actions/create-github-app-token
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
70 Commits 10 Branches 73 Tags
v1.6.3
Commit Graph

70 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
semantic-release-bot f04aa94d10 build(release): 1.6.3 [skip ci] 
## [1.6.3](https://github.com/actions/create-github-app-token/compare/v1.6.2...v1.6.3) (2024-01-09)

### Bug Fixes

* **deps:** bump the production-dependencies group with 2 updates ([#94](https://github.com/actions/create-github-app-token/issues/94)) ([323044f](https://github.com/actions/create-github-app-token/commit/323044ff3180ac0ba3543efbe2b76ff90050e9b6)), closes [#562](https://github.com/actions/create-github-app-token/issues/562) [#557](https://github.com/actions/create-github-app-token/issues/557) [#562](https://github.com/actions/create-github-app-token/issues/562) [#560](https://github.com/actions/create-github-app-token/issues/560) [#559](https://github.com/actions/create-github-app-token/issues/559) [#558](https://github.com/actions/create-github-app-token/issues/558) [#557](https://github.com/actions/create-github-app-token/issues/557) [#553](https://github.com/actions/create-github-app-token/issues/553) [#552](https://github.com/actions/create-github-app-token/issues/552) [#551](https://github.com/actions/create-github-app-token/issues/551) [#75](https://github.com/actions/create-github-app-token/issues/75) [#75](https://github.com/actions/create-github-app-token/issues/75)
v1.6.3 		2024-01-09 22:21:09 +00:00
dependabot[bot] 323044ff31 fix(deps): bump the production-dependencies group with 2 updates (#94) 
Bumps the production-dependencies group with 2 updates:
[@octokit/auth-app](https://github.com/octokit/auth-app.js) and
[p-retry](https://github.com/sindresorhus/p-retry).

Updates `@octokit/auth-app` from 6.0.1 to 6.0.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/octokit/auth-app.js/releases"><code>@​octokit/auth-app</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v6.0.3</h2>
<h2><a
href="https://github.com/octokit/auth-app.js/compare/v6.0.2...v6.0.3">6.0.3</a>
(2024-01-09)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>dependencies:</strong> bump universal-github-app-jwt to
1.1.2 (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/562">#562</a>)
(<a
href="https://github.com/octokit/auth-app.js/commit/52346fed070b20580f2e7b6a8479d2b39a2e2c31">52346fe</a>)</li>
</ul>
<h2>v6.0.2</h2>
<h2><a
href="https://github.com/octokit/auth-app.js/compare/v6.0.1...v6.0.2">6.0.2</a>
(2023-12-18)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>types:</strong> update <code>Cache#get</code> to allow
<code>Promise</code> return type (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/557">#557</a>)
(<a
href="https://github.com/octokit/auth-app.js/commit/f5e57aa12e6e90d92496a065cdfb70542e0190b3">f5e57aa</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/octokit/auth-app.js/commit/52346fed070b20580f2e7b6a8479d2b39a2e2c31"><code>52346fe</code></a>
fix(dependencies): bump universal-github-app-jwt to 1.1.2 (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/562">#562</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/aa7d921e1dea74d1408ea96b5f5f04dd577e445e"><code>aa7d921</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/560">#560</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/cb73ca4c3596c1320dde94182752ad4af090e9ac"><code>cb73ca4</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/559">#559</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/5d261b118ba6ba84010fb81c0ecb1f383c3e635a"><code>5d261b1</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/558">#558</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/f5e57aa12e6e90d92496a065cdfb70542e0190b3"><code>f5e57aa</code></a>
fix(types): update <code>Cache#get</code> to allow <code>Promise</code>
return type (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/557">#557</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/5fdc2f19e08c96125d865ab235b926be096420e7"><code>5fdc2f1</code></a>
build(deps): lock file maintenance</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/dda3b52a17907a3d17fe000da9f046bd0e7258cf"><code>dda3b52</code></a>
ci(action): update github/codeql-action action to v3</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/8bbd972db1c79b9ed59099442cdb12a1e3dc8afa"><code>8bbd972</code></a>
immediate-response uses pull_request_target trigger (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/553">#553</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/28cdca80d090031d52f227cba6b904ae978c9190"><code>28cdca8</code></a>
chore(deps): update dependency prettier to v3.1.1 (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/552">#552</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/64eacb2776cae0f4626e92a3cda0e990a1fa2e21"><code>64eacb2</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/551">#551</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/octokit/auth-app.js/compare/v6.0.1...v6.0.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `p-retry` from 6.1.0 to 6.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sindresorhus/p-retry/releases">p-retry's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.0</h2>
<ul>
<li>Add <a
href="https://github.com/sindresorhus/p-retry#shouldretryerror"><code>shouldRetry</code></a>
option (<a
href="https://redirect.github.com/sindresorhus/p-retry/issues/75">#75</a>)
b993a96</li>
</ul>
<p><a
href="https://github.com/sindresorhus/p-retry/compare/v6.1.0...v6.2.0">https://github.com/sindresorhus/p-retry/compare/v6.1.0...v6.2.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sindresorhus/p-retry/commit/21a22dd094a54e0c364ddd4bcb91c2f88e2dd03c"><code>21a22dd</code></a>
6.2.0</li>
<li><a
href="https://github.com/sindresorhus/p-retry/commit/e7d8789d43a6d8b61e88eff1181f2895add6974c"><code>e7d8789</code></a>
Meta tweaks</li>
<li><a
href="https://github.com/sindresorhus/p-retry/commit/b993a96738c52b78f54dad605a0c4df4932d4f85"><code>b993a96</code></a>
Add <code>shouldRetry</code> option (<a
href="https://redirect.github.com/sindresorhus/p-retry/issues/75">#75</a>)</li>
<li>See full diff in <a
href="https://github.com/sindresorhus/p-retry/compare/v6.1.0...v6.2.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-09 14:20:33 -08:00
dependabot[bot] 936979e9ad build(deps-dev): bump the development-dependencies group with 4 updates 
Bumps the development-dependencies group with 4 updates:
[ava](https://github.com/avajs/ava),
[esbuild](https://github.com/evanw/esbuild),
[open-cli](https://github.com/sindresorhus/open-cli) and
[undici](https://github.com/nodejs/undici).

Updates `ava` from 5.3.1 to 6.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/avajs/ava/releases">ava's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Ensure watch mode works outside of its integration tests by <a
href="https://github.com/novemberborn"><code>@​novemberborn</code></a>
in <a
href="https://redirect.github.com/avajs/ava/pull/3273">avajs/ava#3273</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/avajs/ava/compare/v6.0.0...v6.0.1">https://github.com/avajs/ava/compare/v6.0.0...v6.0.1</a></p>
<h2>v6.0.0</h2>
<h2>Breaking Changes</h2>
<ul>
<li>
<p>AVA now requires Node.js versions 18.18, 20.8 or 21. Versions 14 and
16 are no longer supported. <a
href="https://redirect.github.com/avajs/ava/issues/3251">#3251</a> <a
href="https://redirect.github.com/avajs/ava/issues/3216">#3216</a></p>
</li>
<li>
<p>When tests finish, worker threads or child processes are no longer
exited through <code>proces.exit()</code>. If your test file does not
exit on its own, the test run will time out. <a
href="https://redirect.github.com/avajs/ava/issues/3260">#3260</a></p>
</li>
<li>
<p>Changes to watch mode <a
href="https://redirect.github.com/avajs/ava/issues/3218">#3218</a>:</p>
<ul>
<li>Watch mode can no longer be started via the
<code>ava.config.*</code> or <code>package.json</code>
configuration.</li>
<li>The <code>ignoredByWatcher</code> configuration has moved to the
<code>watchMode</code> object, under the <code>ignoreChanges</code>
key.</li>
<li>Watch mode now uses the built-in <a
href="https://nodejs.org/api/fs.html#fswatchfilename-options-listener"><code>fs.watch()</code></a>
in recursive mode. This is supported on Linux in Node.js 20 or newer,
and MacOS and Windows in Node.js 18 as well. There are <a
href="https://nodejs.org/api/fs.html#caveats">caveats</a> to keep in
mind.</li>
</ul>
</li>
<li>
<p>Failed assertions now throw, meaning that any subsequent code is not
executed. This also impacts the type definitions. <a
href="https://redirect.github.com/avajs/ava/issues/3246">#3246</a></p>
</li>
<li>
<p><a
href="https://nodejs.org/api/util.html#utiltypesisnativeerrorvalue">Only
native errors</a> are now considered errors by the
<code>t.throws()</code> and <code>t.throwsAsync()</code> assertions. <a
href="Object.create(https://github.com/avajs/ava/blob/HEAD/Error.prototype)"><code>Object.create(https://github.com/avajs/ava/blob/HEAD/Error.prototype)</code>
is <strong>not</strong> a native error</a>. <a
href="https://redirect.github.com/avajs/ava/issues/3229">#3229</a></p>
</li>
<li>
<p>Changes to modules loaded through the <code>require</code>
configuration <a
href="https://redirect.github.com/avajs/ava/issues/3184">#3184</a>:</p>
<ul>
<li>If such modules export a default function, this function is now
invoked.</li>
<li>Local files are loaded through <code>@ava/typescript</code> if
necessary.</li>
</ul>
</li>
</ul>
<h2>Improvements</h2>
<h3>Rewritten watcher</h3>
<p>The watcher has been rewritten. It’s now built on <a
href="https://nodejs.org/api/fs.html#fswatchfilename-options-listener"><code>fs.watch()</code></a>
in recursive mode.</p>
<p><a href="https://github.com/vercel/nft"><code>@vercel/nft</code></a>
is used to perform static dependency analysis, supporting ESM and CJS
imports for JavaScript &amp; TypeScript source files. This is a huge
improvement over the previous runtime tracking of CJS imports, which did
not support ESM.</p>
<p>Integration with <a
href="https://github.com/avajs/typescript"><code>@ava/typescript</code></a>
has been improved. The watcher can now detect a change to a TypeScript
source file, then wait for the corresponding build output to change
before re-running tests.</p>
<p>The ignoredByWatcher configuration has moved to the watchMode object,
under the ignoreChanges key.</p>
<p>See <a
href="https://redirect.github.com/avajs/ava/issues/3218">#3218</a> and
<a
href="https://redirect.github.com/avajs/ava/issues/3257">#3257</a>.</p>
<h3>Failed assertions now throw</h3>
<p>Assertions now throw a <code>TestFailure</code> error when they fail.
This error is not exported or documented and should not be used or
thrown manually. You cannot catch this error in order to recover from a
failure, use <code>t.try()</code> instead.</p>
<p>All assertions except for <code>t.throws()</code> and
<code>t.throwsAsync()</code> now return <code>true</code> when they
pass. This is useful for some of the assertions in TypeScript where they
can be used as a type guard.</p>
<p>Committing a failed <code>t.try()</code> result now also throws.</p>
<p>See <a
href="https://redirect.github.com/avajs/ava/issues/3246">#3246</a>.</p>
<h3><code>t.throws()</code> and <code>t.throwsAsync()</code> can now
expect any error</h3>
<p>By default, the thrown error (or rejection reason) must be a native
error. You can change the assertion to expect any kind of error by
setting <code>any: true</code> in the expectation object:</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/avajs/ava/commit/5975b602b771e0dc02382d24b65c5561bd5fc7ee"><code>5975b60</code></a>
6.0.1</li>
<li><a
href="https://github.com/avajs/ava/commit/32f282fc2163f9088803995536c2b461594e0d66"><code>32f282f</code></a>
Ensure watch mode works outside of its integration tests</li>
<li><a
href="https://github.com/avajs/ava/commit/cf7a2886bf2717cbb599d195279501be703998de"><code>cf7a288</code></a>
6.0.0</li>
<li><a
href="https://github.com/avajs/ava/commit/af5684dff58a79da862fa57fad0e946985f730a2"><code>af5684d</code></a>
Don't force-exit after tests have completed</li>
<li><a
href="https://github.com/avajs/ava/commit/88e433376a03e70ab5f9f3e7ed081f35708c99de"><code>88e4333</code></a>
Update dependencies &amp; other minor tweaks</li>
<li><a
href="https://github.com/avajs/ava/commit/cac1d1fe643865b31e42913988ca09f3d2017913"><code>cac1d1f</code></a>
Tweak README</li>
<li><a
href="https://github.com/avajs/ava/commit/0492d32863cda8aac032a45a3c29b56b47ba3b63"><code>0492d32</code></a>
Fix external assertions tests for Node.js 21</li>
<li><a
href="https://github.com/avajs/ava/commit/adbfcde981df1563a9c3ba7feb28516d00821470"><code>adbfcde</code></a>
Experimentally expose internal events for custom reporters</li>
<li><a
href="https://github.com/avajs/ava/commit/6790d50202cded442e80b1bd4316ec62ea852586"><code>6790d50</code></a>
Update memoize dependency</li>
<li><a
href="https://github.com/avajs/ava/commit/e07179bf4a238d5dd258e94f51fe92afe9dff08b"><code>e07179b</code></a>
Remove ability to select AVA 5 watcher</li>
<li>Additional commits viewable in <a
href="https://github.com/avajs/ava/compare/v5.3.1...v6.0.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `esbuild` from 0.19.8 to 0.19.11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/releases">esbuild's
releases</a>.</em></p>
<blockquote>
<h2>v0.19.11</h2>
<ul>
<li>
<p>Fix TypeScript-specific class transform edge case (<a
href="https://redirect.github.com/evanw/esbuild/issues/3559">#3559</a>)</p>
<p>The previous release introduced an optimization that avoided
transforming <code>super()</code> in the class constructor for
TypeScript code compiled with <code>useDefineForClassFields</code> set
to <code>false</code> if all class instance fields have no initializers.
The rationale was that in this case, all class instance fields are
omitted in the output so no changes to the constructor are needed.
However, if all of this is the case <em>and</em> there are
<code>#private</code> instance fields with initializers, those private
instance field initializers were still being moved into the constructor.
This was problematic because they were being inserted before the call to
<code>super()</code> (since <code>super()</code> is now no longer
transformed in that case). This release introduces an additional
optimization that avoids moving the private instance field initializers
into the constructor in this edge case, which generates smaller code,
matches the TypeScript compiler's output more closely, and avoids this
bug:</p>
<pre lang="ts"><code>// Original code
class Foo extends Bar {
  #private = 1;
  public: any;
  constructor() {
    super();
  }
}
<p>// Old output (with esbuild v0.19.9)
class Foo extends Bar {
constructor() {
super();
this.#private = 1;
}
#private;
}</p>
<p>// Old output (with esbuild v0.19.10)
class Foo extends Bar {
constructor() {
this.#private = 1;
super();
}
#private;
}</p>
<p>// New output
class Foo extends Bar {
#private = 1;
constructor() {
super();
}
}
</code></pre></p>
</li>
<li>
<p>Minifier: allow reording a primitive past a side-effect (<a
href="https://redirect.github.com/evanw/esbuild/issues/3568">#3568</a>)</p>
<p>The minifier previously allowed reordering a side-effect past a
primitive, but didn't handle the case of reordering a primitive past a
side-effect. This additional case is now handled:</p>
<pre lang="js"><code>// Original code
function f() {
  let x = false;
</code></pre>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/blob/main/CHANGELOG.md">esbuild's
changelog</a>.</em></p>
<blockquote>
<h2>0.19.11</h2>
<ul>
<li>
<p>Fix TypeScript-specific class transform edge case (<a
href="https://redirect.github.com/evanw/esbuild/issues/3559">#3559</a>)</p>
<p>The previous release introduced an optimization that avoided
transforming <code>super()</code> in the class constructor for
TypeScript code compiled with <code>useDefineForClassFields</code> set
to <code>false</code> if all class instance fields have no initializers.
The rationale was that in this case, all class instance fields are
omitted in the output so no changes to the constructor are needed.
However, if all of this is the case <em>and</em> there are
<code>#private</code> instance fields with initializers, those private
instance field initializers were still being moved into the constructor.
This was problematic because they were being inserted before the call to
<code>super()</code> (since <code>super()</code> is now no longer
transformed in that case). This release introduces an additional
optimization that avoids moving the private instance field initializers
into the constructor in this edge case, which generates smaller code,
matches the TypeScript compiler's output more closely, and avoids this
bug:</p>
<pre lang="ts"><code>// Original code
class Foo extends Bar {
  #private = 1;
  public: any;
  constructor() {
    super();
  }
}
<p>// Old output (with esbuild v0.19.9)
class Foo extends Bar {
constructor() {
super();
this.#private = 1;
}
#private;
}</p>
<p>// Old output (with esbuild v0.19.10)
class Foo extends Bar {
constructor() {
this.#private = 1;
super();
}
#private;
}</p>
<p>// New output
class Foo extends Bar {
#private = 1;
constructor() {
super();
}
}
</code></pre></p>
</li>
<li>
<p>Minifier: allow reording a primitive past a side-effect (<a
href="https://redirect.github.com/evanw/esbuild/issues/3568">#3568</a>)</p>
<p>The minifier previously allowed reordering a side-effect past a
primitive, but didn't handle the case of reordering a primitive past a
side-effect. This additional case is now handled:</p>
<pre lang="js"><code>// Original code
function f() {
</code></pre>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/evanw/esbuild/commit/6ee82255bdfdffef2de60827e9d35a425a7cbff6"><code>6ee8225</code></a>
publish 0.19.11 to npm</li>
<li><a
href="https://github.com/evanw/esbuild/commit/f8ae3af32f698e0be5c159a4ab5d77324d3f44d7"><code>f8ae3af</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3561">#3561</a>:
treeshaking of known <code>Symbol</code> instances</li>
<li><a
href="https://github.com/evanw/esbuild/commit/0811058e16e1416547ba9abbaf182916eaf259f5"><code>0811058</code></a>
switch define data to flags</li>
<li><a
href="https://github.com/evanw/esbuild/commit/f5f8ff895c4665b661ac6a49940e7bb7f012603b"><code>f5f8ff8</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3568">#3568</a>:
can reorder primitive past side-effect</li>
<li><a
href="https://github.com/evanw/esbuild/commit/914f6080c77cfe32a54888caa51ca6ea13873ce9"><code>914f608</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3558">#3558</a>:
put the <code>stop()</code> api call back</li>
<li><a
href="https://github.com/evanw/esbuild/commit/2aa166b623a0db059409e7ccf02ebc084fcb3abd"><code>2aa166b</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3559">#3559</a>:
fix recent class transform regression</li>
<li><a
href="https://github.com/evanw/esbuild/commit/55e1127a49db0c26f1abd97f1b180bbc728aa95a"><code>55e1127</code></a>
publish 0.19.10 to npm</li>
<li><a
href="https://github.com/evanw/esbuild/commit/d968af29c3e11b0de0776c0648548d8e298afc02"><code>d968af2</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3511">#3511</a>:
<code>@__NO_SIDE_EFFECTS__</code> with templates</li>
<li><a
href="https://github.com/evanw/esbuild/commit/00c4ebeb91a576dcf710b36ca8927a99efff1d37"><code>00c4ebe</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3546">#3546</a>:
don't transform <code>require</code> glob imports</li>
<li><a
href="https://github.com/evanw/esbuild/commit/e1b7050aa074da1a0a846a01b4a3c82857128944"><code>e1b7050</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3319">#3319</a>:
missing symbol usage in glob transform</li>
<li>Additional commits viewable in <a
href="https://github.com/evanw/esbuild/compare/v0.19.8...v0.19.11">compare
view</a></li>
</ul>
</details>
<br />

