d0e6e4dbf7
chore(deps): bump the monthly-npm-updates group with 13 updates ( #1276 )
...
* chore(deps): bump the monthly-npm-updates group with 13 updates
Bumps the monthly-npm-updates group with 13 updates:
| Package | From | To |
| --- | --- | --- |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser ) | `5.11.0` | `5.11.1` |
| [@jest/globals](https://github.com/jestjs/jest/tree/HEAD/packages/jest-globals ) | `30.4.1` | `30.5.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) | `26.2.0` | `26.6.2` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin ) | `8.67.0` | `8.70.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser ) | `8.67.0` | `8.70.1` |
| [eslint](https://github.com/eslint/eslint ) | `10.8.1` | `10.11.0` |
| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest ) | `29.16.1` | `29.16.6` |
| [globals](https://github.com/sindresorhus/globals ) | `17.11.0` | `17.12.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest ) | `30.4.2` | `30.5.2` |
| [lint-staged](https://github.com/lint-staged/lint-staged ) | `17.3.0` | `17.5.1` |
| [prettier](https://github.com/prettier/prettier ) | `3.9.6` | `3.9.9` |
| [ts-jest](https://github.com/kulshekhar/ts-jest ) | `29.4.12` | `29.4.13` |
| [typescript](https://github.com/microsoft/TypeScript ) | `6.0.3` | `7.0.2` |
Updates `fast-xml-parser` from 5.11.0 to 5.11.1
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases )
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md )
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.11.0...v5.11.1 )
Updates `@jest/globals` from 30.4.1 to 30.5.2
- [Release notes](https://github.com/jestjs/jest/releases )
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jestjs/jest/commits/v30.5.2/packages/jest-globals )
Updates `@types/node` from 26.2.0 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
Updates `@typescript-eslint/eslint-plugin` from 8.67.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/eslint-plugin )
Updates `@typescript-eslint/parser` from 8.67.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/parser )
Updates `eslint` from 10.8.1 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases )
- [Commits](https://github.com/eslint/eslint/compare/v10.8.1...v10.11.0 )
Updates `eslint-plugin-jest` from 29.16.1 to 29.16.6
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases )
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v29.16.1...v29.16.6 )
Updates `globals` from 17.11.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases )
- [Commits](https://github.com/sindresorhus/globals/compare/v17.11.0...v17.12.0 )
Updates `jest` from 30.4.2 to 30.5.2
- [Release notes](https://github.com/jestjs/jest/releases )
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jestjs/jest/commits/v30.5.2/packages/jest )
Updates `lint-staged` from 17.3.0 to 17.5.1
- [Release notes](https://github.com/lint-staged/lint-staged/releases )
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md )
- [Commits](https://github.com/lint-staged/lint-staged/compare/v17.3.0...v17.5.1 )
Updates `prettier` from 3.9.6 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.9.6...3.9.9 )
Updates `ts-jest` from 29.4.12 to 29.4.13
- [Release notes](https://github.com/kulshekhar/ts-jest/releases )
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.4.12...v29.4.13 )
Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Commits](https://github.com/microsoft/TypeScript/compare/v6.0.3...v7.0.2 )
---
updated-dependencies:
- dependency-name: fast-xml-parser
dependency-version: 5.11.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: monthly-npm-updates
- dependency-name: "@jest/globals"
dependency-version: 30.5.2
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: "@types/node"
dependency-version: 26.6.2
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: "@typescript-eslint/eslint-plugin"
dependency-version: 8.70.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: "@typescript-eslint/parser"
dependency-version: 8.70.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: eslint
dependency-version: 10.11.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: eslint-plugin-jest
dependency-version: 29.16.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: monthly-npm-updates
- dependency-name: globals
dependency-version: 17.12.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: jest
dependency-version: 30.5.2
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: lint-staged
dependency-version: 17.5.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: prettier
dependency-version: 3.9.9
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: monthly-npm-updates
- dependency-name: ts-jest
dependency-version: 29.4.13
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: monthly-npm-updates
- dependency-name: typescript
dependency-version: 7.0.2
dependency-type: direct:development
update-type: version-update:semver-major
dependency-group: monthly-npm-updates
...
Signed-off-by: dependabot[bot] <[email protected] >
* Fix monthly npm update checks
Keep TypeScript on the compatible 6.x line for the current @typescript-eslint peer range, rebuild dist, and refresh the fast-xml-parser license cache.
