From a12345b47eeda1961779abf6dc8c61e3d38e6a65 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 1 Jul 2021 01:35:16 +0000
Subject: [PATCH] fix: upgrade @actions/core from 1.2.6 to 1.4.0

Snyk has created this PR to upgrade @actions/core from 1.2.6 to 1.4.0.

See this package in npm:
https://www.npmjs.com/package/@actions/core

See this project in Snyk:
https://app.snyk.io/org/alisco/project/f473b2f9-467e-437e-9832-7e3a486b5112?utm_source=github&utm_medium=upgrade-pr
---
 package-lock.json | 20 ++++++++------------
 package.json      |  2 +-
 2 files changed, 9 insertions(+), 13 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 41ad0adf1d..8194c1f291 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6,11 +6,11 @@
   "packages": {
     "": {
       "name": "codeql",
-      "version": "1.0.1",
+      "version": "1.0.3",
       "license": "MIT",
       "dependencies": {
         "@actions/artifact": "^0.5.1",
-        "@actions/core": "^1.2.6",
+        "@actions/core": "^1.4.0",
         "@actions/exec": "^1.0.1",
         "@actions/github": "^4.0.0",
         "@actions/http-client": "^1.0.8",
@@ -77,8 +77,9 @@
       }
     },
     "node_modules/@actions/core": {
-      "version": "1.2.6",
-      "license": "MIT"
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.4.0.tgz",
+      "integrity": "sha512-CGx2ilGq5i7zSLgiiGUtBCxhRRxibJYU6Fim0Q1Wg2aQL2LTnF27zbqZOrxfvFQ55eSBW0L8uVStgtKMpa0Qlg=="
     },
     "node_modules/@actions/exec": {
       "version": "1.0.1",
@@ -124,10 +125,6 @@
         "uuid": "^3.3.2"
       }
     },
-    "node_modules/@actions/tool-cache/node_modules/@actions/core": {
-      "version": "1.2.4",
-      "license": "MIT"
-    },
     "node_modules/@actions/tool-cache/node_modules/semver": {
       "version": "6.3.0",
       "license": "ISC",
@@ -5534,7 +5531,9 @@
       }
     },
     "@actions/core": {
-      "version": "1.2.6"
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.4.0.tgz",
+      "integrity": "sha512-CGx2ilGq5i7zSLgiiGUtBCxhRRxibJYU6Fim0Q1Wg2aQL2LTnF27zbqZOrxfvFQ55eSBW0L8uVStgtKMpa0Qlg=="
     },
     "@actions/exec": {
       "version": "1.0.1"
@@ -5573,9 +5572,6 @@
         "uuid": "^3.3.2"
       },
       "dependencies": {
-        "@actions/core": {
-          "version": "1.2.4"
-        },
         "semver": {
           "version": "6.3.0"
         },
diff --git a/package.json b/package.json
index 9eb0643462..3cda4fb83c 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,7 @@
   "license": "MIT",
   "dependencies": {
     "@actions/artifact": "^0.5.1",
-    "@actions/core": "^1.2.6",
+    "@actions/core": "^1.4.0",
     "@actions/exec": "^1.0.1",
     "@actions/github": "^4.0.0",
     "@actions/http-client": "^1.0.8",