forked from mirrored/github-stats-extended
bcc0cbbf52fa1981fafbbbc36cce98940cde2942
13
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
  dependabot[bot]anddependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
7f9acfac2d |
build(deps-dev): Bump jsdom from 28.0.0 to 28.1.0 (#100)
Bumps [jsdom](https://github.com/jsdom/jsdom) from 28.0.0 to 28.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jsdom/jsdom/releases">jsdom's releases</a>.</em></p> <blockquote> <h2>Version 28.1.0</h2> <ul> <li>Added <code>blob.text()</code>, <code>blob.arrayBuffer()</code>, and <code>blob.bytes()</code> methods.</li> <li>Improved <code>getComputedStyle()</code> to account for CSS specificity when multiple rules apply. (asamuzaK)</li> <li>Improved synchronous <code>XMLHttpRequest</code> performance by using a persistent worker thread, avoiding ~400ms of setup overhead on every synchronous request after the first one.</li> <li>Improved performance of <code>node.getRootNode()</code>, <code>node.isConnected</code>, and <code>event.dispatchEvent()</code> by caching the root node of document-connected trees.</li> <li>Fixed <code>getComputedStyle()</code> to correctly handle <code>!important</code> priority. (asamuzaK)</li> <li>Fixed <code>document.getElementById()</code> to return the first element in tree order when multiple elements share the same ID.</li> <li>Fixed <code><svg></code> elements to no longer incorrectly proxy event handlers to the <code>Window</code>.</li> <li>Fixed <code>FileReader</code> event timing and <code>fileReader.result</code> state to more closely follow the spec.</li> <li>Fixed a potential hang when synchronous <code>XMLHttpRequest</code> encountered dispatch errors.</li> <li>Fixed compatibility with environments where Node.js's built-in <code>fetch()</code> has been used before importing jsdom, by working around undici v6/v7 incompatibilities.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jsdom/jsdom/blob/main/Changelog.md">jsdom's changelog</a>.</em></p> <blockquote> <h2>28.1.0</h2> <ul> <li>Added <code>blob.text()</code>, <code>blob.arrayBuffer()</code>, and <code>blob.bytes()</code> methods.</li> <li>Improved <code>getComputedStyle()</code> to account for CSS specificity when multiple rules apply. (asamuzaK)</li> <li>Improved synchronous <code>XMLHttpRequest</code> performance by using a persistent worker thread, avoiding ~400ms of setup overhead on every synchronous request after the first one.</li> <li>Improved performance of <code>node.getRootNode()</code>, <code>node.isConnected</code>, and <code>event.dispatchEvent()</code> by caching the root node of document-connected trees.</li> <li>Fixed <code>getComputedStyle()</code> to correctly handle <code>!important</code> priority. (asamuzaK)</li> <li>Fixed <code>document.getElementById()</code> to return the first element in tree order when multiple elements share the same ID.</li> <li>Fixed <code><svg></code> elements to no longer incorrectly proxy event handlers to the <code>Window</code>.</li> <li>Fixed <code>FileReader</code> event timing and <code>fileReader.result</code> state to more closely follow the spec.</li> <li>Fixed a potential hang when synchronous <code>XMLHttpRequest</code> encountered dispatch errors.</li> <li>Fixed compatibility with environments where Node.js's built-in <code>fetch()</code> has been used before importing jsdom, by working around undici v6/v7 incompatibilities.