Haritha
fba3fb4ead
fix: resolve audit/license failures ( #784 )
...
* fix: resolve brace-expansion high-severity vulnerability, refresh license cache, rebuild dist
- Regenerated package-lock.json to pick up brace-expansion@5.0.9 (fixes
GHSA-rgw5-rvv9-x895, a DoS via unbounded intermediate arrays), which
is already permitted by minimatch's existing ^5.0.8 semver range.
- Refreshed .licenses/npm cache to match the updated dependency tree.
- Added minimatch to the licensed.yml reviewed list: its detected
license text doesn't cleanly match Blue Oak 1.0.0, which is already
in the allowed list.
- Rebuilt dist/setup and dist/cache-save from source.
npm audit --audit-level=high now reports 0 vulnerabilities;
licensed status reports 0 errors; npm run pre-checkin passes locally.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* fix: narrow audit dependency updates
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-08-19 10:06:05 -05:00
..
@actions
chore(deps): bump @actions/cache to 6.2.0 ( #771 )
2026-07-15 21:47:49 -05:00
@azure
Migrate to ESM and upgrade dependencies ( #763 )
2026-07-15 15:34:36 -05:00
@nodable
Upgrade checkout refs and docs to v7 ( #779 )
2026-07-27 15:26:25 -05:00
@protobuf-ts
Bump @actions/cache to v5 ( #695 )
2026-01-07 10:40:06 -06:00
@typespec
Migrate to ESM and upgrade dependencies ( #763 )
2026-07-15 15:34:36 -05:00
agent-base.dep.yml
Bump @actions/cache to v5 ( #695 )
2026-01-07 10:40:06 -06:00
anynum.dep.yml
Migrate to ESM and upgrade dependencies ( #763 )
2026-07-15 15:34:36 -05:00
balanced-match-1.0.2.dep.yml
Migrate to ESM and upgrade dependencies ( #763 )
2026-07-15 15:34:36 -05:00
balanced-match-4.0.4.dep.yml
Migrate to ESM and upgrade dependencies ( #763 )
2026-07-15 15:34:36 -05:00
brace-expansion-1.1.18.dep.yml
fix: resolve audit/license failures ( #784 )
2026-08-19 10:06:05 -05:00
brace-expansion-5.0.9.dep.yml
fix: resolve audit/license failures ( #784 )
2026-08-19 10:06:05 -05:00
concat-map.dep.yml
Implementation of caching functionality for setup-go action ( #228 )
2022-05-25 12:07:29 +02:00
debug.dep.yml
Bump @actions/cache to v5 ( #695 )
2026-01-07 10:40:06 -06:00
events.dep.yml
Implementation of caching functionality for setup-go action ( #228 )
2022-05-25 12:07:29 +02:00
fast-xml-builder.dep.yml
chore: update @types/node and @typescript-eslint dependencies to latest versions ( #755 )
2026-06-16 11:46:40 -05:00
fast-xml-parser.dep.yml
Upgrade checkout refs and docs to v7 ( #779 )
2026-07-27 15:26:25 -05:00
http-proxy-agent.dep.yml
Bump @actions/cache to v5 ( #695 )
2026-01-07 10:40:06 -06:00
https-proxy-agent.dep.yml
Bump @actions/cache to v5 ( #695 )
2026-01-07 10:40:06 -06:00
is-unsafe.dep.yml
Upgrade checkout refs and docs to v7 ( #779 )
2026-07-27 15:26:25 -05:00
minimatch-3.1.5.dep.yml
Migrate to ESM and upgrade dependencies ( #763 )
2026-07-15 15:34:36 -05:00
minimatch-10.2.5.dep.yml
Migrate to ESM and upgrade dependencies ( #763 )
2026-07-15 15:34:36 -05:00
ms.dep.yml
Bump @actions/cache to v5 ( #695 )
2026-01-07 10:40:06 -06:00
path-expression-matcher.dep.yml
Upgrade checkout refs and docs to v7 ( #779 )
2026-07-27 15:26:25 -05:00
semver.dep.yml
Migrate to ESM and upgrade dependencies ( #763 )
2026-07-15 15:34:36 -05:00
strnum.dep.yml
Migrate to ESM and upgrade dependencies ( #763 )
2026-07-15 15:34:36 -05:00
tslib.dep.yml
Bump @actions/cache to v5 ( #695 )
2026-01-07 10:40:06 -06:00
tunnel.dep.yml
Add Licensed workflow and configuration files
2020-08-11 20:55:11 -04:00
undici.dep.yml
fix: resolve audit/license failures ( #784 )
2026-08-19 10:06:05 -05:00
xml-naming-0.1.0.dep.yml
Upgrade checkout refs and docs to v7 ( #779 )
2026-07-27 15:26:25 -05:00
xml-naming-0.3.0.dep.yml
Upgrade checkout refs and docs to v7 ( #779 )
2026-07-27 15:26:25 -05:00