353 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Aparna Jyothi	f562c34c07	doc update	2025-09-18 18:33:28 +05:30
Aparna Jyothi	4f4e8ddad6	doc update	2025-09-09 08:25:51 +05:30
Aparna Jyothi	fe7e4d1e4f	doc update	2025-09-08 18:33:24 +05:30
Aparna Jyothi	8fda8c0fce	doc update	2025-09-08 15:53:09 +05:30
Aparna Jyothi	38fcca804c	update	2025-09-08 15:41:28 +05:30
Aparna Jyothi	9129211aa5	doc update	2025-09-08 15:39:49 +05:30
Aparna Jyothi	5ca846005c	doc update	2025-09-05 19:06:03 +05:30
dependabot[bot]	e778cb72d5	Bump eslint-config-prettier from 10.0.1 to 10.1.8 ... --- updated-dependencies: - dependency-name: eslint-config-prettier dependency-version: 10.1.8 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2025-09-05 13:23:15 +00:00
dependabot[bot]	4469467582	Bump actions/checkout from 4 to 5 (#631) ... Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> v6.0.0	2025-09-03 21:56:07 -05:00
Salman Chishti	e093d1e9bb	Node 24 upgrade (#624) ... * Node 24 upgrade Doing an upgrade for node 24, node 24 is stricter with types so need to add a type for achitecture * format * package updates * fix for check failures * upgrade @types/node * update package.json version * check failure fix * package-lock.json update * update node24 * npm run format * npm run format * node update from the workflows * Upgrade `actions/checkout` to v5 and `actions/setup-go` to v6 in README.md --------- Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com> Co-authored-by: Priya Gupta <147705955+priyagupta108@users.noreply.github.com>	2025-09-03 21:54:45 -05:00
Matthew Hughes	1d76b952eb	Improve toolchain handling (#460) ... * Configure environment to avoid toolchain installs Force `go` to always use the local toolchain (i.e. the one the one that shipped with the go command being run) via setting the `GOTOOLCHAIN` environment variable to `local`[1]: > When GOTOOLCHAIN is set to local, the go command always runs the bundled Go toolchain. This is how things are setup in the official Docker images (e.g.[2], see also the discussion around that change[3]). The motivation behind this is to: * Reduce duplicate work: if the `toolchain` version in `go.mod` was greated than the `go` version, the version from the `go` directive would be installed, then Go would detect the `toolchain` version and additionally install that * Avoid Unexpected behaviour: if you specify this action runs with some Go version (e.g. `1.21.0`) but your go.mod contains a `toolchain` or `go` directive for a newer version (e.g. `1.22.0`) then, without any other configuration/environment setup, any go commands will be run using go `1.22.0` This will be a **breaking change** for some workflows. Given a `go.mod` like: module proj go 1.22.0 Then running any `go` command, e.g. `go mod tidy`, in an environment where only go versions before `1.22.0` were installed would previously trigger a toolchain download of Go `1.22.0` and that version being used to execute the command. With this change the above would error out with something like: > go: go.mod requires go >= 1.22.0 (running go 1.21.7; GOTOOLCHAIN=local) [1] https://go.dev/doc/toolchain#select [2] dae3405a32/Dockerfile-linux.template (L163) [3] https://github.com/docker-library/golang/issues/472 * Prefer installing version from `toolchain` directive Prefer this over the version from the `go` directive. Per the docs[1] > The toolchain line declares a suggested toolchain to use with the module or workspace It seems reasonable to use this, since running this action in a directory containing a `go.mod` (or `go.work`) suggests the user is wishing to work _with the module or workspace_. Link: https://go.dev/doc/toolchain#config [1] Issue: https://github.com/actions/setup-go/issues/457 * squash! Configure environment to avoid toolchain installs Only modify env if `GOTOOLCHAIN` is not set * squash! Prefer installing version from `toolchain` directive Avoid installing from `toolchain` if `GOTOOLCHAIN` is `local`, also better regex for matching toolchain directive	2025-08-28 22:21:56 -05:00
Matthew Hughes	e75c3e80bc	Bump form-data to bring in fix for critical vulnerability (#618) ... The vulnerability: $ npm audit --audit-level=high # npm audit report form-data >=4.0.0 <4.0.4 || <2.5.4 Severity: critical form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4 form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4 fix available via `npm audit fix` node_modules/@azure/core-http/node_modules/form-data node_modules/@types/node-fetch/node_modules/form-data node_modules/form-data 1 critical severity vulnerability To address all issues, run: npm audit fix This change is the result of from running `npm audit fix` and then using[1] to update licenses via `licensed cache`. It doesn't look like `dependabot` previously raised any PRs for this dependency, so this bumps it from `4.0.0` to `4.0.4`, see the changelog[2] for details. Link: https://github.com/licensee/licensed [1] Link: https://github.com/form-data/form-data/blob/v4.0.4/CHANGELOG.md [2]	2025-08-13 12:02:46 -05:00
dependabot[bot]	8e57b58e57	Bump eslint-plugin-jest from 28.11.0 to 29.0.1 (#603) ... Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 28.11.0 to 29.0.1. - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v28.11.0...v29.0.1) --- updated-dependencies: - dependency-name: eslint-plugin-jest dependency-version: 29.0.1 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-16 16:31:11 -05:00
dependabot[bot]	7c0b336c9a	Bump typescript from 5.4.2 to 5.8.3 (#538) ... * Bump typescript from 5.4.2 to 5.7.3 Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.4.2 to 5.7.3. - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml) - [Commits](https://github.com/microsoft/TypeScript/compare/v5.4.2...v5.7.3) --- updated-dependencies: - dependency-name: typescript dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * Fix low security alert --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>	2025-07-10 19:26:25 -05:00
dependabot[bot]	6f26dcc668	Bump undici from 5.28.5 to 5.29.0 (#594) ... * Bump undici from 5.28.5 to 5.29.0 Bumps [undici](https://github.com/nodejs/undici) from 5.28.5 to 5.29.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v5.28.5...v5.29.0) --- updated-dependencies: - dependency-name: undici dependency-version: 5.29.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Fix CI failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>	2025-07-08 10:07:25 -05:00
dependabot[bot]	8d4083a006	Bump @typescript-eslint/parser from 5.62.0 to 8.32.0 (#590) ... Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 5.62.0 to 8.32.0. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.32.0/packages/parser) --- updated-dependencies: - dependency-name: "@typescript-eslint/parser" dependency-version: 8.32.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-07 13:56:18 -05:00
dependabot[bot]	fa96338abe	Bump @actions/tool-cache from 2.0.1 to 2.0.2 (#591) ... * Bump @actions/tool-cache from 2.0.1 to 2.0.2 Bumps [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) from 2.0.1 to 2.0.2. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache) --- updated-dependencies: - dependency-name: "@actions/tool-cache" dependency-version: 2.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Fix failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>	2025-06-18 17:01:53 -05:00
dependabot[bot]	4de67c04ab	Bump @types/jest from 29.5.12 to 29.5.14 (#589) ... Bumps [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) from 29.5.12 to 29.5.14. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest) --- updated-dependencies: - dependency-name: "@types/jest" dependency-version: 29.5.14 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-06-11 11:22:57 -05:00
Josh Soref	d35c59abb0	chore: update discussions url (#527) v5.5.0	2025-05-07 12:33:58 -05:00
Priya Gupta	29694d72cd	Add manifest validation and improve error handling (#586)	2025-05-05 22:00:04 -05:00
dependabot[bot]	78535dd5f2	Bump eslint-plugin-jest from 27.9.0 to 28.11.0 (#537) ... * Bump eslint-plugin-jest from 27.9.0 to 28.11.0 Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest) from 27.9.0 to 28.11.0. - [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases) - [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v27.9.0...v28.11.0) --- updated-dependencies: - dependency-name: eslint-plugin-jest dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * check failures fix --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>	2025-05-05 13:34:43 -05:00