Updates `open-cli` from 7.2.0 to 8.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sindresorhus/open-cli/releases">open-cli's
releases</a>.</em></p>
<blockquote>
<h2>v8.0.0</h2>
<h3>Breaking</h3>
<ul>
<li>Require Node.js 18  bb32fe9</li>
</ul>
<p><a
href="https://github.com/sindresorhus/open-cli/compare/v7.2.0...v8.0.0">https://github.com/sindresorhus/open-cli/compare/v7.2.0...v8.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sindresorhus/open-cli/commit/9550e180641aa42fd7ceb15b7e43a568d10f806a"><code>9550e18</code></a>
8.0.0</li>
<li><a
href="https://github.com/sindresorhus/open-cli/commit/bb32fe985de2de228a212405f0ea4a5b8b972b84"><code>bb32fe9</code></a>
Require Node.js 18</li>
<li>See full diff in <a
href="https://github.com/sindresorhus/open-cli/compare/v7.2.0...v8.0.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `undici` from 5.28.2 to 6.2.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>perf: use tree by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2528">nodejs/undici#2528</a></li>
<li>chore: reduce dependencies by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2533">nodejs/undici#2533</a></li>
<li>Remove timers in agent.js by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2536">nodejs/undici#2536</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v6.2.0...v6.2.1">https://github.com/nodejs/undici/compare/v6.2.0...v6.2.1</a></p>
<h2>v6.2.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Remove FinalizationRegistry from Agent by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2530">nodejs/undici#2530</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v6.1.0...v6.2.0">https://github.com/nodejs/undici/compare/v6.1.0...v6.2.0</a></p>
<h2>v6.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: more sensible stack trace from dump error by <a
href="https://github.com/ronag"><code>@​ronag</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2503">nodejs/undici#2503</a></li>
<li>refactor: remove some node compat by <a
href="https://github.com/ronag"><code>@​ronag</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2502">nodejs/undici#2502</a></li>
<li>refactor: version cleanup by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2507">nodejs/undici#2507</a></li>
<li>perf(fetch): Improve fetch of detaurl by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2479">nodejs/undici#2479</a></li>
<li>feat: expose parseHeader by <a
href="https://github.com/ronag"><code>@​ronag</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2511">nodejs/undici#2511</a></li>
<li>perf(fetch): optimize call <code>dispatch</code> by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2493">nodejs/undici#2493</a></li>
<li>perf(util/parseHeaders): If the header name is buffer by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2501">nodejs/undici#2501</a></li>
<li>perf: twice faster method check by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2495">nodejs/undici#2495</a></li>
<li>refactor: remove Error.captureStackTrace by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2509">nodejs/undici#2509</a></li>
<li>perf: Improve processHeader by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2513">nodejs/undici#2513</a></li>
<li>perf: reduce <code>String#toLowerCase</code> call by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2516">nodejs/undici#2516</a></li>
<li>perf: optimize consumeEnd by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2510">nodejs/undici#2510</a></li>
<li>perf: reduce tst built time by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2517">nodejs/undici#2517</a></li>
<li>feat: allow customization of build environment by <a
href="https://github.com/khardix"><code>@​khardix</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2403">nodejs/undici#2403</a></li>
<li>fix: clear cache by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2519">nodejs/undici#2519</a></li>
<li>feat: Add resource timing entries for connection, request and
response by <a href="https://github.com/ToshB"><code>@​ToshB</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/2481">nodejs/undici#2481</a></li>
<li>Call fg.unregister() after a dispatcher is done, adds UNDICI_NO_FG
to… by <a href="https://github.com/mcollina"><code>@​mcollina</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/2527">nodejs/undici#2527</a></li>
<li>feat: expose headerNameToString by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2525">nodejs/undici#2525</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/khardix"><code>@​khardix</code></a> made
their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2403">nodejs/undici#2403</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v6.0.1...v6.1.0">https://github.com/nodejs/undici/compare/v6.0.1...v6.1.0</a></p>
<h2>v6.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: stream error timings by <a
href="https://github.com/ronag"><code>@​ronag</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2497">nodejs/undici#2497</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v6.0.0...v6.0.1">https://github.com/nodejs/undici/compare/v6.0.0...v6.0.1</a></p>
<h2>v6.0.0</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodejs/undici/commit/f51f917061aec737edfe635e52db5bccc6fc0ac6"><code>f51f917</code></a>
Bumped v6.2.1</li>
<li><a
href="https://github.com/nodejs/undici/commit/36e81319eb8920f5bccef60e172470b6dfb2734f"><code>36e8131</code></a>
Remove timers in agent.js (<a
href="https://redirect.github.com/nodejs/undici/issues/2536">#2536</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/5f4d435cbc0ec23d4f1d4ab65d1ef965087436a7"><code>5f4d435</code></a>
chore: reduce dependencies (<a
href="https://redirect.github.com/nodejs/undici/issues/2533">#2533</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/c5c6648a7d2097f9be4d1f7d06df9f158eff049d"><code>c5c6648</code></a>
perf: use tree (<a
href="https://redirect.github.com/nodejs/undici/issues/2528">#2528</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/0c4c4504852c71dac1a6eb8dfae0f2411b6f2fc6"><code>0c4c450</code></a>
Bumped v6.2.0</li>
<li><a
href="https://github.com/nodejs/undici/commit/59c2f3801c2619b808313f3d8727e8defd697123"><code>59c2f38</code></a>
Remove FinalizationRegistry from Agent (<a
href="https://redirect.github.com/nodejs/undici/issues/2530">#2530</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/250b89af0ae27b93aaacbb885e852636e2c78ce6"><code>250b89a</code></a>
Bumped v6.1.0</li>
<li><a
href="https://github.com/nodejs/undici/commit/38f2226718f8736bbb0d496f8b87618bcc78ddbc"><code>38f2226</code></a>
feat: expose headerNameToString (<a
href="https://redirect.github.com/nodejs/undici/issues/2525">#2525</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/974a85e9d423d0d3505adb39feef15434886f809"><code>974a85e</code></a>
Call fg.unregister() after a dispatcher is done, adds UNDICI_NO_FG to…
(<a
href="https://redirect.github.com/nodejs/undici/issues/2527">#2527</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/871baa74ec326518a3de3ee4591459e25617402e"><code>871baa7</code></a>
feat: Add resource timing entries for connection, request and response
(<a
href="https://redirect.github.com/nodejs/undici/issues/2481">#2481</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/nodejs/undici/compare/v5.28.2...v6.2.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-09 13:16:22 -08:00
semantic-release-bot 2986852ad8 build(release): 1.6.2 [skip ci] 
## [1.6.2](https://github.com/actions/create-github-app-token/compare/v1.6.1...v1.6.2) (2023-12-06)

### Bug Fixes

* handle clock skew ([#87](https://github.com/actions/create-github-app-token/issues/87)) ([495056a](https://github.com/actions/create-github-app-token/commit/495056a51509f267cd7262080a7bb618ad7b5d08))
v1.6.2 		2023-12-06 20:25:58 +00:00
Bo Anderson 495056a515 fix: handle clock skew (#87) 
GitHub's macOS runners for the past while have had some bad clock drift
which sometimes prevents this action from working with the error:

```console
'Issued at' claim ('iat') must be an Integer representing the time that the assertion was issued
```

`@octokit/auth-app` already has logic to handle this so we can defer to
that code.
 2023-12-06 12:25:27 -08:00
Steve Russo 8746053070 docs(README): fix use of deprecated arguments (#86) 
Using those fields that have an underscore (instead of a hyphen) cause
the following warnings if used:
```
Warning: Input 'app_id' has been deprecated with message: 'app_id' is deprecated and will be removed in a future version. Use 'app-id' instead.
Warning: Input 'private_key' has been deprecated with message: 'private_key' is deprecated and will be removed in a future version. Use 'private-key' instead.
```

So this PR just drops the last use of `app_id` and `private_key` from
the README in favor of `app-id` and `private-key`.
 2023-12-05 09:16:54 -08:00
semantic-release-bot 46e4a501e1 build(release): 1.6.1 [skip ci] 
## [1.6.1](https://github.com/actions/create-github-app-token/compare/v1.6.0...v1.6.1) (2023-12-01)

### Bug Fixes

* **deps:** bump dependencies([#84](https://github.com/actions/create-github-app-token/issues/84)) ([474769d](https://github.com/actions/create-github-app-token/commit/474769db88900a253a1c4aa9b4398d8a90c4cdab)), closes [#651](https://github.com/actions/create-github-app-token/issues/651) [#648](https://github.com/actions/create-github-app-token/issues/648) [#649](https://github.com/actions/create-github-app-token/issues/649) [#651](https://github.com/actions/create-github-app-token/issues/651) [#648](https://github.com/actions/create-github-app-token/issues/648) [#646](https://github.com/actions/create-github-app-token/issues/646)
v1.6.1 		2023-12-01 18:27:42 +00:00
dependabot[bot] 2e5cc74af2 build(deps-dev): bump the development-dependencies group with 3 updates (#85) 
Bumps the development-dependencies group with 3 updates:
[esbuild](https://github.com/evanw/esbuild),
[undici](https://github.com/nodejs/undici) and
[yaml](https://github.com/eemeli/yaml).

