206 Commits

Author SHA1 Message Date
Peter Evans
26b39ed245 Update workflow v2.1.1 2022-12-08 12:15:34 +09:00
Peter Evans
b155cf1427 Update readme 2022-12-08 12:05:57 +09:00
Peter Evans
faa2bf022d Update readme 2022-12-08 11:46:02 +09:00
dependabot[bot]
0bc97bd4b8 Bump @types/node from 16.11.11 to 18.11.11 (#134)
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 16.11.11 to 18.11.11.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-08 02:04:42 +00:00
dependabot[bot]
8ab3ab850d Bump @vercel/ncc from 0.32.0 to 0.36.0 (#133)
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.32.0 to 0.36.0.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.32.0...0.36.0)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-08 02:02:51 +00:00
dependabot[bot]
defb7de2f3 Bump eslint-plugin-github from 4.3.5 to 4.6.0 (#130)
Bumps [eslint-plugin-github](https://github.com/github/eslint-plugin-github) from 4.3.5 to 4.6.0.
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](https://github.com/github/eslint-plugin-github/compare/v4.3.5...v4.6.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-github
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-08 02:00:49 +00:00
dependabot[bot]
fb1da2a91f Bump jest-circus from 27.4.2 to 29.3.1 (#132)
Bumps [jest-circus](https://github.com/facebook/jest/tree/HEAD/packages/jest-circus) from 27.4.2 to 29.3.1.
- [Release notes](https://github.com/facebook/jest/releases)
- [Changelog](https://github.com/facebook/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/jest/commits/v29.3.1/packages/jest-circus)

---
updated-dependencies:
- dependency-name: jest-circus
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-08 01:59:06 +00:00
dependabot[bot]
ec896de369 Bump prettier from 2.5.0 to 2.8.1 (#131)
Bumps [prettier](https://github.com/prettier/prettier) from 2.5.0 to 2.8.1.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/2.5.0...2.8.1)

---
updated-dependencies:
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-08 01:57:25 +00:00
Peter Evans
9255d358ad Update workflow 2022-12-08 10:55:25 +09:00
Peter Evans
f8e700e208 Add automerge workflow 2022-12-08 10:45:08 +09:00
Peter Evans
3c7e484edb Update dependabot.yml 2022-12-08 10:19:55 +09:00
Peter Evans
cb18cc8cd6 Update readme 2022-10-21 17:51:56 +09:00
Peter Evans
1f873ff42d Remove token elevation 2022-10-21 15:56:27 +09:00
Peter Evans
73f2fe9d70 Merge pull request #125 from peter-evans/fix-any
Replace use of any type
2022-10-21 15:33:38 +09:00
Peter Evans
9b60aa8a4d Replace use of any type 2022-10-21 15:31:45 +09:00
Peter Evans
f2696244ec Merge pull request #124 from peter-evans/token-update
Token update
v2.1.0
2022-10-19 16:35:51 +09:00
Peter Evans
2f6d32ce83 Update docs 2022-10-19 16:34:26 +09:00
Peter Evans
66463e47e7 Update docs 2022-10-19 16:28:06 +09:00
Peter Evans
aebc169929 Update action config to set a default token 2022-10-19 16:27:58 +09:00
Peter Evans
b700ade2f3 Update ci to use default token 2022-10-19 16:27:30 +09:00
Peter Evans
8e295bb3b1 Merge pull request #118 from santunioni/patch-1
Fix: Information related to tokens in README
2022-10-19 16:07:52 +09:00
Peter Evans
b8601598d8 Merge pull request #123 from peter-evans/update-distribution
Update distribution
v2.0.1
2022-10-18 15:49:27 +09:00
peter-evans
18c0a0eef4 Update distribution 2022-10-18 06:48:44 +00:00
Peter Evans
870eb7a531 Merge pull request #120 from peter-evans/dependabot/npm_and_yarn/actions/github-5.1.1
Bump @actions/github from 5.0.0 to 5.1.1
2022-10-18 15:47:43 +09:00
Peter Evans
d591bcc413 Merge pull request #122 from peter-evans/update-distribution
Update distribution
2022-10-18 15:46:16 +09:00
peter-evans
42eb81b6bc Update distribution 2022-10-18 06:45:48 +00:00
dependabot[bot]
26cb96aa5e Bump @actions/github from 5.0.0 to 5.1.1
Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) from 5.0.0 to 5.1.1.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

