d0e6e4dbf7
chore(deps): bump the monthly-npm-updates group with 13 updates ( #1276 )
...
* chore(deps): bump the monthly-npm-updates group with 13 updates
Bumps the monthly-npm-updates group with 13 updates:
| Package | From | To |
| --- | --- | --- |
| [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser ) | `5.11.0` | `5.11.1` |
| [@jest/globals](https://github.com/jestjs/jest/tree/HEAD/packages/jest-globals ) | `30.4.1` | `30.5.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) | `26.2.0` | `26.6.2` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin ) | `8.67.0` | `8.70.1` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser ) | `8.67.0` | `8.70.1` |
| [eslint](https://github.com/eslint/eslint ) | `10.8.1` | `10.11.0` |
| [eslint-plugin-jest](https://github.com/jest-community/eslint-plugin-jest ) | `29.16.1` | `29.16.6` |
| [globals](https://github.com/sindresorhus/globals ) | `17.11.0` | `17.12.0` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest ) | `30.4.2` | `30.5.2` |
| [lint-staged](https://github.com/lint-staged/lint-staged ) | `17.3.0` | `17.5.1` |
| [prettier](https://github.com/prettier/prettier ) | `3.9.6` | `3.9.9` |
| [ts-jest](https://github.com/kulshekhar/ts-jest ) | `29.4.12` | `29.4.13` |
| [typescript](https://github.com/microsoft/TypeScript ) | `6.0.3` | `7.0.2` |
Updates `fast-xml-parser` from 5.11.0 to 5.11.1
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases )
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md )
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.11.0...v5.11.1 )
Updates `@jest/globals` from 30.4.1 to 30.5.2
- [Release notes](https://github.com/jestjs/jest/releases )
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jestjs/jest/commits/v30.5.2/packages/jest-globals )
Updates `@types/node` from 26.2.0 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
Updates `@typescript-eslint/eslint-plugin` from 8.67.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/eslint-plugin )
Updates `@typescript-eslint/parser` from 8.67.0 to 8.70.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.70.1/packages/parser )
Updates `eslint` from 10.8.1 to 10.11.0
- [Release notes](https://github.com/eslint/eslint/releases )
- [Commits](https://github.com/eslint/eslint/compare/v10.8.1...v10.11.0 )
Updates `eslint-plugin-jest` from 29.16.1 to 29.16.6
- [Release notes](https://github.com/jest-community/eslint-plugin-jest/releases )
- [Changelog](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jest-community/eslint-plugin-jest/compare/v29.16.1...v29.16.6 )
Updates `globals` from 17.11.0 to 17.12.0
- [Release notes](https://github.com/sindresorhus/globals/releases )
- [Commits](https://github.com/sindresorhus/globals/compare/v17.11.0...v17.12.0 )
Updates `jest` from 30.4.2 to 30.5.2
- [Release notes](https://github.com/jestjs/jest/releases )
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/jestjs/jest/commits/v30.5.2/packages/jest )
Updates `lint-staged` from 17.3.0 to 17.5.1
- [Release notes](https://github.com/lint-staged/lint-staged/releases )
- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md )
- [Commits](https://github.com/lint-staged/lint-staged/compare/v17.3.0...v17.5.1 )
Updates `prettier` from 3.9.6 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.9.6...3.9.9 )
Updates `ts-jest` from 29.4.12 to 29.4.13
- [Release notes](https://github.com/kulshekhar/ts-jest/releases )
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.4.12...v29.4.13 )
Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Commits](https://github.com/microsoft/TypeScript/compare/v6.0.3...v7.0.2 )
---
updated-dependencies:
- dependency-name: fast-xml-parser
dependency-version: 5.11.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: monthly-npm-updates
- dependency-name: "@jest/globals"
dependency-version: 30.5.2
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: "@types/node"
dependency-version: 26.6.2
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: "@typescript-eslint/eslint-plugin"
dependency-version: 8.70.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: "@typescript-eslint/parser"
dependency-version: 8.70.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: eslint
dependency-version: 10.11.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: eslint-plugin-jest
dependency-version: 29.16.6
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: monthly-npm-updates
- dependency-name: globals
dependency-version: 17.12.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: jest
dependency-version: 30.5.2
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: lint-staged
dependency-version: 17.5.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: monthly-npm-updates
- dependency-name: prettier
dependency-version: 3.9.9
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: monthly-npm-updates
- dependency-name: ts-jest
dependency-version: 29.4.13
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: monthly-npm-updates
- dependency-name: typescript
dependency-version: 7.0.2
dependency-type: direct:development
update-type: version-update:semver-major
dependency-group: monthly-npm-updates
...
