Commit Graph

  • 403612afa9 docs: fix auto-merge example Rafael Ribeiro 2022-09-14 18:42:30 +02:00
  • aa817aff1a Merge pull request #246 from dependabot/jeffwidman-patch-1 Jeff Widman 2022-09-03 10:55:56 -07:00
  • 3a9105bbaf Pin only to major version, not full patch version Jeff Widman 2022-08-31 20:40:32 -07:00
  • 605e039bf3 Merge pull request #233 from dependabot/v1.3.3-release-notes v1.3.3 David McIntosh 2022-07-01 09:36:32 -07:00
  • e0f38423c6 v1.3.3 David McIntosh 2022-06-30 23:43:45 +00:00
  • ac6adf8e82 Merge pull request #232 from jsok/patch-1 David McIntosh 2022-06-30 16:39:36 -07:00
  • 15259f7733 action.yaml: fix skip-commit-verification quoting Jonathan Sokolowski 2022-07-01 09:13:53 +10:00
  • 90ed90dba2 Merge pull request #226 from dependabot/v1.3.2-release-notes v1.3.2 Barry Gordon 2022-06-30 17:55:01 +01:00
  • 28b141fdba v1.3.2 Barry Gordon 2022-06-30 16:16:01 +01:00
  • cfb7274558 Merge pull request #225 from dependabot/brrygrdn/skip-commit-verification Barry Gordon 2022-06-30 15:57:39 +01:00
  • 6c87543e47 Bump dist/ Barry Gordon 2022-06-30 14:43:46 +01:00
  • d882a80163 Update documentation Barry Gordon 2022-06-30 14:38:02 +01:00
  • b1673a77b4 Add skip-commit-verification input Barry Gordon 2022-06-30 14:36:01 +01:00
  • 29dc6db06e getMessage can skip commit verification checks Barry Gordon 2022-06-30 14:27:21 +01:00
  • f45919f08b npm run build Kenichi Kamiya 2022-06-30 02:04:21 +09:00
  • e4063e40b9 Fit parser for libraries Kenichi Kamiya 2022-06-30 01:59:20 +09:00
  • cf997547b4 Add test for library and application pattern Kenichi Kamiya 2022-06-30 01:33:50 +09:00
  • a7c13a83a6 Merge pull request #211 from dependabot/update-codeowners Mattt 2022-04-22 11:02:08 -07:00
  • 6daa4b9553 Update CODEOWNERS Mattt 2022-04-22 10:56:38 -07:00
  • bfac3fa29c Merge pull request #210 from dependabot/v1.3.1-release-notes v1.3.1 Barry Gordon 2022-04-20 12:33:51 +01:00
  • 80173ff966 Small correction to bump-version script Barry Gordon 2022-04-20 11:59:32 +01:00
  • 525fbe9201 v1.3.1 Barry Gordon 2022-04-20 11:36:39 +01:00
  • 58f09fc679 Merge pull request #206 from dependabot/dependabot/npm_and_yarn/yaml-2.0.1 Barry Gordon 2022-04-20 11:36:12 +01:00
  • b1d2cf8266 Bump dist/ Barry Gordon 2022-04-20 11:30:57 +01:00
  • 70c6c9ef04 Bump yaml from 1.10.2 to 2.0.1 dependabot[bot] 2022-04-20 10:18:54 +00:00
  • 7b49493fe1 Merge pull request #209 from dependabot/dependabot/npm_and_yarn/vercel/ncc-0.33.4 Barry Gordon 2022-04-20 11:30:01 +01:00
  • 13f5830248 Bump @vercel/ncc from 0.33.3 to 0.33.4 dependabot[bot] 2022-04-20 10:28:52 +00:00
  • 59ab8889c1 Merge pull request #208 from dependabot/dependabot/npm_and_yarn/types/node-17.0.25 Barry Gordon 2022-04-20 11:28:10 +01:00
  • aad444603c Bump @types/node from 17.0.23 to 17.0.25 dependabot[bot] 2022-04-20 10:25:21 +00:00
  • 8017efd2ea Merge pull request #207 from dependabot/dependabot/npm_and_yarn/eslint-plugin-import-2.26.0 Barry Gordon 2022-04-20 11:24:22 +01:00
  • dbcf6a9dba Bump eslint-plugin-import from 2.25.4 to 2.26.0 dependabot[bot] 2022-04-20 10:22:24 +00:00
  • 8b5c520983 Merge pull request #197 from dependabot/dependabot/npm_and_yarn/actions/github-5.0.1 Barry Gordon 2022-04-20 11:18:00 +01:00
  • 25d8fcd410 [dependabot skip] Update dist/ with build changes github-actions 2022-04-20 10:14:26 +00:00
  • f410d97ac6 Bump @actions/github from 5.0.0 to 5.0.1 dependabot[bot] 2022-04-20 10:13:32 +00:00
  • 2c14e91d87 Fix typo in build workflow Barry Gordon 2022-04-20 11:10:47 +01:00