Co-authored-by: Copilot App <[email protected] >
* Fix monthly npm validation failures
Update vulnerable transitive packages in the lockfile, rebuild dist, and correct the JetBrains test expectation for mocked Windows availability.
Co-authored-by: Copilot App <[email protected] >
* chore: update licensed cache for npm updates
Co-authored-by: Copilot App <[email protected] >
---------
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
Co-authored-by: Copilot App <[email protected] >
2026-10-02 01:24:19 -04:00
b24925bc49
chore(deps): bump undici from 6.28.0 to 6.29.0 ( #1274 )
...
* chore(deps): bump undici from 6.28.0 to 6.29.0
Bumps [undici](https://github.com/nodejs/undici ) from 6.28.0 to 6.29.0.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v6.28.0...v6.29.0 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 6.29.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] >
* chore(deps): update generated undici artifacts
Co-authored-by: Copilot App <[email protected] >
* chore(deps): bump brace-expansion to 5.0.12 to fix high-severity audit
Resolves GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-6j4f-fj2g-mc7p.
Regenerates dist/ and updates licensed cache.
Co-authored-by: Copilot App <[email protected] >
---------
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
Co-authored-by: Copilot App <[email protected] >
2026-10-02 00:37:36 -04:00
134912a529
Fix import-safe checks when scripts are run from a path with symlinks ( #1265 )
...
* Fix import-safe checks when scripts are run from a path with symlinks
In v6, setup-java was made "import-safe" to facilitate testing. This
prevents setup-java & cleanup-java from doing anything when their
sources get imported.
This works fine in the general case, but actually invoking the script
(`node setup-java/index.js`) when the path to the script contains
symlinks led to the script incorrectly believing it was imported, and
refuse to actually run.
To fix this, we pass `process.argv[1]` through `fs.realpathSync`, which
resolves symlinks in the path.
Fixes #1264
* Preserve import safety when resolving symlink entrypoints
Share entrypoint detection between setup and cleanup, handle non-file entrypoints safely, and normalize both paths for preserved symlinks. Add real-process regression coverage and rebuild action bundles.
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: 831c32f2-a275-45bd-a92b-c387372a1554
* Update js-yaml to fix merge-source denial of service
Bump the transitive development dependency from 3.15.1 to 3.15.2 to address GHSA-2883-xcg3-v3hh without changing dependency ranges or CI checks.
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: 831c32f2-a275-45bd-a92b-c387372a1554
---------
Co-authored-by: Bruno Borges <[email protected] >
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: 831c32f2-a275-45bd-a92b-c387372a1554
2026-09-09 02:20:21 -04:00
2732291815
chore(deps-dev): update eslint and globals ( #1256 )
...
* chore(deps-dev): bump the monthly-npm-updates group with 3 updates
Bumps the monthly-npm-updates group with 3 updates: [eslint](https://github.com/eslint/eslint ), [globals](https://github.com/sindresorhus/globals ) and [typescript](https://github.com/microsoft/TypeScript ).
Updates `eslint` from 10.8.0 to 10.8.1
- [Release notes](https://github.com/eslint/eslint/releases )
- [Commits](https://github.com/eslint/eslint/compare/v10.8.0...v10.8.1 )
Updates `globals` from 17.9.0 to 17.11.0
- [Release notes](https://github.com/sindresorhus/globals/releases )
- [Commits](https://github.com/sindresorhus/globals/compare/v17.9.0...v17.11.0 )
Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Commits](https://github.com/microsoft/TypeScript/compare/v6.0.3...v7.0.2 )
---
updated-dependencies:
- dependency-name: eslint
dependency-version: 10.8.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: monthly-npm-updates
- dependency-name: globals
dependency-version: 17.11.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: typescript
dependency-version: 7.0.2
dependency-type: direct:development
update-type: version-update:semver-major
dependency-group: monthly-npm-updates
...
Signed-off-by: dependabot[bot] <[email protected] >
* fix(deps): keep TypeScript on supported version
TypeScript 7 is outside the peer dependency ranges supported by typescript-eslint and ts-jest, causing npm ci to fail before dist can be rebuilt.
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: f1ca1f37-990b-4feb-9e3d-708cfdccbb6e
---------
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
Copilot-Session: f1ca1f37-990b-4feb-9e3d-708cfdccbb6e
2026-08-24 13:26:11 -04:00
59b3450628
chore(deps): combine open Dependabot npm updates ( #1252 )
...
