Author	SHA1	Message	Date
HarithaVattikuti	1d92a9dd50	fix: narrow audit dependency updates	2026-08-18 11:26:14 -05:00
HarithaVattikuti	13eb0cbdd4	fix: resolve brace-expansion high-severity vulnerability, refresh license cache, rebuild dist ... - Regenerated package-lock.json to pick up brace-expansion@5.0.9 (fixes GHSA-rgw5-rvv9-x895, a DoS via unbounded intermediate arrays), which is already permitted by minimatch's existing ^5.0.8 semver range. - Refreshed .licenses/npm cache to match the updated dependency tree. - Added minimatch to the licensed.yml reviewed list: its detected license text doesn't cleanly match Blue Oak 1.0.0, which is already in the allowed list. - Rebuilt dist/setup and dist/cache-save from source. npm audit --audit-level=high now reports 0 vulnerabilities; licensed status reports 0 errors; npm run pre-checkin passes locally. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-08-17 17:26:55 -05:00
Salman Chishti	ae252ee6fb	Bump @actions/cache to v5 (#695) ... * Bump @actions/cache to version 5.0.0 in package.json and package-lock.json * Bump @actions/cache to v5 * prepease release 6.0.1 * Bump @actions/cache to v5.0.1 - Resolves punycode deprecation warning - Updates licensed cache metadata * upgrade actions/cache to 5.0.1 --------- Co-authored-by: Aparna Jyothi <aparnajyothi-y@github.com>	2026-01-07 10:40:06 -06:00
Dmitry Shibanov	0c52d547c9	Update dependencies for node20 (#445)	2023-12-05 17:50:42 +01:00
IvanZosimov	b22fbbc292	Implementation of caching functionality for setup-go action (#228)	2022-05-25 12:07:29 +02:00