Updates `esbuild` from 0.19.5 to 0.19.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/releases">esbuild's
releases</a>.</em></p>
<blockquote>
<h2>v0.19.8</h2>
<ul>
<li>
<p>Add a treemap chart to esbuild's bundle analyzer (<a
href="https://redirect.github.com/evanw/esbuild/issues/2848">#2848</a>)</p>
<p>The bundler analyzer on esbuild's website (<a
href="https://esbuild.github.io/analyze/">https://esbuild.github.io/analyze/</a>)
now has a treemap chart type in addition to the two existing chart types
(sunburst and flame). This should be more familiar for people coming
from other similar tools, as well as make better use of large
screens.</p>
</li>
<li>
<p>Allow decorators after the <code>export</code> keyword (<a
href="https://redirect.github.com/evanw/esbuild/issues/104">#104</a>)</p>
<p>Previously esbuild's decorator parser followed the original behavior
of TypeScript's experimental decorators feature, which only allowed
decorators to come before the <code>export</code> keyword. However, the
upcoming JavaScript decorators feature also allows decorators to come
after the <code>export</code> keyword. And with TypeScript 5.0,
TypeScript now also allows experimental decorators to come after the
<code>export</code> keyword too. So esbuild now allows this as well:</p>
<pre lang="js"><code>// This old syntax has always been permitted:
@decorator export class Foo {}
@decorator export default class Foo {}
<p>// This new syntax is now permitted too:
export <a
href="https://github.com/decorator"><code>@​decorator</code></a> class
Foo {}
export default <a
href="https://github.com/decorator"><code>@​decorator</code></a> class
Foo {}
</code></pre></p>
<p>In addition, esbuild's decorator parser has been rewritten to fix
several subtle and likely unimportant edge cases with esbuild's parsing
of exports and decorators in TypeScript (e.g. TypeScript apparently does
automatic semicolon insertion after <code>interface</code> and
<code>export interface</code> but not after <code>export default
interface</code>).</p>
</li>
<li>
<p>Pretty-print decorators using the same whitespace as the original</p>
<p>When printing code containing decorators, esbuild will now try to
respect whether the original code contained newlines after the decorator
or not. This can make generated code containing many decorators much
more compact to read:</p>
<pre lang="js"><code>// Original code
class Foo {
  @a @b @c abc
  @x @y @z xyz
}
<p>// Old output
class Foo {
<a href="https://github.com/a"><code>@​a</code></a>
<a href="https://github.com/b"><code>@​b</code></a>
<a href="https://github.com/c"><code>@​c</code></a>
abc;
<a href="https://github.com/x"><code>@​x</code></a>
<a href="https://github.com/y"><code>@​y</code></a>
<a href="https://github.com/z"><code>@​z</code></a>
xyz;
}</p>
<p>// New output
class Foo {
<a href="https://github.com/a"><code>@​a</code></a> <a
href="https://github.com/b"><code>@​b</code></a> <a
href="https://github.com/c"><code>@​c</code></a> abc;
<a href="https://github.com/x"><code>@​x</code></a> <a
href="https://github.com/y"><code>@​y</code></a> <a
href="https://github.com/z"><code>@​z</code></a> xyz;
}
</code></pre></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/blob/main/CHANGELOG.md">esbuild's
changelog</a>.</em></p>
<blockquote>
<h2>0.19.8</h2>
<ul>
<li>
<p>Add a treemap chart to esbuild's bundle analyzer (<a
href="https://redirect.github.com/evanw/esbuild/issues/2848">#2848</a>)</p>
<p>The bundler analyzer on esbuild's website (<a
href="https://esbuild.github.io/analyze/">https://esbuild.github.io/analyze/</a>)
now has a treemap chart type in addition to the two existing chart types
(sunburst and flame). This should be more familiar for people coming
from other similar tools, as well as make better use of large
screens.</p>
</li>
<li>
<p>Allow decorators after the <code>export</code> keyword (<a
href="https://redirect.github.com/evanw/esbuild/issues/104">#104</a>)</p>
<p>Previously esbuild's decorator parser followed the original behavior
of TypeScript's experimental decorators feature, which only allowed
decorators to come before the <code>export</code> keyword. However, the
upcoming JavaScript decorators feature also allows decorators to come
after the <code>export</code> keyword. And with TypeScript 5.0,
TypeScript now also allows experimental decorators to come after the
<code>export</code> keyword too. So esbuild now allows this as well:</p>
<pre lang="js"><code>// This old syntax has always been permitted:
@decorator export class Foo {}
@decorator export default class Foo {}
<p>// This new syntax is now permitted too:
export <a
href="https://github.com/decorator"><code>@​decorator</code></a> class
Foo {}
export default <a
href="https://github.com/decorator"><code>@​decorator</code></a> class
Foo {}
</code></pre></p>
<p>In addition, esbuild's decorator parser has been rewritten to fix
several subtle and likely unimportant edge cases with esbuild's parsing
of exports and decorators in TypeScript (e.g. TypeScript apparently does
automatic semicolon insertion after <code>interface</code> and
<code>export interface</code> but not after <code>export default
interface</code>).</p>
</li>
<li>
<p>Pretty-print decorators using the same whitespace as the original</p>
<p>When printing code containing decorators, esbuild will now try to
respect whether the original code contained newlines after the decorator
or not. This can make generated code containing many decorators much
more compact to read:</p>
<pre lang="js"><code>// Original code
class Foo {
  @a @b @c abc
  @x @y @z xyz
}
<p>// Old output
class Foo {
<a href="https://github.com/a"><code>@​a</code></a>
<a href="https://github.com/b"><code>@​b</code></a>
<a href="https://github.com/c"><code>@​c</code></a>
abc;
<a href="https://github.com/x"><code>@​x</code></a>
<a href="https://github.com/y"><code>@​y</code></a>
<a href="https://github.com/z"><code>@​z</code></a>
xyz;
}</p>
<p>// New output
class Foo {
<a href="https://github.com/a"><code>@​a</code></a> <a
href="https://github.com/b"><code>@​b</code></a> <a
href="https://github.com/c"><code>@​c</code></a> abc;
<a href="https://github.com/x"><code>@​x</code></a> <a
href="https://github.com/y"><code>@​y</code></a> <a
href="https://github.com/z"><code>@​z</code></a> xyz;
}
</code></pre></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/evanw/esbuild/commit/e97bd6706c7aaddb3770ae31b164d7ccaec8056c"><code>e97bd67</code></a>
publish 0.19.8 to npm</li>
<li><a
href="https://github.com/evanw/esbuild/commit/65b305894dc8bb3bae8a2a2c88f2b461135ef13f"><code>65b3058</code></a>
mention the treemap in the release notes (<a
href="https://redirect.github.com/evanw/esbuild/issues/2848">#2848</a>)</li>
<li><a
href="https://github.com/evanw/esbuild/commit/16883d42eb631aac354104a80cc41446b983bdf9"><code>16883d4</code></a>
add whitespace change to release notes</li>
<li><a
href="https://github.com/evanw/esbuild/commit/7383d0dbff033ae2f954a080a77b267eede303f9"><code>7383d0d</code></a>
decorators: printing preserves newline-tail status</li>
<li><a
href="https://github.com/evanw/esbuild/commit/7edc83da67e9bf5bb217401debf0669a7011e8b8"><code>7edc83d</code></a>
reword an experimental decorators error message</li>
<li><a
href="https://github.com/evanw/esbuild/commit/f3d535262e3998d845d0f102b944ecd5a9efda57"><code>f3d5352</code></a>
remove a now-unused field</li>
<li><a
href="https://github.com/evanw/esbuild/commit/e7551893c099e101f9491e2b79851671db4cd441"><code>e755189</code></a>
ts: forbid regular decorators on <code>declare</code> fields</li>
<li><a
href="https://github.com/evanw/esbuild/commit/69c9e7f9fa91db641ecbcfad40b9fd6977522f8a"><code>69c9e7f</code></a>
allow decorators to come after <code>export</code> (<a
href="https://redirect.github.com/evanw/esbuild/issues/104">#104</a>)</li>
<li><a
href="https://github.com/evanw/esbuild/commit/7baefdb4ea471d453a880a18fef5217347cf9973"><code>7baefdb</code></a>
fix a panic with &quot;export default interface\n&quot;</li>
<li><a
href="https://github.com/evanw/esbuild/commit/a8313d2c5d1e7574de92b3aade60c5c84fd31c59"><code>a8313d2</code></a>
use &quot;check&quot; for decorator validation, not
&quot;guess&quot;</li>
<li>Additional commits viewable in <a
href="https://github.com/evanw/esbuild/compare/v0.19.5...v0.19.8">compare
view</a></li>
</ul>
</details>
<br />

Updates `undici` from 5.27.0 to 5.28.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v5.28.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: remove optional chainning for compatible with Nodejs12 and
below by <a href="https://github.com/bugb"><code>@​bugb</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2470">nodejs/undici#2470</a></li>
<li>fix: remove <code>node:</code> prefix by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2471">nodejs/undici#2471</a></li>
<li>perf: avoid Headers initialization by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2468">nodejs/undici#2468</a></li>
<li>fix: handle SharedArrayBuffer correctly by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2466">nodejs/undici#2466</a></li>
<li>fix: Add <code>null</code> type to <code>signal</code> in
<code>RequestInit</code> by <a
href="https://github.com/gebsh"><code>@​gebsh</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2455">nodejs/undici#2455</a></li>
<li>fix: correctly handle data URL with hashes. by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2475">nodejs/undici#2475</a></li>
<li>fix: check response for timinginfo allow flag by <a
href="https://github.com/ToshB"><code>@​ToshB</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2477">nodejs/undici#2477</a></li>
<li>Make call to onBodySent conditional in RetryHandler by <a
href="https://github.com/MzUgM"><code>@​MzUgM</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2478">nodejs/undici#2478</a></li>
<li>refactor: better integrity check by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2462">nodejs/undici#2462</a></li>
<li>fix: Added support for inline URL username:password proxy auth by <a
href="https://github.com/matt-way"><code>@​matt-way</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2473">nodejs/undici#2473</a></li>
<li>build(deps-dev): bump jsdom from 22.1.0 to 23.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2472">nodejs/undici#2472</a></li>
<li>build(deps-dev): bump sinon from 16.1.3 to 17.0.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2405">nodejs/undici#2405</a></li>
<li>build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2396">nodejs/undici#2396</a></li>
<li>build(deps): bump actions/setup-node from 3.8.1 to 4.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2395">nodejs/undici#2395</a></li>
<li>build(deps): bump step-security/harden-runner from 2.5.0 to 2.6.0 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/nodejs/undici/pull/2392">nodejs/undici#2392</a></li>
<li>build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2389">nodejs/undici#2389</a></li>
<li>build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2302">nodejs/undici#2302</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/bugb"><code>@​bugb</code></a> made their
first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2470">nodejs/undici#2470</a></li>
<li><a href="https://github.com/gebsh"><code>@​gebsh</code></a> made
their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2455">nodejs/undici#2455</a></li>
<li><a href="https://github.com/ToshB"><code>@​ToshB</code></a> made
their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2477">nodejs/undici#2477</a></li>
<li><a href="https://github.com/MzUgM"><code>@​MzUgM</code></a> made
their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2478">nodejs/undici#2478</a></li>
<li><a href="https://github.com/matt-way"><code>@​matt-way</code></a>
made their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2473">nodejs/undici#2473</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v5.28.1...v5.28.2">https://github.com/nodejs/undici/compare/v5.28.1...v5.28.2</a></p>
<h2>v5.28.1</h2>
<h2>What's Changed</h2>
<ul>
<li>perf: Improve <code>normalizeMethod</code> by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2456">nodejs/undici#2456</a></li>
<li>fix: dispatch error handling by <a
href="https://github.com/ronag"><code>@​ronag</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2459">nodejs/undici#2459</a></li>
<li>perf(request): optimize if headers are given by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2454">nodejs/undici#2454</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v5.28.0...v5.28.1">https://github.com/nodejs/undici/compare/v5.28.0...v5.28.1</a></p>
<h2>v5.28.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(parseHeaders): util.parseHeaders handle correctly array of
buffer… by <a
href="https://github.com/mdoria12"><code>@​mdoria12</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2398">nodejs/undici#2398</a></li>
<li>docs: add license to undici-types by <a
href="https://github.com/dancastillo"><code>@​dancastillo</code></a> in
<a
href="https://redirect.github.com/nodejs/undici/pull/2401">nodejs/undici#2401</a></li>
<li>perf: optimize Readable.dump by <a
href="https://github.com/ronag"><code>@​ronag</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2402">nodejs/undici#2402</a></li>
<li>perf(headers): Improve Headers by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2397">nodejs/undici#2397</a></li>
<li>test: re-enable conditional WPT Report for websockets by <a
href="https://github.com/panva"><code>@​panva</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2407">nodejs/undici#2407</a></li>
<li>fix: delay abort on 'close' by <a
href="https://github.com/ronag"><code>@​ronag</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2408">nodejs/undici#2408</a></li>
<li>refactor: use <code>substring</code> instead of <code>substr</code>
by <a href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2411">nodejs/undici#2411</a></li>
<li>add additional http2 test with fetch by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2419">nodejs/undici#2419</a></li>
<li>fix: HTTPToken check by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2410">nodejs/undici#2410</a></li>
<li>perf: optimize HeadersList.get by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2420">nodejs/undici#2420</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodejs/undici/commit/9a14e5f32a118fa93e769cc15ae8de9de552f2e4"><code>9a14e5f</code></a>
Bumped v5.28.2</li>
<li><a
href="https://github.com/nodejs/undici/commit/fcdfe878d792c4347b81179bc31a2d1b1f06e8fb"><code>fcdfe87</code></a>
build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 (<a
href="https://redirect.github.com/nodejs/undici/issues/2302">#2302</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/169c157f9a576e4422a20060f57db1dc4693b373"><code>169c157</code></a>
build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 (<a
href="https://redirect.github.com/nodejs/undici/issues/2389">#2389</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/97881779e6ba41d2fdbfe27b5c9cc0563dc60134"><code>9788177</code></a>
build(deps): bump step-security/harden-runner from 2.5.0 to 2.6.0 (<a
href="https://redirect.github.com/nodejs/undici/issues/2392">#2392</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/1f6d1597648d332c0705befec74387631d5df9ff"><code>1f6d159</code></a>
build(deps): bump actions/setup-node from 3.8.1 to 4.0.0 (<a
href="https://redirect.github.com/nodejs/undici/issues/2395">#2395</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/a393a86d09581945ce4e601d2359023e901b2dd0"><code>a393a86</code></a>
build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.1 (<a
href="https://redirect.github.com/nodejs/undici/issues/2396">#2396</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/ea2f606e6b101fcbc578a407c8d4f9d10d17756e"><code>ea2f606</code></a>
build(deps-dev): bump sinon from 16.1.3 to 17.0.1 (<a
href="https://redirect.github.com/nodejs/undici/issues/2405">#2405</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/80979edc78c458e87786e25194bc64ed0a2184b4"><code>80979ed</code></a>
build(deps-dev): bump jsdom from 22.1.0 to 23.0.0 (<a
href="https://redirect.github.com/nodejs/undici/issues/2472">#2472</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/08183ea1d25964de9eac3b9944b0c933fe693e6f"><code>08183ea</code></a>
fix: Added support for inline URL username:password proxy auth (<a
href="https://redirect.github.com/nodejs/undici/issues/2473">#2473</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/28759f406ff808afa7a102e9e248291123ef59cb"><code>28759f4</code></a>
refactor: better integrity check (<a
href="https://redirect.github.com/nodejs/undici/issues/2462">#2462</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/nodejs/undici/compare/v5.27.0...v5.28.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `yaml` from 2.3.3 to 2.3.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eemeli/yaml/releases">yaml's
releases</a>.</em></p>
<blockquote>
<h2>v2.3.4</h2>
<ul>
<li>Do not throw for carriage return in tag shorthand (<a
href="https://redirect.github.com/eemeli/yaml/issues/501">#501</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eemeli/yaml/commit/b7696fc001837a2e9d66ad78d7c04f47943daeca"><code>b7696fc</code></a>
2.3.4</li>
<li><a
href="https://github.com/eemeli/yaml/commit/4af74194f5e6964f0ce47aba42f9fa8a2389eb03"><code>4af7419</code></a>
fix: Carriage return in tag shorthand (<a
href="https://redirect.github.com/eemeli/yaml/issues/501">#501</a>)</li>
<li>See full diff in <a
href="https://github.com/eemeli/yaml/compare/v2.3.3...v2.3.4">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-01 10:27:09 -08:00
dependabot[bot] 474769db88 fix(deps): bump dependencies(#84) 
Bumps the production-dependencies group with 1 update:
[@octokit/request](https://github.com/octokit/request.js).