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jsdom/jsdom/commit/12949b524ca234c15146dbbcc2aa756deb20fa03"><code>12949b5</code></a> Version 28.1.0</li> <li><a href="https://github.com/jsdom/jsdom/commit/ce4c58fac40002e024d32f50d11c6e9c5deaff89"><code>ce4c58f</code></a> Apply CSS specificity when computing styles</li> <li><a href="https://github.com/jsdom/jsdom/commit/7ed55a024e7fc1c9dcdbef81ad0399f83147c67b"><code>7ed55a0</code></a> Skip single-byte-decoder encoding tests on Node 20</li> <li><a href="https://github.com/jsdom/jsdom/commit/f3b1973ca073e163d817a0cf4fb3b94f34a8bcc5"><code>f3b1973</code></a> Generalize node version conditions in test expectations</li> <li><a href="https://github.com/jsdom/jsdom/commit/853c596a0688b1b4c9bc2455401eccb9a71debdc"><code>853c596</code></a> Rewrite getElementById ID caching for tree-order correctness</li> <li><a href="https://github.com/jsdom/jsdom/commit/5fbfde654e32c7da63f7d64a27deddcfcbe5188b"><code>5fbfde6</code></a> Fix potential sync XHR worker hang from unhandled dispatch errors</li> <li><a href="https://github.com/jsdom/jsdom/commit/82df38f756a9b47b595da021ca121f70f1430bca"><code>82df38f</code></a> Cache the root node for document-connected trees</li> <li><a href="https://github.com/jsdom/jsdom/commit/ed7c5c05209e59b5bcbaf7b44a0c38cd776e39b5"><code>ed7c5c0</code></a> Add documentation comment to create-event-accessor.js</li> <li><a href="https://github.com/jsdom/jsdom/commit/b4562e9e8f14d4194bdf21fc6682247d50505f0f"><code>b4562e9</code></a> Simplify Window.js installEventHandlers</li> <li><a href="https://github.com/jsdom/jsdom/commit/7da340fc6ef29cf502bc9df92999dd619512fde1"><code>7da340f</code></a> Centralize "determine the target of an event handler"</li> <li>Additional commits viewable in <a href="https://github.com/jsdom/jsdom/compare/28.0.0...28.1.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
 Marco Pasqualetti
|
238ca1c97f |
test(backend): migrate to vitest (#95)
Use `vitest` for backend tests: - `bench` script now uses [vitest's `bench`](https://vitest.dev/api/#bench) - e2e test fails with same error happening now with jest:`data-testid` attribute not present. vitest left, jest right <img width="1264" height="603" alt="image" src="https://github.com/user-attachments/assets/56fc43a6-e143-4208-bf14-7e016aae7fa9" /> |
||
|
dependabot[bot]anddependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
05407578d4 |
build(deps): Bump pg from 8.16.3 to 8.18.0 (#88)
Bumps [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) from 8.16.3 to 8.18.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md">pg's changelog</a>.</em></p> <blockquote> <h2>pg@8.18.0</h2> <ul> <li><a href="https://redirect.github.com/brianc/node-postgres/pull/3564">Return the client instance</a> as the result of calling <code>connect</code> (previously it was <code>void</code>).</li> </ul> <h2>pg@8.17.0</h2> <ul> <li>Throw correct error if database URL parsing <a href="https://redirect.github.com/brianc/node-postgres/issues/3513">fails</a>.</li> </ul> <h2>pg@8.16.0</h2> <ul> <li>Add support for <a href="https://redirect.github.com/brianc/node-postgres/pull/3438">min connection pool size</a>.</li> </ul> <h2>pg@8.15.0</h2> <ul> <li>Add support for <a href="https://redirect.github.com/brianc/node-postgres/pull/3423">esm</a> importing. CommonJS importing is still also supported.</li> </ul> <h2>pg@8.14.0</h2> <ul> <li>Add support from SCRAM-SAH-256-PLUS i.e. <a href="https://redirect.github.com/brianc/node-postgres/pull/3356">channel binding</a>.</li> </ul> <h2>pg@8.13.0</h2> <ul> <li>Add ability to specify query timeout on <a href="https://redirect.github.com/brianc/node-postgres/pull/3074">per-query basis</a>.</li> </ul> <h2>pg@8.12.0</h2> <ul> <li>Add <code>queryMode</code> config option to <a href="https://redirect.github.com/brianc/node-postgres/pull/3214">force use of the extended query protocol</a> on queries without any parameters.</li> </ul> <h2>pg-pool@8.10.0</h2> <ul> <li>Emit <code>release</code> event when client is returned to <a href="https://redirect.github.com/brianc/node-postgres/pull/2845">the pool</a>.</li> </ul> <h2>pg@8.9.0</h2> <ul> <li>Add support for <a href="https://redirect.github.com/brianc/node-postgres/pull/2898">stream factory</a>.</li> <li><a href="https://redirect.github.com/brianc/node-postgres/pull/2901">Better errors</a> for SASL authentication.