* Combine Dependabot npm updates
Co-authored-by: Copilot App <[email protected] >
* Rebuild action bundles
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: a5d254ad-e29c-4477-ae66-cba6e36d7e03
* Update Licensed cache for XML dependencies
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: a5d254ad-e29c-4477-ae66-cba6e36d7e03
---------
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: a5d254ad-e29c-4477-ae66-cba6e36d7e03
2026-08-24 10:36:54 -04:00
d4f69b3990
chore(deps-dev): bump @typescript-eslint/eslint-plugin ( #1232 )
...
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin ) from 8.65.0 to 8.67.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/eslint-plugin )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
dependency-version: 8.66.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 14:58:47 -04:00
7d5d4a7f19
chore(deps-dev): bump lint-staged from 17.2.0 to 17.3.0 ( #1231 )
...
Bumps [lint-staged](https://github.com/lint-staged/lint-staged ) from 17.2.0 to 17.3.0.
- [Release notes](https://github.com/lint-staged/lint-staged/releases )
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md )
- [Commits](https://github.com/lint-staged/lint-staged/compare/v17.2.0...v17.3.0 )
---
updated-dependencies:
- dependency-name: lint-staged
dependency-version: 17.3.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 14:48:50 -04:00
f974fff346
chore(deps-dev): bump @types/semver from 7.7.1 to 7.8.0 ( #1229 )
...
Bumps [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver ) from 7.7.1 to 7.8.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver )
---
updated-dependencies:
- dependency-name: "@types/semver"
dependency-version: 7.8.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 14:48:25 -04:00
e96da06a44
chore(deps-dev): bump globals from 17.8.0 to 17.9.0 ( #1233 )
...
Bumps [globals](https://github.com/sindresorhus/globals ) from 17.8.0 to 17.9.0.
- [Release notes](https://github.com/sindresorhus/globals/releases )
- [Commits](https://github.com/sindresorhus/globals/compare/v17.8.0...v17.9.0 )
---
updated-dependencies:
- dependency-name: globals
dependency-version: 17.9.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
2026-08-17 14:47:55 -04:00
Bruno Borges and GitHub
a52a3de678
Fix js-yaml audit vulnerability ( #1228 )
...
Upgrade the transitive js-yaml dependency to 3.15.1 to resolve GHSA-5p4m-2wfm-xmqj.\n\nCo-authored-by: Copilot App <[email protected] >
2026-08-06 23:15:19 -04:00
7a9a8b1dcc
chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 ( #1202 )
...
* chore(deps): bump brace-expansion from 5.0.8 to 5.0.9
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion ) from 5.0.8 to 5.0.9.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases )
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v5.0.8...v5.0.9 )
---
updated-dependencies:
- dependency-name: brace-expansion
dependency-version: 5.0.9
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] >
* chore: rebuild distribution
Co-authored-by: Copilot App <[email protected] >
* chore: refresh dependency metadata
Co-authored-by: Copilot App <[email protected] >
---------
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
Co-authored-by: Copilot App <[email protected] >
2026-08-04 21:15:15 -04:00
Bruno Borges and GitHub
5827477733
Optimize Maven configuration warm path ( #1182 )
...
* Optimize Maven configuration warm path
Avoid eager Maven XML initialization on warm JDK runs by using deterministic serializers for new Maven settings/toolchains files, lazy-loading xmlbuilder2 for existing toolchains merges, and deferring Maven configuration modules until after Java setup.
Add targeted tests for XML escaping, lazy xmlbuilder2 loading, concurrent Maven configuration, and a manual benchmark workflow for warm-path validation.
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: 4dc58426-5e20-44cb-af16-8da0965fac3b
* Address Maven optimization PR feedback
Make the toolchain XML generator consistently async, remove redundant Maven configuration await handling, and reuse the existing XML test helper.
Configure CodeQL to skip generated dist output so newly split vendored chunks do not report duplicate generated-code alerts.
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: 4dc58426-5e20-44cb-af16-8da0965fac3b
* Apply rubber duck review suggestions
Document XML attribute escaping, simplify Maven configuration awaiting, and add a regression test that feeds fast-path toolchains output into the merge path.