Updates `@octokit/request` from 8.1.4 to 8.1.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/octokit/request.js/releases"><code>@​octokit/request</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v8.1.6</h2>
<h2><a
href="https://github.com/octokit/request.js/compare/v8.1.5...v8.1.6">8.1.6</a>
(2023-11-22)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>integrate isPlainObject (<a
href="https://redirect.github.com/octokit/request.js/issues/651">#651</a>)
(<a
href="https://github.com/octokit/request.js/commit/2554219c5bd805635b0fd3f96578c4c3e3ab988b">2554219</a>)</li>
</ul>
<h2>v8.1.5</h2>
<h2><a
href="https://github.com/octokit/request.js/compare/v8.1.4...v8.1.5">8.1.5</a>
(2023-11-09)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>avoid <code>Unexpected end of JSON input</code> when response body
is empty (<a
href="https://redirect.github.com/octokit/request.js/issues/648">#648</a>)
(<a
href="https://github.com/octokit/request.js/commit/819cc3fe0efbe7e3ee2144e12819137cbed6b1b8">819cc3f</a>),
closes <a
href="https://redirect.github.com/octokit/request.js/issues/649">#649</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/octokit/request.js/commit/2554219c5bd805635b0fd3f96578c4c3e3ab988b"><code>2554219</code></a>
fix: integrate isPlainObject (<a
href="https://redirect.github.com/octokit/request.js/issues/651">#651</a>)</li>
<li><a
href="https://github.com/octokit/request.js/commit/e5d3577630804ce538b262a11cb7ebf97c663768"><code>e5d3577</code></a>
chore(deps): update dependency prettier to v3.1.0</li>
<li><a
href="https://github.com/octokit/request.js/commit/819cc3fe0efbe7e3ee2144e12819137cbed6b1b8"><code>819cc3f</code></a>
fix: avoid <code>Unexpected end of JSON input</code> when response body
is empty (<a
href="https://redirect.github.com/octokit/request.js/issues/648">#648</a>)</li>
<li><a
href="https://github.com/octokit/request.js/commit/5c1fcdfa07f087bffe86bff3c84c9855b744de5b"><code>5c1fcdf</code></a>
chore(deps): update dependency <code>@​types/node</code> to v20</li>
<li><a
href="https://github.com/octokit/request.js/commit/9cb39bac4fe6c09aa7764a19bbc981e6fbadf995"><code>9cb39ba</code></a>
ci(action): update actions/setup-node action to v4 (<a
href="https://redirect.github.com/octokit/request.js/issues/646">#646</a>)</li>
<li><a
href="https://github.com/octokit/request.js/commit/60ed27a678a01de32eed74d9a18ff89f45fcffaf"><code>60ed27a</code></a>
build(deps-dev): bump <code>@​babel/traverse</code> from 7.20.12 to
7.23.2</li>
<li>See full diff in <a
href="https://github.com/octokit/request.js/compare/v8.1.4...v8.1.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@octokit/request&package-manager=npm_and_yarn&previous-version=8.1.4&new-version=8.1.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-01 10:26:54 -08:00
semantic-release-bot e995b4e40a build(release): 1.6.0 [skip ci] 
# [1.6.0](https://github.com/actions/create-github-app-token/compare/v1.5.1...v1.6.0) (2023-11-16)

### Features

* add retry ([#79](https://github.com/actions/create-github-app-token/issues/79)) ([0f3b4d7](https://github.com/actions/create-github-app-token/commit/0f3b4d7df99b1af7cb8596ba4f855d6de4155aa5)), closes [#71](https://github.com/actions/create-github-app-token/issues/71)
v1.6.0 		2023-11-16 22:53:33 +00:00
Stephane Moser 0f3b4d7df9 feat: add retry (#79) 
resolves #71

- Add p-retry library
- Extract logic to new functions to improve the usage of retry logic
 2023-11-12 08:00:38 -08:00
Gregor Martynus 9769eb4076 build(.node-version): use latest LTS version (#78) 
this should resolve
https://github.com/actions/create-github-app-token/actions/runs/6741605908/job/18326430392
 2023-11-06 12:58:23 -08:00
Grant Birkinbine bb368d6a10 General Improvements (#70) 
# General Improvements

> This is a classic @GrantBirki drive-by PR 🚗

This pull request does the following:

- Lightly updates and formats a few existing Actions workflows
- Adds a new `package-check` workflow to validate the contents of the
`dist/` directory have been properly built
- Uses a `.node-version` file so that local development and Actions
remain on the same pinned version of node
- Adds status badges to the readme for visual effect ⭐ 🎨
 2023-11-02 22:23:07 -07:00
semantic-release-bot eaddb9eb7e build(release): 1.5.1 [skip ci] 
## [1.5.1](https://github.com/actions/create-github-app-token/compare/v1.5.0...v1.5.1) (2023-11-01)

### Bug Fixes

* **deps:** bump the production-dependencies group with 1 update ([#68](https://github.com/actions/create-github-app-token/issues/68)) ([6375dce](https://github.com/actions/create-github-app-token/commit/6375dcedb2ea16f4290923bb46ed8a00ea439cae))
v1.5.1 		2023-11-01 16:31:38 +00:00
dependabot[bot] 6375dcedb2 fix(deps): bump the production-dependencies group with 1 update (#68) 
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps the production-dependencies group with 1 update:
[@octokit/request](https://github.com/octokit/request.js).

<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/octokit/request.js/releases"><code>@​octokit/request</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v8.1.4</h2>
<h2><a
href="https://github.com/octokit/request.js/compare/v8.1.3...v8.1.4">8.1.4</a>
(2023-10-09)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><code>error.cause</code> from undici may be instance of Error (<a
href="https://redirect.github.com/octokit/request.js/issues/643">#643</a>)
(<a
href="https://github.com/octokit/request.js/commit/c67f902350384846f88d91196e7066daadc08357">c67f902</a>)</li>
</ul>
<h2>v8.1.3</h2>
<h2><a
href="https://github.com/octokit/request.js/compare/v8.1.2...v8.1.3">8.1.3</a>
(2023-10-06)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>surface 'cause' for undici network errors (<a
href="https://redirect.github.com/octokit/request.js/issues/642">#642</a>)
(<a
href="https://github.com/octokit/request.js/commit/7c9abfbe8413b513f877e56d966a0cddb7708bf3">7c9abfb</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/octokit/request.js/commit/c67f902350384846f88d91196e7066daadc08357"><code>c67f902</code></a>
fix: <code>error.cause</code> from undici may be instance of Error (<a
href="https://redirect.github.com/octokit/request.js/issues/643">#643</a>)</li>
<li><a
href="https://github.com/octokit/request.js/commit/7c9abfbe8413b513f877e56d966a0cddb7708bf3"><code>7c9abfb</code></a>
fix: surface 'cause' for undici network errors (<a
href="https://redirect.github.com/octokit/request.js/issues/642">#642</a>)</li>
<li><a
href="https://github.com/octokit/request.js/commit/1e7ea00c78b4b7c92c1a25cd0b669cce9e9650c3"><code>1e7ea00</code></a>
ci(action): update actions/add-to-project action to v0.5.0 (<a
href="https://redirect.github.com/octokit/request.js/issues/640">#640</a>)</li>
<li><a
href="https://github.com/octokit/request.js/commit/f0d3b513c34b4981d2b84f52006e843fdf121b66"><code>f0d3b51</code></a>
ci(action): Workflows have changed (<a
href="https://redirect.github.com/octokit/request.js/issues/639">#639</a>)</li>
<li><a
href="https://github.com/octokit/request.js/commit/f598d06cc21e3f28803b666b7e7340c7d5ca818e"><code>f598d06</code></a>
ci(action): update peter-evans/create-or-update-comment digest to
ddff993 (<a
href="https://redirect.github.com/octokit/request.js/issues/638">#638</a>)</li>
<li>See full diff in <a
href="https://github.com/octokit/request.js/compare/v8.1.2...v8.1.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@octokit/request&package-manager=npm_and_yarn&previous-version=8.1.2&new-version=8.1.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-01 09:31:01 -07:00
dependabot[bot] 9577d5145a build(deps-dev): bump the development-dependencies group with 3 updates (#69) 
Bumps the development-dependencies group with 3 updates:
[esbuild](https://github.com/evanw/esbuild),
[undici](https://github.com/nodejs/undici) and
[yaml](https://github.com/eemeli/yaml).

