mirror of
https://code.forgejo.org/actions/setup-go.git
synced 2026-08-27 20:44:57 -04:00
fix: resolve brace-expansion high-severity vulnerability, refresh license cache, rebuild dist
- Regenerated package-lock.json to pick up brace-expansion@5.0.9 (fixes GHSA-rgw5-rvv9-x895, a DoS via unbounded intermediate arrays), which is already permitted by minimatch's existing ^5.0.8 semver range. - Refreshed .licenses/npm cache to match the updated dependency tree. - Added minimatch to the licensed.yml reviewed list: its detected license text doesn't cleanly match Blue Oak 1.0.0, which is already in the allowed list. - Rebuilt dist/setup and dist/cache-save from source. npm audit --audit-level=high now reports 0 vulnerabilities; licensed status reports 0 errors; npm run pre-checkin passes locally. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This commit is contained in:
parent
5064d95ba1
commit
13eb0cbdd4
26 changed files with 2322 additions and 2071 deletions
8
.licenses/npm/@azure/core-paging.dep.yml
generated
8
.licenses/npm/@azure/core-paging.dep.yml
generated
|
|
@ -1,6 +1,6 @@
|
|||
---
|
||||
name: "@azure/core-paging"
|
||||
version: 1.6.2
|
||||
version: 1.7.0
|
||||
type: npm
|
||||
summary: Core types for paging async iterable iterators
|
||||
homepage: https://github.com/Azure/azure-sdk-for-js/tree/main/sdk/core/core-paging/README.md
|
||||
|
|
@ -8,9 +8,9 @@ license: mit
|
|||
licenses:
|
||||
- sources: LICENSE
|
||||
text: |
|
||||
The MIT License (MIT)
|
||||
Copyright (c) Microsoft Corporation.
|
||||
|
||||
Copyright (c) 2020 Microsoft
|
||||
MIT License
|
||||
|
||||
Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
of this software and associated documentation files (the "Software"), to deal
|
||||
|
|
@ -22,7 +22,7 @@ licenses:
|
|||
The above copyright notice and this permission notice shall be included in all
|
||||
copies or substantial portions of the Software.
|
||||
|
||||
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
THE SOFTWARE IS PROVIDED *AS IS*, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
|
|
|
|||
Loading…
Reference in a new issue