dependabot[bot]	bb65d8857b	Bump ts-jest from 29.1.2 to 29.3.2 (#582) ... * Bump ts-jest from 29.1.2 to 29.3.2 Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.1.2 to 29.3.2. - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.1.2...v29.3.2) --- updated-dependencies: - dependency-name: ts-jest dependency-version: 29.3.2 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * fix check failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>	2025-04-30 10:37:00 -05:00
dependabot[bot]	7f17e836c0	Bump @actions/glob from 0.4.0 to 0.5.0 (#573) ... * Bump @actions/glob from 0.4.0 to 0.5.0 Bumps [@actions/glob](https://github.com/actions/toolkit/tree/HEAD/packages/glob) from 0.4.0 to 0.5.0. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/glob/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/glob) --- updated-dependencies: - dependency-name: "@actions/glob" dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * fix for check failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>	2025-04-29 12:31:28 -05:00
Priya Gupta	dca8468d37	Update self-hosted environment validation and bump undici version (#556) ... * Fix self-hosted environment check * Update isSelfHosted logic	2025-04-01 10:32:30 -05:00
aparnajyothi-y	691cc3533f	upgrade actions/cache to 4.0.3 (#574)	2025-04-01 10:24:42 -05:00
dependabot[bot]	0aaccfd150	Bump undici from 5.28.4 to 5.28.5 (#541) ... * Bump undici from 5.28.4 to 5.28.5 Bumps [undici](https://github.com/nodejs/undici) from 5.28.4 to 5.28.5. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5) --- updated-dependencies: - dependency-name: undici dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Bump undici from 5.28.4 to 5.28.5 Bumps [undici](https://github.com/nodejs/undici) from 5.28.4 to 5.28.5. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5) --- updated-dependencies: - dependency-name: undici dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Fix failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com> v5.4.0	2025-03-18 10:29:43 -05:00
aparnajyothi-y	c4c1141886	upgrade actions/cache to 4.0.2 (#568)	2025-03-11 10:19:54 -05:00
dependabot[bot]	5a083d0e9a	Bump eslint-config-prettier from 8.10.0 to 10.0.1 (#536) ... Bumps [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) from 8.10.0 to 10.0.1. - [Release notes](https://github.com/prettier/eslint-config-prettier/releases) - [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/eslint-config-prettier/compare/v8.10.0...v10.0.1) --- updated-dependencies: - dependency-name: eslint-config-prettier dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-01-21 15:47:58 -06:00
dependabot[bot]	1d82324e53	Bump semver from 7.6.0 to 7.6.3 (#535) ... * Bump semver from 7.6.0 to 7.6.3 Bumps [semver](https://github.com/npm/node-semver) from 7.6.0 to 7.6.3. - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](https://github.com/npm/node-semver/compare/v7.6.0...v7.6.3) --- updated-dependencies: - dependency-name: semver dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * fix for check-dist and license failures --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>	2025-01-21 15:45:59 -06:00
dependabot[bot]	f111f3307d	Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 (#534) ... Bumps [actions/publish-immutable-action](https://github.com/actions/publish-immutable-action) from 0.0.3 to 0.0.4. - [Release notes](https://github.com/actions/publish-immutable-action/releases) - [Commits](https://github.com/actions/publish-immutable-action/compare/0.0.3...v0.0.4) --- updated-dependencies: - dependency-name: actions/publish-immutable-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> v5.3.0	2025-01-20 21:09:38 -06:00
HarithaVattikuti	3d10edb4c2	Add new permission section (#533)	2025-01-16 08:47:07 -06:00
HarithaVattikuti	43e13893cf	Configure Dependabot settings (#530) ... * Create dependabot.yml * Format file	2025-01-15 14:16:55 -06:00