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: 4dc58426-5e20-44cb-af16-8da0965fac3b
* Delete .github/codeql/codeql-config.yml
* Update codeql-analysis.yml
* Replace xmlbuilder2 in Maven toolchain merge
Use fast-xml-parser for existing toolchains.xml parsing and serialize merged Maven toolchains deterministically. This removes the bundled xmlbuilder2 DOM/XML builder chunk from dist while preserving merge behavior for custom attributes, custom toolchains, partial entries, duplicate filtering, and escaping.
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: 4dc58426-5e20-44cb-af16-8da0965fac3b
* Move Maven benchmark out of setup-java
Remove the Maven warm-path benchmark workflow and helper script from setup-java. Benchmark coverage is being moved to actions/setup-java-benchmarks so this action repository only carries the runtime optimization, tests, and generated distribution artifacts.
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: 4dc58426-5e20-44cb-af16-8da0965fac3b
---------
Copilot-Session: 4dc58426-5e20-44cb-af16-8da0965fac3b
2026-07-30 15:09:35 -04:00
69304e5bab
Remediate npm audit findings and rebuild distributions ( #1145 )
...
* Pin patched brace-expansion release
* Rebuild action bundles
* Refresh licensed npm cache records
* Restore compatible brace expansion versions
* Restore transitive dependency license records
* Fix brace-expansion GHSA-mh99-v99m-4gvg vulnerability via npm overrides
* Update licensed dependency records to fix CI license check
---------
Co-authored-by: copilot-swe-agent[bot] <[email protected] >
2026-07-27 21:57:35 -04:00
Markus Hoffrogge and GitHub
c59dceb0cd
chore(deps): fix npm audited vulnerabilities ( #1140 )
2026-07-27 14:34:04 -04:00
8f48118d89
chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 ( #1137 )
...
Bumps [typescript](https://github.com/microsoft/TypeScript ) from 6.0.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Commits](https://github.com/microsoft/TypeScript/commits )
---
updated-dependencies:
- dependency-name: typescript
dependency-version: 7.0.2
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
2026-07-27 13:45:11 -04:00
c79143eaae
chore(deps-dev): bump lint-staged from 17.0.8 to 17.2.0 ( #1136 )
...
Bumps [lint-staged](https://github.com/lint-staged/lint-staged ) from 17.0.8 to 17.2.0.
- [Release notes](https://github.com/lint-staged/lint-staged/releases )
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md )
- [Commits](https://github.com/lint-staged/lint-staged/compare/v17.0.8...v17.2.0 )
---
updated-dependencies:
- dependency-name: lint-staged
dependency-version: 17.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
2026-07-27 13:44:06 -04:00
77c695c0d0
chore(deps-dev): bump @typescript-eslint/parser from 8.64.0 to 8.65.0 ( #1138 )
...
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser ) from 8.64.0 to 8.65.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/parser )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
dependency-version: 8.64.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
2026-07-27 13:42:04 -04:00
7b26641a55
chore(deps): bump fast-xml-parser from 5.9.3 to 5.10.1 ( #1142 )
...
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser ) from 5.9.3 to 5.10.1.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases )
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md )
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.9.3...v5.10.1 )
---
updated-dependencies:
- dependency-name: fast-xml-parser
dependency-version: 5.10.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
2026-07-27 13:38:57 -04:00
cd3b6000e4
chore(deps-dev): bump @typescript-eslint/eslint-plugin ( #1135 )
...
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin ) from 8.63.0 to 8.64.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/eslint-plugin )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
dependency-version: 8.64.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-27 13:11:27 -04:00
6e2e32e729
chore(deps): bump @actions/cache to 6.2.0 ( #1128 )
...
* chore(deps): bump @actions/cache to 6.2.0
Bump @actions/cache from ^6.1.0 to ^6.2.0 and rebuild the vendored
dist/ bundles. 6.2.0 honors ACTIONS_CACHE_MODE to skip restore/save
when the effective cache-mode disallows it, and surfaces a
core.warning (instead of failing the run) when the cache service
denies a read/write due to token scopes.
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: 0046a2b8-0238-4ac6-93f6-70c4e60b5630
* chore: update licensed record for @actions/cache 6.2.0
Refresh the cached licensed dependency record so the version matches
the bumped @actions/cache 6.2.0. License text, summary, and homepage
are unchanged; only the version field was stale, which failed the
"Check licenses" CI job.