Updates `esbuild` from 0.19.4 to 0.19.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/releases">esbuild's
releases</a>.</em></p>
<blockquote>
<h2>v0.19.5</h2>
<ul>
<li>
<p>Fix a regression in 0.19.0 regarding <code>paths</code> in
<code>tsconfig.json</code> (<a
href="https://redirect.github.com/evanw/esbuild/issues/3354">#3354</a>)</p>
<p>The fix in esbuild version 0.19.0 to process
<code>tsconfig.json</code> aliases before the
<code>--packages=external</code> setting unintentionally broke an edge
case in esbuild's handling of certain <code>tsconfig.json</code> aliases
where there are multiple files with the same name in different
directories. This release adjusts esbuild's behavior for this edge case
so that it passes while still processing aliases before
<code>--packages=external</code>. Please read the linked issue for more
details.</p>
</li>
<li>
<p>Fix a CSS <code>font</code> property minification bug (<a
href="https://redirect.github.com/evanw/esbuild/issues/3452">#3452</a>)</p>
<p>This release fixes a bug where esbuild's CSS minifier didn't insert a
space between the font size and the font family in the <code>font</code>
CSS shorthand property in the edge case where the original source code
didn't already have a space and the leading string token was shortened
to an identifier:</p>
<pre lang="css"><code>/* Original code */
.foo { font: 16px&quot;Menlo&quot;; }
<p>/* Old output (with --minify) */
.foo{font:16pxMenlo}</p>
<p>/* New output (with --minify) */
.foo{font:16px Menlo}
</code></pre></p>
</li>
<li>
<p>Fix bundling CSS with asset names containing spaces (<a
href="https://redirect.github.com/evanw/esbuild/issues/3410">#3410</a>)</p>
<p>Assets referenced via CSS <code>url()</code> tokens may cause esbuild
to generate invalid output when bundling if the file name contains
spaces (e.g. <code>url(image 2.png)</code>). With this release, esbuild
will now quote all bundled asset references in <code>url()</code> tokens
to avoid this problem. This only affects assets loaded using the
<code>file</code> and <code>copy</code> loaders.</p>
</li>
<li>
<p>Fix invalid CSS <code>url()</code> tokens in <code>@import</code>
rules (<a
href="https://redirect.github.com/evanw/esbuild/issues/3426">#3426</a>)</p>
<p>In the future, CSS <code>url()</code> tokens may contain additional
stuff after the URL. This is irrelevant today as no CSS specification
does this. But esbuild previously had a bug where using these tokens in
an <code>@import</code> rule resulted in malformed output. This bug has
been fixed.</p>
</li>
<li>
<p>Fix <code>browser</code> + <code>false</code> + <code>type:
module</code> in <code>package.json</code> (<a
href="https://redirect.github.com/evanw/esbuild/issues/3367">#3367</a>)</p>
<p>The <code>browser</code> field in <code>package.json</code> allows
you to map a file to <code>false</code> to have it be treated as an
empty file when bundling for the browser. However, if
<code>package.json</code> contains <code>&quot;type&quot;:
&quot;module&quot;</code> then all <code>.js</code> files will be
considered ESM, not CommonJS. Importing a named import from an empty
CommonJS file gives you undefined, but importing a named export from an
empty ESM file is a build error. This release changes esbuild's
interpretation of these files mapped to <code>false</code> in this
situation from ESM to CommonJS to avoid generating build errors for
named imports.</p>
</li>
<li>
<p>Fix a bug in top-level await error reporting (<a
href="https://redirect.github.com/evanw/esbuild/issues/3400">#3400</a>)</p>
<p>Using <code>require()</code> on a file that contains <a
href="https://v8.dev/features/top-level-await">top-level await</a> is
not allowed because <code>require()</code> must return synchronously and
top-level await makes that impossible. You will get a build error if you
try to bundle code that does this with esbuild. This release fixes a bug
in esbuild's error reporting code for complex cases of this situation
involving multiple levels of imports to get to the module containing the
top-level await.</p>
</li>
<li>
<p>Update to Unicode 15.1.0</p>
<p>The character tables that determine which characters form valid
JavaScript identifiers have been updated from Unicode version 15.0.0 to
the newly-released Unicode version 15.1.0. I'm not putting an example in
the release notes because all of the new characters will likely just
show up as little squares since fonts haven't been updated yet. But you
can read <a
href="https://www.unicode.org/versions/Unicode15.1.0/#Summary">https://www.unicode.org/versions/Unicode15.1.0/#Summary</a>
for more information about the changes.</p>
<p>This upgrade was contributed by <a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/blob/main/CHANGELOG.md">esbuild's
changelog</a>.</em></p>
<blockquote>
<h2>0.19.5</h2>
<ul>
<li>
<p>Fix a regression in 0.19.0 regarding <code>paths</code> in
<code>tsconfig.json</code> (<a
href="https://redirect.github.com/evanw/esbuild/issues/3354">#3354</a>)</p>
<p>The fix in esbuild version 0.19.0 to process
<code>tsconfig.json</code> aliases before the
<code>--packages=external</code> setting unintentionally broke an edge
case in esbuild's handling of certain <code>tsconfig.json</code> aliases
where there are multiple files with the same name in different
directories. This release adjusts esbuild's behavior for this edge case
so that it passes while still processing aliases before
<code>--packages=external</code>. Please read the linked issue for more
details.</p>
</li>
<li>
<p>Fix a CSS <code>font</code> property minification bug (<a
href="https://redirect.github.com/evanw/esbuild/issues/3452">#3452</a>)</p>
<p>This release fixes a bug where esbuild's CSS minifier didn't insert a
space between the font size and the font family in the <code>font</code>
CSS shorthand property in the edge case where the original source code
didn't already have a space and the leading string token was shortened
to an identifier:</p>
<pre lang="css"><code>/* Original code */
.foo { font: 16px&quot;Menlo&quot;; }
<p>/* Old output (with --minify) */
.foo{font:16pxMenlo}</p>
<p>/* New output (with --minify) */
.foo{font:16px Menlo}
</code></pre></p>
</li>
<li>
<p>Fix bundling CSS with asset names containing spaces (<a
href="https://redirect.github.com/evanw/esbuild/issues/3410">#3410</a>)</p>
<p>Assets referenced via CSS <code>url()</code> tokens may cause esbuild
to generate invalid output when bundling if the file name contains
spaces (e.g. <code>url(image 2.png)</code>). With this release, esbuild
will now quote all bundled asset references in <code>url()</code> tokens
to avoid this problem. This only affects assets loaded using the
<code>file</code> and <code>copy</code> loaders.</p>
</li>
<li>
<p>Fix invalid CSS <code>url()</code> tokens in <code>@import</code>
rules (<a
href="https://redirect.github.com/evanw/esbuild/issues/3426">#3426</a>)</p>
<p>In the future, CSS <code>url()</code> tokens may contain additional
stuff after the URL. This is irrelevant today as no CSS specification
does this. But esbuild previously had a bug where using these tokens in
an <code>@import</code> rule resulted in malformed output. This bug has
been fixed.</p>
</li>
<li>
<p>Fix <code>browser</code> + <code>false</code> + <code>type:
module</code> in <code>package.json</code> (<a
href="https://redirect.github.com/evanw/esbuild/issues/3367">#3367</a>)</p>
<p>The <code>browser</code> field in <code>package.json</code> allows
you to map a file to <code>false</code> to have it be treated as an
empty file when bundling for the browser. However, if
<code>package.json</code> contains <code>&quot;type&quot;:
&quot;module&quot;</code> then all <code>.js</code> files will be
considered ESM, not CommonJS. Importing a named import from an empty
CommonJS file gives you undefined, but importing a named export from an
empty ESM file is a build error. This release changes esbuild's
interpretation of these files mapped to <code>false</code> in this
situation from ESM to CommonJS to avoid generating build errors for
named imports.</p>
</li>
<li>
<p>Fix a bug in top-level await error reporting (<a
href="https://redirect.github.com/evanw/esbuild/issues/3400">#3400</a>)</p>
<p>Using <code>require()</code> on a file that contains <a
href="https://v8.dev/features/top-level-await">top-level await</a> is
not allowed because <code>require()</code> must return synchronously and
top-level await makes that impossible. You will get a build error if you
try to bundle code that does this with esbuild. This release fixes a bug
in esbuild's error reporting code for complex cases of this situation
involving multiple levels of imports to get to the module containing the
top-level await.</p>
</li>
<li>
<p>Update to Unicode 15.1.0</p>
<p>The character tables that determine which characters form valid
JavaScript identifiers have been updated from Unicode version 15.0.0 to
the newly-released Unicode version 15.1.0. I'm not putting an example in
the release notes because all of the new characters will likely just
show up as little squares since fonts haven't been updated yet. But you
can read <a
href="https://www.unicode.org/versions/Unicode15.1.0/#Summary">https://www.unicode.org/versions/Unicode15.1.0/#Summary</a>
for more information about the changes.</p>
<p>This upgrade was contributed by <a
href="https://github.com/JLHwung"><code>@​JLHwung</code></a>.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/evanw/esbuild/commit/a7fcc43fdb6b6edc58f781fe96328f4867f4b33e"><code>a7fcc43</code></a>
publish 0.19.5 to npm</li>
<li><a
href="https://github.com/evanw/esbuild/commit/58708094af0ffa53f73c73eb9c0a821e5b6ed778"><code>5870809</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3367">#3367</a>:
ignore ESM flag for disabled modules</li>
<li><a
href="https://github.com/evanw/esbuild/commit/d5f397f6e5dc6dbb70d2d4bbc5cefe725c2c853c"><code>d5f397f</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3354">#3354</a>:
<code>tsconfig.json</code> regression with <code>paths</code></li>
<li><a
href="https://github.com/evanw/esbuild/commit/72b1e8b4b0d14f9774e427079aae00f5e19c73c4"><code>72b1e8b</code></a>
resolver: move <code>IsExternal</code> into <code>PathPair</code></li>
<li><a
href="https://github.com/evanw/esbuild/commit/b0eddeac5018aadd24736e7f9e64444e05e4e0d2"><code>b0eddea</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3400">#3400</a>:
bug in top-level await error reporting</li>
<li><a
href="https://github.com/evanw/esbuild/commit/47fc80bdb3e57d17dff5787589b764f1541f475b"><code>47fc80b</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3426">#3426</a>:
improve invalid <code>url()</code> token parsing</li>
<li><a
href="https://github.com/evanw/esbuild/commit/d6973b938e4622db0f692d6eac846af60f7515e2"><code>d6973b9</code></a>
css: fix url token backtracking with leading space</li>
<li><a
href="https://github.com/evanw/esbuild/commit/30a43ec794a1b71f37c645f1f1b915090d54bf3e"><code>30a43ec</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3410">#3410</a>:
quote asset references in url tokens</li>
<li><a
href="https://github.com/evanw/esbuild/commit/a579bd80c24de9dd2ebce352e378b0f798bb8ba3"><code>a579bd8</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3452">#3452</a>:
insert space in <code>font</code> when minifying</li>
<li><a
href="https://github.com/evanw/esbuild/commit/cd91337d87e4f53e388a5a66d24e791957165b24"><code>cd91337</code></a>
update go 1.20.7 =&gt; 1.20.10</li>
<li>Additional commits viewable in <a
href="https://github.com/evanw/esbuild/compare/v0.19.4...v0.19.5">compare
view</a></li>
</ul>
</details>
<br />

