GitHub / github/dependency-submission-toolkit / commits
A TypeScript library for creating dependency snapshots.
| SHA | Message | Author | Date | Stats |
|---|---|---|---|---|
| 76ede28a | merge Merge pull request #191 from github/dependabot/npm_and_yarn/npm_and_yarn-25d5... |
Lewis Jones <l****0@g****m>
Committed by: GitHub <n****y@g****m> |
27 days ago | |
| dca7c562 |
Bump undici in the npm_and_yarn group across 1 directory
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
27 days ago | |
| f64e8083 | merge Merge pull request #178 from github/dependabot/npm_and_yarn/npm_and_yarn-fb4f... |
Kevin Dangoor <d****r@g****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 26505678 | merge Merge branch 'main' into dependabot/npm_and_yarn/npm_and_yarn-fb4fae9948 |
Kevin Dangoor <d****r@g****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| d968fd0d | merge Merge pull request #190 from github/update-vite |
Kevin Dangoor <d****r@g****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| dbd31266 | Update to vitest 3.2.7 in the example as well | Kevin Dangoor <d****r@g****m> | about 1 month ago | |
| e9727c19 | Update vitest and vite | Kevin Dangoor <d****r@g****m> | about 1 month ago | |
| 9bfe7e71 | merge Merge pull request #183 from github/copilot/supply-chain-security-defaults-20... |
Claire Song <1****3@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 8fbd5dcd |
Restore GitHub-owned action refs
Co-authored-by: Copilot <2****t@u****m> |
Claire Song <c****3@g****m> | 3 months ago | |
| 399b95fd |
Remove workflow review TODOs
Co-authored-by: Copilot <2****t@u****m> |
Claire Song <c****3@g****m> | 3 months ago | |
| 81b2f3e6 |
Pin workflow actions
Co-authored-by: Copilot <2****t@u****m> |
Claire Song <c****3@g****m> | 3 months ago | |
| 615d9508 |
Add supply chain security defaults
Co-authored-by: Copilot <2****t@u****m> |
Claire Song <c****3@g****m> | 3 months ago | |
| 17e96d2e | merge Merge pull request #182 from github/claire153/upgrade-vite |
Claire Song <1****3@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| ffc40d1e | Upgrade vite to safe version | Claire Song <c****3@g****m> | 3 months ago | |
| f23fca05 | merge Merge pull request #181 from github/bt/update-npm-publish |
Lewis Jones <l****0@g****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 77f34ecf |
Update .github/workflows/publish.yml
Co-authored-by: Copilot <1****t@u****m> |
Brandon Teng <b****2@g****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 66a7d473 |
Update .github/workflows/publish.yml
Co-authored-by: Copilot <1****t@u****m> |
Brandon Teng <b****2@g****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| a30fbdbc |
Update .github/workflows/publish.yml
Co-authored-by: Copilot <1****t@u****m> |
Brandon Teng <b****2@g****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| bc948f50 | Update publish workflow to use latest actions and Node.js |
Brandon Teng <b****2@g****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 150c399e | merge Merge pull request #180 from github/bteng22/npm-publish |
Lewis Jones <l****0@g****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| ad77067f |
Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <1****t@u****m> |
Brandon Teng <b****2@g****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 7f29f6be |
Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <1****t@u****m> |
Brandon Teng <b****2@g****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| bea28742 | Configure npm publish workflow with provenance support |
Brandon Teng <b****2@g****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 212c2e23 | merge Merge pull request #179 from github/ljones140/security-upgrades |
Lewis Jones <l****0@g****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| a6201208 | Upgrade dependencies | Lewis Jones <l****0@g****m> | 4 months ago | |
| 81848af2 |
Bump minimatch in the npm_and_yarn group across 1 directory
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| 00d36768 | merge Merge pull request #167 from github/dependabot/github_actions/actions/setup-n... |
Barry Gordon <8****n@u****m>
Committed by: GitHub <n****y@g****m> |
9 months ago | |
| cafedcac |
Bump actions/setup-node from 4 to 6
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
9 months ago | |
| db339239 | merge Merge pull request #172 from github/brrygrdn/dbot-alert-61-upgrade-glob |
Barry Gordon <8****n@u****m>
Committed by: GitHub <n****y@g****m> |
9 months ago | |
| a89f9f79 | Update vite to 6.4.1 | Barry Gordon <b****n@g****m> | 9 months ago | |
| e16fbbc8 | Upgrade glob to 10.5.0 | Barry Gordon <b****n@g****m> | 9 months ago | |
| 2d7347c2 | merge Merge pull request #171 from github/remove-ownership-yaml |
Barry Gordon <8****n@u****m>
Committed by: GitHub <n****y@g****m> |
9 months ago | |
| 25d7cc3a | merge Merge pull request #145 from github/dependabot/github_actions/actions/checkout-5 |