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: 0046a2b8-0238-4ac6-93f6-70c4e60b5630
---------
Co-authored-by: Copilot App <[email protected] >
Co-authored-by: Bruno Borges <[email protected] >
2026-07-15 17:16:17 -04:00
eb6157cd13
chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 ( #1102 )
...
* chore(deps-dev): bump typescript from 6.0.3 to 7.0.2
Bumps [typescript](https://github.com/microsoft/TypeScript ) from 6.0.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Commits](https://github.com/microsoft/TypeScript/commits )
---
updated-dependencies:
- dependency-name: typescript
dependency-version: 7.0.2
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
* fix: restore TypeScript 6 compatibility with eslint stack
@typescript-eslint currently requires typescript <6.1.0, so TypeScript 7 breaks npm ci in CI jobs.
Co-authored-by: Copilot App <[email protected] >
Copilot-Session: 267dc9e4-4d46-424a-9f4e-6c2b2e6e2e57
---------
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
2026-07-13 14:16:51 -04:00
23f8c419c6
chore(deps-dev): bump @types/node from 26.1.0 to 26.1.1 ( #1104 )
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 26.1.0 to 26.1.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 26.1.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
2026-07-13 13:55:40 -04:00
2301a55b6d
chore(deps-dev): bump prettier from 3.9.4 to 3.9.5 ( #1105 )
...
Bumps [prettier](https://github.com/prettier/prettier ) from 3.9.4 to 3.9.5.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.9.4...3.9.5 )
---
updated-dependencies:
- dependency-name: prettier
dependency-version: 3.9.5
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
2026-07-13 13:43:44 -04:00
2789aa9170
chore(deps-dev): bump eslint-plugin-n from 18.2.1 to 18.2.2 ( #1103 )
...
Bumps [eslint-plugin-n](https://github.com/eslint-community/eslint-plugin-n ) from 18.2.1 to 18.2.2.
- [Release notes](https://github.com/eslint-community/eslint-plugin-n/releases )
- [Changelog](https://github.com/eslint-community/eslint-plugin-n/blob/master/CHANGELOG.md )
- [Commits](https://github.com/eslint-community/eslint-plugin-n/compare/v18.2.1...v18.2.2 )
---
updated-dependencies:
- dependency-name: eslint-plugin-n
dependency-version: 18.2.2
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
2026-07-13 13:40:19 -04:00
28fb8cb06b
chore(deps-dev): bump eslint from 10.6.0 to 10.7.0 ( #1101 )
...
Bumps [eslint](https://github.com/eslint/eslint ) from 10.6.0 to 10.7.0.
- [Release notes](https://github.com/eslint/eslint/releases )
- [Commits](https://github.com/eslint/eslint/compare/v10.6.0...v10.7.0 )
---
updated-dependencies:
- dependency-name: eslint
dependency-version: 10.7.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-13 13:29:17 -04:00
f7121373a9
Migrate to ESM and upgrade dependencies ( #1078 )
...
* Migrate to ESM and upgrade dependencies
* fix: update import statement for JSON module in kona-installer test
---------
Co-authored-by: George Adams <[email protected] >
2026-07-08 10:15:00 +01:00
0765b158bf
chore(deps-dev): bump eslint-plugin-jest from 29.0.1 to 29.15.4 ( #1074 )
...
Bumps [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest ) from 29.0.1 to 29.15.4.
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases )
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v29.0.1...v29.15.4 )
---
updated-dependencies:
- dependency-name: eslint-plugin-jest
dependency-version: 29.15.4
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-06 13:45:36 -04:00
c712b2fb55
Bump prettier from 3.6.2 to 3.9.1 ( #1066 )
...
* Bump prettier from 3.6.2 to 3.9.1
Bumps [prettier](https://github.com/prettier/prettier ) from 3.6.2 to 3.9.1.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.6.2...3.9.1 )
---
updated-dependencies:
- dependency-name: prettier
dependency-version: 3.9.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
* Format files for Prettier 3.9.1
Co-authored-by: Copilot App <[email protected] >
---------
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
Co-authored-by: Copilot App <[email protected] >
2026-07-06 13:35:02 -04:00
e9339ddc84
Bump @typescript-eslint/parser from 8.61.1 to 8.62.0 ( #1062 )
...
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser ) from 8.61.1 to 8.62.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/parser )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
dependency-version: 8.62.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-29 09:13:56 +01:00
623c707d77
chore: enforce pre-PR validation (aggregate scripts, git hooks, PR checklist) ( #1061 )
...