  • 5566d3bb08 Avoid using actor Barry Gordon 2022-04-20 10:04:52 +01:00
  • 9a3ea4fc12 Correctly checkout the repository to use the local action Barry Gordon 2022-04-20 09:59:02 +01:00
  • ba38fe5cb2 Merge pull request #205 from dependabot/brrygrdn/automation-tidy-up Barry Gordon 2022-04-20 09:50:08 +01:00
  • 221b2c09c5 Prefer npm to NPM Barry Gordon 2022-04-19 20:01:37 +01:00
  • a20aed188f Fix script path Barry Gordon 2022-04-19 18:38:37 +01:00
  • a5e702392a Use a single automation PAT Barry Gordon 2022-04-19 18:35:59 +01:00
  • f9682a0a6a Add a workflow to compile dist/ for Dependabot PRs Barry Gordon 2022-04-19 18:30:44 +01:00
  • 2017141629 Fix sed command for OSX Barry Gordon 2022-04-19 18:25:53 +01:00
  • 6790cb69ed Use a separate workflow to check the diff compilation Barry Gordon 2022-04-19 18:22:23 +01:00
  • 083b8484d8 Dependabot checks monthly, and checks GitHub Actions Barry Gordon 2022-04-19 17:54:54 +01:00
  • 4da8422b7e Merge pull request #203 from dependabot/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-5.20.0 Barry Gordon 2022-04-19 18:12:40 +01:00
  • 28c827d4ff Bump @typescript-eslint/eslint-plugin from 5.12.1 to 5.20.0 dependabot[bot] 2022-04-19 17:07:22 +00:00
  • e9af75210a Merge pull request #202 from dependabot/dependabot/npm_and_yarn/typescript-eslint/parser-5.20.0 Barry Gordon 2022-04-19 18:06:23 +01:00
  • 5cabe32e9b Merge pull request #199 from dependabot/dependabot/npm_and_yarn/yargs-17.4.1 Barry Gordon 2022-04-19 18:05:46 +01:00
  • 406bb904f1 Bump yargs from 17.3.1 to 17.4.1 dependabot[bot] 2022-04-19 16:44:48 +00:00
  • c87d153abb Merge pull request #204 from dependabot/dependabot/npm_and_yarn/minimist-1.2.6 Barry Gordon 2022-04-19 17:44:22 +01:00
  • facf13a3ea Merge pull request #193 from dependabot/dependabot/npm_and_yarn/typescript-4.6.3 Barry Gordon 2022-04-19 17:43:24 +01:00
  • 1a9a6fe293 Bump minimist from 1.2.5 to 1.2.6 dependabot[bot] 2022-04-19 16:38:09 +00:00
  • 7399a0b09a Bump dist/ Barry Gordon 2022-04-19 17:37:24 +01:00
  • 2442986b84 Bump typescript from 4.5.5 to 4.6.3 dependabot[bot] 2022-04-19 16:32:03 +00:00
  • 012b3f8bbb Bump @typescript-eslint/parser from 5.17.0 to 5.20.0 dependabot[bot] 2022-04-19 16:31:47 +00:00
  • f504fed8a9 Merge pull request #198 from dependabot/dependabot/npm_and_yarn/eslint-8.13.0 Barry Gordon 2022-04-19 17:31:10 +01:00
  • 3eb7c244c3 Bump eslint from 8.12.0 to 8.13.0 dependabot[bot] 2022-04-11 12:13:38 +00:00
  • ea96e5ff32 Merge pull request #196 from dependabot/dependabot/npm_and_yarn/ts-node-10.7.0 Barry Gordon 2022-03-30 15:39:43 +01:00
  • 697e512f0d Merge pull request #190 from dependabot/dependabot/npm_and_yarn/eslint-8.12.0 Barry Gordon 2022-03-30 15:24:40 +01:00
  • a07276c6c1 Bump ts-node from 10.5.0 to 10.7.0 dependabot[bot] 2022-03-30 13:20:38 +00:00
  • 6eca589517 Bump eslint from 8.9.0 to 8.12.0 dependabot[bot] 2022-03-30 13:20:13 +00:00
  • 468c720ccd Merge pull request #194 from dependabot/dependabot/npm_and_yarn/typescript-eslint/parser-5.17.0 Barry Gordon 2022-03-30 14:18:44 +01:00
  • 935fa80e0e Bump @typescript-eslint/parser from 5.12.1 to 5.17.0 dependabot[bot] 2022-03-30 13:16:12 +00:00
  • b199518f91 Merge pull request #181 from dependabot/dependabot/npm_and_yarn/types/yargs-17.0.10 Barry Gordon 2022-03-30 14:15:07 +01:00
  • 7e50846bfd Merge pull request #186 from SalimBensiali/fix-incorrect-vulnerable-manifest-path-check Barry Gordon 2022-03-30 14:14:03 +01:00
  • 70cadf40c8 Bump @types/yargs from 17.0.8 to 17.0.10 dependabot[bot] 2022-03-30 13:13:23 +00:00
