From f7176fd3007623b69d27091f9b9d4ab7995f0a06 Mon Sep 17 00:00:00 2001 From: Dmitry Shibanov Date: Mon, 27 Mar 2023 13:56:21 +0200 Subject: [PATCH] Update actions/core for releases/v5 (#958) --- .github/workflows/test.yml | 8 +++ .licenses/npm/@actions/core.dep.yml | 30 ++++------ .licenses/npm/@actions/github.dep.yml | 30 ++++------ ...ent.dep.yml => http-client-1.0.11.dep.yml} | 2 +- .../npm/@actions/http-client-2.0.1.dep.yml | 32 ++++++++++ .licenses/npm/@octokit/auth-token.dep.yml | 4 +- .licenses/npm/@octokit/core.dep.yml | 4 +- .licenses/npm/@octokit/endpoint.dep.yml | 4 +- .licenses/npm/@octokit/graphql.dep.yml | 4 +- ...uest-log.dep.yml => openapi-types.dep.yml} | 14 ++--- .../npm/@octokit/plugin-paginate-rest.dep.yml | 4 +- ...l => plugin-rest-endpoint-methods.dep.yml} | 4 +- .licenses/npm/@octokit/request-error.dep.yml | 4 +- .licenses/npm/@octokit/request.dep.yml | 6 +- .licenses/npm/@octokit/types.dep.yml | 4 +- .licenses/npm/@types/node.dep.yml | 32 ---------- .licenses/npm/before-after-hook.dep.yml | 4 +- .licenses/npm/is-plain-object.dep.yml | 2 +- .licenses/npm/lodash.deburr.dep.yml | 58 +++++++++++++++++++ .licenses/npm/lru-cache.dep.yml | 26 +++++++++ .licenses/npm/node-fetch.dep.yml | 6 +- .licenses/npm/semver.dep.yml | 4 +- .licenses/npm/tr46.dep.yml | 30 ++++++++++ ...int-methods-4.1.2.dep.yml => uuid.dep.yml} | 18 +++--- .licenses/npm/webidl-conversions.dep.yml | 23 ++++++++ .../rest.dep.yml => whatwg-url.dep.yml} | 17 +++--- .licenses/npm/yallist.dep.yml | 26 +++++++++ dist/index.js | 57 +++++++++++------- package-lock.json | 12 ++-- 29 files changed, 318 insertions(+), 151 deletions(-) rename .licenses/npm/@actions/{http-client.dep.yml => http-client-1.0.11.dep.yml} (98%) create mode 100644 .licenses/npm/@actions/http-client-2.0.1.dep.yml rename .licenses/npm/@octokit/{plugin-request-log.dep.yml => openapi-types.dep.yml} (72%) rename .licenses/npm/@octokit/{plugin-rest-endpoint-methods-4.1.1.dep.yml => plugin-rest-endpoint-methods.dep.yml} (93%) delete mode 100644 .licenses/npm/@types/node.dep.yml create mode 100644 .licenses/npm/lodash.deburr.dep.yml create mode 100644 .licenses/npm/lru-cache.dep.yml create mode 100644 .licenses/npm/tr46.dep.yml rename .licenses/npm/{@octokit/plugin-rest-endpoint-methods-4.1.2.dep.yml => uuid.dep.yml} (65%) create mode 100644 .licenses/npm/webidl-conversions.dep.yml rename .licenses/npm/{@octokit/rest.dep.yml => whatwg-url.dep.yml} (77%) create mode 100644 .licenses/npm/yallist.dep.yml diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 6a6ccd55..4a805aad 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -11,6 +11,10 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 + - name: Set Node.js 12.x + uses: actions/setup-node@v3 + with: + node-version: 12 - run: | npm ci npm run all:ci @@ -18,6 +22,10 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 + - name: Set Node.js 12.x + uses: actions/setup-node@v3 + with: + node-version: 12 - uses: ./ id: stale with: diff --git a/.licenses/npm/@actions/core.dep.yml b/.licenses/npm/@actions/core.dep.yml index 6fe946d3..a2682b83 100644 --- a/.licenses/npm/@actions/core.dep.yml +++ b/.licenses/npm/@actions/core.dep.yml @@ -1,30 +1,20 @@ --- name: "@actions/core" -version: 1.2.4 +version: 1.10.0 type: npm summary: Actions core lib -homepage: https://github.com/actions/toolkit/tree/master/packages/core +homepage: https://github.com/actions/toolkit/tree/main/packages/core license: mit licenses: -- sources: Auto-generated MIT license text - text: | - MIT License +- sources: LICENSE.md + text: |- + The MIT License (MIT) - Permission is hereby granted, free of charge, to any person obtaining a copy - of this software and associated documentation files (the "Software"), to deal - in the Software without restriction, including without limitation the rights - to use, copy, modify, merge, publish, distribute, sublicense, and/or sell - copies of the Software, and to permit persons to whom the Software is - furnished to do so, subject to the following conditions: + Copyright 2019 GitHub - The above copyright notice and this permission notice shall be included in all - copies or substantial portions of the