* chore: enforce pre-PR validation with aggregate scripts, git hooks, and PR checklist
Add tooling to help contributors run the same checks as CI before
submitting a pull request, reducing avoidable format/lint/build failures.
- Add aggregate npm scripts:
- `npm run check` runs format-check + lint + build + test (mirrors CI)
- `npm run fix` runs format + lint:fix + build
- Add husky + lint-staged git hooks (installed via `npm install`):
- pre-commit formats and lints staged files
- pre-push rebuilds dist/ and runs the test suite
- Add a checklist item to the PR template prompting contributors to run
`npm run check` locally
- Document the aggregate scripts and hooks in docs/contributors.md
dist/ is intentionally not auto-committed by CI to avoid pwn-request
security risks; the existing `Check dist/` workflow continues to verify it.
Co-authored-by: Copilot <[email protected] >
* Apply suggestions from code review
Co-authored-by: Copilot Autofix powered by AI <[email protected] >
---------
Co-authored-by: Copilot <[email protected] >
Co-authored-by: Copilot Autofix powered by AI <[email protected] >
2026-06-26 08:07:16 +01:00
eab4b0854d
Bump @types/node from 25.9.3 to 26.0.0 ( #1031 )
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.9.3 to 26.0.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 26.0.0
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
Co-authored-by: Bruno Borges <[email protected] >
2026-06-22 17:16:03 -04:00
cefdecda46
Bump undici from 6.24.1 to 6.27.0 ( #1033 )
...
Bumps [undici](https://github.com/nodejs/undici ) from 6.24.1 to 6.27.0.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v6.24.1...v6.27.0 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 6.27.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <[email protected] >
2026-06-22 13:07:33 -04:00
Jason Ginchereau and GitHub
6e9017e125
Bump @actions/cache to 5.1.0, handle cache write denied ( #1026 )
2026-06-22 09:16:01 +01:00
f300429fba
Bump @typescript-eslint/parser from 8.48.0 to 8.61.1 ( #1021 )
...
* Bump @typescript-eslint/parser from 8.48.0 to 8.61.1
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser ) from 8.48.0 to 8.61.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.61.1/packages/parser )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
dependency-version: 8.61.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
* run licensed and update dist
---------
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: George Adams <[email protected] >
2026-06-16 15:12:38 -07:00
ad2b38190b
Bump @vercel/ncc from 0.38.1 to 0.44.0 ( #1018 )
...
* Bump @vercel/ncc from 0.38.1 to 0.44.0
Bumps [@vercel/ncc](https://github.com/vercel/ncc ) from 0.38.1 to 0.44.0.
- [Release notes](https://github.com/vercel/ncc/releases )
- [Commits](https://github.com/vercel/ncc/compare/0.38.1...0.44.0 )
---
updated-dependencies:
- dependency-name: "@vercel/ncc"
dependency-version: 0.44.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
* recompile dist
---------
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: George Adams <[email protected] >
2026-06-16 09:37:47 +02:00
John and GitHub
b24df5bba5
Make the Adoptopenjdk package type look at the Temurin repo first for latest assets ( #522 )
...
* Make the Adoptopenjdk package type look at the Temurin repo first for latest assets
* Address Copilot code review comments
- Use strict equality (===, !==) instead of loose equality (==, !=) for all comparisons
- Properly handle caught errors with instanceof type narrowing before accessing properties
- Only fall back to legacy AdoptOpenJDK for specific version-not-found errors
- Rethrow unexpected errors to avoid masking real issues (network failures, rate limits, etc.)
- Fix error message check to match actual error text ('No matching version found')
- Remove unnecessary undefined check since method return type is never undefined
- Add @internal JSDoc annotation to TemurinDistribution.findPackageForDownload()
- Update tests to properly mock Temurin lookup failures for fallback behavior testing
- Rebuild dist files
* Always fall back to legacy AdoptOpenJDK but log all Temurin failures
- Change error handling to gracefully fall back for all errors, not just version-not-found
- Log version-not-found errors as notices with migration guidance
- Log other Temurin failures as debug messages for troubleshooting
- Improves resilience: users always get a result even if Temurin API has issues
- Maintains visibility: failures are still logged for debugging
* Fixes from review
* Fixes from review
* Fixes from review
* Regenerate dist
2026-06-12 16:30:59 +01:00
43120bc3c3
Implement pagination with link headers for Adoptium based apis ( #1014 )
...