---
updated-dependencies:
- dependency-name: "@actions/github"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-18 06:45:31 +00:00
Peter Evans
6045f64a24 Merge pull request #121 from peter-evans/dependabot/npm_and_yarn/actions/core-1.10.0
Bump @actions/core from 1.9.1 to 1.10.0
2022-10-18 15:44:42 +09:00
dependabot[bot]
f8bc8c5c02 Bump @actions/core from 1.9.1 to 1.10.0
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.9.1 to 1.10.0.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-18 06:43:27 +00:00
Peter Evans
5e038d8e52 Update dependabot 2022-10-18 15:42:37 +09:00
Vinícius Vargas
3c4e552d10 Update README.md 2022-10-10 05:38:56 -03:00
Vinícius Vargas
77fb463884 Fix: Information related to tokens in README
Fix documentation related to tokens. The secrets.GITHUB_TOKEN provided by the GitHub Actions App can do everything related to the repo if we elevate its permissions, including calling workflow_dispatch and repository_dispatch.

Some people in my organization are using PAT's instead of the secrets.GITHUB_TOKEN when using this action because of this README suggestion, even when they are calling the same repository. Using PATs in that contexts provides unnecessary security risks.
2022-10-10 05:37:25 -03:00
Peter Evans
c8e633a77e Add funding 2022-08-26 10:44:06 +09:00
Peter Evans
e2dfd3c880 Merge pull request #116 from peter-evans/update-distribution
Update distribution
2022-08-19 13:28:42 +09:00
peter-evans
cac67678cf Update distribution 2022-08-19 04:25:01 +00:00
Peter Evans
fe4ce16ccb Merge pull request #114 from peter-evans/dependabot/npm_and_yarn/actions/core-1.9.1
Bump @actions/core from 1.6.0 to 1.9.1
2022-08-19 13:23:50 +09:00
dependabot[bot]
6676414e8f Bump @actions/core from 1.6.0 to 1.9.1
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.6.0 to 1.9.1.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-19 04:22:31 +00:00
Peter Evans
eaded0e2ee Merge pull request #115 from peter-evans/workflow-perm
Add workflow permissions
2022-08-19 13:18:23 +09:00
Peter Evans
23f37653ea Add workflow permissions 2022-08-19 13:16:48 +09:00
Peter Evans
c73dcc4242 Merge pull request #110 from peter-evans/dependabot/npm_and_yarn/minimist-1.2.6
Bump minimist from 1.2.5 to 1.2.6
2022-03-29 09:38:23 +09:00
dependabot[bot]
3de81530cc Bump minimist from 1.2.5 to 1.2.6
Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/substack/minimist/releases)
- [Commits](https://github.com/substack/minimist/compare/1.2.5...1.2.6)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-28 10:30:19 +00:00
Peter Evans
d85250f54b Merge pull request #109 from peter-evans/dependabot/github_actions/peter-evans/create-pull-request-4 2022-03-28 19:30:00 +09:00
Peter Evans
4b2881efb9 Merge pull request #108 from peter-evans/dependabot/github_actions/peter-evans/slash-command-dispatch-3 2022-03-28 19:28:55 +09:00
dependabot[bot]
c078548696 Bump peter-evans/create-pull-request from 3 to 4
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 3 to 4.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v3...v4)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-28 09:18:17 +00:00
dependabot[bot]
0459c47edf Bump peter-evans/slash-command-dispatch from 2 to 3
Bumps [peter-evans/slash-command-dispatch](https://github.com/peter-evans/slash-command-dispatch) from 2 to 3.
- [Release notes](https://github.com/peter-evans/slash-command-dispatch/releases)
- [Commits](https://github.com/peter-evans/slash-command-dispatch/compare/v2...v3)

---
updated-dependencies:
- dependency-name: peter-evans/slash-command-dispatch
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-28 09:18:12 +00:00
Peter Evans
a275156cbd Merge pull request #107 from peter-evans/dependabot/github_actions/actions/setup-node-3
Bump actions/setup-node from 2 to 3
2022-03-22 14:01:42 +09:00
Peter Evans
64c665535e Update readme 2022-03-22 13:10:44 +09:00
dependabot[bot]
077903f4f4 Bump actions/setup-node from 2 to 3
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 2 to 3.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-22 04:05:08 +00:00
Peter Evans
11ba7d3f32 Merge pull request #106 from peter-evans/v2
Update runtime to node 16
v2.0.0
2022-03-22 13:04:34 +09:00
Peter Evans
646aa8008a Fix upload-artifact action version 2022-03-22 12:57:19 +09:00