Updates `undici` from 5.26.2 to 5.27.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v5.27.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Use sets and reusable TextEncoder/TextDecoder instances by <a
href="https://github.com/kibertoad"><code>@​kibertoad</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2368">nodejs/undici#2368</a></li>
<li>feat: forward onRequestSent to handler by <a
href="https://github.com/ronag"><code>@​ronag</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2375">nodejs/undici#2375</a></li>
<li>skip bundle test on node 16 by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2377">nodejs/undici#2377</a></li>
<li>fix windows CI by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2379">nodejs/undici#2379</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v5.26.5...v5.27.0">https://github.com/nodejs/undici/compare/v5.26.5...v5.27.0</a></p>
<h2>v5.26.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Drop race condition in connect-timeout test by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2360">nodejs/undici#2360</a></li>
<li>Remove a couple of unnecessary async functions by <a
href="https://github.com/kibertoad"><code>@​kibertoad</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2367">nodejs/undici#2367</a></li>
<li>Update namespace type with Fetch exports by <a
href="https://github.com/Ethan-Arrowood"><code>@​Ethan-Arrowood</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/2361">nodejs/undici#2361</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v5.26.4...v5.26.5">https://github.com/nodejs/undici/compare/v5.26.4...v5.26.5</a></p>
<h2>v5.26.4</h2>
<h2>What's Changed</h2>
<ul>
<li>use esbuild define/hooks by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2342">nodejs/undici#2342</a></li>
<li>fix request's arrayBuffer returning uint8 instead of arraybuffer by
<a href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in
<a
href="https://redirect.github.com/nodejs/undici/pull/2344">nodejs/undici#2344</a></li>
<li>fix: skip readMore call if parser is null or undefined by <a
href="https://github.com/iiAku"><code>@​iiAku</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2346">nodejs/undici#2346</a></li>
<li>test: first attempt for flaky fix by <a
href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2337">nodejs/undici#2337</a></li>
<li>test: only include WebSocket in WPT Report where it's landed by <a
href="https://github.com/panva"><code>@​panva</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2351">nodejs/undici#2351</a></li>
<li>Update DispatchInterceptor.md by <a
href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2354">nodejs/undici#2354</a></li>
<li>fix: Avoid error for stream() being aborted by <a
href="https://github.com/BobNobrain"><code>@​BobNobrain</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2355">nodejs/undici#2355</a></li>
<li>fix names with esbuild by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2359">nodejs/undici#2359</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/iiAku"><code>@​iiAku</code></a> made
their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2346">nodejs/undici#2346</a></li>
<li><a href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> made
their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2354">nodejs/undici#2354</a></li>
<li><a
href="https://github.com/BobNobrain"><code>@​BobNobrain</code></a> made
their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2355">nodejs/undici#2355</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v5.26.3...v5.26.4">https://github.com/nodejs/undici/compare/v5.26.3...v5.26.4</a></p>
<h2>v5.26.3</h2>
<p>No release notes provided.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodejs/undici/commit/41c253d0c23fd1cf63b8033d8ab61c2cf13e8c6e"><code>41c253d</code></a>
5.27.0</li>
<li><a
href="https://github.com/nodejs/undici/commit/6df0fe04f0631203a2433d77895b6e1a1a13727a"><code>6df0fe0</code></a>
fix windows CI (<a
href="https://redirect.github.com/nodejs/undici/issues/2379">#2379</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/3ec35ee23a7f2693bd6f9f707f6a20dc6de7a6b0"><code>3ec35ee</code></a>
skip bundle test on node 16 (<a
href="https://redirect.github.com/nodejs/undici/issues/2377">#2377</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/67e714d0d55848a56616fa98394c207a835447c8"><code>67e714d</code></a>
feat: forward onRequestSent to handler (<a
href="https://redirect.github.com/nodejs/undici/issues/2375">#2375</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/8050ec0224a51d44f776364820e6a16112fb4781"><code>8050ec0</code></a>
Use sets and reusable TextEncoder/TextDecoder instances (<a
href="https://redirect.github.com/nodejs/undici/issues/2368">#2368</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/9197790ae0d015b40b75fd0c5cdb7420704b5272"><code>9197790</code></a>
Bumped v5.26.5</li>
<li><a
href="https://github.com/nodejs/undici/commit/c31bd88979c04e72ff5f2869b71c630720422ab8"><code>c31bd88</code></a>
Update namespace type with Fetch exports (<a
href="https://redirect.github.com/nodejs/undici/issues/2361">#2361</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/24db5d4eaf8b747e7c9bde4faf797943b6f73c8d"><code>24db5d4</code></a>
Remove a couple of unnecessary async functions (<a
href="https://redirect.github.com/nodejs/undici/issues/2367">#2367</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/63afd9b5e28380dc86de29ade69adaad7efcd231"><code>63afd9b</code></a>
Drop race condition in connect-timeout test (<a
href="https://redirect.github.com/nodejs/undici/issues/2360">#2360</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/dea70e27e4d14952eb7b96da021eb44d24d1159e"><code>dea70e2</code></a>
Bumped v5.26.4</li>
<li>Additional commits viewable in <a
href="https://github.com/nodejs/undici/compare/v5.26.2...v5.27.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `yaml` from 2.3.2 to 2.3.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eemeli/yaml/releases">yaml's
releases</a>.</em></p>
<blockquote>
<h2>v2.3.3</h2>
<ul>
<li>Do not throw error on malformed URI escape in tag (<a
href="https://redirect.github.com/eemeli/yaml/issues/498">#498</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eemeli/yaml/commit/e8576e852035900844d2cc2d502a2139a1610f48"><code>e8576e8</code></a>
2.3.3</li>
<li><a
href="https://github.com/eemeli/yaml/commit/3fb6c1f6310f728a5670ce5d63f610c65b520db9"><code>3fb6c1f</code></a>
chore: Refresh lockfile</li>
<li><a
href="https://github.com/eemeli/yaml/commit/69d881c96443b6cb9aa8d8f65cf615f4b1015b98"><code>69d881c</code></a>
fix: Do not throw error on malformed URI escape in tag (<a
href="https://redirect.github.com/eemeli/yaml/issues/498">#498</a>)</li>
<li>See full diff in <a
href="https://github.com/eemeli/yaml/compare/v2.3.2...v2.3.3">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gregor Martynus <39992+gr2m@users.noreply.github.com>
 2023-11-01 09:29:43 -07:00
dependabot[bot] 7f24dca8d7 build(deps): bump actions/setup-node from 3 to 4 (#67) 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3
to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2>What's Changed</h2>
<p>In scope of this release we changed version of node runtime for
action from node16 to node20 and updated dependencies in <a
href="https://redirect.github.com/actions/setup-node/pull/866">actions/setup-node#866</a></p>
<p>Besides, release contains such changes as:</p>
<ul>
<li>Upgrade actions/checkout to v4 by <a
href="https://github.com/gmembre-zenika"><code>@​gmembre-zenika</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/868">actions/setup-node#868</a></li>
<li>Update actions/checkout for documentation and yaml by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/876">actions/setup-node#876</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/gmembre-zenika"><code>@​gmembre-zenika</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/868">actions/setup-node#868</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v3...v4.0.0">https://github.com/actions/setup-node/compare/v3...v4.0.0</a></p>
<h2>v3.8.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Update semver by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/861">actions/setup-node#861</a></li>
<li>Update temp directory creation by <a
href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/859">actions/setup-node#859</a></li>
<li>Bump <code>@​babel/traverse</code> from 7.15.4 to 7.23.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/870">actions/setup-node#870</a></li>
<li>Add notice about binaries not being updated yet by <a
href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/872">actions/setup-node#872</a></li>
<li>Update toolkit cache and core by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
and <a
href="https://github.com/seongwon-privatenote"><code>@​seongwon-privatenote</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/875">actions/setup-node#875</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v3...v3.8.2">https://github.com/actions/setup-node/compare/v3...v3.8.2</a></p>
<h2>v3.8.1</h2>
<h2>What's Changed</h2>
<p>In scope of this release, the filter was removed within the
cache-save step by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/831">actions/setup-node#831</a>.
It is filtered and checked in the toolkit/cache library.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v3...v3.8.1">https://github.com/actions/setup-node/compare/v3...v3.8.1</a></p>
<h2>v3.8.0</h2>
<h2>What's Changed</h2>
<h3>Bug fixes:</h3>
<ul>
<li>Add check for existing paths by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/803">actions/setup-node#803</a></li>
<li>Resolve SymbolicLink by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/809">actions/setup-node#809</a></li>
<li>Change passing logic for cache input by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/816">actions/setup-node#816</a></li>
<li>Fix armv7 cache issue by <a
href="https://github.com/louislam"><code>@​louislam</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/794">actions/setup-node#794</a></li>
<li>Update check-dist workflow name by <a
href="https://github.com/sinchang"><code>@​sinchang</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/710">actions/setup-node#710</a></li>
</ul>
<h3>Feature implementations:</h3>
<ul>
<li>feat: handling the case where &quot;node&quot; is used for
tool-versions file. by <a
href="https://github.com/xytis"><code>@​xytis</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/812">actions/setup-node#812</a></li>
</ul>
<h3>Documentation changes:</h3>
<ul>
<li>Refer to semver package name in README.md by <a
href="https://github.com/olleolleolle"><code>@​olleolleolle</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/808">actions/setup-node#808</a></li>
</ul>
<h3>Update dependencies:</h3>
<ul>
<li>Update toolkit cache to fix zstd by <a
href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/804">actions/setup-node#804</a></li>
<li>Bump tough-cookie and <code>@​azure/ms-rest-js</code> by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/802">actions/setup-node#802</a></li>
<li>Bump semver from 6.1.2 to 6.3.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/807">actions/setup-node#807</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/8f152de45cc393bb48ce5d89d36b731f54556e65"><code>8f152de</code></a>
Update actions/checkout for documentation and yaml (<a
href="https://redirect.github.com/actions/setup-node/issues/876">#876</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/23755b521f87533c8ed7f8fb13674f9021579e34"><code>23755b5</code></a>
upgrade actions/checkout to v4 (<a
href="https://redirect.github.com/actions/setup-node/issues/868">#868</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/54534a2a9ba7308e8a8995af3104899e6a95b681"><code>54534a2</code></a>
Change node version for action to node20 (<a
href="https://redirect.github.com/actions/setup-node/issues/866">#866</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-node/compare/v3...v4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-node&package-manager=github_actions&previous-version=3&new-version=4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-11-01 09:24:56 -07:00
Parker Brown d2cdb754af docs(README): create tokens for multiple accounts (#63) 
Adds an example workflow to the README that shows how a matrix strategy can be used to create tokens for multiple user or organization accounts. Resolves #45.
 2023-10-16 22:43:07 +00:00
dependabot[bot] 3bb715c53d build(deps-dev): bump undici from 5.25.4 to 5.26.2 (#65) 
Bumps [undici](https://github.com/nodejs/undici) from 5.25.4 to 5.26.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v5.26.2</h2>
<p>Security Release, CVE-2023-45143.</p>
<h2>v5.26.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix publish undici-types once and for all! by <a
href="https://github.com/Ethan-Arrowood"><code>@​Ethan-Arrowood</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/2338">nodejs/undici#2338</a></li>
<li>Fix node detection omfg by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2341">nodejs/undici#2341</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v5.26.0...v5.26.1">https://github.com/nodejs/undici/compare/v5.26.0...v5.26.1</a></p>
<h2>v5.26.0</h2>
<h2>What's Changed</h2>
<ul>
<li>use npm install instead of npm ci by <a
href="https://github.com/Ethan-Arrowood"><code>@​Ethan-Arrowood</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/2309">nodejs/undici#2309</a></li>
<li>change default header to <code>node</code> by <a
href="https://github.com/Ethan-Arrowood"><code>@​Ethan-Arrowood</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/2310">nodejs/undici#2310</a></li>
<li>chore: change order of the pseudo-headers by <a
href="https://github.com/kyrylodolynskyi"><code>@​kyrylodolynskyi</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/2308">nodejs/undici#2308</a></li>
<li>fix: Agent.Options.factory should accept URL object or string as
parameter by <a
href="https://github.com/nicole0707"><code>@​nicole0707</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2295">nodejs/undici#2295</a></li>
<li>build(deps-dev): bump sinon from 15.2.0 to 16.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2312">nodejs/undici#2312</a></li>
<li>test: handle npm ignore-scripts settings by <a
href="https://github.com/panva"><code>@​panva</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2313">nodejs/undici#2313</a></li>
<li>feat: respect <code>--max-http-header-size</code> Node.js flag by <a
href="https://github.com/balazsorban44"><code>@​balazsorban44</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/2234">nodejs/undici#2234</a></li>
<li>fix(<a
href="https://redirect.github.com/nodejs/undici/issues/2311">#2311</a>):
End stream after body sent by <a
href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2314">nodejs/undici#2314</a></li>
<li>disallow setting host header in fetch by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2322">nodejs/undici#2322</a></li>
<li>[StepSecurity] ci: Harden GitHub Actions by <a
href="https://github.com/step-security-bot"><code>@​step-security-bot</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/2325">nodejs/undici#2325</a></li>
<li>fix fetch with coverage enabled by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2330">nodejs/undici#2330</a></li>
<li>Fix stuck when using http2 POST Buffer by <a
href="https://github.com/binsee"><code>@​binsee</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2336">nodejs/undici#2336</a></li>
<li>fix: 🏷️ add allowH2 to BuildOptions by <a
href="https://github.com/binsee"><code>@​binsee</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2334">nodejs/undici#2334</a></li>
<li>fix: 🐛 fix process http2 header by <a
href="https://github.com/binsee"><code>@​binsee</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2332">nodejs/undici#2332</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/kyrylodolynskyi"><code>@​kyrylodolynskyi</code></a>
made their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2308">nodejs/undici#2308</a></li>
<li><a
href="https://github.com/nicole0707"><code>@​nicole0707</code></a> made
their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2295">nodejs/undici#2295</a></li>
<li><a
href="https://github.com/balazsorban44"><code>@​balazsorban44</code></a>
made their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2234">nodejs/undici#2234</a></li>
<li><a href="https://github.com/binsee"><code>@​binsee</code></a> made
their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2336">nodejs/undici#2336</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v5.23.4...v5.26.0">https://github.com/nodejs/undici/compare/v5.23.4...v5.26.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/nodejs/undici/commits/v5.26.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=undici&package-manager=npm_and_yarn&previous-version=5.25.4&new-version=5.26.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/actions/create-github-app-token/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-16 10:37:48 -07:00
semantic-release-bot 9d97a4282b build(release): 1.5.0 [skip ci] 
# [1.5.0](https://github.com/actions/create-github-app-token/compare/v1.4.0...v1.5.0) (2023-10-06)

### Features

* use dash notation for inputs (deprecates underscore notation) ([#59](https://github.com/actions/create-github-app-token/issues/59)) ([7b1d2ae](https://github.com/actions/create-github-app-token/commit/7b1d2aef87b41884c03f2e69a0a422d5c69c5d72)), closes [#57](https://github.com/actions/create-github-app-token/issues/57) [/github.com/actions/create-github-app-token/issues/57#issuecomment-1751272252](https://github.com//github.com/actions/create-github-app-token/issues/57/issues/issuecomment-1751272252)
v1.5.0 		2023-10-06 20:42:48 +00:00
Gregor Martynus d21ec768fd ci(release): do not persist credentials when checking out (#62) 2023-10-06 13:42:08 -07:00
Gregor Martynus 998b8757ce ci(release): use local version (#60) 
follow up to
https://github.com/actions/create-github-app-token/pull/59#issuecomment-1751353971

---------

Co-authored-by: Parker Brown <17183625+parkerbxyz@users.noreply.github.com>
 2023-10-06 13:29:38 -07:00
Parker Brown b94a200224 docs: update skip-token-revoke input name (#61) 
This is a quick follow-up to #59. I was mid-review when it merged and
noticed one instance of `skip_token_revoke` in the README that didn't
get changed to `skip-token-revoke`. The PR merged just before I pushed a
commit to fix it.
 2023-10-06 13:19:45 -07:00
Clay Miller 7b1d2aef87 feat: use dash notation for inputs (deprecates underscore notation) (#59) 
Fixes #57 

This PR implements the 3-step plan proposed by @gr2m in
https://github.com/actions/create-github-app-token/issues/57#issuecomment-1751272252:

> 1. Support both input types
> 2. Log a deprecation warning for the old notation
> 3. Add a test for deprecations

Although this PR supports both input formats simultaneously, I opted
_not_ to document the old format in the updated README. That’s a
decision I’m happy to revisit, if y’all would prefer to have
documentation for both the old and new formats.
 2023-10-06 13:10:49 -07:00
Gregor Martynus bdb2377ad0 test: add coverage (#58) 2023-10-06 12:54:48 -07:00
Clay Miller 9b283559f1 test: integration tests for main.js (#56) 
Part of https://github.com/actions/create-github-app-token/issues/43

This PR adds tests for
[`main.js`](https://github.com/actions/create-github-app-token/blob/main/lib/main.js),
similar to [the tests that already exist for
`post.js`](https://github.com/actions/create-github-app-token/tree/main/tests).

Specifically, it tests that:
- `main` exits with an error when `GITHUB_REPOSITORY` is missing.
- `main` exits with an error when `GITHUB_REPOSITORY_OWNER` is missing.
- `main` successfully obtains a token when…
- …the `owner` and `repositories` inputs are set (and the latter is a
single repo).
- …the `owner` and `repositories` inputs are set (and the latter is a
list of repos).
- …the `owner` input is set (to an org), but the `repositories` input
isn’t set.
- …the `owner` input is set (to a user), but the `repositories` input
isn’t set.
  - …the `owner` input is not set, but the `repositories` input is set.
  - …neither the `owner` nor `repositories` input is set.

❧

Architecturally, in order to keep individual tests concise, this PR adds
`tests/main.js`, which:
- sets commonly-used inputs, environment variables, and mocks, then
- calls a callback function that can edit the variables and add
additional mocks, then
- runs `main.js` itself.

The `tests/main-token-get-*.test.js` test files run `tests/main.js` with
various scenario-specific callback functions.
 2023-10-06 12:39:35 -07:00
semantic-release-bot 8210939678 build(release): 1.4.0 [skip ci] 
# [1.4.0](https://github.com/actions/create-github-app-token/compare/v1.3.0...v1.4.0) (2023-10-06)

### Features

* Add a `skip_token_revoke` input for configuring token revocation ([#54](https://github.com/actions/create-github-app-token/issues/54)) ([9ec88c4](https://github.com/actions/create-github-app-token/commit/9ec88c41eef7052418d233d147c59fbdce19c56f)), closes [1#L46-L47](https://github.com/1/issues/L46-L47) [1#L132](https://github.com/1/issues/L132)
v1.4.0 		2023-10-06 16:11:28 +00:00
Clay Miller 9ec88c41ee feat: Add a skip_token_revoke input for configuring token revocation (#54) 
Fixes https://github.com/actions/create-github-app-token/issues/55

Currently, `actions/create-github-app-token` always/unconditionally
revokes the installation access token in a `post` step, at the
completion of the current job. This prevents tokens from being used in
other jobs.

This PR makes this behavior configurable:
- When the `skip-token-revoke` input is not specified (i.e. by default),
the token is revoked in a `post` step (i.e. the current behavior).
- When the `skip-token-revoke` input is set to a truthy value (e.g.
`"true"`[^1]), the token is not revoked in a `post` step.

This PR adds a test for the `skip-token-revoke: "true"` case.

