1071fc12d6
fix: resolve npm audit vulnerabilities in fast-xml-builder and fast-xml-parser ( #1015 )
...
* fix: update dependency license records and resolve npm audit vulnerabilities
- Bump fast-xml-builder 1.1.4 → 1.2.0 (GHSA-5wm8-gmm8-39j9)
- Bump fast-xml-parser 5.5.10 → 5.8.0 (GHSA-gh4j-gqv2-49f6)
- Bump strnum 2.2.3 → 2.4.0
- Bump path-expression-matcher 1.4.0 → 1.5.0
- Add license records for new deps @nodable/entities and xml-naming
* fix: add anynum license record and rebuild dist
* re-run licensed
2026-06-12 09:49:51 +01:00
c76542e033
chore: upgrade dependencies (@actions/core, cache, glob, http-client, tool-cache, xmlbuilder2) ( #999 )
...
* chore: upgrade dependencies and update license cache
Agent-Logs-Url: https://github.com/actions/setup-java/sessions/55ba1e4b-a515-4177-8a35-44bffa4ad0c0
Co-authored-by: lmvysakh <187510632+lmvysakh@users.noreply.github.com >
* chore: upgrade @actions/exec ^1.0.4→^2.0.0 and @actions/io ^1.0.2→^2.0.0
Agent-Logs-Url: https://github.com/actions/setup-java/sessions/8be3df50-f347-42da-9734-73f71bf89d40
Co-authored-by: lmvysakh <187510632+lmvysakh@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: lmvysakh <187510632+lmvysakh@users.noreply.github.com >
2026-04-15 12:30:24 -05:00
1d018f9b8b
Bump minimatch from 3.1.2 to 3.1.5 ( #984 )
...
* Bump minimatch from 3.1.2 to 3.1.5
Bumps [minimatch](https://github.com/isaacs/minimatch ) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 3.1.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Check failure fix
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: gowridurgad <gowridurgad@gmail.com >
2026-03-02 15:50:04 -06:00
d81c4e45f3
Upgrade @actions/cache to v5 ( #968 )
...
* Upgrade @actions/cache to v5
- Bump @actions/cache from 4.0.3 to 5.0.0
- Update license cache files for new/updated dependencies
- Rebuild dist bundles
- Mark @actions/http-client as reviewed in licensed config (MIT license text present but detected as 'other')
* chore: Update version to 5.0.1 in package.json and package-lock.json
* upgrade actions/cache to 5.0.1
---------
Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com >
2026-01-20 09:24:36 -06:00
George Adams
Copilot
dependabot[bot]
Salman Chishti