* Use Link headers for Adoptium pagination
* Fix nullable pagination URL types and rebuild dist
* Add 1000-page safeguard for JetBrains pagination
* Adjust plan for pagination safeguard scope
* Move pagination safeguard to non-JetBrains installers
* Add 1000-page safeguard to Adopt Temurin and Semeru pagination
* Fix Prettier formatting in adopt, semeru, and temurin installer files
* Fix CI audit failure by updating vulnerable transitive deps
* Address PR review: RFC-compliant Link parsing, SSRF validation, centralized constant
- Make getNextPageUrlFromLinkHeader RFC 8288 compliant by splitting
link-values and checking for rel=next anywhere in the parameters,
not just as the first parameter after the semicolon.
- Add validatePaginationUrl utility to reject pagination URLs that
point to unexpected origins (SSRF mitigation).
- Centralize MAX_PAGINATION_PAGES in util.ts instead of duplicating
across Adopt, Semeru, and Temurin installers.
- Add tests for rel not being the first parameter, and for URL
origin validation.
Co-authored-by: Copilot <[email protected] >
* Address code review feedback on pagination implementation
- Tighten rel regex with word boundary to prevent false positives
(e.g., rel="nextsomething" no longer matches).
- Use parsed.origin comparison in validatePaginationUrl to correctly
handle explicit default ports (e.g., :443 for HTTPS).
- Fix pagination safeguard tests to use same-origin URLs so they
actually exercise the 1000-page limit instead of being rejected
by origin validation on the first request.
- Add test for rel="nextsomething" not matching.
- Add test for explicit default port acceptance.
Co-authored-by: Copilot <[email protected] >
* Fix prettier formatting in util.test.ts
* Rebuild dist/ to fix check-dist CI failure
---------
Co-authored-by: copilot-swe-agent[bot] <[email protected] >
Co-authored-by: Copilot <[email protected] >
2026-06-12 11:50:16 +01:00
ad9d6a6320
Bump @types/node from 24.1.0 to 25.9.3 ( #950 )
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 24.1.0 to 25.9.3.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 24.9.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 10:21:27 +01:00
039af37997
Bump picomatch, @types/jest, jest, jest-circus and ts-jest ( #1016 )
...
* Bump picomatch, @types/jest, jest, jest-circus and ts-jest
Bumps [picomatch](https://github.com/micromatch/picomatch ) to 4.0.4 and updates ancestor dependencies [picomatch](https://github.com/micromatch/picomatch ), [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest ), [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest ), [jest-circus](https://github.com/jestjs/jest/tree/HEAD/packages/jest-circus ) and [ts-jest](https://github.com/kulshekhar/ts-jest ). These dependencies need to be updated together.
Updates `picomatch` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4 )
Updates `@types/jest` from 29.5.14 to 30.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest )
Updates `jest` from 29.7.0 to 30.4.2
- [Release notes](https://github.com/jestjs/jest/releases )
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest )
Updates `jest-circus` from 29.7.0 to 30.4.2
- [Release notes](https://github.com/jestjs/jest/releases )
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest-circus )
Updates `ts-jest` from 29.3.0 to 29.4.11
- [Release notes](https://github.com/kulshekhar/ts-jest/releases )
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.3.0...v29.4.11 )
---
updated-dependencies:
- dependency-name: "@types/jest"
dependency-version: 30.0.0
dependency-type: direct:development
- dependency-name: jest
dependency-version: 30.4.2
dependency-type: direct:development
- dependency-name: jest-circus
dependency-version: 30.4.2
dependency-type: direct:development
- dependency-name: picomatch
dependency-version: 4.0.4
dependency-type: indirect
- dependency-name: ts-jest
dependency-version: 29.4.11
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <[email protected] >
* run licensed and update dist
---------
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: George Adams <[email protected] >
2026-06-12 10:05:41 +01:00
1756ab6acd
Bump eslint-config-prettier from 8.10.0 to 10.1.8 ( #881 )
...
Bumps [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier ) from 8.10.0 to 10.1.8.