</li> <li><a href="https://redirect.github.com/brianc/node-postgres/pull/2815">Use native crypto module</a> for SASL authentication.</li> </ul> <h2>pg@8.8.0</h2> <ul> <li>Bump minimum required version of <a href="https://redirect.github.com/brianc/node-postgres/pull/2787">native bindings</a>.</li> <li>Catch previously uncatchable errors thrown in <a href="https://redirect.github.com/brianc/node-postgres/pull/2569"><code>pool.query</code></a>.</li> <li>Prevent the pool from blocking the event loop if all clients are <a href="https://redirect.github.com/brianc/node-postgres/pull/2721">idle</a> (and <code>allowExitOnIdle</code> is enabled).</li> <li>Support <code>lock_timeout</code> in <a href="https://redirect.github.com/brianc/node-postgres/pull/2779">client config</a>.</li> <li>Fix errors thrown in callbacks from <a href="https://redirect.github.com/brianc/node-postgres/pull/2753">interfering with cleanup</a>.</li> </ul> <h3>pg-pool@3.5.0</h3> <ul> <li>Add connection <a href="https://redirect.github.com/brianc/node-postgres/pull/2698">lifetime limit</a> config option.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/brianc/node-postgres/commit/fc4de3c62ad350d0e1b392a0d132aff906d1cec6"><code>fc4de3c</code></a> Publish</li> <li><a href="https://github.com/brianc/node-postgres/commit/0d1541d338f6c652f23ca3ac45211b651ce1b739"><code>0d1541d</code></a> Always check if activeQuery is null before using it (<a href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3586">#3586</a>)</li> <li><a href="https://github.com/brianc/node-postgres/commit/57e93b5daff5bca91ba55c7bac4a046d9e8eda38"><code>57e93b5</code></a> Return the client instance in the <code>connect()</code> method (<a href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3564">#3564</a>)</li> <li><a href="https://github.com/brianc/node-postgres/commit/5b68a115cc90a7b7069fa8c4b0ca51e3447367e9"><code>5b68a11</code></a> Publish</li> <li><a href="https://github.com/brianc/node-postgres/commit/ea06db5a1348ce6e0fb8561934fad642beef5935"><code>ea06db5</code></a> Remove node: prefix from imports (<a href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3584">#3584</a>)</li> <li><a href="https://github.com/brianc/node-postgres/commit/a3a4567b63005fa77287eb572a8186e30fb27a14"><code>a3a4567</code></a> remove unused variable (<a href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3562">#3562</a>)</li> <li><a href="https://github.com/brianc/node-postgres/commit/4eb7529a5906f2000faf72b5452e10d95bde2f9e"><code>4eb7529</code></a> Publish</li> <li><a href="https://github.com/brianc/node-postgres/commit/b94c8e136647d96ca6f54029b2a87bdb469ba460"><code>b94c8e1</code></a> Don't use prefix import as it breaks in old nodes. (<a href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3578">#3578</a>)</li> <li><a href="https://github.com/brianc/node-postgres/commit/6bf475c3c1770a37857a97db3498904f61f69b51"><code>6bf475c</code></a> Improve Deno compatibility: config-first and safe env access (<a href="https://github.com/brianc/node-postgres/tree/HEAD/packages/pg/issues/3547">#3547</a>)</li> <li><a href="https://github.com/brianc/node-postgres/commit/d10e09c888f94abf77382aba6f353ca665a1cf09"><code>d10e09c</code></a> Publish</li> <li>Additional commits viewable in <a href="https://github.com/brianc/node-postgres/commits/pg@8.18.0/packages/pg">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
 Martin
|
6e109e50d1 |
restructure tests, add tests, remove dotenv (#83)
- add a few tests - re-organize tests to allow testing with different env vars and creating a combined coverage report - extract test data into separate files, because importing data from testA in testB leads to weird jest errors - remove `dotenv` because it's not being used - "GitHub Trends" -> "GitHub Stats Extended" |
||
|
dependabot[bot]anddependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
53d0553d3f |
build(deps): Bump axios from 1.13.4 to 1.13.5 (#82)