Signed-off-by: dependabot[bot] <support@github.com >
* Fix monthly npm update checks
Keep TypeScript on the compatible 6.x line for the current @typescript-eslint peer range, rebuild dist, and refresh the fast-xml-parser license cache.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
* Fix monthly npm validation failures
Update vulnerable transitive packages in the lockfile, rebuild dist, and correct the JetBrains test expectation for mocked Windows availability.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
* chore: update licensed cache for npm updates
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Bruno Borges <brborges@microsoft.com >
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-10-02 01:24:19 -04:00
Bruno Borges and Copilot App
59b3450628
chore(deps): combine open Dependabot npm updates ( #1252 )
...
* Combine Dependabot npm updates
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
* Rebuild action bundles
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
Copilot-Session: a5d254ad-e29c-4477-ae66-cba6e36d7e03
* Update Licensed cache for XML dependencies
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
Copilot-Session: a5d254ad-e29c-4477-ae66-cba6e36d7e03
---------
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
Copilot-Session: a5d254ad-e29c-4477-ae66-cba6e36d7e03
2026-08-24 10:36:54 -04:00
Copilot
69304e5bab
Remediate npm audit findings and rebuild distributions ( #1145 )
...
* Pin patched brace-expansion release
* Rebuild action bundles
* Refresh licensed npm cache records
* Restore compatible brace expansion versions
* Restore transitive dependency license records
* Fix brace-expansion GHSA-mh99-v99m-4gvg vulnerability via npm overrides
* Update licensed dependency records to fix CI license check
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-07-27 21:57:35 -04:00
Priya Gupta and George Adams
f7121373a9
Migrate to ESM and upgrade dependencies ( #1078 )
...
* Migrate to ESM and upgrade dependencies
* fix: update import statement for JSON module in kona-installer test
---------
Co-authored-by: George Adams <georgeadams1995@gmail.com >
2026-07-08 10:15:00 +01:00
George Adams
1071fc12d6
fix: resolve npm audit vulnerabilities in fast-xml-builder and fast-xml-parser ( #1015 )
...
* fix: update dependency license records and resolve npm audit vulnerabilities
- Bump fast-xml-builder 1.1.4 → 1.2.0 (GHSA-5wm8-gmm8-39j9)
- Bump fast-xml-parser 5.5.10 → 5.8.0 (GHSA-gh4j-gqv2-49f6)
- Bump strnum 2.2.3 → 2.4.0
- Bump path-expression-matcher 1.4.0 → 1.5.0
- Add license records for new deps @nodable/entities and xml-naming
* fix: add anynum license record and rebuild dist
* re-run licensed
2026-06-12 09:49:51 +01:00
Copilot and lmvysakh
c76542e033
chore: upgrade dependencies (@actions/core, cache, glob, http-client, tool-cache, xmlbuilder2) ( #999 )
...
* chore: upgrade dependencies and update license cache
Agent-Logs-Url: https://github.com/actions/setup-java/sessions/55ba1e4b-a515-4177-8a35-44bffa4ad0c0
Co-authored-by: lmvysakh <187510632+lmvysakh@users.noreply.github.com >
* chore: upgrade @actions/exec ^1.0.4→^2.0.0 and @actions/io ^1.0.2→^2.0.0
Agent-Logs-Url: https://github.com/actions/setup-java/sessions/8be3df50-f347-42da-9734-73f71bf89d40
Co-authored-by: lmvysakh <187510632+lmvysakh@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: lmvysakh <187510632+lmvysakh@users.noreply.github.com >
2026-04-15 12:30:24 -05:00
dependabot[bot] and gowridurgad
1d018f9b8b
Bump minimatch from 3.1.2 to 3.1.5 ( #984 )
...
* Bump minimatch from 3.1.2 to 3.1.5
Bumps [minimatch](https://github.com/isaacs/minimatch ) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md )
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5 )
---
updated-dependencies:
- dependency-name: minimatch
dependency-version: 3.1.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
* Check failure fix
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: gowridurgad <gowridurgad@gmail.com >
2026-03-02 15:50:04 -06:00
Salman Chishti and Aparna Jyothi
d81c4e45f3
Upgrade @actions/cache to v5 ( #968 )
...
* Upgrade @actions/cache to v5
- Bump @actions/cache from 4.0.3 to 5.0.0
- Update license cache files for new/updated dependencies
- Rebuild dist bundles
- Mark @actions/http-client as reviewed in licensed config (MIT license text present but detected as 'other')
* chore: Update version to 5.0.1 in package.json and package-lock.json
* upgrade actions/cache to 5.0.1
---------
Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com >
2026-01-20 09:24:36 -06:00