Software. + Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: - THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR - IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, - FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE - AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER - LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, - OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE - SOFTWARE. + The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. + + THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. notices: [] diff --git a/.licenses/npm/@actions/github.dep.yml b/.licenses/npm/@actions/github.dep.yml index 0569b747..398963a4 100644 --- a/.licenses/npm/@actions/github.dep.yml +++ b/.licenses/npm/@actions/github.dep.yml @@ -1,30 +1,20 @@ --- name: "@actions/github" -version: 4.0.0 +version: 5.0.1 type: npm summary: Actions github lib -homepage: https://github.com/actions/toolkit/tree/master/packages/github +homepage: https://github.com/actions/toolkit/tree/main/packages/github license: mit licenses: -- sources: Auto-generated MIT license text - text: | - MIT License +- sources: LICENSE.md + text: |- + The MIT License (MIT) - Permission is hereby granted, free of charge, to any person obtaining a copy - of this software and associated documentation files (the "Software"), to deal - in the Software without restriction, including without limitation the rights - to use, copy, modify, merge, publish, distribute, sublicense, and/or sell - copies of the Software, and to permit persons to whom the Software is - furnished to do so, subject to the following conditions: + Copyright 2019 GitHub - The above copyright notice and this permission notice shall be included in all - copies or substantial portions of the Software. + Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: - THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR - IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, - FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE - AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER - LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, - OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE - SOFTWARE. + The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. + + THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. notices: [] diff --git a/.licenses/npm/@actions/http-client.dep.yml b/.licenses/npm/@actions/http-client-1.0.11.dep.yml similarity index 98% rename from .licenses/npm/@actions/http-client.dep.yml rename to .licenses/npm/@actions/http-client-1.0.11.dep.yml index d18a24ff..43316cbc 100644 --- a/.licenses/npm/@actions/http-client.dep.yml +++ b/.licenses/npm/@actions/http-client-1.0.11.dep.yml @@ -1,6 +1,6 @@ --- name: "@actions/http-client" -version: 1.0.8 +version: 1.0.11 type: npm summary: Actions Http Client homepage: https://github.com/actions/http-client#readme diff --git a/.licenses/npm/@actions/http-client-2.0.1.dep.yml b/.licenses/npm/@actions/http-client-2.0.1.dep.yml new file mode 100644 index 00000000..5c60ad35 --- /dev/null +++ b/.licenses/npm/@actions/http-client-2.0.1.dep.yml @@ -0,0 +1,32 @@ +--- +name: "@actions/http-client" +version: 2.0.1 +type: npm +summary: Actions Http Client +homepage: https://github.com/actions/toolkit/tree/main/packages/http-client +license: mit +licenses: +- sources: LICENSE + text: | + Actions Http Client for Node.js + + Copyright (c) GitHub, Inc. + + All rights reserved. + + MIT License + + Permission is hereby granted, free of charge, to any person obtaining a copy of this software and + associated documentation files (the "Software"), to deal in the Software without restriction, + including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, + and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, + subject to the following conditions: + + The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. + + THE SOFTWARE IS PROVIDED *AS IS*, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT + LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN + NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, + WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE + SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. +notices: [] diff --git a/.licenses/npm/@octokit/auth-token.dep.yml b/.licenses/npm/@octokit/auth-token.dep.yml index b54dd4b3..1ffe43e9 100644 --- a/.licenses/npm/@octokit/auth-token.dep.yml +++ b/.licenses/npm/@octokit/auth-token.dep.yml @@ -1,9 +1,9 @@ --- name: "@octokit/auth-token" -version: 2.4.2 +version: 2.5.0 type: npm summary: GitHub API token authentication for browsers and Node.js -homepage: https://github.com/octokit/auth-token.js#readme +homepage: license: mit licenses: - sources: LICENSE diff --git a/.licenses/npm/@octokit/core.dep.yml b/.licenses/npm/@octokit/core.dep.yml index ecde798a..d6657a24 100644 --- a/.licenses/npm/@octokit/core.dep.yml +++ b/.licenses/npm/@octokit/core.dep.yml @@ -1,9 +1,9 @@ --- name: "@octokit/core" -version: 3.1.1 +version: 3.6.0 type: npm summary: Extendable client for GitHub's REST & GraphQL APIs -homepage: https://github.com/octokit/core.js#readme +homepage: license: mit licenses: - sources: LICENSE diff --git a/.licenses/npm/@octokit/endpoint.dep.yml b/.licenses/npm/@octokit/endpoint.dep.yml index c35bc9a3..74b7649e 100644 --- a/.licenses/npm/@octokit/endpoint.dep.yml +++ b/.licenses/npm/@octokit/endpoint.dep.yml @@ -1,9 +1,9 @@ --- name: "@octokit/endpoint" -version: 6.0.5 +version: 6.0.12 type: npm summary: Turns REST API endpoints into generic request options -homepage: https://github.com/octokit/endpoint.js#readme +homepage: license: mit licenses: - sources: LICENSE diff --git a/.licenses/npm/@octokit/graphql.dep.yml b/.licenses/npm/@octokit/graphql.dep.yml index 01d745b9..c4faad91 100644 --- a/.licenses/npm/@octokit/graphql.dep.yml +++ b/.licenses/npm/@octokit/graphql.dep.yml @@ -1,9 +1,9 @@ --- name: "@octokit/graphql" -version: 4.5.2 +version: 4.8.0 type: npm summary: GitHub GraphQL API client for browsers and Node -homepage: https://github.com/octokit/graphql.js#readme +homepage: license: mit licenses: - sources: LICENSE diff --git a/.licenses/npm/@octokit/plugin-request-log.dep.yml b/.licenses/npm/@octokit/openapi-types.dep.yml similarity index 72% rename from .licenses/npm/@octokit/plugin-request-log.dep.yml rename to .licenses/npm/@octokit/openapi-types.dep.yml index 97214a62..65dc21a3 100644 --- a/.licenses/npm/@octokit/plugin-request-log.dep.yml +++ b/.licenses/npm/@octokit/openapi-types.dep.yml @@ -1,18 +1,18 @@ --- -name: "@octokit/plugin-request-log" -version: 1.0.0 +name: "@octokit/openapi-types" +version: 11.2.0 type: npm -summary: Log all requests and request errors -homepage: https://github.com/octokit/plugin-request-log.js#readme +summary: Generated TypeScript definitions based on GitHub's OpenAPI spec for api.github.com +homepage: license: mit licenses: - sources: LICENSE - text: | - MIT License Copyright (c) 2020 Octokit contributors + text: |- + Copyright 2020 Gregor Martynus Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: - The above copyright notice and this permission notice (including the next paragraph) shall be included in all copies or substantial portions of the Software. + The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. - sources: README.md diff --git a/.licenses/npm/@octokit/plugin-paginate-rest.dep.yml b/.licenses/npm/@octokit/plugin-paginate-rest.dep.yml index bfb202ec..0e815cfb 100644 --- a/.licenses/npm/@octokit/plugin-paginate-rest.dep.yml +++ b/.licenses/npm/@octokit/plugin-paginate-rest.dep.yml @@ -1,9 +1,9 @@ --- name: "@octokit/plugin-paginate-rest" -version: 2.2.4 +version: 2.17.0 type: npm summary: Octokit plugin to paginate REST API endpoint responses -homepage: https://github.com/octokit/plugin-paginate-rest.js#readme +homepage: license: mit licenses: - sources: LICENSE diff --git a/.licenses/npm/@octokit/plugin-rest-endpoint-methods-4.1.1.dep.yml b/.licenses/npm/@octokit/plugin-rest-endpoint-methods.dep.yml similarity index 93% rename from .licenses/npm/@octokit/plugin-rest-endpoint-methods-4.1.1.dep.yml rename to .licenses/npm/@octokit/plugin-rest-endpoint-methods.dep.yml index 9da3b8ea..0ae189c0 100644 --- a/.licenses/npm/@octokit/plugin-rest-endpoint-methods-4.1.1.dep.yml +++ b/.licenses/npm/@octokit/plugin-rest-endpoint-methods.dep.yml @@ -1,9 +1,9 @@ --- name: "@octokit/plugin-rest-endpoint-methods" -version: 4.1.1 +version: 5.13.0 type: npm summary: Octokit plugin adding one method for all of api.github.com REST API endpoints -homepage: https://github.com/octokit/plugin-rest-endpoint-methods.js#readme +homepage: license: mit licenses: - sources: LICENSE diff --git a/.licenses/npm/@octokit/request-error.dep.yml b/.licenses/npm/@octokit/request-error.dep.yml index 71f3b2ab..41a28b4e 100644 --- a/.licenses/npm/@octokit/request-error.dep.yml +++ b/.licenses/npm/@octokit/request-error.dep.yml @@ -1,9 +1,9 @@ --- name: "@octokit/request-error" -version: 2.0.2 +version: 2.1.0 type: npm summary: Error class for Octokit request errors -homepage: https://github.com/octokit/request-error.js#readme +homepage: license: mit licenses: - sources: LICENSE diff --git a/.licenses/npm/@octokit/request.dep.yml b/.licenses/npm/@octokit/request.dep.yml index 8078c961..73a8abce 100644 --- a/.licenses/npm/@octokit/request.dep.yml +++ b/.licenses/npm/@octokit/request.dep.yml @@ -1,10 +1,10 @@ --- name: "@octokit/request" -version: 5.4.7 +version: 5.6.3 type: npm -summary: Send parameterized requests to GitHub’s APIs with sensible defaults in browsers +summary: Send parameterized requests to GitHub's APIs with sensible defaults in browsers and Node -homepage: https://github.com/octokit/request.js#readme +homepage: license: mit licenses: - sources: LICENSE diff --git a/.licenses/npm/@octokit/types.dep.yml b/.licenses/npm/@octokit/types.dep.yml index da409094..d30699b3 100644 --- a/.licenses/npm/@octokit/types.dep.yml +++ b/.licenses/npm/@octokit/types.dep.yml @@ -1,9 +1,9 @@ --- name: "@octokit/types" -version: 5.1.2 +version: 6.34.0 type: npm summary: Shared TypeScript definitions for Octokit projects -homepage: https://github.com/octokit/types.ts#readme +homepage: license: mit licenses: - sources: LICENSE diff --git a/.licenses/npm/@types/node.dep.yml b/.licenses/npm/@types/node.dep.yml deleted file mode 100644 index ad67d767..00000000 --- a/.licenses/npm/@types/node.dep.yml +++ /dev/null @@ -1,32 +0,0 @@ ---- -name: "@types/node" -version: 14.6.0 -type: npm -summary: TypeScript definitions for Node.js -homepage: https://github.com/DefinitelyTyped/DefinitelyTyped#readme -license: mit -licenses: -- sources: LICENSE - text: |2 - MIT License - - Copyright (c) Microsoft Corporation. - - Permission is hereby granted, free of charge, to any person obtaining a copy - of this software and associated documentation files (the "Software"), to deal - in the Software without restriction, including without limitation the rights - to use, copy, modify, merge, publish, distribute, sublicense, and/or sell - copies of the Software, and to permit persons to whom the Software is - furnished to do so, subject to the following conditions: - - The above copyright notice and this permission notice shall be included in all - copies or substantial portions of the Software. - - THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR - IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, - FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE - AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER - LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, - OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE - SOFTWARE -notices: [] diff --git a/.licenses/npm/before-after-hook.dep.yml b/.licenses/npm/before-after-hook.dep.yml index 440fd2fa..9f5d75c4 100644 --- a/.licenses/npm/before-after-hook.dep.yml +++ b/.licenses/npm/before-after-hook.dep.yml @@ -1,9 +1,9 @@ --- name: before-after-hook -version: 2.1.0 +version: 2.2.2 type: npm summary: asynchronous before/error/after hooks for internal functionality -homepage: https://github.com/gr2m/before-after-hook#readme +homepage: license: apache-2.0 licenses: - sources: LICENSE diff --git a/.licenses/npm/is-plain-object.dep.yml b/.licenses/npm/is-plain-object.dep.yml index c9f1523f..671ba205 100644 --- a/.licenses/npm/is-plain-object.dep.yml +++ b/.licenses/npm/is-plain-object.dep.yml @@ -1,6 +1,6 @@ --- name: is-plain-object -version: 4.1.1 +version: 5.0.0 type: npm summary: Returns true if an object was created by the `Object` constructor, or Object.create(null). homepage: https://github.com/jonschlinkert/is-plain-object diff --git a/.licenses/npm/lodash.deburr.dep.yml b/.licenses/npm/lodash.deburr.dep.yml new file mode 100644 index 00000000..53ec9cf4 --- /dev/null +++ b/.licenses/npm/lodash.deburr.dep.yml @@ -0,0 +1,58 @@ +--- +name: lodash.deburr +version: 4.1.0 +type: npm +summary: The lodash method `_.deburr` exported as a module. +homepage: https://lodash.com/ +license: mit +licenses: +- sources: LICENSE + text: | + Copyright jQuery Foundation and other contributors + + Based on Underscore.js, copyright Jeremy Ashkenas, + DocumentCloud and Investigative Reporters & Editors + + This software consists of voluntary contributions made by many + individuals. For exact contribution history, see the revision history + available at https://github.com/lodash/lodash + + The following license applies to all parts of this software except as + documented below: + + ==== + + Permission is hereby granted, free of charge, to any person obtaining + a copy of this software and associated documentation files (the + "Software"), to deal in the Software without restriction, including + without limitation the rights to use, copy, modify, merge, publish, + distribute, sublicense, and/or sell copies of the Software, and to + permit persons to whom the Software is furnished to do so, subject to + the following conditions: + + The above copyright notice and this permission notice shall be + included in all copies or substantial portions of the Software. + + THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, + EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF + MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND + NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE + LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION + OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION + WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. + + ==== + + Copyright and related rights for sample code are waived via CC0. Sample + code is defined as all source code displayed within the prose of the + documentation. + + CC0: http://creativecommons.org/publicdomain/zero/1.0/ + + ==== + + Files located in the node_modules and vendor directories are externally + maintained libraries used by this software which have their own + licenses; we recommend you read them, as their terms may differ from the + terms above. +notices: [] diff --git a/.licenses/npm/lru-cache.dep.yml b/.licenses/npm/lru-cache.dep.yml new file mode 100644 index 00000000..8571c1a3 --- /dev/null +++ b/.licenses/npm/lru-cache.dep.yml @@ -0,0 +1,26 @@ +--- +name: lru-cache +version: 6.0.0 +type: npm +summary: A cache object that deletes the least-recently-used items. +homepage: +license: isc +licenses: +- sources: LICENSE + text: | + The ISC License + + Copyright (c) Isaac Z. Schlueter and Contributors + + Permission to use, copy, modify, and/or distribute this software for any + purpose with or without fee is hereby granted, provided that the above + copyright notice and this permission notice appear in all copies. + + THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES + WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF + MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR + ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES + WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN + ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR + IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. +notices: [] diff --git a/.licenses/npm/node-fetch.dep.yml b/.licenses/npm/node-fetch.dep.yml index 109c6d07..b49a78a1 100644 --- a/.licenses/npm/node-fetch.dep.yml +++ b/.licenses/npm/node-fetch.dep.yml @@ -1,6 +1,6 @@ --- name: node-fetch -version: 2.6.0 +version: 2.6.7 type: npm summary: A light-weight module that brings window.fetch to node.js homepage: https://github.com/bitinn/node-fetch @@ -42,6 +42,10 @@ licenses: [codecov-url]: https://codecov.io/gh/bitinn/node-fetch [install-size-image]: https://flat.badgen.net/packagephobia/install/node-fetch [install-size-url]: https://packagephobia.now.sh/result?p=node-fetch + [discord-image]: https://img.shields.io/discord/619915844268326952?color=%237289DA&label=Discord&style=flat-square + [discord-url]: https://discord.gg/Zxbndcm + [opencollective-image]: https://opencollective.com/node-fetch/backers.svg + [opencollective-url]: https://opencollective.com/node-fetch [whatwg-fetch]: https://fetch.spec.whatwg.org/ [response-init]: https://fetch.spec.whatwg.org/#responseinit [node-readable]: https://nodejs.org/api/stream.html#stream_readable_streams diff --git a/.licenses/npm/semver.dep.yml b/.licenses/npm/semver.dep.yml index e1c0eae9..d172c664 100644 --- a/.licenses/npm/semver.dep.yml +++ b/.licenses/npm/semver.dep.yml @@ -1,9 +1,9 @@ --- name: semver -version: 7.3.2 +version: 7.3.5 type: npm summary: The semantic version parser used by npm. -homepage: https://github.com/npm/node-semver#readme +homepage: license: isc licenses: - sources: LICENSE diff --git a/.licenses/npm/tr46.dep.yml b/.licenses/npm/tr46.dep.yml new file mode 100644 index 00000000..3bacc6ec --- /dev/null +++ b/.licenses/npm/tr46.dep.yml @@ -0,0 +1,30 @@ +--- +name: tr46 +version: 0.0.3 +type: npm +summary: An implementation of the Unicode TR46 spec +homepage: https://github.com/Sebmaster/tr46.js#readme +license: mit +licenses: +- sources: Auto-generated MIT license text + text: | + MIT License + + Permission is hereby granted, free of charge, to any person obtaining a copy + of this software and associated documentation files (the "Software"), to deal + in the Software without restriction, including without limitation the rights + to use, copy, modify, merge, publish, distribute, sublicense, and/or sell + copies of the Software, and to permit persons to whom the Software is + furnished to do so, subject to the following conditions: + + The above copyright notice and this permission notice shall be included in all + copies or substantial portions of the Software. + + THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR + IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, + FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE + AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER + LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, + OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE + SOFTWARE. +notices: [] diff --git a/.licenses/npm/@octokit/plugin-rest-endpoint-methods-4.1.2.dep.yml b/.licenses/npm/uuid.dep.yml similarity index 65% rename from .licenses/npm/@octokit/plugin-rest-endpoint-methods-4.1.2.dep.yml rename to .licenses/npm/uuid.dep.yml index 809e16da..6a0f9809 100644 --- a/.licenses/npm/@octokit/plugin-rest-endpoint-methods-4.1.2.dep.yml +++ b/.licenses/npm/uuid.dep.yml @@ -1,20 +1,20 @@ --- -name: "@octokit/plugin-rest-endpoint-methods" -version: 4.1.2 +name: uuid +version: 8.3.2 type: npm -summary: Octokit plugin adding one method for all of api.github.com REST API endpoints -homepage: https://github.com/octokit/plugin-rest-endpoint-methods.js#readme +summary: RFC4122 (v1, v4, and v5) UUIDs +homepage: license: mit licenses: -- sources: LICENSE +- sources: LICENSE.md text: | - MIT License Copyright (c) 2019 Octokit contributors + The MIT License (MIT) + + Copyright (c) 2010-2020 Robert Kieffer and other contributors Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: - The above copyright notice and this permission notice (including the next paragraph) shall be included in all copies or substantial portions of the Software. + The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. -- sources: README.md - text: "[MIT](LICENSE)" notices: [] diff --git a/.licenses/npm/webidl-conversions.dep.yml b/.licenses/npm/webidl-conversions.dep.yml new file mode 100644 index 00000000..40585680 --- /dev/null +++ b/.licenses/npm/webidl-conversions.dep.yml @@ -0,0 +1,23 @@ +--- +name: webidl-conversions +version: 3.0.1 +type: npm +summary: Implements the WebIDL algorithms for converting to and from JavaScript values +homepage: +license: bsd-2-clause +licenses: +- sources: LICENSE.md + text: | + # The BSD 2-Clause License + + Copyright (c) 2014, Domenic Denicola + All rights reserved. + + Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: + + 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. + + 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. + + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. +notices: [] diff --git a/.licenses/npm/@octokit/rest.dep.yml b/.licenses/npm/whatwg-url.dep.yml similarity index 77% rename from .licenses/npm/@octokit/rest.dep.yml rename to .licenses/npm/whatwg-url.dep.yml index b17f8363..ac3e1f6b 100644 --- a/.licenses/npm/@octokit/rest.dep.yml +++ b/.licenses/npm/whatwg-url.dep.yml @@ -1,17 +1,16 @@ --- -name: "@octokit/rest" -version: 18.0.2 +name: whatwg-url +version: 5.0.0 type: npm -summary: GitHub REST API client for Node.js -homepage: https://github.com/octokit/rest.js#readme +summary: An implementation of the WHATWG URL Standard's URL API and parsing machinery +homepage: license: mit licenses: -- sources: LICENSE +- sources: LICENSE.txt text: | - The MIT License + The MIT License (MIT) - Copyright (c) 2012 Cloud9 IDE, Inc. (Mike de Boer) - Copyright (c) 2017-2018 Octokit contributors + Copyright (c) 2015–2016 Sebastian Mayr Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal @@ -30,6 +29,4 @@ licenses: LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. -- sources: README.md - text: "[MIT](LICENSE)" notices: [] diff --git a/.licenses/npm/yallist.dep.yml b/.licenses/npm/yallist.dep.yml new file mode 100644 index 00000000..115c890d --- /dev/null +++ b/.licenses/npm/yallist.dep.yml @@ -0,0 +1,26 @@ +--- +name: yallist +version: 4.0.0 +type: npm +summary: Yet Another Linked List +homepage: +license: isc +licenses: +- sources: LICENSE + text: | + The ISC License + + Copyright (c) Isaac Z. Schlueter and Contributors + + Permission to use, copy, modify, and/or distribute this software for any + purpose with or without fee is hereby granted, provided that the above + copyright notice and this permission notice appear in all copies. + + THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES + WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF + MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR + ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES + WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN + ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR + IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. +notices: [] diff --git a/dist/index.js b/dist/index.js index b874b380..96ed9e6f 100644 --- a/dist/index.js +++ b/dist/index.js @@ -2484,7 +2484,6 @@ const file_command_1 = __nccwpck_require__(717); const utils_1 = __nccwpck_require__(5278); const os = __importStar(__nccwpck_require__(2087)); const path = __importStar(__nccwpck_require__(5622)); -const uuid_1 = __nccwpck_require__(5840); const oidc_utils_1 = __nccwpck_require__(8041); /** * The code to exit an action @@ -2514,20 +2513,9 @@ function exportVariable(name, val) { process.env[name] = convertedVal; const filePath = process.env['GITHUB_ENV'] || ''; if (filePath) { - const delimiter = `ghadelimiter_${uuid_1.v4()}`; - // These should realistically never happen, but just in case someone finds a way to exploit uuid generation let's not allow keys or values that contain the delimiter. - if (name.includes(delimiter)) { - throw new Error(`Unexpected input: name should not contain the delimiter "${delimiter}"`); - } - if (convertedVal.includes(delimiter)) { - throw new Error(`Unexpected input: value should not contain the delimiter "${delimiter}"`); - } - const commandValue = `${name}<<${delimiter}${os.EOL}${convertedVal}${os.EOL}${delimiter}`; - file_command_1.issueCommand('ENV', commandValue); - } - else { - command_1.issueCommand('set-env', { name }, convertedVal); + return file_command_1.issueFileCommand('ENV', file_command_1.prepareKeyValueMessage(name, val)); } + command_1.issueCommand('set-env', { name }, convertedVal); } exports.exportVariable = exportVariable; /** @@ -2545,7 +2533,7 @@ exports.setSecret = setSecret; function addPath(inputPath) { const filePath = process.env['GITHUB_PATH'] || ''; if (filePath) { - file_command_1.issueCommand('PATH', inputPath); + file_command_1.issueFileCommand('PATH', inputPath); } else { command_1.issueCommand('add-path', {}, inputPath); @@ -2585,7 +2573,10 @@ function getMultilineInput(name, options) { const inputs = getInput(name, options) .split('\n') .filter(x => x !