Bumps [axios](https://github.com/axios/axios) from 1.13.4 to 1.13.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p> <blockquote> <h2>v1.13.5</h2> <h2>Release 1.13.5</h2> <h3>Highlights</h3> <ul> <li><strong>Security:</strong> Fixed a potential <strong>Denial of Service</strong> issue involving the <code>__proto__</code> key in <code>mergeConfig</code>. (PR <a href="https://redirect.github.com/axios/axios/pull/7369">#7369</a>)</li> <li><strong>Bug fix:</strong> Resolved an issue where <code>AxiosError</code> could be missing the <code>status</code> field on and after <strong>v1.13.3</strong>. (PR <a href="https://redirect.github.com/axios/axios/pull/7368">#7368</a>)</li> </ul> <h3>Changes</h3> <h4>Security</h4> <ul> <li>Fix Denial of Service via <code>__proto__</code> key in <code>mergeConfig</code>. (PR <a href="https://redirect.github.com/axios/axios/pull/7369">#7369</a>)</li> </ul> <h4>Fixes</h4> <ul> <li>Fix/5657. (PR <a href="https://redirect.github.com/axios/axios/pull/7313">#7313</a>)</li> <li>Ensure <code>status</code> is present in <code>AxiosError</code> on and after v1.13.3. (PR <a href="https://redirect.github.com/axios/axios/pull/7368">#7368</a>)</li> </ul> <h4>Features / Improvements</h4> <ul> <li>Add input validation to <code>isAbsoluteURL</code>. (PR <a href="https://redirect.github.com/axios/axios/pull/7326">#7326</a>)</li> <li>Refactor: bump minor package versions. (PR <a href="https://redirect.github.com/axios/axios/pull/7356">#7356</a>)</li> </ul> <h4>Documentation</h4> <ul> <li>Clarify object-check comment. (PR <a href="https://redirect.github.com/axios/axios/pull/7323">#7323</a>)</li> <li>Fix deprecated <code>Buffer</code> constructor usage and README formatting. (PR <a href="https://redirect.github.com/axios/axios/pull/7371">#7371</a>)</li> </ul> <h4>CI / Maintenance</h4> <ul> <li>Chore: fix issues with YAML. (PR <a href="https://redirect.github.com/axios/axios/pull/7355">#7355</a>)</li> <li>CI: update workflow YAMLs. (PR <a href="https://redirect.github.com/axios/axios/pull/7372">#7372</a>)</li> <li>CI: fix run condition. (PR <a href="https://redirect.github.com/axios/axios/pull/7373">#7373</a>)</li> <li>Dev deps: bump <code>karma-sourcemap-loader</code> from 0.3.8 to 0.4.0. (PR <a href="https://redirect.github.com/axios/axios/pull/7360">#7360</a>)</li> <li>Chore(release): prepare release 1.13.5. (PR <a href="https://redirect.github.com/axios/axios/pull/7379">#7379</a>)</li> </ul> <h3>New Contributors</h3> <ul> <li><a href="https://github.com/sachin11063"><code>@sachin11063</code></a> (first contribution — PR <a href="https://redirect.github.com/axios/axios/pull/7323">#7323</a>)</li> <li><a href="https://github.com/asmitha-16"><code>@asmitha-16</code></a> (first contribution — PR <a href="https://redirect.github.com/axios/axios/pull/7326">#7326</a>)</li> </ul> <p><strong>Full Changelog:</strong> <a href="https://github.com/axios/axios/compare/v1.13.4...v1.13.5">https://github.com/axios/axios/compare/v1.13.4...v1.13.5</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/29f75425f0c9f73021f5eedc869c176e30e05fe7"><code>29f7542</code></a> chore(release): prepare release 1.13.5 (<a href="https://redirect.github.com/axios/axios/issues/7379">#7379</a>)</li> <li><a href="https://github.com/axios/axios/commit/431c3a361490a2e3d5ac5d9e08d66d4bb5f3cd2a"><code>431c3a3</code></a> ci: fix run condition (<a href="https://redirect.github.com/axios/axios/issues/7373">#7373</a>)</li> <li><a href="https://github.com/axios/axios/commit/9ff3a78ad72ecd665a4b673686f1517d824284bf"><code>9ff3a78</code></a> ci: update ymls (<a href="https://redirect.github.com/axios/axios/issues/7372">#7372</a>)</li> <li><a href="https://github.com/axios/axios/commit/265b71234c20fabbd6d691858c65a7e9c978659f"><code>265b712</code></a> docs: fix deprecated Buffer constructor and formatting issues in README (<a href="https://redirect.github.com/axios/axios/issues/7371">#7371</a>)</li> <li><a