Barry Gordon <8****n@u****m>
Committed by: GitHub <n****y@g****m> |
9 months ago | |
| e45418a7 | merge Merge pull request #164 from github/dependabot/github_actions/github/codeql-a... |
Barry Gordon <8****n@u****m>
Committed by: GitHub <n****y@g****m> |
9 months ago | |
| dcd1c17b | Remove legacy ownership.yaml in favor of central directory |
github-actions[bot] <4****]@u****m>
Committed by: Barry Gordon <8****n@u****m> |
9 months ago | |
| fddb63f4 |
Bump github/codeql-action from 3 to 4
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
10 months ago | |
| 4ea8e4ac | merge Merge pull request #152 from github/ashelytc/undici-vulnerability |
Ashely Tenesaca <a****c@g****m>
Committed by: GitHub <n****y@g****m> |
12 months ago | |
| b8b971e7 | specify non-vulnerable undici version | Ashely Tenesaca <a****c@g****m> | 12 months ago | |
| 2bb80908 |
Bump actions/checkout from 4 to 5
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: Barry Gordon <8****n@u****m> |
12 months ago | |
| f9129712 | merge Merge pull request #150 from github/ashelytc/add-permissions |
Ashely Tenesaca <a****c@g****m>
Committed by: GitHub <n****y@g****m> |
12 months ago | |
| 8c3679dc | add permissions | Ashely Tenesaca <a****c@g****m> | 12 months ago | |
| c5d17bec | merge Merge pull request #147 from github/AshelyTC-patch-1 |
Ashely Tenesaca <a****c@g****m>
Committed by: GitHub <n****y@g****m> |
12 months ago | |
| c71027bd | Add 'actions' language to CodeQL analysis matrix |
Ashely Tenesaca <a****c@g****m>
Committed by: GitHub <n****y@g****m> |
12 months ago | |
| 7541aa24 | merge Merge pull request #141 from github/jovel-patch-1 |
Lewis Jones <l****0@g****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 91956980 | Update exec_sponsor from nerdneha to aaroncathcart |
Jovel Crisostomo <j****l@g****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 72f5e313 | merge Merge pull request #121 from github/dependabot/npm_and_yarn/vitest-3.1.2 |
Ahmed ElMallah <5****h@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 3397e835 |
Bump vitest from 3.0.8 to 3.1.2
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| cc5858d5 | merge Merge pull request #118 from github/dependabot/npm_and_yarn/npm_and_yarn-2bd3... |
Ahmed ElMallah <5****h@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| ce9d600e |
Bump vite from 5.4.14 to 6.2.5 in the npm_and_yarn group
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 7c5d0f22 | merge Merge pull request #117 from gitulisca-enterprise-cloud-testing-B/gitulisca/a... |
gitulisca <1****a@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| aa0ccdad | Add id to submitSnapshot success response | Art Leo <g****a@g****m> | over 1 year ago | |
| 1e68a1d4 | merge Merge pull request #113 from github/juxtin/prep-release |
Justin Holguín <j****n@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 434fe2e4 | Update version to 2.0.5 |
Justin Holguín <j****n@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 0cac10db | merge Merge pull request #111 from github/roman/lock |
Roman Iakovlev <r****v@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 1f128ae2 | Explicitly override @octokit/request-error to a non-vulnerable version | Roman Iakovlev <r****v@g****m> | over 1 year ago | |
| 138b7c19 | merge Merge pull request #110 from github/dependabot/npm_and_yarn/npm_and_yarn-6568... |
Roman Iakovlev <r****v@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| e28e1d52 |
Bump the npm_and_yarn group with 4 updates
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| c841587c | merge Merge pull request #104 from github/RomanIakovlev-patch-1 |
Roman Iakovlev <r****v@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 68a6da00 | Add npm to Dependabot |
Roman Iakovlev <r****v@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 6deeff98 | merge Merge pull request #103 from github/roman/lock |
Roman Iakovlev <r****v@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 5b69971c | Explicitly override esbuild to non-vulnerable version | Roman Iakovlev <r****v@g****m> | over 1 year ago | |
| cce4ff9d | merge Merge pull request #102 from github/roman/lock |
Roman Iakovlev <r****v@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| e67b0d03 | Bring package-lock.json up to date | Roman Iakovlev <r****v@g****m> | over 1 year ago | |
| 5947c320 | merge Merge pull request #101 from github/RomanIakovlev-patch-1 |
Roman Iakovlev <r****v@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 986652df | Bump vitest version in example project |
Roman Iakovlev <r****v@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| d7aa3c6d | merge Merge pull request #100 from github/update-deps |
Lewis Jones <l****0@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 863494df | Upgrade vitest and esbuild | Lewis Jones <l****0@g****m> | over 1 year ago | |