- [Release notes](https://github.com/prettier/eslint-config-prettier/releases )
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/eslint-config-prettier/compare/v8.10.0...v10.1.8 )
---
updated-dependencies:
- dependency-name: eslint-config-prettier
dependency-version: 10.1.8
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 09:55:04 +01:00
662bb59f48
Bump @typescript-eslint/eslint-plugin from 8.35.1 to 8.46.2 ( #952 )
...
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin ) from 8.35.1 to 8.46.2.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.46.2/packages/eslint-plugin )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
dependency-version: 8.46.2
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 09:52:03 +01:00
George Adams and GitHub
1071fc12d6
fix: resolve npm audit vulnerabilities in fast-xml-builder and fast-xml-parser ( #1015 )
...
* fix: update dependency license records and resolve npm audit vulnerabilities
- Bump fast-xml-builder 1.1.4 → 1.2.0 (GHSA-5wm8-gmm8-39j9)
- Bump fast-xml-parser 5.5.10 → 5.8.0 (GHSA-gh4j-gqv2-49f6)
- Bump strnum 2.2.3 → 2.4.0
- Bump path-expression-matcher 1.4.0 → 1.5.0
- Add license records for new deps @nodable/entities and xml-naming
* fix: add anynum license record and rebuild dist
* re-run licensed
2026-06-12 09:49:51 +01:00
c76542e033
chore: upgrade dependencies (@actions/core, cache, glob, http-client, tool-cache, xmlbuilder2) ( #999 )
...
* chore: upgrade dependencies and update license cache
Agent-Logs-Url: https://github.com/actions/setup-java/sessions/55ba1e4b-a515-4177-8a35-44bffa4ad0c0
Co-authored-by: lmvysakh <[email protected] >
* chore: upgrade @actions/exec ^1.0.4→^2.0.0 and @actions/io ^1.0.2→^2.0.0
Agent-Logs-Url: https://github.com/actions/setup-java/sessions/8be3df50-f347-42da-9734-73f71bf89d40
Co-authored-by: lmvysakh <[email protected] >
---------
Co-authored-by: copilot-swe-agent[bot] <[email protected] >
Co-authored-by: lmvysakh <[email protected] >
2026-04-15 12:30:24 -05:00
1d018f9b8b
Bump minimatch from 3.1.2 to 3.1.5 ( #984 )
...
* Bump minimatch from 3.1.2 to 3.1.5
Bumps [minimatch](https://github.com/isaacs/minimatch ) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 3.1.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] >
* Check failure fix
---------
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: gowridurgad <[email protected] >
2026-03-02 15:50:04 -06:00
mahabaleshwars and GitHub
be666c2fcd
Chore: Version Update and Checkout Update to v6 ( #973 )
...
* version update and checkout updated to v6
* version updated
2026-01-21 20:39:03 -06:00
d81c4e45f3
Upgrade @actions/cache to v5 ( #968 )
...
* Upgrade @actions/cache to v5
- Bump @actions/cache from 4.0.3 to 5.0.0
- Update license cache files for new/updated dependencies
- Rebuild dist bundles
- Mark @actions/http-client as reviewed in licensed config (MIT license text present but detected as 'other')
* chore: Update version to 5.0.1 in package.json and package-lock.json
* upgrade actions/cache to 5.0.1
---------
Co-authored-by: Aparna Jyothi <[email protected] >
2026-01-20 09:24:36 -06:00
Piotr Findeisen and GitHub
5d7b214633
Retry on HTTP 522 Connection timed out ( #964 )
...
This is supposed to be CloudFlare specific 522 Connection timed out HTTP
error code.
2025-12-23 16:49:17 -06:00
mahabaleshwars and GitHub
46c56d6f92
Add GitHub Token Support for GraalVM and Refactor Code ( #849 )
...
* Code updated to let code accept github token and refactored the code.
* github token accept through environment variable
* fix test error
* audit fix commit
* update package-lock.json
* Update GraalVM Tests
* Lint Issue Resolve
* Update Test case for Windows
* update with enhance code and test
2025-11-18 12:04:23 -06:00
Christoph Langer and GitHub
66b945764b
Update SapMachine URLs ( #955 )
2025-11-17 10:33:06 -06:00
priya-kinthali and GitHub
6ba5449b7d
Enhance error logging for network failures to include endpoint/IP details, add retry mechanism and update workflows to use macos-15-intel ( #946 )
...
* enhance error logging and implement retry
* Replace macos-13 with macos-15-intel
* refactored code based on Copilot suggestions
2025-11-13 13:34:50 -06:00