Skip to content
This repository has been archived by the owner on Dec 6, 2022. It is now read-only.

Refresh dependencies #13

Merged
merged 2 commits into from
Jul 20, 2020
Merged

Refresh dependencies #13

merged 2 commits into from
Jul 20, 2020

Conversation

joschi
Copy link
Owner

@joschi joschi commented Jul 20, 2020

@joschi joschi added the enhancement New feature or request label Jul 20, 2020
@joschi joschi added this to the 2.2.0 milestone Jul 20, 2020
@joschi joschi self-assigned this Jul 20, 2020
@davidkarlsen
Copy link

Why not use https://dependabot.com/ ?

@joschi
Copy link
Owner Author

joschi commented Jul 20, 2020 •
edited
Loading

Why not use https://dependabot.com/ ?

Good question! The dependency versions/version ranges are already up-to-date in package.json but the locked specific versions in package-lock.json needed to be updated.

Additionally, I wanted to stay as close to actions/setup-java as possible to be able to merge their changes into this project from time to time.

We still get security alerts by GitHub/Dependabot on a separate channel. 😃

@joschi joschi merged commit 8e51387 into master Jul 20, 2020
@joschi joschi deleted the refresh-dependencies branch July 20, 2020 13:09
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers
No reviews
Assignees

@joschi joschi

Labels
enhancement New feature or request
Projects
None yet
Milestone
2.2.0
Development

Successfully merging this pull request may close these issues.
2 participants
@joschi @davidkarlsen