This is configurable in other app token actions, e.g.
[tibdex/github-app-token](https://github.com/tibdex/github-app-token/blob/3eb77c7243b85c65e84acfa93fdbac02fb6bd532/README.md?plain=1#L46-L47)
and
[wow-actions/use-app-token](https://github.com/wow-actions/use-app-token/blob/cd772994fc762f99cf291f308797341327a49b0c/README.md?plain=1#L132).

[^1]: Note that `"false"` is also truthy: `Boolean("false")` is `true`.
If we think that’ll potentially confuse folks, I can require
`skip-token-revoke` to be set explicitly to `"true"`.
 2023-10-06 09:10:49 -07:00
semantic-release-bot d400084c45 build(release): 1.3.0 [skip ci] 
# [1.3.0](https://github.com/actions/create-github-app-token/compare/v1.2.2...v1.3.0) (2023-10-04)

### Features

* support tokens scoped to multiple repositories within organization ([#46](https://github.com/actions/create-github-app-token/issues/46)) ([20fd863](https://github.com/actions/create-github-app-token/commit/20fd86373fdcbeffde8b73b17ebb3a7a62c6c407))
v1.3.0 		2023-10-04 05:29:18 +00:00
Tim Reimherr 20fd86373f feat: support tokens scoped to multiple repositories within organization (#46) 
Co-authored-by: Gregor Martynus <39992+gr2m@users.noreply.github.com>
Co-authored-by: Parker Brown <17183625+parkerbxyz@users.noreply.github.com>
 2023-10-03 22:28:48 -07:00
semantic-release-bot 5804f049e1 build(release): 1.2.2 [skip ci] 
## [1.2.2](https://github.com/actions/create-github-app-token/compare/v1.2.1...v1.2.2) (2023-10-02)

### Bug Fixes

* **deps:** bump the production-dependencies group with 3 updates ([#51](https://github.com/actions/create-github-app-token/issues/51)) ([6d98b25](https://github.com/actions/create-github-app-token/commit/6d98b259d9c6bef17db279eb4aefbbd031400ba4)), closes [#1511](https://github.com/actions/create-github-app-token/issues/1511) [#535](https://github.com/actions/create-github-app-token/issues/535) [#535](https://github.com/actions/create-github-app-token/issues/535) [#533](https://github.com/actions/create-github-app-token/issues/533) [#531](https://github.com/actions/create-github-app-token/issues/531) [#530](https://github.com/actions/create-github-app-token/issues/530) [#524](https://github.com/actions/create-github-app-token/issues/524) [#637](https://github.com/actions/create-github-app-token/issues/637) [#637](https://github.com/actions/create-github-app-token/issues/637) [#631](https://github.com/actions/create-github-app-token/issues/631) [#626](https://github.com/actions/create-github-app-token/issues/626)
v1.2.2 		2023-10-02 04:28:50 +00:00
dependabot[bot] 84daa2c0f0 build(deps-dev): bump the development-dependencies group with 2 updates (#52) 
Bumps the development-dependencies group with 2 updates:
[esbuild](https://github.com/evanw/esbuild) and
[undici](https://github.com/nodejs/undici).

Updates `esbuild` from 0.19.2 to 0.19.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/releases">esbuild's
releases</a>.</em></p>
<blockquote>
<h2>v0.19.4</h2>
<ul>
<li>
<p>Fix printing of JavaScript decorators in tricky cases (<a
href="https://redirect.github.com/evanw/esbuild/issues/3396">#3396</a>)</p>
<p>This release fixes some bugs where esbuild's pretty-printing of
JavaScript decorators could incorrectly produced code with a syntax
error. The problem happened because esbuild sometimes substitutes
identifiers for other expressions in the pretty-printer itself, but the
decision about whether to wrap the expression or not didn't account for
this. Here are some examples:</p>
<pre lang="js"><code>// Original code
import { constant } from './constants.js'
import { imported } from 'external'
import { undef } from './empty.js'
class Foo {
  @constant()
  @imported()
  @undef()
  foo
}
<p>// Old output (with --bundle --format=cjs --packages=external
--minify-syntax)
var import_external = require(&quot;external&quot;);
var Foo = class {
<a href="https://github.com/123"><code>@​123</code></a>()
@(0, import_external.imported)()
@(void 0)()
foo;
};</p>
<p>// New output (with --bundle --format=cjs --packages=external
--minify-syntax)
var import_external = require(&quot;external&quot;);
var Foo = class {
@(123())
@((0, import_external.imported)())
@((void 0)())
foo;
};
</code></pre></p>
</li>
<li>
<p>Allow pre-release versions to be passed to <code>target</code> (<a
href="https://redirect.github.com/evanw/esbuild/issues/3388">#3388</a>)</p>
<p>People want to be able to pass version numbers for unreleased
versions of node (which have extra stuff after the version numbers) to
esbuild's <code>target</code> setting and have esbuild do something
reasonable with them. These version strings are of course not present in
esbuild's internal feature compatibility table because an unreleased
version has not been released yet (by definition). With this release,
esbuild will now attempt to accept these version strings passed to
<code>target</code> and do something reasonable with them.</p>
</li>
</ul>
<h2>v0.19.3</h2>
<ul>
<li>
<p>Fix <code>list-style-type</code> with the <code>local-css</code>
loader (<a
href="https://redirect.github.com/evanw/esbuild/issues/3325">#3325</a>)</p>
<p>The <code>local-css</code> loader incorrectly treated all identifiers
provided to <code>list-style-type</code> as a custom local identifier.
That included identifiers such as <code>none</code> which have special
meaning in CSS, and which should not be treated as custom local
identifiers. This release fixes this bug:</p>
<pre lang="css"><code>/* Original code */
ul { list-style-type: none }
<p>/* Old output (with --loader=local-css) */
</code></pre></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/blob/main/CHANGELOG.md">esbuild's
changelog</a>.</em></p>
<blockquote>
<h2>0.19.4</h2>
<ul>
<li>
<p>Fix printing of JavaScript decorators in tricky cases (<a
href="https://redirect.github.com/evanw/esbuild/issues/3396">#3396</a>)</p>
<p>This release fixes some bugs where esbuild's pretty-printing of
JavaScript decorators could incorrectly produced code with a syntax
error. The problem happened because esbuild sometimes substitutes
identifiers for other expressions in the pretty-printer itself, but the
decision about whether to wrap the expression or not didn't account for
this. Here are some examples:</p>
<pre lang="js"><code>// Original code
import { constant } from './constants.js'
import { imported } from 'external'
import { undef } from './empty.js'
class Foo {
  @constant()
  @imported()
  @undef()
  foo
}
<p>// Old output (with --bundle --format=cjs --packages=external
--minify-syntax)
var import_external = require(&quot;external&quot;);
var Foo = class {
<a href="https://github.com/123"><code>@​123</code></a>()
@(0, import_external.imported)()
@(void 0)()
foo;
};</p>
<p>// New output (with --bundle --format=cjs --packages=external
--minify-syntax)
var import_external = require(&quot;external&quot;);
var Foo = class {
@(123())
@((0, import_external.imported)())
@((void 0)())
foo;
};
</code></pre></p>
</li>
<li>
<p>Allow pre-release versions to be passed to <code>target</code> (<a
href="https://redirect.github.com/evanw/esbuild/issues/3388">#3388</a>)</p>
<p>People want to be able to pass version numbers for unreleased
versions of node (which have extra stuff after the version numbers) to
esbuild's <code>target</code> setting and have esbuild do something
reasonable with them. These version strings are of course not present in
esbuild's internal feature compatibility table because an unreleased
version has not been released yet (by definition). With this release,
esbuild will now attempt to accept these version strings passed to
<code>target</code> and do something reasonable with them.</p>
</li>
</ul>
<h2>0.19.3</h2>
<ul>
<li>
<p>Fix <code>list-style-type</code> with the <code>local-css</code>
loader (<a
href="https://redirect.github.com/evanw/esbuild/issues/3325">#3325</a>)</p>
<p>The <code>local-css</code> loader incorrectly treated all identifiers
provided to <code>list-style-type</code> as a custom local identifier.
That included identifiers such as <code>none</code> which have special
meaning in CSS, and which should not be treated as custom local
identifiers. This release fixes this bug:</p>
<pre lang="css"><code>/* Original code */
ul { list-style-type: none }
</code></pre>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/evanw/esbuild/commit/a75b16ec09e76a050cea8ad43588172dc297784d"><code>a75b16e</code></a>
publish 0.19.4 to npm</li>
<li><a
href="https://github.com/evanw/esbuild/commit/65a4439ff7c469ffc654f497fe3dee6bb1fa2ddb"><code>65a4439</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3396">#3396</a>:
js decorator pretty-printing bugs</li>
<li><a
href="https://github.com/evanw/esbuild/commit/6ad177c55bb5ea6f47cf741487308ee612c75222"><code>6ad177c</code></a>
add some js decorator printing tests</li>
<li><a
href="https://github.com/evanw/esbuild/commit/0e1696fdce7cd97d2d500358b69a4051f1417585"><code>0e1696f</code></a>
ignore <code>TP</code> in data from caniuse-lite</li>
<li><a
href="https://github.com/evanw/esbuild/commit/e7bf735c440c3e7ecc1b59826071ff6891f1691f"><code>e7bf735</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3390">#3390</a>:
allow <code>using</code> disposable functions (<a
href="https://redirect.github.com/evanw/esbuild/issues/3391">#3391</a>)</li>
<li><a
href="https://github.com/evanw/esbuild/commit/24bea0e759553755f73583c4d79c40d8a8bbf975"><code>24bea0e</code></a>
update <code>compat-table</code> (note: regexp unicode 15.1)</li>
<li><a
href="https://github.com/evanw/esbuild/commit/ea9c644db3c95cd264fa12f6d85fd67daabb51eb"><code>ea9c644</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3388">#3388</a>:
do something with pre-release versions</li>
<li><a
href="https://github.com/evanw/esbuild/commit/673ad10ff752486aa90749b63ebeb952c29106a1"><code>673ad10</code></a>
publish 0.19.3 to npm</li>
<li><a
href="https://github.com/evanw/esbuild/commit/6402f110e30d034d19a5f0410d3f5c6fdf86900b"><code>6402f11</code></a>
basic support for parsing import attributes</li>
<li><a
href="https://github.com/evanw/esbuild/commit/7ece5567511b25fa559082a8fd9aef8c23db66a1"><code>7ece556</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3322">#3322</a>:
avoid temporaries before <code>&quot;use strict&quot;</code></li>
<li>Additional commits viewable in <a
href="https://github.com/evanw/esbuild/compare/v0.19.2...v0.19.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `undici` from 5.23.0 to 5.25.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v5.25.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Add Khaf to releasers by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2276">nodejs/undici#2276</a></li>
<li>fix: fix request with readable mode is object by <a
href="https://github.com/killagu"><code>@​killagu</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2279">nodejs/undici#2279</a></li>
<li>fix loading websockets when node is built w/ --without-ssl by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2282">nodejs/undici#2282</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/killagu"><code>@​killagu</code></a> made
their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2279">nodejs/undici#2279</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v5.25.1...v5.25.2">https://github.com/nodejs/undici/compare/v5.25.1...v5.25.2</a></p>
<h2>v5.25.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Add publish types script by <a
href="https://github.com/Ethan-Arrowood"><code>@​Ethan-Arrowood</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/2273">nodejs/undici#2273</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v5.25.0...v5.25.1">https://github.com/nodejs/undici/compare/v5.25.0...v5.25.1</a></p>
<h2>v5.25.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: h2 without body by <a
href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2258">nodejs/undici#2258</a></li>
<li>ci: remove duplicated runs by <a
href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2265">nodejs/undici#2265</a></li>
<li>improve documentation of timeouts by making the units clear in all
places by <a href="https://github.com/mcfedr"><code>@​mcfedr</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/2266">nodejs/undici#2266</a></li>
<li>expose websocket in node bundle by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2217">nodejs/undici#2217</a></li>
<li>test: fix Fetch/HTTP2 tests by <a
href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2263">nodejs/undici#2263</a></li>
<li>fix undici when node is built with --without-ssl by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2272">nodejs/undici#2272</a></li>
<li>fix: Fix type definition for Client Interceptors by <a
href="https://github.com/ComradeCow"><code>@​ComradeCow</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2269">nodejs/undici#2269</a></li>
<li>Fix http2 agent by <a
href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2275">nodejs/undici#2275</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/ComradeCow"><code>@​ComradeCow</code></a> made
their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/2269">nodejs/undici#2269</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v5.24.0...v5.25.0">https://github.com/nodejs/undici/compare/v5.24.0...v5.25.0</a></p>
<h2>v5.24.0</h2>
<h2>Notable Changes</h2>
<ul>
<li>feat: Add H2 support by <a
href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2061">nodejs/undici#2061</a></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>build(deps): bump step-security/harden-runner from 2.4.1 to 2.5.0 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/nodejs/undici/pull/2203">nodejs/undici#2203</a></li>
<li>better stack trace for body.json by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2215">nodejs/undici#2215</a></li>
<li>allow http &amp; https websocket urls by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2218">nodejs/undici#2218</a></li>
<li>build(deps-dev): bump <code>@​sinonjs/fake-timers</code> from 10.3.0
to 11.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2221">nodejs/undici#2221</a></li>
<li>fix: pass ProxyAgent proxy status code error by <a
href="https://github.com/NBNGaming"><code>@​NBNGaming</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2162">nodejs/undici#2162</a></li>
<li>fix failing test by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2223">nodejs/undici#2223</a></li>
<li>docs: update MockPool.md intercept method description by <a
href="https://github.com/capaj"><code>@​capaj</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2220">nodejs/undici#2220</a></li>
<li>Update wpts by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2226">nodejs/undici#2226</a></li>
<li>build(deps): bump github/codeql-action from 2.21.2 to 2.21.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2240">nodejs/undici#2240</a></li>
<li>build(deps): bump actions/setup-node from 3.6.0 to 3.8.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2237">nodejs/undici#2237</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodejs/undici/commit/4013c4b8932e73728809e4106d5c9d9d40648031"><code>4013c4b</code></a>
Bumped v5.25.2</li>
<li><a
href="https://github.com/nodejs/undici/commit/b85ac789de76d95de6db7d442b31feed46c671ca"><code>b85ac78</code></a>
fix loading websockets when node is built w/ --without-ssl (<a
href="https://redirect.github.com/nodejs/undici/issues/2282">#2282</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/ba95ff6cf622a4ce8d6d9d42da22ebf9f15685a0"><code>ba95ff6</code></a>
fix: fix request with readable mode is object (<a
href="https://redirect.github.com/nodejs/undici/issues/2279">#2279</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/a73260339fec7852b1c9a067b342bad0b87b20ee"><code>a732603</code></a>
Add Khaf to releasers (<a
href="https://redirect.github.com/nodejs/undici/issues/2276">#2276</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/c86279c9bcf62fe28d124b124b91eb364d478a25"><code>c86279c</code></a>
undici-types@5.25.1</li>
<li><a
href="https://github.com/nodejs/undici/commit/e8a667452cb00bf46a3bb62ee0d5af61723fb62a"><code>e8a6674</code></a>
5.25.1</li>
<li><a
href="https://github.com/nodejs/undici/commit/5c2e597bd938ce99a0246f9dfbfac6d3f3a31be9"><code>5c2e597</code></a>
Add publish types script (<a
href="https://redirect.github.com/nodejs/undici/issues/2273">#2273</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/985b3816708512bafefa1544def183cc6d1536be"><code>985b381</code></a>
Bumped v5.25.0</li>
<li><a
href="https://github.com/nodejs/undici/commit/d1e867e1cddbfed6ee405c8d8872ed4f0c964689"><code>d1e867e</code></a>
Fix http2 agent (<a
href="https://redirect.github.com/nodejs/undici/issues/2275">#2275</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/4d7c319d67a73f7284216ac38e81be4f94f70cde"><code>4d7c319</code></a>
Fix type definition for Client Interceptors (<a
href="https://redirect.github.com/nodejs/undici/issues/2269">#2269</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/nodejs/undici/compare/v5.23.0...v5.25.2">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-01 21:28:18 -07:00
dependabot[bot] 6d98b259d9 fix(deps): bump the production-dependencies group with 3 updates (#51) 
Bumps the production-dependencies group with 3 updates:
[@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core),
[@octokit/auth-app](https://github.com/octokit/auth-app.js) and
[@octokit/request](https://github.com/octokit/request.js).