  • e79f0f25a3 Merge pull request #168 from dependabot/dependabot/npm_and_yarn/types/jest-27.4.1 Barry Gordon 2022-03-30 14:12:22 +01:00
  • c87d439f92 Bump @types/jest from 27.4.0 to 27.4.1 dependabot[bot] 2022-03-30 10:10:20 +00:00
  • 8463d1018f Merge pull request #191 from dependabot/dependabot/npm_and_yarn/types/node-17.0.23 Barry Gordon 2022-03-30 11:09:26 +01:00
  • aa4ffba345 Update dist Salim Bensiali 2022-03-30 05:12:13 +10:00
  • d76b431805 Merge pull request #188 from pangaeatech/autoApprove Barry Gordon 2022-03-29 15:27:04 +01:00
  • 3d1a6e74c9 Bump @types/node from 17.0.19 to 17.0.23 dependabot[bot] 2022-03-28 12:10:06 +00:00
  • fb30fa3b5d minimizing auto approve notifications Michael Waddell 2022-03-26 22:16:33 -05:00
  • 50776e5524 Call trimSlashes on the computed manifest path instead of on just Salim Bensiali 2022-03-24 07:12:47 +00:00
  • b31caa4279 Add failing tests for verified_commits.ts\'s getAlert function Salim Bensiali 2022-03-23 07:58:15 +00:00
  • ba6223c5ba Merge pull request #183 from pangaeatech/readme-token Barry Gordon 2022-03-23 11:25:00 +00:00
  • a70ed12cac put those back to be more explicit Michael Waddell 2022-03-22 13:58:58 -05:00
  • 9f1a0a2d59 Updated readme for when you need to use a PAT Michael Waddell 2022-03-22 13:55:33 -05:00
  • d960673041 Merge pull request #173 from pangaeatech/update_type_fix Barry Gordon 2022-03-22 17:09:31 +00:00
  • 84741a1a63 If the update-type is missing for some reason, calculate it from the versions Michael Waddell 2022-03-04 22:40:59 -06:00
  • a96c30f6ac Merge pull request #170 from dependabot/v1.3.0-release-notes v1.3.0 Barry Gordon 2022-03-01 14:10:02 +00:00
  • 11d3bb752a v1.3.0 Barry Gordon 2022-02-28 18:14:28 +00:00
  • 0ca01a5553 Merge pull request #146 from pangaeatech/get_compat_score Barry Gordon 2022-02-28 18:10:37 +00:00
  • f4b2d0d26d Merge pull request #83 from jablko/patch-1 Barry Gordon 2022-02-28 17:12:17 +00:00
  • 26e18ca119 Merge branch 'main' into patch-1 Barry Gordon 2022-02-28 17:10:27 +00:00
  • a30bbbb91c Merge pull request #166 from pangaeatech/allow-other-commits Barry Gordon 2022-02-28 17:09:01 +00:00
  • 9a3daafb32 linting Michael Waddell 2022-02-26 13:46:10 -06:00
  • 4a8756595b Allow fetch-metadata to run on a PR even if it has additional commits, as long as the 0th one was added by dependabot and is verified. Michael Waddell 2022-02-26 13:40:40 -06:00
  • 749688a11e Merge pull request #165 from pangaeatech/update_readme Barry Gordon 2022-02-26 14:17:14 +00:00
  • 592101e995 Updated README to reference correct version Michael Waddell 2022-02-25 22:08:27 -06:00
  • 0caf82fe41 Default github-token Jack Bates 2021-08-23 09:39:02 -07:00
  • 4f2f2769b5 Merge pull request #163 from pangaeatech/bump-version-README Barry Gordon 2022-02-23 11:38:00 +00:00
  • b321c80e57 Updating README.md as well Michael Waddell 2022-02-22 14:09:18 -06:00
  • e35f7edd9f Merge pull request #144 from pangaeatech/flag-security-alerts Barry Gordon 2022-02-22 19:47:39 +00:00
  • 2354b3f276 Merge pull request #161 from dependabot/v1.2.1-release-notes v1.2.1 Barry Gordon 2022-02-22 19:39:17 +00:00
  • 8e0cbe5b18 Merge pull request #162 from dependabot/brrygrdn/automerge-as-someone-else Barry Gordon 2022-02-22 18:28:23 +00:00
  • cf742d5346 Add a bump-version script Barry Gordon 2022-02-21 21:09:15 +00:00
  • 3b132693ea v1.2.1 Barry Gordon 2022-02-21 21:08:58 +00:00
  • 320b24c85f Merge pull request #150 from dependabot/dependabot/npm_and_yarn/eslint-8.9.0 Barry Gordon 2022-02-22 12:42:03 +00:00