href="https://github.com/axios/axios/commit/475e75a260668d227aec9f77735a49748c9041ff"><code>475e75a</code></a> feat: add input validation to isAbsoluteURL (<a href="https://redirect.github.com/axios/axios/issues/7326">#7326</a>)</li> <li><a href="https://github.com/axios/axios/commit/28c721588c7a77e7503d0a434e016f852c597b57"><code>28c7215</code></a> fix: Denial of Service via <strong>proto</strong> Key in mergeConfig (<a href="https://redirect.github.com/axios/axios/issues/7369">#7369</a>)</li> <li><a href="https://github.com/axios/axios/commit/04cf01969ed58f96920da032f340bfe4614aab90"><code>04cf019</code></a> docs: clarify object check comment (<a href="https://redirect.github.com/axios/axios/issues/7323">#7323</a>)</li> <li><a href="https://github.com/axios/axios/commit/696fa753c5366afbd21859c294c64c9ff2b359ab"><code>696fa75</code></a> fix: status is missing in AxiosError on and after v1.13.3 (<a href="https://redirect.github.com/axios/axios/issues/7368">#7368</a>)</li> <li><a href="https://github.com/axios/axios/commit/569f028a5878faaec8d7d138ba686aac407bda4c"><code>569f028</code></a> fix: added a option to choose between legacy and the new request/response int...</li> <li><a href="https://github.com/axios/axios/commit/44b7c9f0c4900fd8784f18e871199402f07fc69f"><code>44b7c9f</code></a> chore(deps-dev): bump karma-sourcemap-loader (<a href="https://redirect.github.com/axios/axios/issues/7360">#7360</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.13.4...v1.13.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/stats-organization/github-stats-extended/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
Martin
|
acf7b16ac9 |
reactivate some old workflows, remove some old workflows (#80)
I deleted most workflows from apps/backend/.github/workflows because imo we don't need them in the near future. I updated and moved two workflows which we do need. Only the codeQL workflow is left behind, because I don't have an opinion yet whether it should be removed or kept. |
||
|
dependabot[bot]anddependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
8546b8584e |
build(deps-dev): Bump @actions/core from 2.0.2 to 3.0.0 (#70)
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 2.0.2 to 3.0.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md"><code>@actions/core</code>'s changelog</a>.</em></p> <blockquote> <h2>3.0.0</h2> <ul> <li><strong>Breaking change</strong>: Package is now ESM-only <ul> <li>CommonJS consumers must use dynamic <code>import()</code> instead of <code>require()</code></li> </ul> </li> </ul> <h2>2.0.3</h2> <ul> <li>Bump <code>@actions/http-client</code> to <code>3.0.2</code></li> </ul> <h2>2.0.1</h2> <ul> <li>Bump <code>@actions/exec</code> from 1.1.1 to 2.0.0 <a href="https://redirect.github.com/actions/toolkit/pull/2199">#2199</a></li> </ul> <h2>2.0.0</h2> <ul> <li>Add support for Node 24 <a href="https://redirect.github.com/actions/toolkit/pull/2110">#2110</a></li> <li>Bump <code>@actions/http-client</code> from 2.0.1 to 3.0.0</li> </ul> <h2>1.11.1</h2> <ul> <li>Fix uses of <code>crypto.randomUUID</code> on Node 18 and earlier <a href="https://redirect.github.com/actions/toolkit/pull/1842">#1842</a></li> </ul> <h3>1.11.0</h3> <ul> <li>Add platform info utilities <a href="https://redirect.github.com/actions/toolkit/pull/1551">#1551</a></li> <li>Remove dependency on <code>uuid</code> package <a href="https://redirect.github.com/actions/toolkit/pull/1824">#1824</a></li> </ul> <h3>1.10.1</h3> <ul> <li>Fix error message reference in oidc utils <a href="https://redirect.github.com/actions/toolkit/pull/1511">#1511</a></li> </ul> <h3>1.10.0</h3> <ul> <li><code>saveState</code> and <code>setOutput</code> now use environment files if available <a href="https://redirect.github.com/actions/toolkit/pull/1178">#1178</a></li> <li><code>getMultilineInput</code> now correctly trims whitespace by default <a