| 915289a0 | merge Merge pull request #96 from github/dependabot/npm_and_yarn/npm_and_yarn-4be97... |
Ahmed ElMallah <5****h@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| f5847c6f |
Bump vitest from 1.5.0 to 1.6.1 in the npm_and_yarn group
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 244e3a9b | merge Merge pull request #95 from github/dependabot/npm_and_yarn/npm_and_yarn-be4b9... |
Ahmed ElMallah <5****h@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 86108a22 |
Bump vite from 5.4.6 to 5.4.14 in the npm_and_yarn group
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| c4571ed4 | merge Merge pull request #93 from github/dependabot/npm_and_yarn/npm_and_yarn-2c579... |
Ahmed ElMallah <5****h@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| baa939e2 | merge Merge branch 'main' into dependabot/npm_and_yarn/npm_and_yarn-2c579f9325 |
Ahmed ElMallah <5****h@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| f24c34dd | merge Merge pull request #94 from github/andrewlayman-pm-update |
Ahmed ElMallah <5****h@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| ec09cebc | Update ownership.yaml product_manager: ahpook |
Andrew Layman <a****n@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 3a1a598d |
Bump undici from 5.28.4 to 5.28.5 in the npm_and_yarn group
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 329fcc72 | merge Merge pull request #89 from github/jonjanego-patch-3 |
Justin Holguín <j****n@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 3a26a22a | Update ownership.yaml |
Jon Janego <j****o@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| e67c7725 | merge Merge pull request #88 from github/andrewlayman-maintainer |
Andrew Layman <a****n@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 6f7c71c8 | Update ownership.yaml maintainer: jovel |
Andrew Layman <a****n@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| e3de1982 | merge Merge pull request #86 from github/joshhale-patch-4 |
Henri Maurer <h****r@u****m>
Committed by: GitHub <n****y@g****m> |
almost 2 years ago | |
| c44c211f | Update exec sponsor to @nerdneha |
Joshua Hale <j****e@g****m>
Committed by: GitHub <n****y@g****m> |
almost 2 years ago | |
| aac3de87 | merge Merge pull request #85 from github/joshhale-patch-3 |
Joshua Hale <j****e@g****m>
Committed by: GitHub <n****y@g****m> |
almost 2 years ago | |
| 98f75f2a | Update exec sponsor to aaroncathcart |
Joshua Hale <j****e@g****m>
Committed by: GitHub <n****y@g****m> |
almost 2 years ago | |
| b51af78e | merge Merge pull request #84 from github/dependabot/npm_and_yarn/npm_and_yarn-e1825... |
Justin Holguín <j****n@g****m>
Committed by: GitHub <n****y@g****m> |
almost 2 years ago | |
| 0dbf54c2 |
Bump rollup from 4.21.3 to 4.22.4 in the npm_and_yarn group
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
almost 2 years ago | |
| 2ec65cd8 | merge Merge pull request #83 from github/dependabot/npm_and_yarn/npm_and_yarn-cc3f4... |
Eli Reisman <3****n@u****m>
Committed by: GitHub <n****y@g****m> |
almost 2 years ago | |
| 42c254f4 |
Bump vite from 5.2.10 to 5.4.6 in the npm_and_yarn group
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
almost 2 years ago | |
| 5758564c | merge Merge pull request #82 from github/jonjanego-patch-2 |
Jon Janego <j****o@g****m>
Committed by: GitHub <n****y@g****m> |
about 2 years ago | |
| 0dd03eab | Create pull_request_template.md |
Jon Janego <j****o@g****m>
Committed by: GitHub <n****y@g****m> |
about 2 years ago | |
| 8805d9e9 | merge Merge pull request #81 from github/jonjanego-patch-1 |
Jon Janego <j****o@g****m>
Committed by: GitHub <n****y@g****m> |
about 2 years ago | |
| 7f0bd7af | Update CONTRIBUTING.md |
Jon Janego <j****o@g****m>
Committed by: GitHub <n****y@g****m> |
about 2 years ago | |
| fe9a05d7 | merge Merge pull request #76 from github/dependabot/npm_and_yarn/braces-3.0.3 |
Justin Holguín <j****n@g****m>
Committed by: GitHub <n****y@g****m> |
about 2 years ago | |
| a34df133 |
Bump braces from 3.0.2 to 3.0.3
Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 years ago | |
| ba430439 | merge Merge pull request #75 from smorimoto/update-npm-deps |
Henri Maurer <h****r@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 years ago | |
| 6c48f194 |
Update npm deps
Signed-off-by: Sora Morimoto <s****a@m****o> |
Sora Morimoto <s****a@m****o> | over 2 years ago | |
| b5f8bbeb | merge Merge pull request #72 from smorimoto/update-npm-deps |
Federico Builes <f****s@g****m>
Committed by: GitHub <n****y@g****m> |
over 2 years ago | |
| 71e96b18 |
Update npm deps
Signed-off-by: Sora Morimoto <s****a@m****o> |
Sora Morimoto <s****a@m****o> | over 2 years ago | |
| 0d477b7e | merge Merge pull request #70 from github/update-package-json |
Federico Builes <f****s@g****m>
Committed by: GitHub <n****y@g****m> |
over 2 years ago | |
| 4377b6d7 | bump version to 2.0.4 | Federico Builes <f****s@g****m> | over 2 years ago |