== ''); - return inputs; + if (options && options.trimWhitespace === false) { + return inputs; + } + return inputs.map(input => input.trim()); } exports.getMultilineInput = getMultilineInput; /** @@ -2618,8 +2609,12 @@ exports.getBooleanInput = getBooleanInput; */ // eslint-disable-next-line @typescript-eslint/no-explicit-any function setOutput(name, value) { + const filePath = process.env['GITHUB_OUTPUT'] || ''; + if (filePath) { + return file_command_1.issueFileCommand('OUTPUT', file_command_1.prepareKeyValueMessage(name, value)); + } process.stdout.write(os.EOL); - command_1.issueCommand('set-output', { name }, value); + command_1.issueCommand('set-output', { name }, utils_1.toCommandValue(value)); } exports.setOutput = setOutput; /** @@ -2748,7 +2743,11 @@ exports.group = group; */ // eslint-disable-next-line @typescript-eslint/no-explicit-any function saveState(name, value) { - command_1.issueCommand('save-state', { name }, value); + const filePath = process.env['GITHUB_STATE'] || ''; + if (filePath) { + return file_command_1.issueFileCommand('STATE', file_command_1.prepareKeyValueMessage(name, value)); + } + command_1.issueCommand('save-state', { name }, utils_1.toCommandValue(value)); } exports.saveState = saveState; /** @@ -2814,13 +2813,14 @@ var __importStar = (this && this.__importStar) || function (mod) { return result; }; Object.defineProperty(exports, "__esModule", ({ value: true })); -exports.issueCommand = void 0; +exports.prepareKeyValueMessage = exports.issueFileCommand = void 0; // We use any as a valid input type /* eslint-disable @typescript-eslint/no-explicit-any */ const fs = __importStar(__nccwpck_require__(5747)); const os = __importStar(__nccwpck_require__(2087)); +const uuid_1 = __nccwpck_require__(5840); const utils_1 = __nccwpck_require__(5278); -function issueCommand(command, message) { +function issueFileCommand(command, message) { const filePath = process.env[`GITHUB_${command}`]; if (!filePath) { throw new Error(`Unable to find environment variable for file command ${command}`); @@ -2832,7 +2832,22 @@ function issueCommand(command, message) { encoding: 'utf8' }); } -exports.issueCommand = issueCommand; +exports.issueFileCommand = issueFileCommand; +function prepareKeyValueMessage(key, value) { + const delimiter = `ghadelimiter_${uuid_1.v4()}`; + const convertedValue = utils_1.toCommandValue(value); + // These should realistically never happen, but just in case someone finds a + // way to exploit uuid generation let's not allow keys or values that contain + // the delimiter. + if (key.includes(delimiter)) { + throw new Error(`Unexpected input: name should not contain the delimiter "${delimiter}"`); + } + if (convertedValue.includes(delimiter)) { + throw new Error(`Unexpected input: value should not contain the delimiter "${delimiter}"`); + } + return `${key}<<${delimiter}${os.EOL}${convertedValue}${os.EOL}${delimiter}`; +} +exports.prepareKeyValueMessage = prepareKeyValueMessage; //# sourceMappingURL=file-command.js.map /***/ }), diff --git a/package-lock.json b/package-lock.json index b372a847..6c88d8ea 100644 --- a/package-lock.json +++ b/package-lock.json @@ -42,9 +42,9 @@ } }, "node_modules/@actions/core": { - "version": "1.9.1", - "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.9.1.tgz", - "integrity": "sha512-5ad+U2YGrmmiw6du20AQW5XuWo7UKN2052FjSV7MX+Wfjf8sCqcsZe62NfgHys4QI4/Y+vQvLKYL8jWtA1ZBTA==", + "version": "1.10.0", + "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.10.0.tgz", + "integrity": "sha512-2aZDDa3zrrZbP5ZYg159sNoLRb61nQ7awl5pSvIq5Qpj81vwDzdMRKzkWJGJuwVvWpvZKx7vspJALyvaaIQyug==", "dependencies": { "@actions/http-client": "^2.0.1", "uuid": "^8.3.2" @@ -11187,9 +11187,9 @@ }, "dependencies": { "@actions/core": { - "version": "1.9.1", - "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.9.1.tgz", - "integrity": "sha512-5ad+U2YGrmmiw6du20AQW5XuWo7UKN2052FjSV7MX+Wfjf8sCqcsZe62NfgHys4QI4/Y+vQvLKYL8jWtA1ZBTA==", + "version": "1.10.0", + "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.10.0.tgz", + "integrity": "sha512-2aZDDa3zrrZbP5ZYg159sNoLRb61nQ7awl5pSvIq5Qpj81vwDzdMRKzkWJGJuwVvWpvZKx7vspJALyvaaIQyug==", "requires": { "@actions/http-client": "^2.0.1", "uuid": "^8.3.2"