href="https://redirect.github.com/actions/toolkit/pull/1185">#1185</a></li> </ul> <h3>1.9.1</h3> <ul> <li>Randomize delimiter when calling <code>core.exportVariable</code></li> </ul> <h3>1.9.0</h3> <ul> <li>Added <code>toPosixPath</code>, <code>toWin32Path</code> and <code>toPlatformPath</code> utilities <a href="https://redirect.github.com/actions/toolkit/pull/1102">#1102</a></li> </ul> <h3>1.8.2</h3> <ul> <li>Update to v2.0.1 of <code>@actions/http-client</code> <a href="https://redirect.github.com/actions/toolkit/pull/1087">#1087</a></li> </ul> <h3>1.8.1</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/actions/toolkit/commits/HEAD/packages/core">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]anddependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
e5d1ba262a |
build(deps-dev): Bump @actions/github from 6.0.1 to 9.0.0 (#62)
Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) from 6.0.1 to 9.0.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md"><code>@actions/github</code>'s changelog</a>.</em></p> <blockquote> <h3>9.0.0</h3> <ul> <li><strong>Breaking change</strong>: Package is now ESM-only <ul> <li>CommonJS consumers must use dynamic <code>import()</code> instead of <code>require()</code></li> <li>Example: <code>const { getOctokit, context } = await import('@actions/github')</code></li> </ul> </li> <li>Fix TypeScript compilation by migrating to ESM, enabling proper imports from <code>@octokit/core/types</code></li> </ul> <h3>8.0.1</h3> <ul> <li>Update <code>undici</code> to <code>6.23.0</code></li> <li>Update <code>@actions/http-client</code> to <code>3.0.2</code></li> </ul> <h3>8.0.0</h3> <ul> <li>Update <a href="https://github.com/octokit"><code>@octokit</code></a> dependencies <ul> <li><code>@octokit/core</code> ^7.0.6</li> <li><code>@octokit/plugin-paginate-rest</code> ^14.0.0</li> <li><code>@octokit/plugin-rest-endpoint-methods</code> ^17.0.0</li> <li><code>@octokit/request</code> ^10.0.7</li> <li><code>@octokit/request-error</code> ^7.1.0</li> </ul> </li> <li><strong>Breaking change</strong>: Minimum Node.js version is now 20 (previously 18)</li> </ul> <h3>7.0.0</h3> <ul> <li>Update to v3.0.1 of <code>@actions/http-client</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/actions/toolkit/commits/HEAD/packages/github">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for <code>@actions/github</code> since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> |
||
|
dependabot[bot]
|
096f4eecc0 |
build(deps): Bump axios from 1.13.2 to 1.13.4
Bumps [axios](https://github.com/axios/axios) from 1.13.2 to 1.13.4. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](https://github.com/axios/axios/compare/v1.13.2...v1.13.4) --- updated-dependencies: - dependency-name: axios dependency-version: 1.13.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> |
||
|
Marco Pasqualetti
|
90490046bb |
feat(backend): enable knip (#30)
|
||
|
Marco Pasqualetti
|
dff4bfcecb |
feat: setup eslint at root level (#27)
* feat: setup eslint at root level * chore: disable craco eslint-plugin * fix: add missing extension to import * fix: apply review * chore: use gitignore to exclude files from eslint * chore: disable eslint step in craco via config rather than env variable * chore: remove npmrc * chore: remove `eslint-plugin-react` override |
||
|
Marco Pasqualetti
|
74b314ab0f | refactor: setup prettier as formatter for the whole monorepo (#26) | ||
|
Marco Pasqualettiandmartin-mfg
|
8c065b473f |
feat: setup monorepo using pnpm (#20)
* tests: fix float problems and PAT problem * extend CONTRIBUTING.md * extend build documentation, add GH action, fix build on MacOS * fix build on Vercel * update .gitignore and CONTRIBUTING.md * feat: begin work on monorepo * chore(actions/basic-build): use pnpm * fix: vercel-deploy * docs: updates with new folders * chore: apply PR review comments --------- Co-authored-by: martin-mfg <2026226+martin-mfg@users.noreply.github.com> |