Updates `@actions/core` from 1.10.0 to 1.10.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md"><code>@​actions/core</code>'s
changelog</a>.</em></p>
<blockquote>
<h3>1.10.1</h3>
<ul>
<li>Fix error message reference in oidc utils <a
href="https://redirect.github.com/actions/toolkit/pull/1511">#1511</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/actions/toolkit/commits/HEAD/packages/core">compare
view</a></li>
</ul>
</details>
<br />

Updates `@octokit/auth-app` from 6.0.0 to 6.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/octokit/auth-app.js/releases"><code>@​octokit/auth-app</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v6.0.1</h2>
<h2><a
href="https://github.com/octokit/auth-app.js/compare/v6.0.0...v6.0.1">6.0.1</a>
(2023-09-23)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update dependency
<code>@​octokit/types</code> to v12 (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/535">#535</a>)
(<a
href="https://github.com/octokit/auth-app.js/commit/d7157719c2d28f9ffdfada61139b0d4984723a65">d715771</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/octokit/auth-app.js/commit/d7157719c2d28f9ffdfada61139b0d4984723a65"><code>d715771</code></a>
fix(deps): update dependency <code>@​octokit/types</code> to v12 (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/535">#535</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/62cfc5bbce931e056852e91bdc3d479e3e399881"><code>62cfc5b</code></a>
ci(action): update peter-evans/create-or-update-comment digest to
46da6c0</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/b1c796928a8d59af23749d06e1f75e5d047b28f8"><code>b1c7969</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/533">#533</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/f584646566c0de02e85cecf40015a44f15b22028"><code>f584646</code></a>
ci(action): update peter-evans/create-or-update-comment digest to
1f6c514</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/414bea3cc3bab71bc0148747678bddb0a4c6b9f9"><code>414bea3</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/531">#531</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/47e4bd1660c3faed2690ade1086ef96657e0b88a"><code>47e4bd1</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/530">#530</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/5d3973e9355ba5fb8c1c65f5710722a58d75dfbc"><code>5d3973e</code></a>
ci(action): update peter-evans/create-or-update-comment digest to
223779b</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/192bd894e4e2a71faf2e5996eb7287deb1ad7fdc"><code>192bd89</code></a>
ci(action): update peter-evans/create-or-update-comment digest to
46846e5</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/77cb45b6542ca1dd5d0086864e28fea0ddbe9297"><code>77cb45b</code></a>
ci(action): update actions/checkout action to v4</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/1c0d530c6b85890853b860b16f0c11e106bb676f"><code>1c0d530</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/524">#524</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/octokit/auth-app.js/compare/v6.0.0...v6.0.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `@octokit/request` from 8.1.1 to 8.1.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/octokit/request.js/releases"><code>@​octokit/request</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v8.1.2</h2>
<h2><a
href="https://github.com/octokit/request.js/compare/v8.1.1...v8.1.2">8.1.2</a>
(2023-09-23)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update dependency
<code>@​octokit/types</code> to v12 (<a
href="https://redirect.github.com/octokit/request.js/issues/637">#637</a>)
(<a
href="https://github.com/octokit/request.js/commit/8fa4d612ad80bdf4c4c7da0efd0d6ad47bb6978b">8fa4d61</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/octokit/request.js/commit/8fa4d612ad80bdf4c4c7da0efd0d6ad47bb6978b"><code>8fa4d61</code></a>
fix(deps): update dependency <code>@​octokit/types</code> to v12 (<a
href="https://redirect.github.com/octokit/request.js/issues/637">#637</a>)</li>
<li><a
href="https://github.com/octokit/request.js/commit/b4b18153458cdbeae099dcc072cac88d8e2a81c5"><code>b4b1815</code></a>
ci(action): update peter-evans/create-or-update-comment digest to
46da6c0</li>
<li><a
href="https://github.com/octokit/request.js/commit/77683b9dd783675622720e44d6e281d95eb86ab3"><code>77683b9</code></a>
ci(action): update peter-evans/create-or-update-comment digest to
1f6c514</li>
<li><a
href="https://github.com/octokit/request.js/commit/45f319bac6c1281e42e989f4b97cf45cf8e4cd40"><code>45f319b</code></a>
ci(action): update peter-evans/create-or-update-comment digest to
223779b</li>
<li><a
href="https://github.com/octokit/request.js/commit/d0a545f389d55a6677bd2ad4084fca7958ba9ade"><code>d0a545f</code></a>
ci(action): update peter-evans/create-or-update-comment digest to
46846e5 (<a
href="https://redirect.github.com/octokit/request.js/issues/631">#631</a>)</li>
<li><a
href="https://github.com/octokit/request.js/commit/1ba853ad70ba0c8e856f89628aa1df0e26aadc75"><code>1ba853a</code></a>
ci(action): update actions/checkout action to v4</li>
<li><a
href="https://github.com/octokit/request.js/commit/5f5c4bf1d7acb9670c5347051afb62f9453e7121"><code>5f5c4bf</code></a>
chore(deps): update dependency prettier to v3.0.3</li>
<li><a
href="https://github.com/octokit/request.js/commit/f964d3d249698d6fd656dd978876c8d84e20c09c"><code>f964d3d</code></a>
ci(action): update peter-evans/create-or-update-comment digest to
94ff342</li>
<li><a
href="https://github.com/octokit/request.js/commit/29edb28325de3a60442e15c7d45f20be9c4d350d"><code>29edb28</code></a>
ci(action): update peter-evans/create-or-update-comment digest to
8c21c80</li>
<li><a
href="https://github.com/octokit/request.js/commit/05eb0a9ab60922ea7b283082afb89798c4eb6108"><code>05eb0a9</code></a>
ci(action): update peter-evans/create-or-update-comment digest to
bb291f6 (<a
href="https://redirect.github.com/octokit/request.js/issues/626">#626</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/octokit/request.js/compare/v8.1.1...v8.1.2">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-01 21:28:07 -07:00
dependabot[bot] 3629f23f43 build(deps): bump actions/checkout from 3 to 4 (#53) 2023-10-01 21:27:42 -07:00
Gregor Martynus 4bb2d37925 ci(test): do not run end-to-end tests in PRs from forks (#48) 2023-09-21 16:34:10 -07:00
Gregor Martynus 9f83520638 ci(test): actually run integrration tests (#47) 2023-09-21 13:53:30 -07:00
Parker Brown 10f155294b test: integration tests (#40) 
Co-authored-by: Gregor Martynus <39992+gr2m@users.noreply.github.com>
 2023-09-05 08:32:55 -07:00
semantic-release-bot 49ce228ea7 build(release): 1.2.1 [skip ci] 
## [1.2.1](https://github.com/actions/create-github-app-token/compare/v1.2.0...v1.2.1) (2023-08-30)

### Bug Fixes

* **GHES:** respect `GITHUB_API_URL` when creating installation access token ([#38](https://github.com/actions/create-github-app-token/issues/38)) ([c08c5ac](https://github.com/actions/create-github-app-token/commit/c08c5ace340664df431bf7f11d51b61d92358c2b)), closes [#36](https://github.com/actions/create-github-app-token/issues/36)
v1.2.1 		2023-08-30 05:30:14 +00:00
Gregor Martynus c08c5ace34 fix(GHES): respect GITHUB_API_URL when creating installation access token (#38) 
Follow up to #36. I just wanted to do some refactoring but turns out I
missed to pass the custom `request` instance to `createAppAuth`. It will
fallback to the default `request` which does not respect
`GITHUB_API_URL`
 2023-08-29 22:29:41 -07:00
semantic-release-bot c72844caa4 build(release): 1.2.0 [skip ci] 
# [1.2.0](https://github.com/actions/create-github-app-token/compare/v1.1.5...v1.2.0) (2023-08-29)

### Features

* add GitHub Enterprise Server (GHES) support ([#36](https://github.com/actions/create-github-app-token/issues/36)) ([ede6c15](https://github.com/actions/create-github-app-token/commit/ede6c158812854da7c63aa6635138d168de14bea))
v1.2.0 		2023-08-29 23:14:09 +00:00
7Hazard ede6c15881 feat: add GitHub Enterprise Server (GHES) support (#36) 
This adds support for this action to be used in GitHub Enterprise
Server.

It sends request to the base url extracted from
[GITHUB_API_URL](https://docs.github.com/en/enterprise-server@3.10/actions/learn-github-actions/variables#default-environment-variables).

---------

Co-authored-by: Gregor Martynus <39992+gr2m@users.noreply.github.com>
 2023-08-29 16:13:34 -07:00
semantic-release-bot 17cde8a7d8 build(release): 1.1.5 [skip ci] 
## [1.1.5](https://github.com/actions/create-github-app-token/compare/v1.1.4...v1.1.5) (2023-08-28)

### Bug Fixes

* **release:** update version in `package.json` ([#35](https://github.com/actions/create-github-app-token/issues/35)) ([1dccc4c](https://github.com/actions/create-github-app-token/commit/1dccc4ccc6e1df7d6adc1bde339ce0d7a2ea7df7)), closes [#34](https://github.com/actions/create-github-app-token/issues/34)
v1.1.5 		2023-08-28 22:38:26 +00:00
Gregor Martynus 1dccc4ccc6 fix(release): update version in package.json (#35) 
closes #34

Co-authored-by: Parker Brown <17183625+parkerbxyz@users.noreply.github.com>
 2023-08-28 15:37:47 -07:00
semantic-release-bot 35d8ea9fdb build(release): 1.1.4 [skip ci] 
## [1.1.4](https://github.com/actions/create-github-app-token/compare/v1.1.3...v1.1.4) (2023-08-28)

### Bug Fixes

* **release:** build `dist/` before release ([#33](https://github.com/actions/create-github-app-token/issues/33)) ([9a6a017](https://github.com/actions/create-github-app-token/commit/9a6a017c104eb1b36533ee8195e814f567934ce8)), closes [#32](https://github.com/actions/create-github-app-token/issues/32)
v1.1.4 		2023-08-28 22:29:27 +00:00
Gregor Martynus 9a6a017c10 fix(release): build dist/ before release (#33) 
closes #32
 2023-08-28 15:28:55 -07:00
David Sanders 2540ed49e5 fix: check for token before revoking (#30) 
Check before trying to revoke the token, in case the token generation
failed. Otherwise the post step will throw an error.

---------

Co-authored-by: Gregor Martynus <39992+gr2m@users.noreply.github.com>
v1.1.3 		2023-08-28 15:14:31 -07:00
Josh Gross 5611f921d9 docs(README): clarify token masking (#29) 
With #13, this action is explicitly masking the token so we don't need to mention that we're relying on a specific format of GitHub tokens being masked by the runner.
 2023-08-25 21:51:50 -07:00
Parker Brown bc256c234b fix: mask the installation token in logs (#28) 
The runner will automatically mask GitHub token formats it recognizes,
but sometimes a new pattern rolls out before the runner is updated to
recognize it.
v1.1.2 		2023-08-25 11:59:01 -07:00
Parker Brown 04f8ace9a0 build(dependabot): group dependency updates by type and configure commit prefixes (#27) 
- Group production and development dependency updates
- Configure dependency update commit prefixes to release on production
dependency updates

  Dependabot commit messages before:

  - `build(deps): bump semver from 7.5.1 to 7.5.4`
  - `build(deps-dev): bump dotenv from 16.0.3 to 16.3.1`

  Dependabot commit messages after:

  - `fix(deps): bump semver from 7.5.1 to 7.5.4`
- `build(deps-dev): bump dotenv from 16.0.3 to 16.3.1` (no change to dev
dependencies)
 2023-08-25 09:01:54 -07:00
Parker Brown 4fd0ce7c29 ci(test): run on pull request and add concurrency configuration (#17) 
- Run test on pull requests to the main branch instead of on every push
- Cancel in-progress workflows if a PR is updated (i.e., a new commit is
pushed) and the same workflows are triggered to run again
- Rename step ID from `demo` to `test`

---------

Co-authored-by: Gregor Martynus <39992+gr2m@users.noreply.github.com>
 2023-08-24 15:30:49 -07:00