Bassem Dghaidi	f81f022188	Use the new cache service: upgrade @actions/cache to ^4.0.0 (#531) ... * Use new cache service * Add licensed output * Review licenses & update types	2025-01-15 14:06:31 -06:00
Tobias	3041bf56c9	feat: fallback to "raw" endpoint for manifest when rate limit is reached (#496) ... * feat: fallback to "raw" endpoint for manifest when rate limit is reached * add information about raw access to the README * prettier * update cross-spawn to 7.0.6 to fix vulnerability v5.2.0	2024-11-25 12:37:21 -06:00
Priya Gupta	41dfa10bad	Enhance workflows and Upgrade micromatch Dependency (#510) ... * Update workflows and bump dependencies * Add test for Go 1.22 and 1.23 * Update Go versions in local-cache setup and include macos-latest with ARM64 architecture v5.1.0	2024-10-23 22:39:31 -05:00
John Wesley Walker III	941977282c	Revise isGhes logic (#511) ... * Revise `isGhes` logic * ran `npm run format` * added unit test * tweaked unit test * ran `npm run format`	2024-10-21 11:56:08 -05:00
Joel Ambass	d60b41a563	Merge pull request #502 from actions/Jcambass-patch-1 ... Upgrade IA Publish	2024-09-26 08:24:19 +02:00
Joel Ambass	e09f57f6a9	Upgrade IA Publish	2024-09-16 17:20:25 +02:00
Joel Ambass	df1a11710e	Merge pull request #500 from actions/Jcambass-patch-1 ... Add workflow file for publishing releases to immutable action package	2024-09-11 10:48:12 +02:00
Joel Ambass	49582f6476	Add workflow file for publishing releases to immutable action package ... This workflow file publishes new action releases to the immutable action package of the same name as this repo. This is part of the Immutable Actions project which is not yet fully released to the public. First party actions like this one are part of our initial testing of this feature.	2024-09-11 10:43:06 +02:00
Zxilly	b26d40294f	fix: add arch to cache key (#493)	2024-08-26 15:19:57 -05:00
dependabot[bot]	0a12ed9d6a	Bump braces from 3.0.2 to 3.0.3 (#487) ... * Bump braces from 3.0.2 to 3.0.3 Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3. - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3) --- updated-dependencies: - dependency-name: braces dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Bump undici from 5.28.3 to 5.28.4 --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com> v5.0.2	2024-06-27 13:16:26 -05:00
HarithaVattikuti	4ab57d7ea2	Fix versions check failure (#479) ... * Update to latest Go versions * Updated versions * Update test data * Update test data	2024-05-10 11:25:20 -05:00
Masahiro Furudate	cdcb360436	Remove the description of the old go.mod specification (#458) ... * Fix emoji rendering * Fix quoting * Remove the description of the old go.mod specification * Remove the single quotes from `go-version-file` * Fix README * Add description about patch versions to README * Revert "Remove the single quotes from `go-version-file`" This reverts commit ca4321abee. v5.0.1	2024-04-18 08:33:57 -05:00
Andy Brody	99176a8f9a	Update README.md with V5 release notes (#459)	2024-04-15 09:19:11 -05:00
dependabot[bot]	be1aa1186e	Bump undici from 5.28.2 to 5.28.3 (#465) ... * Bump undici from 5.28.2 to 5.28.3 Bumps [undici](https://github.com/nodejs/undici) from 5.28.2 to 5.28.3. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v5.28.2...v5.28.3) --- updated-dependencies: - dependency-name: undici dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * fixed check failures and update dependencies --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>	2024-03-21 15:04:22 -05:00
Rui Chen	6c1fd22b67	docs: bump actions/setup-go to v5 (#449) ... Signed-off-by: Rui Chen <rui@chenrui.dev>	2024-01-29 10:18:45 -06:00
Dmitry Shibanov	0c52d547c9	Update dependencies for node20 (#445) v5.0.0	2023-12-05 17:50:42 +01:00
Marko Zivic	bfd2fb341f	Merge pull request #421 from chenrui333/node20-runtime ... feat: upgrade to use node 20 runtime and bump checkout action to v4	2023-09-18 06:44:16 +02:00
Rui Chen	3d65fa57fc	feat: bump to use actions/checkout@v4 ... Signed-off-by: Rui Chen <rui@chenrui.dev>	2023-09-05 11:42:39 -04:00