Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade octokit from 1.0.0-hello-world to 1.8.1 #308

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

X-oss-byte
Copy link
Owner

@X-oss-byte X-oss-byte commented Nov 17, 2024

snyk-top-banner

Snyk has created this PR to upgrade octokit from 1.0.0-hello-world to 1.8.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 21 versions ahead of your current version.

  • The recommended version was released on 2 years ago.

Release notes
Package name: octokit
  • 1.8.1 - 2022-06-22

    1.8.1 (2022-06-22)

    Bug Fixes

  • 1.8.0 - 2022-06-15

    Features

    • .rest.dependabot.addSelectedRepoToOrgSecret()
    • .rest.dependabot.removeSelectedRepoFromOrgSecret()
    • .rest.teams.listLinkedExternalIdpGroupsToTeamForOrg()
    • .rest.teams.linkExternalIdpGroupToTeamForOrg()
    • .rest.teams.unlinkExternalIdpGroupFromTeamForOrg()
    • .rest.enterpriseAdmin.listLabelsForSelfHostedRunnerForEnterprise()
    • .rest.enterpriseAdmin.addCustomLabelsToSelfHostedRunnerForEnterprise()
    • .rest.enterpriseAdmin.setCustomLabelsForSelfHostedRunnerForEnterprise()
    • .rest.enterpriseAdmin.removeAllCustomLabelsFromSelfHostedRunnerForEnterprise()
    • .rest.actions.listLabelsForSelfHostedRunnerForOrg()
    • .rest.actions.addCustomLabelsToSelfHostedRunnerForOrg()
    • .rest.actions.setCustomLabelsForSelfHostedRunnerForOrg()
    • .rest.actions.removeAllCustomLabelsFromSelfHostedRunnerForOrg()
    • .rest.actions.listLabelsForSelfHostedRunnerForRepo()
    • .rest.actions.addCustomLabelsToSelfHostedRunnerForRepo()
    • .rest.actions.setCustomLabelsForSelfHostedRunnerForRepo()
    • .rest.actions.removeAllCustomLabelsFromSelfHostedRunnerForRepo()
    • .rest.codespaces.listInRepositoryForAuthenticatedUser()
    • .rest.codespaces.createWithRepoForAuthenticatedUser()
    • .rest.repos.listTagProtection()
    • .rest.repos.createTagProtection()
    • .rest.codespaces.listForAuthenticatedUser()
    • .rest.codespaces.createForAuthenticatedUser()
    • .rest.codespaces.listSecretsForAuthenticatedUser()
    • .rest.codespaces.getPublicKeyForAuthenticatedUser()
    • .rest.codespaces.getSecretForAuthenticatedUser()
    • .rest.codespaces.createOrUpdateSecretForAuthenticatedUser()
    • .rest.codespaces.deleteSecretForAuthenticatedUser()
    • .rest.codespaces.listRepositoriesForSecretForAuthenticatedUser()
    • .rest.codespaces.setRepositoriesForSecretForAuthenticatedUser()
    • .rest.codespaces.addRepositoryForSecretForAuthenticatedUser()
    • .rest.codespaces.removeRepositoryForSecretForAuthenticatedUser()
    • .rest.codespaces.getForAuthenticatedUser()
    • .rest.codespaces.updateForAuthenticatedUser()
    • .rest.codespaces.deleteForAuthenticatedUser()
    • .rest.codespaces.exportForAuthenticatedUser()
    • .rest.codespaces.getExportDetailsForAuthenticatedUser()
    • .rest.codespaces.codespaceMachinesForAuthenticatedUser()
    • .rest.codespaces.startForAuthenticatedUser()
    • .rest.codespaces.stopForAuthenticatedUser()
    • .rest.dependabot.getOrgSecret()
    • .rest.dependabot.createOrUpdateOrgSecret()
    • .rest.dependabot.deleteOrgSecret()
    • .rest.codespaces.getRepoSecret()
    • .rest.codespaces.createOrUpdateRepoSecret()
    • .rest.codespaces.deleteRepoSecret()
    • .rest.dependabot.getRepoSecret()
    • .rest.dependabot.createOrUpdateRepoSecret()
    • .rest.dependabot.deleteRepoSecret()
    • .rest.actions.getGithubActionsDefaultWorkflowPermissionsOrganization()
    • .rest.actions.setGithubActionsDefaultWorkflowPermissionsOrganization()
    • .rest.dependabot.listSelectedReposForOrgSecret()
    • .rest.dependabot.setSelectedReposForOrgSecret()
    • .rest.actions.getWorkflowAccessToRepository()
    • .rest.actions.setWorkflowAccessToRepository()
    • .rest.actions.getGithubActionsDefaultWorkflowPermissionsRepository()
    • .rest.actions.setGithubActionsDefaultWorkflowPermissionsRepository()
    • .rest.orgs.listCustomRoles()
    • .rest.actions.getActionsCacheUsageForOrg()
    • .rest.enterpriseAdmin.removeCustomLabelFromSelfHostedRunnerForEnterprise()
    • .rest.actions.removeCustomLabelFromSelfHostedRunnerForOrg()
    • .rest.actions.removeCustomLabelFromSelfHostedRunnerForRepo()
    • .rest.reactions.deleteForRelease()
    • .rest.repos.deleteTagProtection()
    • .rest.enterpriseAdmin.getServerStatistics()
    • .rest.actions.getActionsCacheUsageForEnterprise()
    • .rest.actions.getGithubActionsDefaultWorkflowPermissionsEnterprise()
    • .rest.enterpriseAdmin.listSelfHostedRunnerGroupsForEnterprise() - visible-to-organization paramter
    • .rest.secretScanning.listAlertsForEnterprise()
    • .rest.billing.getGithubAdvancedSecurityBillingGhe()
    • .rest.actions.getActionsCacheUsageByRepoForOrg()
    • .rest.actions.listSelfHostedRunnerGroupsForOrg() - new parameter: visible_to_repository
    • .rest.codeScanning.listAlertsForOrg()
    • .rest.orgs.listSamlSsoAuthorizations() - new parameters: per_page, page, login
    • .rest.dependabot.getOrgPublicKey()
    • .rest.dependabot.listOrgSecrets()
    • .rest.teams.externalIdpGroupInfoForOrg()
    • .rest.teams.listExternalIdpGroupsForOrg()
    • .rest.secretScanning.listAlertsForOrg() - new parameters: sort, direction
    • .rest.billing.getGithubAdvancedSecurityBillingOrg()
    • .rest.repos.codeownersErrors()
    • .rest.codespaces.listDevcontainersInRepositoryForAuthenticatedUser()
    • .rest.codespaces.repoMachinesForAuthenticatedUser()
    • .rest.codespaces.getRepoPublicKey()
    • .rest.codespaces.listRepoSecrets()
    • .rest.dependabot.getRepoPublicKey()
    • .rest.dependabot.listRepoSecrets()
    • .rest.dependencyGraph.diffRange()
    • .rest.reactions.listForRelease()
    • .rest.secretScanning.listLocationsForAlert()
    • .rest.actions.updateSelfHostedRunnerGroupForOrg() - new parameters: allows_public_repositories, restricted_to_workflows, selected_workflows
    • .rest.orgs.update() - new parameter: members_can_fork_private_repositories
    • .rest.actions.createSelfHostedRunnerGroupForOrg() - new parameters: allows_public_repositories, restricted_to_workflows, selected_workflows
    • .rest.migrations.startForOrg() - new parrameters: exclude_metadata, exclude_git_data, org_metadata_only
    • .rest.repos.createInOrg() - new parameter: use_squash_pr_title_as_default
    • .rest.actions.reRunJobForWorkflowRun()
    • .rest.actions.reRunWorkflowFailedJobs()
    • .rest.codespaces.createWithPrForAuthenticatedUser()
    • .rest.migrations.startForAuthenticatedUser() - new parrameters: exclude_metadata, exclude_git_data, org_metadata_only
    • .rest.actions.setGithubActionsDefaultWorkflowPermissionsEnterprise()
    • .rest.orgs.convertMemberToOutsideCollaborator() - new parameter: async
    • .rest.actions.getActionsCacheUsage()
    • .rest.actions.listWorkflowRunsForRepo(): new parameter: check_suite_id
    • .rest.actions.listWorkflowRuns(): new parameter: check_suite_id
    • .rest.codeScanning.listAlertsForRepo(): new parameters: direction, sort
    • .rest.repos.getAllEnvironments(): new parameters: per_page, page
    • .rest.secretScanning.listAlertsForRepo(): new parameters: direction, sort
    • .rest.repos.updatePullRequestReviewProtection(): new parameters: dismissal_restrictions.apps, bypass_pull_request_allowances
    • .rest.repos.updateStatusCheckProtection(): new parameter: checks
    • .rest.codeScanning.updateAlert(): new parameter: dismissed_comment
    • .rest.repos.update(): secret_scanning_push_protection, use_squash_pr_title_as_default
    • .rest.actions.reRunWorkflow(): new parameter: enable_debug_logging
    • .rest.users.createGpgKeyForAuthenticatedUser(): new parameter: name
    • .rest.repos.updateBranchProtection(): new parameter: required_status_checks.checks, required_pull_request_reviews.{apps,bypass_pull_request_allowances}, block_creations

    Bug Fixes

    • .rest.apps.createFromManifest() has no request body
    • .rest.projects.getPermissionForUser(): correct response type and example
    • .rest.repos.update(): visibility parameter cannot be set to visibility
    • .rest.actions.reRunWorkflow(): no longer deprecated
    • remove defunkt .rest.reactions.deleteLegacy()
    • remove defunkt .rest.apps.createContentAttachment()
  • 1.7.2 - 2022-06-08

    1.7.2 (2022-06-08)

    Bug Fixes

  • 1.7.1 - 2021-11-22

    1.7.1 (2021-11-22)

    Bug Fixes

    • docs: correct proxy servers headline not rendering (#2169) (163f925)
  • 1.7.0 - 2021-10-07

    1.7.0 (2021-10-07)

    Features

    • .actions.downloadWorkflowRunAttemptLogs(), .actions.getWorkflowRunAttempt(), .repos.generateReleaseNotes(), .checks.rerequestRun(). Graduate nebula, zzzax, switcheroo, baptiste previews. Removes defunkt /repos/{owner}/{repo}/actions/runs/{run_id}/retry endpoint. Renames methods to have consistent AuthenticatedUser() suffix, deprecates previous method names (#2163) (e02541c)
  • 1.6.2 - 2021-09-30

    1.6.2 (2021-09-30)

    Bug Fixes

    • removes defunkt endpoints: GET /repos/{owner}/{repo}/community/code_of_conduct, DELETE /reactions/{reaction_id}. encrypted_value and key_id parameters are required for .rest.actions.{createOrUpdateEnvironmentSecret,setSelectedReposForOrgSecret}(). access_token parameter is required for .rest.apps.deleteAuthorization(). Previews graduated: ant-man, flash, scarlet-witch, squirrel-girl (03e3055)
    • deps: luke-cage preview graduated (#2158) (6864592)
  • 1.6.1 - 2021-09-24

    1.6.1 (2021-09-24)

    Bug Fixes

    • graduate previews dorian, inertia, london, lydian, wyandotte (#2157) (6d878ac)
  • 1.6.0 - 2021-09-22

    1.6.0 (2021-09-22)

    Features

    • octokit.rest.repos.{enable,disable}LfsForRepo(), octokit.rest.repos.mergeUpstream({ owner, repo, branch }) (7e3cd91)
  • 1.5.0 - 2021-08-31

    1.5.0 (2021-08-31)

    Features

    • typescript: .rest.packages.deletePackageForUser(), .rest.packages.deletePackageVersionForUser(), .rest.packages.restorePackageForUser(), .rest.packages.restorePackageVersionForUser(), .rest.secretScanning.listAlertsForOrg() (#2150) (670986f)

    Bug Fixes

    • typescript: fix type for labels parameter in .issues.{add,set}Labels() (#2150) (670986f)
  • 1.4.0 - 2021-08-10

    1.4.0 (2021-08-10)

    Features

    • typescript: permissions key in responses now consistently include maintain and triage roles (#2145) (b47bf5c)
  • 1.3.0 - 2021-08-03
  • 1.2.0 - 2021-08-02
  • 1.1.0 - 2021-06-23
  • 1.0.6 - 2021-06-11
  • 1.0.5 - 2021-05-18
  • 1.0.4 - 2021-05-07
  • 1.0.3 - 2021-04-18
  • 1.0.3-debug.1 - 2021-04-25
  • 1.0.2 - 2021-04-15
  • 1.0.1 - 2021-04-13
  • 1.0.0 - 2021-04-08
  • 1.0.0-hello-world - 2018-05-31
from octokit GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Summary by Sourcery

Enhancements:

  • Upgrade octokit dependency from version 1.0.0-hello-world to 1.8.1 to include new features and bug fixes.

Snyk has created this PR to upgrade octokit from 1.0.0-hello-world to 1.8.1.

See this package in npm:
octokit

See this project in Snyk:
https://app.snyk.io/org/sammytezzy/project/19d599fd-9f38-4c7f-95ca-753ff5501349?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

stackblitz bot commented Nov 17, 2024

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

Copy link

changeset-bot bot commented Nov 17, 2024

⚠️ No Changeset found

Latest commit: 2e6ed69

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link

sourcery-ai bot commented Nov 17, 2024

Reviewer's Guide by Sourcery

This PR upgrades the octokit dependency from version 1.0.0-hello-world to 1.8.1. The upgrade spans 21 versions and includes numerous new features, bug fixes, and API improvements. The changes are primarily focused on updating the octokit REST API client with new endpoints and parameter updates.

Class diagram for updated Octokit client

classDiagram
    class Octokit {
        +rest
    }
    class Rest {
        +dependabot
        +teams
        +enterpriseAdmin
        +actions
        +codespaces
        +repos
        +orgs
        +secretScanning
        +billing
        +migrations
        +users
        +projects
        +reactions
        +checks
    }
    class Dependabot {
        +addSelectedRepoToOrgSecret()
        +removeSelectedRepoFromOrgSecret()
        +getOrgSecret()
        +createOrUpdateOrgSecret()
        +deleteOrgSecret()
        +getRepoSecret()
        +createOrUpdateRepoSecret()
        +deleteRepoSecret()
        +listSelectedReposForOrgSecret()
        +setSelectedReposForOrgSecret()
        +getOrgPublicKey()
        +listOrgSecrets()
        +getRepoPublicKey()
        +listRepoSecrets()
    }
    class Teams {
        +listLinkedExternalIdpGroupsToTeamForOrg()
        +linkExternalIdpGroupToTeamForOrg()
        +unlinkExternalIdpGroupFromTeamForOrg()
        +externalIdpGroupInfoForOrg()
        +listExternalIdpGroupsForOrg()
    }
    class EnterpriseAdmin {
        +listLabelsForSelfHostedRunnerForEnterprise()
        +addCustomLabelsToSelfHostedRunnerForEnterprise()
        +setCustomLabelsForSelfHostedRunnerForEnterprise()
        +removeAllCustomLabelsFromSelfHostedRunnerForEnterprise()
        +removeCustomLabelFromSelfHostedRunnerForEnterprise()
        +getServerStatistics()
        +listSelfHostedRunnerGroupsForEnterprise()
    }
    class Actions {
        +listLabelsForSelfHostedRunnerForOrg()
        +addCustomLabelsToSelfHostedRunnerForOrg()
        +setCustomLabelsForSelfHostedRunnerForOrg()
        +removeAllCustomLabelsFromSelfHostedRunnerForOrg()
        +removeCustomLabelFromSelfHostedRunnerForOrg()
        +listLabelsForSelfHostedRunnerForRepo()
        +addCustomLabelsToSelfHostedRunnerForRepo()
        +setCustomLabelsForSelfHostedRunnerForRepo()
        +removeAllCustomLabelsFromSelfHostedRunnerForRepo()
        +removeCustomLabelFromSelfHostedRunnerForRepo()
        +getGithubActionsDefaultWorkflowPermissionsOrganization()
        +setGithubActionsDefaultWorkflowPermissionsOrganization()
        +getWorkflowAccessToRepository()
        +setWorkflowAccessToRepository()
        +getGithubActionsDefaultWorkflowPermissionsRepository()
        +setGithubActionsDefaultWorkflowPermissionsRepository()
        +getActionsCacheUsageForOrg()
        +getActionsCacheUsageForEnterprise()
        +getActionsCacheUsage()
        +listWorkflowRunsForRepo()
        +listWorkflowRuns()
        +reRunJobForWorkflowRun()
        +reRunWorkflowFailedJobs()
        +reRunWorkflow()
        +updateSelfHostedRunnerGroupForOrg()
        +createSelfHostedRunnerGroupForOrg()
    }
    class Codespaces {
        +listInRepositoryForAuthenticatedUser()
        +createWithRepoForAuthenticatedUser()
        +listForAuthenticatedUser()
        +createForAuthenticatedUser()
        +listSecretsForAuthenticatedUser()
        +getPublicKeyForAuthenticatedUser()
        +getSecretForAuthenticatedUser()
        +createOrUpdateSecretForAuthenticatedUser()
        +deleteSecretForAuthenticatedUser()
        +listRepositoriesForSecretForAuthenticatedUser()
        +setRepositoriesForSecretForAuthenticatedUser()
        +addRepositoryForSecretForAuthenticatedUser()
        +removeRepositoryForSecretForAuthenticatedUser()
        +getForAuthenticatedUser()
        +updateForAuthenticatedUser()
        +deleteForAuthenticatedUser()
        +exportForAuthenticatedUser()
        +getExportDetailsForAuthenticatedUser()
        +codespaceMachinesForAuthenticatedUser()
        +startForAuthenticatedUser()
        +stopForAuthenticatedUser()
        +getRepoSecret()
        +createOrUpdateRepoSecret()
        +deleteRepoSecret()
        +listDevcontainersInRepositoryForAuthenticatedUser()
        +repoMachinesForAuthenticatedUser()
        +getRepoPublicKey()
        +listRepoSecrets()
        +createWithPrForAuthenticatedUser()
    }
    class Repos {
        +listTagProtection()
        +createTagProtection()
        +deleteTagProtection()
        +codeownersErrors()
        +diffRange()
        +listForAuthenticatedUser()
        +createForAuthenticatedUser()
        +getAllEnvironments()
        +updatePullRequestReviewProtection()
        +updateStatusCheckProtection()
        +update()
        +createInOrg()
        +mergeUpstream()
        +enableLfsForRepo()
        +disableLfsForRepo()
        +generateReleaseNotes()
    }
    class Orgs {
        +listCustomRoles()
        +listSamlSsoAuthorizations()
        +update()
        +convertMemberToOutsideCollaborator()
    }
    class SecretScanning {
        +listAlertsForEnterprise()
        +listAlertsForOrg()
        +listAlertsForRepo()
        +listLocationsForAlert()
    }
    class Billing {
        +getGithubAdvancedSecurityBillingGhe()
        +getGithubAdvancedSecurityBillingOrg()
    }
    class Migrations {
        +startForOrg()
        +startForAuthenticatedUser()
    }
    class Users {
        +createGpgKeyForAuthenticatedUser()
    }
    class Projects {
        +getPermissionForUser()
    }
    class Reactions {
        +deleteForRelease()
        +listForRelease()
    }
    class Checks {
        +rerequestRun()
    }
    Octokit --> Rest
    Rest --> Dependabot
    Rest --> Teams
    Rest --> EnterpriseAdmin
    Rest --> Actions
    Rest --> Codespaces
    Rest --> Repos
    Rest --> Orgs
    Rest --> SecretScanning
    Rest --> Billing
    Rest --> Migrations
    Rest --> Users
    Rest --> Projects
    Rest --> Reactions
    Rest --> Checks
    note for Octokit "This class represents the main client for interacting with GitHub's REST API."
    note for Rest "This class contains all the REST API endpoints available in the Octokit client."
Loading

File-Level Changes

Change Details Files
Update octokit package version in package.json and package-lock.json
  • Bump octokit version from 1.0.0-hello-world to 1.8.1
  • Update package-lock.json to reflect new version
api/javascript/org-invite/package.json
api/javascript/org-invite/package-lock.json
Notable feature additions and improvements in the upgrade
  • Added support for new Dependabot REST API endpoints
  • Added support for Codespaces REST API endpoints
  • Added support for custom labels for self-hosted runners
  • Added new team management endpoints
  • Fixed user agent setting
  • Re-enabled throttling plugin
  • Graduated several API previews to stable
api/javascript/org-invite/package.json

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time. You can also use
    this command to specify where the summary should be inserted.

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants