bump @types/node from 16.4.10 to 17.0.19
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.4.10 to 17.0.19.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-21 12:10:17 +00:00
Michael Waddell
a686f32e84 updating dist/index.js 2022-02-20 22:35:08 -06:00
Michael Waddell
e0099a154d Adding compatibility-score to output 2022-02-20 18:43:16 -06:00
Michael Waddell
f5d2dfb6a3 Closes #79 2022-02-20 13:26:09 -06:00