Skip to content
This repository has been archived by the owner on Jan 2, 2025. It is now read-only.

Upgrade dependencies to latest versions, clear vulnerabilities #144

Merged
merged 16 commits into from
Oct 16, 2022
Merged

Conversation

zteater
Copy link
Contributor

@zteater zteater commented Jun 22, 2022

Upgrade dependencies to latest versions, clear vulnerabilities

  • Bump actions/setup-java from 2.3.1 to 3
  • Bump actions/checkout from 2.3.4 to 3
  • Bump github/codeql-action from 1 to 2
  • Upgrade node, xmldom, and mocha to latest version

dependabot bot and others added 13 commits November 3, 2021 07:01
Bumps [actions/checkout](https://github.com/actions/checkout) from 2.3.4 to 2.4.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2.3.4...v2.4.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 2.3.1 to 2.4.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v2.3.1...v2.4.0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…op/actions/setup-java-2.4.0

Bump actions/setup-java from 2.3.1 to 2.4.0
…op/actions/checkout-2.4.0

Bump actions/checkout from 2.3.4 to 2.4.0
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 2.4.0 to 2.5.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v2.4.0...v2.5.0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…op/actions/setup-java-2.5.0

Bump actions/setup-java from 2.4.0 to 2.5.0
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 2.5.0 to 3.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v2.5.0...v3)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…op/actions/setup-java-3

Bump actions/setup-java from 2.5.0 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2.4.0 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2.4.0...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…op/actions/checkout-3

Bump actions/checkout from 2.4.0 to 3
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v1...v2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…op/github/codeql-action-2

Bump github/codeql-action from 1 to 2
* Upgrade all used github actions to nodejs16
* Fix npm audit issues

Co-authored-by: Kevin Chwalek <kevin.chwalek@accenture.com>
@ACN-kck
Copy link
Contributor

ACN-kck commented Jun 23, 2022

Hopefully done once this is fixed:
xmldom/xmldom#416

@mgerlach
Copy link

Would be good to have this as it also includes the node 16 upgrade... looks like xmldom/xmldom#416 will still take a little while though

@zteater zteater merged commit 554f3ca into main Oct 16, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants