Implement branch list using callbacks from exec function #1045

cory-miller · 2022-12-13T22:16:45Z

When trying to list local branches to figure out what needs cleaned up during runs on non-ephemeral Actions Runners, we use git rev-parse --symbolic-full-name to get a list of branches. This can lead to ambiguous ref name errors when there are branches and tags with similar names.

Part of the reason we use rev-parse --symbolic-full-name vs git branch --list or git rev-parse --symbolic seems to related to a bug in Git 2.18. Until we can deprecate our usage of Git 2.18, I think we need to keep --symbolic-full-name. Since part of the problem is that these ambiguous ref name errors clog the Actions annotation limits, this is a mitigation to suppress those messages until we can get rid of the workaround.

See #786

JoannaaKL · 2022-12-14T16:37:46Z

dist/index.js

-                        branch = branch.substr('refs/remotes/'.length);
-                    }
-                    result.push(branch);
+                if (!branch) {


JoannaaKL

lgtm

vanZeben

This reads a lot cleaner! Nice job!

vmjoseph · 2022-12-14T20:17:47Z

Looks great to me @cory-miller ! One thing i noticed when pulling this locally was a high vuln on a package named qs

$ npm audit
# npm audit report

qs  6.10.0 - 6.10.2
Severity: high
qs vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-hrpp-h998-j3pp
fix available via `npm audit fix`
node_modules/qs

1 high severity vulnerability

which resulted in an additional package-lock.json change:

     "node_modules/qs": {
-      "version": "6.10.1",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.10.1.tgz",
-      "integrity": "sha512-M528Hph6wsSVOBiYUnGf+K/7w0hNshs/duGsNXPUCLH5XAqjEtiPGwNONLV0tBH8NoGb0mvD5JubnUTrujKDTg==",
+      "version": "6.11.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.11.0.tgz",
+      "integrity": "sha512-MvjoMCJwEarSbUYk5O+nmoSzSutSsTwF85zcHPQ9OrlFoZOYIjaqBAJIqIXjptyD5vThxGq52Xu/MaJzRkIk4Q==",
       "dependencies": {
         "side-channel": "^1.0.4"
       },

but let me know if you're not seeing the same thing.

cory-miller · 2022-12-14T21:03:13Z

@vmjoseph I've updated qs with npm audit fix --package-lock && npm run build

407: chore(deps): update actions/checkout action to v3.3.0 r=renovate[bot] a=renovate[bot] [![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.2.0` -> `v3.3.0` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0) ##### What's Changed - Implement branch list using callbacks from exec function by [`@cory-miller](https://togithub.com/cory-miller)` in [https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045) - Add in explicit reference to private checkout options by [`@vanZeben](https://togithub.com/vanZeben)` in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - Fix comment typos (that got added in [#770](https://togithub.com/actions/checkout/issues/770)) by [`@lurch](https://togithub.com/lurch)` in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) ##### New Contributors - [`@vanZeben](https://togithub.com/vanZeben)` made their first contribution in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - [`@lurch](https://togithub.com/lurch)` made their first contribution in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) **Full Changelog**: actions/checkout@v3.2.0...v3.3.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/OpenPoolProject/stratum).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.2.0` -> `v3.3.0` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0) ##### What's Changed - Implement branch list using callbacks from exec function by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045) - Add in explicit reference to private checkout options by [@vanZeben](https://togithub.com/vanZeben) in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - Fix comment typos (that got added in [#770](https://togithub.com/actions/checkout/issues/770)) by [@lurch](https://togithub.com/lurch) in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) ##### New Contributors - [@vanZeben](https://togithub.com/vanZeben) made their first contribution in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - [@lurch](https://togithub.com/lurch) made their first contribution in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) **Full Changelog**: actions/checkout@v3.2.0...v3.3.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/JellyfishSDK/jellyfish).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.2.0` -> `v3.3.0` | | [actions/upload-artifact](https://togithub.com/actions/upload-artifact) | action | patch | `v3.1.1` -> `v3.1.2` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0) ##### What's Changed - Implement branch list using callbacks from exec function by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045) - Add in explicit reference to private checkout options by [@vanZeben](https://togithub.com/vanZeben) in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - Fix comment typos (that got added in [#770](https://togithub.com/actions/checkout/issues/770)) by [@lurch](https://togithub.com/lurch) in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) ##### New Contributors - [@vanZeben](https://togithub.com/vanZeben) made their first contribution in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - [@lurch](https://togithub.com/lurch) made their first contribution in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) **Full Changelog**: actions/checkout@v3.2.0...v3.3.0 </details> <details> <summary>actions/upload-artifact</summary> ### [`v3.1.2`](https://togithub.com/actions/upload-artifact/releases/tag/v3.1.2) [Compare Source](https://togithub.com/actions/upload-artifact/compare/v3.1.1...v3.1.2) - Update all `@actions/*` NPM packages to their latest versions- [#374](https://togithub.com/actions/upload-artifact/issues/374) - Update all dev dependencies to their most recent versions - [#375](https://togithub.com/actions/upload-artifact/issues/375) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/google/osv.dev).

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.2.0` -> `v3.3.0` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0) ##### What's Changed - Implement branch list using callbacks from exec function by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045) - Add in explicit reference to private checkout options by [@vanZeben](https://togithub.com/vanZeben) in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - Fix comment typos (that got added in [#770](https://togithub.com/actions/checkout/issues/770)) by [@lurch](https://togithub.com/lurch) in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) ##### New Contributors - [@vanZeben](https://togithub.com/vanZeben) made their first contribution in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - [@lurch](https://togithub.com/lurch) made their first contribution in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) **Full Changelog**: actions/checkout@v3.2.0...v3.3.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/BirthdayResearch/sticky).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---|---|---| | actionpack-page_caching | | patch | `'1.2.0'` -> `'1.2.4'` | [![age](https://badges.renovateapi.com/packages/rubygems/actionpack-page_caching/1.2.4/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/rubygems/actionpack-page_caching/1.2.4/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/rubygems/actionpack-page_caching/1.2.4/compatibility-slim/'1.2.0')](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/rubygems/actionpack-page_caching/1.2.4/confidence-slim/'1.2.0')](https://docs.renovatebot.com/merge-confidence/) | | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.1.0` -> `v3.3.0` | [![age](https://badges.renovateapi.com/packages/github-tags/actions%2fcheckout/v3.3.0/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/github-tags/actions%2fcheckout/v3.3.0/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/github-tags/actions%2fcheckout/v3.3.0/compatibility-slim/v3.1.0)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/github-tags/actions%2fcheckout/v3.3.0/confidence-slim/v3.1.0)](https://docs.renovatebot.com/merge-confidence/) | | [actions/upload-artifact](https://togithub.com/actions/upload-artifact) | action | patch | `v3.1.0` -> `v3.1.2` | [![age](https://badges.renovateapi.com/packages/github-tags/actions%2fupload-artifact/v3.1.2/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/github-tags/actions%2fupload-artifact/v3.1.2/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/github-tags/actions%2fupload-artifact/v3.1.2/compatibility-slim/v3.1.0)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/github-tags/actions%2fupload-artifact/v3.1.2/confidence-slim/v3.1.0)](https://docs.renovatebot.com/merge-confidence/) | | coffee-rails | | minor | `'~> 4.1.0'` -> `'~> 4.2.0'` | [![age](https://badges.renovateapi.com/packages/rubygems/coffee-rails/4.2.2/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/rubygems/coffee-rails/4.2.2/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/rubygems/coffee-rails/4.2.2/compatibility-slim/4.1.1)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/rubygems/coffee-rails/4.2.2/confidence-slim/4.1.1)](https://docs.renovatebot.com/merge-confidence/) | | [eslint-plugin-import](https://togithub.com/import-js/eslint-plugin-import) | devDependencies | minor | [`2.26.0` -> `2.27.5`](https://renovatebot.com/diffs/npm/eslint-plugin-import/2.26.0/2.27.5) | [![age](https://badges.renovateapi.com/packages/npm/eslint-plugin-import/2.27.5/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/npm/eslint-plugin-import/2.27.5/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/npm/eslint-plugin-import/2.27.5/compatibility-slim/2.26.0)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/npm/eslint-plugin-import/2.27.5/confidence-slim/2.26.0)](https://docs.renovatebot.com/merge-confidence/) | | [github/codeql-action](https://togithub.com/github/codeql-action) | action | minor | `v2.1.27` -> `v2.2.1` | [![age](https://badges.renovateapi.com/packages/github-tags/github%2fcodeql-action/v2.2.1/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/github-tags/github%2fcodeql-action/v2.2.1/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/github-tags/github%2fcodeql-action/v2.2.1/compatibility-slim/v2.1.27)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/github-tags/github%2fcodeql-action/v2.2.1/confidence-slim/v2.1.27)](https://docs.renovatebot.com/merge-confidence/) | | [gradle](https://gradle.org) ([source](https://togithub.com/gradle/gradle)) | | minor | `7.4.1` -> `7.6` | [![age](https://badges.renovateapi.com/packages/gradle-version/gradle/7.6/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/gradle-version/gradle/7.6/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/gradle-version/gradle/7.6/compatibility-slim/7.4.1)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/gradle-version/gradle/7.6/confidence-slim/7.4.1)](https://docs.renovatebot.com/merge-confidence/) | | [ossf/scorecard-action](https://togithub.com/ossf/scorecard-action) | action | minor | `v2.0.6` -> `v2.1.2` | [![age](https://badges.renovateapi.com/packages/github-tags/ossf%2fscorecard-action/v2.1.2/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/github-tags/ossf%2fscorecard-action/v2.1.2/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/github-tags/ossf%2fscorecard-action/v2.1.2/compatibility-slim/v2.0.6)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/github-tags/ossf%2fscorecard-action/v2.1.2/confidence-slim/v2.0.6)](https://docs.renovatebot.com/merge-confidence/) | | rails | | minor | `'>= 5.0.0.beta1', '< 5.1'` -> `'>= 5.0.0.beta1', '< 5.2.9'` | [![age](https://badges.renovateapi.com/packages/rubygems/rails/5.2.8.1/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/rubygems/rails/5.2.8.1/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/rubygems/rails/5.2.8.1/compatibility-slim/5.0.0)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/rubygems/rails/5.2.8.1/confidence-slim/5.0.0)](https://docs.renovatebot.com/merge-confidence/) | | [terraform-linters/tflint-ruleset-aws](https://togithub.com/terraform-linters/tflint-ruleset-aws) | plugin | minor | `0.13.2` -> `0.21.2` | [![age](https://badges.renovateapi.com/packages/github-releases/terraform-linters%2ftflint-ruleset-aws/0.21.2/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/github-releases/terraform-linters%2ftflint-ruleset-aws/0.21.2/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/github-releases/terraform-linters%2ftflint-ruleset-aws/0.21.2/compatibility-slim/0.13.2)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/github-releases/terraform-linters%2ftflint-ruleset-aws/0.21.2/confidence-slim/0.13.2)](https://docs.renovatebot.com/merge-confidence/) | | [typescript](https://www.typescriptlang.org/) ([source](https://togithub.com/Microsoft/TypeScript)) | devDependencies | patch | [`4.9.3` -> `4.9.5`](https://renovatebot.com/diffs/npm/typescript/4.9.3/4.9.5) | [![age](https://badges.renovateapi.com/packages/npm/typescript/4.9.5/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/npm/typescript/4.9.5/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/npm/typescript/4.9.5/compatibility-slim/4.9.3)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/npm/typescript/4.9.5/confidence-slim/4.9.3)](https://docs.renovatebot.com/merge-confidence/) | | io.gitlab.arturbosch.detekt | plugin | minor | `1.20.0-RC1` -> `1.22.0` | [![age](https://badges.renovateapi.com/packages/maven/io.gitlab.arturbosch.detekt/1.22.0/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/maven/io.gitlab.arturbosch.detekt/1.22.0/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/maven/io.gitlab.arturbosch.detekt/1.22.0/compatibility-slim/1.20.0-RC1)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/maven/io.gitlab.arturbosch.detekt/1.22.0/confidence-slim/1.20.0-RC1)](https://docs.renovatebot.com/merge-confidence/) | | org.jetbrains.kotlin.jvm | plugin | minor | `1.5.31` -> `1.8.10` | [![age](https://badges.renovateapi.com/packages/maven/org.jetbrains.kotlin.jvm/1.8.10/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/maven/org.jetbrains.kotlin.jvm/1.8.10/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/maven/org.jetbrains.kotlin.jvm/1.8.10/compatibility-slim/1.5.31)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/maven/org.jetbrains.kotlin.jvm/1.8.10/confidence-slim/1.5.31)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0) ##### What's Changed - Implement branch list using callbacks from exec function by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045) - Add in explicit reference to private checkout options by [@vanZeben](https://togithub.com/vanZeben) in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - Fix comment typos (that got added in [#770](https://togithub.com/actions/checkout/issues/770)) by [@lurch](https://togithub.com/lurch) in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) ##### New Contributors - [@vanZeben](https://togithub.com/vanZeben) made their first contribution in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - [@lurch](https://togithub.com/lurch) made their first contribution in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) **Full Changelog**: https://github.com/actions/checkout/compare/v3.2.0...v3.3.0 ### [`v3.2.0`](https://togithub.com/actions/checkout/releases/tag/v3.2.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.1.0...v3.2.0) #### What's Changed - Add GitHub Action to perform release by [@rentziass](https://togithub.com/rentziass) in [https://github.com/actions/checkout/pull/942](https://togithub.com/actions/checkout/pull/942) - Fix status badge by [@ScottBrenner](https://togithub.com/ScottBrenner) in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - Replace datadog/squid with ubuntu/squid Docker image by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - Wrap pipeline commands for submoduleForeach in quotes by [@jokreliable](https://togithub.com/jokreliable) in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - Update [@actions/io](https://togithub.com/actions/io) to 1.1.2 by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1029](https://togithub.com/actions/checkout/pull/1029) - Upgrading version to 3.2.0 by [@vmjoseph](https://togithub.com/vmjoseph) in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) #### New Contributors - [@ScottBrenner](https://togithub.com/ScottBrenner) made their first contribution in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - [@cory-miller](https://togithub.com/cory-miller) made their first contribution in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - [@jokreliable](https://togithub.com/jokreliable) made their first contribution in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - [@vmjoseph](https://togithub.com/vmjoseph) made their first contribution in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) **Full Changelog**: https://github.com/actions/checkout/compare/v3.1.0...v3.2.0 </details> <details> <summary>actions/upload-artifact</summary> ### [`v3.1.2`](https://togithub.com/actions/upload-artifact/releases/tag/v3.1.2) [Compare Source](https://togithub.com/actions/upload-artifact/compare/v3.1.1...v3.1.2) - Update all `@actions/*` NPM packages to their latest versions- [#374](https://togithub.com/actions/upload-artifact/issues/374) - Update all dev dependencies to their most recent versions - [#375](https://togithub.com/actions/upload-artifact/issues/375) ### [`v3.1.1`](https://togithub.com/actions/upload-artifact/releases/tag/v3.1.1) [Compare Source](https://togithub.com/actions/upload-artifact/compare/v3.1.0...v3.1.1) - Update actions/core package to latest version to remove `set-output` deprecation warning [#351](https://togithub.com/actions/upload-artifact/issues/351) </details> <details> <summary>import-js/eslint-plugin-import</summary> ### [`v2.27.5`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#2275---2023-01-16) [Compare Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.4...v2.27.5) ##### Fixed - \[`order]`: Fix group ranks order when alphabetizing (\[[#2674](https://togithub.com/import-js/eslint-plugin-import/issues/2674)], thanks \[[@Pearce-Ropion](https://togithub.com/Pearce-Ropion)]) ### [`v2.27.4`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#2274---2023-01-11) [Compare Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.3...v2.27.4) ##### Fixed - `semver` should be a prod dep (\[[#2668](https://togithub.com/import-js/eslint-plugin-import/issues/2668)]) ### [`v2.27.3`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#2273---2023-01-11) [Compare Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.2...v2.27.3) ##### Fixed - \[`no-empty-named-blocks`]: rewrite rule to only check import declarations (\[[#2666](https://togithub.com/import-js/eslint-plugin-import/issues/2666)]) ### [`v2.27.2`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#2272---2023-01-11) [Compare Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.1...v2.27.2) ##### Fixed - \[`no-duplicates`]: do not unconditionally require `typescript` (\[[#2665](https://togithub.com/import-js/eslint-plugin-import/issues/2665)]) ### [`v2.27.1`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#2271---2023-01-11) [Compare Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.0...v2.27.1) ##### Fixed - `array.prototype.flatmap` should be a prod dep (\[[#2664](https://togithub.com/import-js/eslint-plugin-import/issues/2664)], thanks \[[@cristobal](https://togithub.com/cristobal)]) ### [`v2.27.0`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#2270---2023-01-11) [Compare Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.26.0...v2.27.0) ##### Added - \[`newline-after-import`]: add `considerComments` option (\[[#2399](https://togithub.com/import-js/eslint-plugin-import/issues/2399)], thanks \[[@pri1311](https://togithub.com/pri1311)]) - \[`no-cycle`]: add `allowUnsafeDynamicCyclicDependency` option (\[[#2387](https://togithub.com/import-js/eslint-plugin-import/issues/2387)], thanks \[[@GerkinDev](https://togithub.com/GerkinDev)]) - \[`no-restricted-paths`]: support arrays for `from` and `target` options (\[[#2466](https://togithub.com/import-js/eslint-plugin-import/issues/2466)], thanks \[[@AdriAt360](https://togithub.com/AdriAt360)]) - \[`no-anonymous-default-export`]: add `allowNew` option (\[[#2505](https://togithub.com/import-js/eslint-plugin-import/issues/2505)], thanks \[[@DamienCassou](https://togithub.com/DamienCassou)]) - \[`order`]: Add `distinctGroup` option (\[[#2395](https://togithub.com/import-js/eslint-plugin-import/issues/2395)], thanks \[[@hyperupcall](https://togithub.com/hyperupcall)]) - \[`no-extraneous-dependencies`]: Add `includeInternal` option (\[[#2541](https://togithub.com/import-js/eslint-plugin-import/issues/2541)], thanks \[[@bdwain](https://togithub.com/bdwain)]) - \[`no-extraneous-dependencies`]: Add `includeTypes` option (\[[#2543](https://togithub.com/import-js/eslint-plugin-import/issues/2543)], thanks \[[@bdwain](https://togithub.com/bdwain)]) - \[`order`]: new `alphabetize.orderImportKind` option to sort imports with same path based on their kind (`type`, `typeof`) (\[[#2544](https://togithub.com/import-js/eslint-plugin-import/issues/2544)], thanks \[[@stropho](https://togithub.com/stropho)]) - \[`consistent-type-specifier-style`]: add rule (\[[#2473](https://togithub.com/import-js/eslint-plugin-import/issues/2473)], thanks \[[@bradzacher](https://togithub.com/bradzacher)]) - Add \[`no-empty-named-blocks`] rule (\[[#2568](https://togithub.com/import-js/eslint-plugin-import/issues/2568)], thanks \[[@guilhermelimak](https://togithub.com/guilhermelimak)]) - \[`prefer-default-export`]: add "target" option (\[[#2602](https://togithub.com/import-js/eslint-plugin-import/issues/2602)], thanks \[[@azyzz228](https://togithub.com/azyzz228)]) - \[`no-absolute-path`]: add fixer (\[[#2613](https://togithub.com/import-js/eslint-plugin-import/issues/2613)], thanks \[[@adipascu](https://togithub.com/adipascu)]) - \[`no-duplicates`]: support inline type import with `inlineTypeImport` option (\[[#2475](https://togithub.com/import-js/eslint-plugin-import/issues/2475)], thanks \[[@snewcomer](https://togithub.com/snewcomer)]) ##### Fixed - \[`order`]: move nested imports closer to main import entry (\[[#2396](https://togithub.com/import-js/eslint-plugin-import/issues/2396)], thanks \[[@pri1311](https://togithub.com/pri1311)]) - \[`no-restricted-paths`]: fix an error message (\[[#2466](https://togithub.com/import-js/eslint-plugin-import/issues/2466)], thanks \[[@AdriAt360](https://togithub.com/AdriAt360)]) - \[`no-restricted-paths`]: use `Minimatch.match` instead of `minimatch` to comply with Windows Native paths (\[[#2466](https://togithub.com/import-js/eslint-plugin-import/issues/2466)], thanks \[[@AdriAt360](https://togithub.com/AdriAt360)]) - \[`order`]: require with member expression could not be fixed if alphabetize.order was used (\[[#2490](https://togithub.com/import-js/eslint-plugin-import/issues/2490)], thanks \[[@msvab](https://togithub.com/msvab)]) - \[`order`]: leave more space in rankings for consecutive path groups (\[[#2506](https://togithub.com/import-js/eslint-plugin-import/issues/2506)], thanks \[[@Pearce-Ropion](https://togithub.com/Pearce-Ropion)]) - \[`no-cycle`]: add ExportNamedDeclaration statements to dependencies (\[[#2511](https://togithub.com/import-js/eslint-plugin-import/issues/2511)], thanks \[[@BenoitZugmeyer](https://togithub.com/BenoitZugmeyer)]) - \[`dynamic-import-chunkname`]: prevent false report on a valid webpack magic comment (\[[#2330](https://togithub.com/import-js/eslint-plugin-import/issues/2330)], thanks \[[@mhmadhamster](https://togithub.com/mhmadhamster)]) - \[`export`]: do not error on TS export overloads (\[[#1590](https://togithub.com/import-js/eslint-plugin-import/issues/1590)], thanks \[[@ljharb](https://togithub.com/ljharb)]) - \[`no-unresolved`], \[`extensions`]: ignore type only exports (\[[#2436](https://togithub.com/import-js/eslint-plugin-import/issues/2436)], thanks \[[@Lukas-Kullmann](https://togithub.com/Lukas-Kullmann)]) - `ExportMap`: add missing param to function (\[[#2589](https://togithub.com/import-js/eslint-plugin-import/issues/2589)], thanks \[[@Fdawgs](https://togithub.com/Fdawgs)]) - \[`no-unused-modules`]: `checkPkgFieldObject` filters boolean fields from checks (\[[#2598](https://togithub.com/import-js/eslint-plugin-import/issues/2598)], thanks \[[@mpint](https://togithub.com/mpint)]) - \[`no-cycle`]: accept Flow `typeof` imports, just like `type` (\[[#2608](https://togithub.com/import-js/eslint-plugin-import/issues/2608)], thanks \[[@gnprice](https://togithub.com/gnprice)]) - \[`no-import-module-exports`]: avoid a false positive for import variables (\[[#2315](https://togithub.com/import-js/eslint-plugin-import/issues/2315)], thanks \[[@BarryThePenguin](https://togithub.com/BarryThePenguin)]) ##### Changed - \[Tests] \[`named`]: Run all TypeScript test (\[[#2427](https://togithub.com/import-js/eslint-plugin-import/issues/2427)], thanks \[[@ProdigySim](https://togithub.com/ProdigySim)]) - \[readme] note use of typescript in readme `import/extensions` section (\[[#2440](https://togithub.com/import-js/eslint-plugin-import/issues/2440)], thanks \[[@OutdatedVersion](https://togithub.com/OutdatedVersion)]) - \[Docs] \[`order`]: use correct default value (\[[#2392](https://togithub.com/import-js/eslint-plugin-import/issues/2392)], thanks \[[@hyperupcall](https://togithub.com/hyperupcall)]) - \[meta] replace git.io link in comments with the original URL (\[[#2444](https://togithub.com/import-js/eslint-plugin-import/issues/2444)], thanks \[[@liby](https://togithub.com/liby)]) - \[Docs] remove global install in readme (\[[#2412](https://togithub.com/import-js/eslint-plugin-import/issues/2412)], thanks \[[@aladdin-add](https://togithub.com/aladdin-add)]) - \[readme] clarify `eslint-import-resolver-typescript` usage (\[[#2503](https://togithub.com/import-js/eslint-plugin-import/issues/2503)], thanks \[[@JounQin](https://togithub.com/JounQin)]) - \[Refactor] \[`no-cycle`]: Add per-run caching of traversed paths (\[[#2419](https://togithub.com/import-js/eslint-plugin-import/issues/2419)], thanks \[[@nokel81](https://togithub.com/nokel81)]) - \[Performance] `ExportMap`: add caching after parsing for an ambiguous module (\[[#2531](https://togithub.com/import-js/eslint-plugin-import/issues/2531)], thanks \[[@stenin-nikita](https://togithub.com/stenin-nikita)]) - \[Docs] \[`no-useless-path-segments`]: fix paths (\[[#2424](https://togithub.com/import-js/eslint-plugin-import/issues/2424)], thanks \[[@s-h-a-d-o-w](https://togithub.com/s-h-a-d-o-w)]) - \[Tests] \[`no-cycle`]: add passing test cases (\[[#2438](https://togithub.com/import-js/eslint-plugin-import/issues/2438)], thanks \[[@georeith](https://togithub.com/georeith)]) - \[Refactor] \[`no-extraneous-dependencies`] improve performance using cache (\[[#2374](https://togithub.com/import-js/eslint-plugin-import/issues/2374)], thanks \[[@meowtec](https://togithub.com/meowtec)]) - \[meta] `CONTRIBUTING.md`: mention inactive PRs (\[[#2546](https://togithub.com/import-js/eslint-plugin-import/issues/2546)], thanks \[[@stropho](https://togithub.com/stropho)]) - \[readme] make json for setting groups multiline (\[[#2570](https://togithub.com/import-js/eslint-plugin-import/issues/2570)], thanks \[[@bertyhell](https://togithub.com/bertyhell)]) - \[Tests] \[`no-restricted-paths`]: Tests for `import type` statements (\[[#2459](https://togithub.com/import-js/eslint-plugin-import/issues/2459)], thanks \[[@golergka](https://togithub.com/golergka)]) - \[Tests] \[`no-restricted-paths`]: fix one failing `import type` test case, submitted by \[[@golergka](https://togithub.com/golergka)], thanks \[[@azyzz228](https://togithub.com/azyzz228)] - \[Docs] automate docs with eslint-doc-generator (\[[#2582](https://togithub.com/import-js/eslint-plugin-import/issues/2582)], thanks \[[@bmish](https://togithub.com/bmish)]) - \[readme] Increase clarity around typescript configuration (\[[#2588](https://togithub.com/import-js/eslint-plugin-import/issues/2588)], thanks \[[@Nfinished](https://togithub.com/Nfinished)]) - \[Docs] update `eslint-doc-generator` to v1.0.0 (\[[#2605](https://togithub.com/import-js/eslint-plugin-import/issues/2605)], thanks \[[@bmish](https://togithub.com/bmish)]) - \[Perf] \[`no-cycle`], \[`no-internal-modules`], \[`no-restricted-paths`]: use `anyOf` instead of `oneOf` (thanks \[[@ljharb](https://togithub.com/ljharb)], \[[@remcohaszing](https://togithub.com/remcohaszing)]) </details> <details> <summary>github/codeql-action</summary> ### [`v2.2.1`](https://togithub.com/github/codeql-action/compare/v2.2.0...v2.2.1) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.2.0...v2.2.1) ### [`v2.2.0`](https://togithub.com/github/codeql-action/compare/v2.1.39...v2.2.0) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.1.39...v2.2.0) ### [`v2.1.39`](https://togithub.com/github/codeql-action/compare/v2.1.38...v2.1.39) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.1.38...v2.1.39) ### [`v2.1.38`](https://togithub.com/github/codeql-action/compare/v2.1.37...v2.1.38) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.1.37...v2.1.38) ### [`v2.1.37`](https://togithub.com/github/codeql-action/compare/v2.1.36...v2.1.37) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.1.36...v2.1.37) ### [`v2.1.36`](https://togithub.com/github/codeql-action/compare/v2.1.35...v2.1.36) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.1.35...v2.1.36) ### [`v2.1.35`](https://togithub.com/github/codeql-action/compare/v2.1.34...v2.1.35) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.1.34...v2.1.35) ### [`v2.1.34`](https://togithub.com/github/codeql-action/compare/v2.1.33...v2.1.34) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.1.33...v2.1.34) ### [`v2.1.33`](https://togithub.com/github/codeql-action/compare/v2.1.32...v2.1.33) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.1.32...v2.1.33) ### [`v2.1.32`](https://togithub.com/github/codeql-action/compare/v2.1.31...v2.1.32) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.1.31...v2.1.32) ### [`v2.1.31`](https://togithub.com/github/codeql-action/compare/v2.1.30...v2.1.31) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.1.30...v2.1.31) ### [`v2.1.30`](https://togithub.com/github/codeql-action/compare/v2.1.29...v2.1.30) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.1.29...v2.1.30) ### [`v2.1.29`](https://togithub.com/github/codeql-action/compare/v2.1.28...v2.1.29) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.1.28...v2.1.29) ### [`v2.1.28`](https://togithub.com/github/codeql-action/compare/v2.1.27...v2.1.28) [Compare Source](https://togithub.com/github/codeql-action/compare/v2.1.27...v2.1.28) </details> <details> <summary>gradle/gradle</summary> ### [`v7.5.1`](https://togithub.com/gradle/gradle/releases/tag/v7.5.1): 7.5.1 This is a patch release for 7.5. We recommend using 7.5.1 instead of 7.5 [Read the Release Notes](https://docs.gradle.org/7.5.1/release-notes.html) We would like to thank the following community members for their contributions to this release of Gradle: [Michael Bailey](https://togithub.com/yogurtearl), [Josh Kasten](https://togithub.com/jkasten2), [Marcono1234](https://togithub.com/Marcono1234), [mataha](https://togithub.com/mataha), [Lieven Vaneeckhaute](https://togithub.com/denshade), [kiwi-oss](https://togithub.com/kiwi-oss), [Stefan Neuhaus](https://togithub.com/stefanneuhaus), [George Thomas](https://togithub.com/smoothreggae), [Anja Papatola](https://togithub.com/apalopta), [Björn Kautler](https://togithub.com/Vampire), [David Burström](https://togithub.com/davidburstrom), [Vladimir Sitnikov](https://togithub.com/vlsi), [Roland Weisleder](https://togithub.com/rweisleder), [Konstantin Gribov](https://togithub.com/grossws), [David Op de Beeck](https://togithub.com/DavidOpDeBeeck), [aSemy](https://togithub.com/aSemy), [Rene Groeschke](https://togithub.com/breskeby), [Jonathan Leitschuh](https://togithub.com/JLLeitschuh), [Aurimas Liutikas](https://togithub.com/liutikas), [Jamie Tanna](https://togithub.com/jamietanna), [Xin Wang](https://togithub.com/scaventz), [Atsuto Yamashita](https://togithub.com/att55), [Taeik Lim](https://togithub.com/acktsap), [Peter Gafert](https://togithub.com/codecholeric), [Alex Landau](https://togithub.com/AlexLandau), [Jerry Wiltse](https://togithub.com/solvingj), [Tyler Burke](https://togithub.com/T-A-B), [Matthew Haughton](https://togithub.com/3flex), [Filip Daca](https://togithub.com/filip-daca), [Simão Gomes Viana](https://togithub.com/xdevs23), [Vaidotas Valuckas](https://togithub.com/rieske), [Edgars Jasmans](https://togithub.com/yasmans), [Tomasz Godzik](https://togithub.com/tgodzik), [Jeff](https://togithub.com/mathjeff), [Lajos Veres](https://togithub.com/vlajos) #### Upgrade instructions Switch your build to use Gradle 7.5.1 by updating your wrapper: `./gradlew wrapper --gradle-version=7.5.1` See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.5.1/userguide/upgrading_version\_7.html#changes\_7.5) to learn about deprecations, breaking changes and other considerations when upgrading. #### Reporting Problems If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). ### [`v7.4.2`](https://togithub.com/gradle/gradle/releases/tag/v7.4.2): 7.4.2 This is a patch release for Gradle 7.4. See the list of fixed issues: https://docs.gradle.org/7.4.2/release-notes.html We recommend users upgrade to 7.4.2 instead of 7.4 or another patch release. #### Upgrade Instructions Switch your build to use Gradle 7.4.2 by updating your wrapper: ./gradlew wrapper --gradle-version=7.4.2 See the [Gradle 7.x upgrade guide](https://docs.gradle.org/7.4.2/userguide/upgrading_version\_7.html#changes\_7.4) to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.4.2. #### Reporting Problems If you find a problem with this release, please file a bug on [GitHub Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the [forum](https://discuss.gradle.org/c/help-discuss). </details> <details> <summary>ossf/scorecard-action</summary> ### [`v2.1.2`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.1.2) [Compare Source](https://togithub.com/ossf/scorecard-action/compare/v2.1.1...v2.1.2) #### What's Changed ##### Fixes - 🌱 Bump scorecard dependency to v4.10.2 to remove a CODEOWNERS printf statement. by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1054](https://togithub.com/ossf/scorecard-action/pull/1054) **Full Changelog**: https://github.com/ossf/scorecard-action/compare/v2.1.1...v2.1.2 ### [`v2.1.1`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.1.1) [Compare Source](https://togithub.com/ossf/scorecard-action/compare/v2.1.0...v2.1.1) #### Scorecard version This release use [Scorecard's v4.10.1](https://togithub.com/ossf/scorecard/releases/tag/v4.10.1) **Full Changelog**: https://github.com/ossf/scorecard-action/compare/v2.1.0...v2.1.1 ### [`v2.1.0`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.1.0) [Compare Source](https://togithub.com/ossf/scorecard-action/compare/v2.0.6...v2.1.0) #### What's Changed ##### Scorecard version This release uses [scorecard v4.10.0](https://togithub.com/ossf/scorecard/releases/tag/v4.10.0). ##### Improvements - Docker build workflow by [@naveensrinivasan](https://togithub.com/naveensrinivasan) in [https://github.com/ossf/scorecard-action/pull/981](https://togithub.com/ossf/scorecard-action/pull/981) - Use root user in distroless to support GitHub Actions by [@spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/994](https://togithub.com/ossf/scorecard-action/pull/994) - Disable pull_request_target by [@laurentsimon](https://togithub.com/laurentsimon) in [https://github.com/ossf/scorecard-action/pull/1031](https://togithub.com/ossf/scorecard-action/pull/1031) ##### Documentation - Add PAT section explaining risks by [@olivekl](https://togithub.com/olivekl) in [https://github.com/ossf/scorecard-action/pull/1024](https://togithub.com/ossf/scorecard-action/pull/1024) - Make the badge text easier to copy by [@rajbos](https://togithub.com/rajbos) in [https://github.com/ossf/scorecard-action/pull/1026](https://togithub.com/ossf/scorecard-action/pull/1026) #### New Contributors - [@joycebrum](https://togithub.com/joycebrum) made their first contribution in [https://github.com/ossf/scorecard-action/pull/984](https://togithub.com/ossf/scorecard-action/pull/984) - [@rajbos](https://togithub.com/rajbos) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1026](https://togithub.com/ossf/scorecard-action/pull/1026) **Full Changelog**: https://github.com/ossf/scorecard-action/compare/v2.0.6...v2.1.0 </details> <details> <summary>terraform-linters/tflint-ruleset-aws</summary> ### [`v0.21.2`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0212-2023-02-03) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.21.1...v0.21.2) ##### Enhancements - [#431](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/431) [#442](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/442): Update AWS provider/module and generated content ##### Chores - [#433](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/433) [#441](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/441): Bump golang.org/x/net from 0.2.0 to 0.5.0 - [#434](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/434): Bump goreleaser/goreleaser-action from 3 to 4 - [#435](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/435): Pass `GITHUB_TOKEN` to e2e test workflow ([@wata727](https://togithub.com/wata727)) - [#437](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/437): Bump github.com/terraform-linters/tflint-plugin-sdk from 0.14.0 to 0.15.0 ### [`v0.21.1`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0211-2022-12-12) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.21.0...v0.21.1) ##### BugFixes - [#430](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/430): `elasticache_cluster_previous_type`: fix panic on empty string ([@bendrucker](https://togithub.com/bendrucker)) ##### Chores - [#407](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/407): autogenerated maintenance ### [`v0.21.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0210-2022-12-05) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.20.0...v0.21.0) ##### Enhancements - [#403](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/403): autogenerated maintenance - [#405](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/405) [#406](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/406): Add assume role configuration to plugin config ([@kaito3desuyo](https://togithub.com/kaito3desuyo)) ### [`v0.20.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0200-2022-11-27) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.19.0...v0.20.0) ##### Enhancements - [#400](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/400): autogenerated maintenance ##### Chores - [#399](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/399): Bump up GoReleaser version in release.yml ([@wata727](https://togithub.com/wata727)) - [#401](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/401): Bump golang.org/x/net from 0.1.0 to 0.2.0 ### [`v0.19.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0190-2022-11-14) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.18.0...v0.19.0) ##### Enhancements - [#390](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/390): autogenerated maintenance ##### BugFixes - [#397](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/397): Prefer credentials in "plugin" blocks over "provider" blocks ([@wata727](https://togithub.com/wata727)) ##### Chores - [#394](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/394): Add signatures for keyless signing ([@wata727](https://togithub.com/wata727)) - [#395](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/395): Bump github.com/hashicorp/hcl/v2 from 2.14.1 to 2.15.0 - [#398](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/398): Bump up GoReleaser version ([@wata727](https://togithub.com/wata727)) ### [`v0.18.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0180-2022-10-24) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.17.1...v0.18.0) ##### Breaking Changes - [#367](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/367): remove hardcoded S3 region rule ([@PatMyron](https://togithub.com/PatMyron)) ##### Enhancements - [#382](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/382): autogenerated maintenance - [#388](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/388): Bump tflint-plugin-sdk to v0.14.0 ([@wata727](https://togithub.com/wata727)) ##### Chores - [#387](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/387): Bump github.com/dave/dst from 0.27.0 to 0.27.2 ### [`v0.17.1`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0171-2022-09-29) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.17.0...v0.17.1) ##### Enhancements - [#373](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/373): autogenerated maintenance - [#380](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/380): Update db instance type list with m6i and r6i ([@milestruecar](https://togithub.com/milestruecar)) ##### Chores - [#374](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/374): Bump github.com/google/go-cmp from 0.5.8 to 0.5.9 - [#377](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/377): Bump github.com/terraform-linters/tflint-plugin-sdk from 0.12.0 to 0.13.0 - [#378](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/378): Bump github.com/hashicorp/hcl/v2 from 2.14.0 to 2.14.1 ### [`v0.17.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0170-2022-09-08) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.16.1...v0.17.0) The minimum supported version of TFLint has changed in this version. TFLint v0.40.0+ is required for this plugin to work. ##### Breaking Changes - [#369](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/369): Bump tflint-plugin-sdk to v0.12.0 ([@wata727](https://togithub.com/wata727)) ##### Enhancements - [#366](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/366): autogenerated maintenance ##### Chores - [#365](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/365): Bump github.com/zclconf/go-cty from 1.10.0 to 1.11.0 - [#368](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/368): Bump github.com/hashicorp/hcl/v2 from 2.13.0 to 2.14.0 - [#371](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/371): build: Improve Go workflows ([@wata727](https://togithub.com/wata727)) ### [`v0.16.1`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0161-2022-08-27) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.16.0...v0.16.1) ##### Enhancements - [363](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/363): autogenerated maintenance ### [`v0.16.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0160-2022-08-14) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.15.0...v0.16.0) ##### Enhancements - [#358](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/358): autogenerated maintenance - Removed `aws_cloudwatch_metric_alarm_invalid_extended_statistic` rule - [#362](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/362): Lambda runtime deprecation updates ([@PatMyron](https://togithub.com/PatMyron)) ##### Chores - [#359](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/359): go 1.19 ([@PatMyron](https://togithub.com/PatMyron)) ### [`v0.15.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0150-2022-07-15) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.14.0...v0.15.0) ##### Enhancements - [#352](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/352): autogenerated maintenance - [#355](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/355): Add `aws_security_group_rule_invalid_protocol` rule ([@x-color](https://togithub.com/x-color)) - [#356](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/356): Add `aws_security_group_invalid_protocol` rule ([@x-color](https://togithub.com/x-color)) ##### Chores - [#354](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/354): Bump github.com/hashicorp/hcl/v2 from 2.12.0 to 2.13.0 ### [`v0.14.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0140-2022-05-31) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.13.4...v0.14.0) ##### Enhancements - [#342](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/342): feat: support provider aliases in deep checking ([@suzuki-shunsuke](https://togithub.com/suzuki-shunsuke)) - [#343](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/343): autogenerated maintenance ##### Chores - [#344](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/344): Bump github.com/terraform-linters/tflint-plugin-sdk from 0.10.1 to 0.11.0 - [#347](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/347): Bump goreleaser/goreleaser-action from 2 to 3 - [#351](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/351): Bump github.com/dave/dst from 0.26.2 to 0.27.0 ### [`v0.13.4`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0134-2022-05-05) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.13.3...v0.13.4) ##### Enhancements - [#336](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/336): autogenerated maintenance ##### Chores - [#338](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/338): Bump github.com/hashicorp/hcl/v2 from 2.11.1 to 2.12.0 - [#339](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/339): Bump github.com/google/go-cmp from 0.5.7 to 0.5.8 - [#340](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/340): Replace logger from the standard logger ([@wata727](https://togithub.com/wata727)) - [#341](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/341): Add E2E tests ([@wata727](https://togithub.com/wata727)) ### [`v0.13.3`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0133-2022-04-17) [Compare Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.13.2...v0.13.3) ##### Enhancements - [#324](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/324): autogenerated maintenance - [#335](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/335): Lambda runtime deprecation updates (python3.6) ([@PatMyron](https://togithub.com/PatMyron)) ##### Chores - [#328](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/328): chores: Remove snaker ([@wata727](https://togithub.com/wata727)) - [#329](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/329): Fix rule template for rule generator ([@wata727](https://togithub.com/wata727)) - [#330](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/330): Bump github.com/terraform-linters/tflint-plugin-sdk from 0.10.0 to 0.10.1 - [#333](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/333): style: format rules/api/rule.go.tmpl and run `go generate ./...` ([@suzuki-shunsuke](https://togithub.com/suzuki-shunsuke)) - [#334](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/334): Bump actions/setup-go from 2 to 3 </details> <details> <summary>Microsoft/TypeScript</summary> ### [`v4.9.5`](https://togithub.com/microsoft/TypeScript/releases/tag/v4.9.5): TypeScript 4.9.5 [Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v4.9.4...v4.9.5) For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-4-9/). Downloads are available on: - [npm](https://www.npmjs.com/package/typescript) - [NuGet package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild) #### Changes: - [`69e88ef`](https://togithub.com/Microsoft/TypeScript/commit/69e88ef5513a81acf69ec78f4af1f927da0d0584) Port ignore deprecations to 4.9 ([#52419](https://togithub.com/Microsoft/TypeScript/issues/52419)) - [`daf4e81`](https://togithub.com/Microsoft/TypeScript/commit/daf4e817a18def96b70ac34703b158ff0e6d58df) Port timestamp fix to 4.9 ([#52426](https://togithub.com/Microsoft/TypeScript/issues/52426)) ### [`v4.9.4`](https://togithub.com/microsoft/TypeScript/releases/tag/v4.9.4): TypeScript 4.9.4 [Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v4.9.3...v4.9.4) For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-4-9). For the complete list of fixed issues, check out the - [fixed issues query for Typescript v4.9.4](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=is%3Aissue+milestone%3A%22TypeScript+4.9.4%22+is%3Aclosed+). Downloads are available on: - [npm](https://www.npmjs.com/package/typescript) - [NuGet package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild) ##### Changes: - [`e286821`](https://togithub.com/Microsoft/TypeScript/commit/e2868216f637e875a74c675845625eb15dcfe9a2) Bump version to 4.9.4 and LKG. - [`eb5419f`](https://togithub.com/Microsoft/TypeScript/commit/eb5419fc8d980859b98553586dfb5f40d811a745) Cherry-pick [#51704](https://togithub.com/Microsoft/TypeScript/issues/51704) to release 4.9 ([#51712](https://togithub.com/Microsoft/TypeScript/issues/51712)) - [`b4d382b`](https://togithub.com/Microsoft/TypeScript/commit/b4d382b9b12460adf2da4cc0d1429cf19f8dc8be) Cherry-pick changes for narrowing to tagged literal types. - [`e7a02f4`](https://togithub.com/Microsoft/TypeScript/commit/e7a02f43fce47e1a39259ada5460bcc33c8e98b5) Port of [#51626](https://togithub.com/Microsoft/TypeScript/issues/51626) and [#51689](https://togithub.com/Microsoft/TypeScript/issues/51689) to release-4.9 ([#51627](https://togithub.com/Microsoft/TypeScript/issues/51627)) - [`1727912`](https://togithub.com/Microsoft/TypeScript/commit/1727912f0437a7f367d90040fc4b0b4f3efd017a) Cherry-pick fix around `visitEachChild` to release-4.9. ([#51544](https://togithub.com/Microsoft/TypeScript/issues/51544)) This list of changes was [auto generated](https://typescript.visualstudio.com/cf7ac146-d525-443c-b23c-0d58337efebc/\_release?releaseId=117&\_a=release-summary). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/trunk-io/plugins).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Eli Schleifer <[email protected]>

Implement branch list using callbacks from exec function

3cd5238

cory-miller requested a review from a team as a code owner December 13, 2022 22:16

JoannaaKL reviewed Dec 14, 2022

View reviewed changes

dist/index.js

branch = branch.substr('refs/remotes/'.length);

}

result.push(branch);

if (!branch) {

Copy link

JoannaaKL Dec 14, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice!

JoannaaKL approved these changes Dec 14, 2022

View reviewed changes

vanZeben approved these changes Dec 14, 2022

View reviewed changes

Update critical vuln

e5d9d9f

Update qs license

816845a

vmjoseph approved these changes Dec 14, 2022

View reviewed changes

cory-miller merged commit 8856415 into main Dec 14, 2022

cory-miller deleted the users/cory-miller/branch-list-via-callbacks branch December 14, 2022 21:08

cory-miller mentioned this pull request Dec 14, 2022

"Refname 'pull/X/merge' is ambiguous" error on self hosted runner #786

Closed

vqvu mentioned this pull request Jan 6, 2023

Bump actions/checkout from 3.2.0 to 3.3.0 vqvu/home-assistant-green-button#42

Merged

rhysmdnz mentioned this pull request Jan 9, 2023

Bump actions/checkout from 3.2.0 to 3.3.0 rhysmdnz/nixos-config#5

Merged

vqvu mentioned this pull request Feb 27, 2023

Bump actions/checkout from 3.1.0 to 3.3.0 vqvu/home-assistant-addons#2

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Implement branch list using callbacks from exec function #1045

Implement branch list using callbacks from exec function #1045

cory-miller commented Dec 13, 2022 •

edited

Loading

JoannaaKL Dec 14, 2022

JoannaaKL left a comment

vanZeben left a comment

vmjoseph commented Dec 14, 2022

cory-miller commented Dec 14, 2022

Implement branch list using callbacks from exec function #1045

Implement branch list using callbacks from exec function #1045

Conversation

cory-miller commented Dec 13, 2022 • edited Loading

JoannaaKL Dec 14, 2022

Choose a reason for hiding this comment

JoannaaKL left a comment

Choose a reason for hiding this comment

vanZeben left a comment

Choose a reason for hiding this comment

vmjoseph commented Dec 14, 2022

cory-miller commented Dec 14, 2022

cory-miller commented Dec 13, 2022 •

edited

Loading