Compare commits

...

20 Commits

Author SHA1 Message Date
Parker Brown c8ee3265db Create debug.yml 2024-07-25 16:18:55 -07:00
vleon1a 000e2a0d29 docs(readme): document how a Base64 private key could be decoded (#155)
Addressing this comment
https://github.com/actions/create-github-app-token/issues/42#issuecomment-2214599409

---------

Co-authored-by: Parker Brown <17183625+parkerbxyz@users.noreply.github.com>
2024-07-11 22:09:08 +00:00
沙漠之子 d0ac2addd1 docs(README): fix the git committer string and Configure git CLI examples (#151)
1. Fix the `git committer string` and `Configure git CLI` examples.
2. Formatting examples
3. Modify the get `<BOT USER ID>` comment and add a note that
[octokit/request-action](https://github.com/octokit/request-action) can
be used.

---------

Co-authored-by: Parker Brown <17183625+parkerbxyz@users.noreply.github.com>
2024-07-02 20:09:29 -07:00
dependabot[bot] 040c2598aa build(deps-dev): bump the development-dependencies group with 4 updates (#150)
Bumps the development-dependencies group with 4 updates:
[c8](https://github.com/bcoe/c8),
[esbuild](https://github.com/evanw/esbuild),
[execa](https://github.com/sindresorhus/execa) and
[yaml](https://github.com/eemeli/yaml).

Updates `c8` from 9.1.0 to 10.1.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/bcoe/c8/releases">c8's
releases</a>.</em></p>
<blockquote>
<h2>v10.1.2</h2>
<h2><a
href="https://github.com/bcoe/c8/compare/v10.1.1...v10.1.2">10.1.2</a>
(2024-06-13)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> make monocart-coverage-reports an optional
with meta defined (<a
href="https://github.com/bcoe/c8/commit/3b91fdaa0e5554a72f6e625af3a7254b0cb19e8c">3b91fda</a>)</li>
</ul>
<h2>v10.1.1</h2>
<h2><a
href="https://github.com/bcoe/c8/compare/v10.1.0...v10.1.1">10.1.1</a>
(2024-06-11)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>stop installing monocart-coverage-reports (<a
href="https://redirect.github.com/bcoe/c8/issues/535">#535</a>) (<a
href="https://github.com/bcoe/c8/commit/13979a76b5b44fc6758f350bae4cb3febd60d75e">13979a7</a>)</li>
</ul>
<h2>v10.1.0</h2>
<h2><a
href="https://github.com/bcoe/c8/compare/v10.0.0...v10.1.0">10.1.0</a>
(2024-06-11)</h2>
<h3>Features</h3>
<ul>
<li>add experimental monocart reports (<a
href="https://redirect.github.com/bcoe/c8/issues/521">#521</a>) (<a
href="https://github.com/bcoe/c8/commit/2e5e297ac024bf7af1bc72689b644e11d73eac89">2e5e297</a>)</li>
</ul>
<h2>v10.0.0</h2>
<h2><a
href="https://github.com/bcoe/c8/compare/v9.1.0...v10.0.0">10.0.0</a>
(2024-06-10)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li><strong>deps:</strong> Node 18 is now the minimum supported Node.js
version</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update test-exclude with new glob / minimatch
(<a href="https://redirect.github.com/bcoe/c8/issues/531">#531</a>) (<a
href="https://github.com/bcoe/c8/commit/e33cf30d0c44470f9c87553df487e2f27f58f4ac">e33cf30</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/bcoe/c8/blob/main/CHANGELOG.md">c8's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/bcoe/c8/compare/v10.1.1...v10.1.2">10.1.2</a>
(2024-06-13)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> make monocart-coverage-reports an optional
with meta defined (<a
href="https://github.com/bcoe/c8/commit/3b91fdaa0e5554a72f6e625af3a7254b0cb19e8c">3b91fda</a>)</li>
</ul>
<h2><a
href="https://github.com/bcoe/c8/compare/v10.1.0...v10.1.1">10.1.1</a>
(2024-06-11)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>stop installing monocart-coverage-reports (<a
href="https://redirect.github.com/bcoe/c8/issues/535">#535</a>) (<a
href="https://github.com/bcoe/c8/commit/13979a76b5b44fc6758f350bae4cb3febd60d75e">13979a7</a>)</li>
</ul>
<h2><a
href="https://github.com/bcoe/c8/compare/v10.0.0...v10.1.0">10.1.0</a>
(2024-06-11)</h2>
<h3>Features</h3>
<ul>
<li>add experimental monocart reports (<a
href="https://redirect.github.com/bcoe/c8/issues/521">#521</a>) (<a
href="https://github.com/bcoe/c8/commit/2e5e297ac024bf7af1bc72689b644e11d73eac89">2e5e297</a>)</li>
</ul>
<h2><a
href="https://github.com/bcoe/c8/compare/v9.1.0...v10.0.0">10.0.0</a>
(2024-06-10)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li><strong>deps:</strong> Node 18 is now the minimum supported Node.js
version</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update test-exclude with new glob / minimatch
(<a href="https://redirect.github.com/bcoe/c8/issues/531">#531</a>) (<a
href="https://github.com/bcoe/c8/commit/e33cf30d0c44470f9c87553df487e2f27f58f4ac">e33cf30</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/bcoe/c8/commit/ff146b4dde004c62651b57c33cedd8353c94c423"><code>ff146b4</code></a>
chore(main): release 10.1.2 (<a
href="https://redirect.github.com/bcoe/c8/issues/538">#538</a>)</li>
<li><a
href="https://github.com/bcoe/c8/commit/3b91fdaa0e5554a72f6e625af3a7254b0cb19e8c"><code>3b91fda</code></a>
fix(deps): make monocart-coverage-reports an optional with meta
defined</li>
<li><a
href="https://github.com/bcoe/c8/commit/e3560e1211718d361612457245e57e638b8001d2"><code>e3560e1</code></a>
chore(main): release 10.1.1 (<a
href="https://redirect.github.com/bcoe/c8/issues/536">#536</a>)</li>
<li><a
href="https://github.com/bcoe/c8/commit/13979a76b5b44fc6758f350bae4cb3febd60d75e"><code>13979a7</code></a>
fix: stop installing monocart-coverage-reports (<a
href="https://redirect.github.com/bcoe/c8/issues/535">#535</a>)</li>
<li><a
href="https://github.com/bcoe/c8/commit/15ac6905cd274fafce1abb9c52b0d430a78e7b1b"><code>15ac690</code></a>
chore(main): release 10.1.0 (<a
href="https://redirect.github.com/bcoe/c8/issues/533">#533</a>)</li>
<li><a
href="https://github.com/bcoe/c8/commit/96e869ff8c8ff279207865ccf71b605044405d32"><code>96e869f</code></a>
build(deps-dev): bump braces from 3.0.2 to 3.0.3 (<a
href="https://redirect.github.com/bcoe/c8/issues/534">#534</a>)</li>
<li><a
href="https://github.com/bcoe/c8/commit/2e5e297ac024bf7af1bc72689b644e11d73eac89"><code>2e5e297</code></a>
feat: add experimental monocart reports (<a
href="https://redirect.github.com/bcoe/c8/issues/521">#521</a>)</li>
<li><a
href="https://github.com/bcoe/c8/commit/dc38051b14a3df9ca09aeea098b2233bc015dd4a"><code>dc38051</code></a>
chore(main): release 10.0.0 (<a
href="https://redirect.github.com/bcoe/c8/issues/532">#532</a>)</li>
<li><a
href="https://github.com/bcoe/c8/commit/e33cf30d0c44470f9c87553df487e2f27f58f4ac"><code>e33cf30</code></a>
fix(deps)!: update test-exclude with new glob / minimatch (<a
href="https://redirect.github.com/bcoe/c8/issues/531">#531</a>)</li>
<li><a
href="https://github.com/bcoe/c8/commit/1eeeaebe659d0e3be143f52695d342b042241f59"><code>1eeeaeb</code></a>
doc(CONTRIBUTING): remove dead link, update broken link (<a
href="https://redirect.github.com/bcoe/c8/issues/526">#526</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/bcoe/c8/compare/v9.1.0...v10.1.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `esbuild` from 0.21.4 to 0.22.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/releases">esbuild's
releases</a>.</em></p>
<blockquote>
<h2>v0.22.0</h2>
<p><strong>This release deliberately contains backwards-incompatible
changes.</strong> To avoid automatically picking up releases like this,
you should either be pinning the exact version of <code>esbuild</code>
in your <code>package.json</code> file (recommended) or be using a
version range syntax that only accepts patch upgrades such as
<code>^0.21.0</code> or <code>~0.21.0</code>. See npm's documentation
about <a
href="https://docs.npmjs.com/cli/v6/using-npm/semver/">semver</a> for
more information.</p>
<ul>
<li>
<p>Omit packages from bundles by default when targeting node (<a
href="https://redirect.github.com/evanw/esbuild/issues/1874">#1874</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/2830">#2830</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/2846">#2846</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/2915">#2915</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/3145">#3145</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/3294">#3294</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/3323">#3323</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/3582">#3582</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/3809">#3809</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/3815">#3815</a>)</p>
<p>This breaking change is an experiment. People are commonly confused
when using esbuild to bundle code for node (i.e. for
<code>--platform=node</code>) because some packages may not be intended
for bundlers, and may use node-specific features that don't work with a
bundler. Even though esbuild's &quot;getting started&quot; instructions
say to use <code>--packages=external</code> to work around this problem,
many people don't read the documentation and don't do this, and are then
confused when it doesn't work. So arguably this is a bad default
behavior for esbuild to have if people keep tripping over this.</p>
<p>With this release, esbuild will now omit packages from the bundle by
default when the platform is <code>node</code> (i.e. the previous
behavior of <code>--packages=external</code> is now the default in this
case). <em>Note that your dependencies must now be present on the file
system when your bundle is run.</em> If you don't want this behavior,
you can do <code>--packages=bundle</code> to allow packages to be
included in the bundle (i.e. the previous default behavior). Note that
<code>--packages=bundle</code> doesn't mean all packages are bundled,
just that packages are allowed to be bundled. You can still exclude
individual packages from the bundle using <code>--external:</code> even
when <code>--packages=bundle</code> is present.</p>
<p>The <code>--packages=</code> setting considers all import paths that
&quot;look like&quot; package imports in the original source code to be
package imports. Specifically import paths that don't start with a path
segment of <code>/</code> or <code>.</code> or <code>..</code> are
considered to be package imports. The only two exceptions to this rule
are <a
href="https://nodejs.org/api/packages.html#subpath-imports">subpath
imports</a> (which start with a <code>#</code> character) and TypeScript
path remappings via <code>paths</code> and/or <code>baseUrl</code> in
<code>tsconfig.json</code> (which are applied first).</p>
</li>
<li>
<p>Drop support for older platforms (<a
href="https://redirect.github.com/evanw/esbuild/issues/3802">#3802</a>)</p>
<p>This release drops support for the following operating systems:</p>
<ul>
<li>Windows 7</li>
<li>Windows 8</li>
<li>Windows Server 2008</li>
<li>Windows Server 2012</li>
</ul>
<p>This is because the Go programming language dropped support for these
operating system versions in <a
href="https://go.dev/doc/go1.21#windows">Go 1.21</a>, and this release
updates esbuild from Go 1.20 to Go 1.22.</p>
<p>Note that this only affects the binary esbuild executables that are
published to the <code>esbuild</code> npm package. It's still possible
to compile esbuild's source code for these older operating systems. If
you need to, you can compile esbuild for yourself using an older version
of the Go compiler (before Go version 1.21). That might look something
like this:</p>
<pre><code>git clone https://github.com/evanw/esbuild.git
cd esbuild
go build ./cmd/esbuild
./esbuild.exe --version
</code></pre>
<p>In addition, this release increases the minimum required node version
for esbuild's JavaScript API from node 12 to node 18. Node 18 is the
oldest version of node that is still being supported (see node's <a
href="https://nodejs.org/en/about/previous-releases">release
schedule</a> for more information). This increase is because of an
incompatibility between the JavaScript that the Go compiler generates
for the <code>esbuild-wasm</code> package and versions of node before
node 17.4 (specifically the <code>crypto.getRandomValues</code>
function).</p>
</li>
<li>
<p>Update <code>await using</code> behavior to match TypeScript</p>
<p>TypeScript 5.5 subtly changes the way <code>await using</code>
behaves. This release updates esbuild to match these changes in
TypeScript. You can read more about these changes in <a
href="https://redirect.github.com/microsoft/TypeScript/pull/58624">microsoft/TypeScript#58624</a>.</p>
</li>
<li>
<p>Allow <code>es2024</code> as a target environment</p>
<p>The ECMAScript 2024 specification was just approved, so it has been
added to esbuild as a possible compilation target. You can read more
about the features that it adds here: <a
href="https://2ality.com/2024/06/ecmascript-2024.html">https://2ality.com/2024/06/ecmascript-2024.html</a>.
The only addition that's relevant for esbuild is the regular expression
<code>/v</code> flag. With <code>--target=es2024</code>, regular
expressions that use the <code>/v</code> flag will now be passed through
untransformed instead of being transformed into a call to <code>new
RegExp</code>.</p>
</li>
<li>
<p>Publish binaries for OpenBSD on 64-bit ARM (<a
href="https://redirect.github.com/evanw/esbuild/issues/3665">#3665</a>,
<a
href="https://redirect.github.com/evanw/esbuild/pull/3674">#3674</a>)</p>
<p>With this release, you should now be able to install the
<code>esbuild</code> npm package in OpenBSD on 64-bit ARM, such as on an
Apple device with an M1 chip.</p>
<p>This was contributed by <a
href="https://github.com/ikmckenz"><code>@​ikmckenz</code></a>.</p>
</li>
<li>
<p>Publish binaries for WASI (WebAssembly System Interface) preview 1
(<a
href="https://redirect.github.com/evanw/esbuild/issues/3300">#3300</a>,
<a
href="https://redirect.github.com/evanw/esbuild/pull/3779">#3779</a>)</p>
<p>The upcoming WASI (WebAssembly System Interface) standard is going to
be a way to run WebAssembly outside of a JavaScript host environment. In
this scenario you only need a <code>.wasm</code> file without any
supporting JavaScript code. Instead of JavaScript providing the APIs for
the host environment, the WASI standard specifies a &quot;system
interface&quot; that WebAssembly code can access directly (e.g. for file
system access).</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/blob/main/CHANGELOG.md">esbuild's
changelog</a>.</em></p>
<blockquote>
<h2>0.22.0</h2>
<p><strong>This release deliberately contains backwards-incompatible
changes.</strong> To avoid automatically picking up releases like this,
you should either be pinning the exact version of <code>esbuild</code>
in your <code>package.json</code> file (recommended) or be using a
version range syntax that only accepts patch upgrades such as
<code>^0.21.0</code> or <code>~0.21.0</code>. See npm's documentation
about <a
href="https://docs.npmjs.com/cli/v6/using-npm/semver/">semver</a> for
more information.</p>
<ul>
<li>
<p>Omit packages from bundles by default when targeting node (<a
href="https://redirect.github.com/evanw/esbuild/issues/1874">#1874</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/2830">#2830</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/2846">#2846</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/2915">#2915</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/3145">#3145</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/3294">#3294</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/3323">#3323</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/3582">#3582</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/3809">#3809</a>,
<a
href="https://redirect.github.com/evanw/esbuild/issues/3815">#3815</a>)</p>
<p>This breaking change is an experiment. People are commonly confused
when using esbuild to bundle code for node (i.e. for
<code>--platform=node</code>) because some packages may not be intended
for bundlers, and may use node-specific features that don't work with a
bundler. Even though esbuild's &quot;getting started&quot; instructions
say to use <code>--packages=external</code> to work around this problem,
many people don't read the documentation and don't do this, and are then
confused when it doesn't work. So arguably this is a bad default
behavior for esbuild to have if people keep tripping over this.</p>
<p>With this release, esbuild will now omit packages from the bundle by
default when the platform is <code>node</code> (i.e. the previous
behavior of <code>--packages=external</code> is now the default in this
case). <em>Note that your dependencies must now be present on the file
system when your bundle is run.</em> If you don't want this behavior,
you can do <code>--packages=bundle</code> to allow packages to be
included in the bundle (i.e. the previous default behavior). Note that
<code>--packages=bundle</code> doesn't mean all packages are bundled,
just that packages are allowed to be bundled. You can still exclude
individual packages from the bundle using <code>--external:</code> even
when <code>--packages=bundle</code> is present.</p>
<p>The <code>--packages=</code> setting considers all import paths that
&quot;look like&quot; package imports in the original source code to be
package imports. Specifically import paths that don't start with a path
segment of <code>/</code> or <code>.</code> or <code>..</code> are
considered to be package imports. The only two exceptions to this rule
are <a
href="https://nodejs.org/api/packages.html#subpath-imports">subpath
imports</a> (which start with a <code>#</code> character) and TypeScript
path remappings via <code>paths</code> and/or <code>baseUrl</code> in
<code>tsconfig.json</code> (which are applied first).</p>
</li>
<li>
<p>Drop support for older platforms (<a
href="https://redirect.github.com/evanw/esbuild/issues/3802">#3802</a>)</p>
<p>This release drops support for the following operating systems:</p>
<ul>
<li>Windows 7</li>
<li>Windows 8</li>
<li>Windows Server 2008</li>
<li>Windows Server 2012</li>
</ul>
<p>This is because the Go programming language dropped support for these
operating system versions in <a
href="https://go.dev/doc/go1.21#windows">Go 1.21</a>, and this release
updates esbuild from Go 1.20 to Go 1.22.</p>
<p>Note that this only affects the binary esbuild executables that are
published to the <code>esbuild</code> npm package. It's still possible
to compile esbuild's source code for these older operating systems. If
you need to, you can compile esbuild for yourself using an older version
of the Go compiler (before Go version 1.21). That might look something
like this:</p>
<pre><code>git clone https://github.com/evanw/esbuild.git
cd esbuild
go build ./cmd/esbuild
./esbuild.exe --version
</code></pre>
<p>In addition, this release increases the minimum required node version
for esbuild's JavaScript API from node 12 to node 18. Node 18 is the
oldest version of node that is still being supported (see node's <a
href="https://nodejs.org/en/about/previous-releases">release
schedule</a> for more information). This increase is because of an
incompatibility between the JavaScript that the Go compiler generates
for the <code>esbuild-wasm</code> package and versions of node before
node 17.4 (specifically the <code>crypto.getRandomValues</code>
function).</p>
</li>
<li>
<p>Update <code>await using</code> behavior to match TypeScript</p>
<p>TypeScript 5.5 subtly changes the way <code>await using</code>
behaves. This release updates esbuild to match these changes in
TypeScript. You can read more about these changes in <a
href="https://redirect.github.com/microsoft/TypeScript/pull/58624">microsoft/TypeScript#58624</a>.</p>
</li>
<li>
<p>Allow <code>es2024</code> as a target environment</p>
<p>The ECMAScript 2024 specification was just approved, so it has been
added to esbuild as a possible compilation target. You can read more
about the features that it adds here: <a
href="https://2ality.com/2024/06/ecmascript-2024.html">https://2ality.com/2024/06/ecmascript-2024.html</a>.
The only addition that's relevant for esbuild is the regular expression
<code>/v</code> flag. With <code>--target=es2024</code>, regular
expressions that use the <code>/v</code> flag will now be passed through
untransformed instead of being transformed into a call to <code>new
RegExp</code>.</p>
</li>
<li>
<p>Publish binaries for OpenBSD on 64-bit ARM (<a
href="https://redirect.github.com/evanw/esbuild/issues/3665">#3665</a>,
<a
href="https://redirect.github.com/evanw/esbuild/pull/3674">#3674</a>)</p>
<p>With this release, you should now be able to install the
<code>esbuild</code> npm package in OpenBSD on 64-bit ARM, such as on an
Apple device with an M1 chip.</p>
<p>This was contributed by <a
href="https://github.com/ikmckenz"><code>@​ikmckenz</code></a>.</p>
</li>
<li>
<p>Publish binaries for WASI (WebAssembly System Interface) preview 1
(<a
href="https://redirect.github.com/evanw/esbuild/issues/3300">#3300</a>,
<a
href="https://redirect.github.com/evanw/esbuild/pull/3779">#3779</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/evanw/esbuild/commit/80c6e6ea094a71691ab1644ab61494cc67729365"><code>80c6e6e</code></a>
publish 0.22.0 to npm</li>
<li><a
href="https://github.com/evanw/esbuild/commit/196dcad1954cdd462cd41ca6bd93ca528b15c0f8"><code>196dcad</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/1874">#1874</a>:
node defaults to <code>--packages=external</code></li>
<li><a
href="https://github.com/evanw/esbuild/commit/3f57db853fac17268358cf155268834861aba21b"><code>3f57db8</code></a>
release notes for <a
href="https://redirect.github.com/evanw/esbuild/issues/3539">#3539</a></li>
<li><a
href="https://github.com/evanw/esbuild/commit/91663db644e08d92823f1ee18a506aefcbc4db87"><code>91663db</code></a>
Provide API to create a custom esbuild CLI with plugins (<a
href="https://redirect.github.com/evanw/esbuild/issues/3539">#3539</a>)</li>
<li><a
href="https://github.com/evanw/esbuild/commit/e01c0e028ce352ad12e7e534775bfbe2c37656c6"><code>e01c0e0</code></a>
also mention <a
href="https://redirect.github.com/evanw/esbuild/issues/3665">#3665</a>
in release notes</li>
<li><a
href="https://github.com/evanw/esbuild/commit/65711b32d57d84eb20203199b990c6753c10cfbf"><code>65711b3</code></a>
release notes for <a
href="https://redirect.github.com/evanw/esbuild/issues/3674">#3674</a></li>
<li><a
href="https://github.com/evanw/esbuild/commit/63eb8140a7dd878727d3682654be5e609dc2f793"><code>63eb814</code></a>
Add OpenBSD arm64 (<a
href="https://redirect.github.com/evanw/esbuild/issues/3674">#3674</a>)</li>
<li><a
href="https://github.com/evanw/esbuild/commit/b7220009d0fde2e89917ed3ea97c6b8ca04adbf1"><code>b722000</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3300">#3300</a>,
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3779">#3779</a>:
add <code>@esbuild/wasi-preview1</code></li>
<li><a
href="https://github.com/evanw/esbuild/commit/6679ec8c7fc04bf4d31504c4f9d6f2b9006725d3"><code>6679ec8</code></a>
fix: verbose analyse output improperly trimmed (<a
href="https://redirect.github.com/evanw/esbuild/issues/3785">#3785</a>)</li>
<li><a
href="https://github.com/evanw/esbuild/commit/94f09ea521d966f9223c002943ef840be5703aa0"><code>94f09ea</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3790">#3790</a>:
warn about incorrect <code>onResolve</code> plugin</li>
<li>Additional commits viewable in <a
href="https://github.com/evanw/esbuild/compare/v0.21.4...v0.22.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `execa` from 9.1.0 to 9.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sindresorhus/execa/releases">execa's
releases</a>.</em></p>
<blockquote>
<h2>v9.3.0</h2>
<h2>Features</h2>
<ul>
<li>The <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/api.md#optionsverbose"><code>verbose</code></a>
option can now be <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/api.md#verbose-function">a
function</a> to <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/debugging.md#custom-logging">customize
logging</a>. (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1130">#1130</a>)</li>
</ul>
<h2>v9.2.0</h2>
<p>This release includes a <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/ipc.md">new
set of methods</a> to exchange messages between the current process and
a Node.js subprocess, also known as &quot;IPC&quot;. This allows <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/input.md#any-input-type">passing</a>
and <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/output.md#any-output-type">returning</a>
almost any message type to/from a Node.js subprocess. Also, <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/ipc.md#debugging">debugging</a>
IPC is now much easier.</p>
<p>Moreover, a new <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/api.md#optionsgracefulcancel"><code>gracefulCancel</code></a>
option has also been added to <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/termination.md#graceful-termination">terminate
a subprocess gracefully</a>.</p>
<p>For a deeper dive-in, please check and share the <a
href="https://medium.com/@ehmicky/ipc-made-easy-with-execa-9-2-939c6a358731">release
post</a>!</p>
<p>Thanks <a href="https://github.com/iiroj"><code>@​iiroj</code></a>
for your contribution, <a
href="https://github.com/SimonSiefke"><code>@​SimonSiefke</code></a> and
<a href="https://github.com/adymorz"><code>@​adymorz</code></a> for
reporting the bugs fixed in this release, and <a
href="https://github.com/karlhorky"><code>@​karlhorky</code></a> for
improving the documentation!</p>
<h2>Deprecations</h2>
<ul>
<li>Passing <code>'ipc'</code> to the <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/api.md#optionsstdio"><code>stdio</code></a>
option has been deprecated. It will be removed in the next major
release. Instead, the <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/api.md#optionsipc"><code>ipc:
true</code></a> option should be used. (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1056">#1056</a>)</li>
</ul>
<pre lang="diff"><code>- await execa('npm', ['run', 'build'], {stdio:
['pipe', 'pipe', 'pipe', 'ipc']});
+ await execa('npm', ['run', 'build'], {ipc: true});
</code></pre>
<ul>
<li>The <a
href="https://github.com/sindresorhus/execa/blob/v9.1.0/docs/api.md#execacommandcommand-options"><code>execaCommand()</code></a>
method has been deprecated. It will be removed in the next major
release. If most cases, the <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/execution.md#template-string-syntax">template
string syntax</a> should be used instead.</li>
</ul>
<pre lang="diff"><code>- import {execaCommand} from 'execa';
+ import {execa} from 'execa';
<ul>
<li>await execaCommand('npm run build');</li>
</ul>
<ul>
<li>await execa<code>npm run build</code>;</li>
</ul>
<p>const taskName = 'build';</p>
<ul>
<li>await execaCommand(<code>npm run ${taskName}</code>);</li>
</ul>
<ul>
<li>await execa<code>npm run ${taskName}</code>;</li>
</ul>
<p>const commandArguments = ['run', 'task with space'];
await execa<code>npm ${commandArguments}</code>;
</code></pre></p>
<p>If the file and/or multiple arguments are supplied as a single
string, <a
href="https://github.com/sindresorhus/execa/blob/main/docs/api.md#parsecommandstringcommand">parseCommandString(command)</a>
can split that string into an array. <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/escaping.md">More
info.</a> (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1054">#1054</a>)</p>
<pre lang="diff"><code>- import {execaCommand} from 'execa';
+ import {execa, parseCommandString} from 'execa';
<p>const commandString = 'npm run task';</p>
<ul>
<li>await execaCommand(commandString);</li>
</ul>
<ul>
<li>const commandArray = parseCommandString(commandString); // ['npm',
'run', 'task']</li>
<li>await execa<code>${commandArray}</code>;
&lt;/tr&gt;&lt;/table&gt;
</code></pre></li>
</ul>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sindresorhus/execa/commit/57658b0190dc0f0e5ed2c5984c9d9ea526e085b5"><code>57658b0</code></a>
9.3.0</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/8daf3484e94b2a1515bc152f3ca2047910d48e19"><code>8daf348</code></a>
Allow <code>verbose</code> option to be a function for custom logging
(<a
href="https://redirect.github.com/sindresorhus/execa/issues/1130">#1130</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/78edcb9f2ba4d52ee3e28a499544b038c1cc3f99"><code>78edcb9</code></a>
Fix c8 memory crash (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1129">#1129</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/18d320f93a8b747e583497c613b018b0ef468eca"><code>18d320f</code></a>
Refactor test helpers for the <code>verbose</code> option (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1128">#1128</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/37e00242eaadd2590b5fda32d2062ff028b828e1"><code>37e0024</code></a>
Add more tests for the <code>verbose</code> option (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1127">#1127</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/f9f1199f675be9972897135124e9d2947acdb093"><code>f9f1199</code></a>
Refactor <code>verbose</code> logic (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1126">#1126</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/cbe805c72ddcff932d8c37bb1910aa6864099cea"><code>cbe805c</code></a>
9.2.0</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/8ae69754d99c55bff5d1484d9feb7a08e1630a13"><code>8ae6975</code></a>
Send fewer requests with link checking (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1122">#1122</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/e15e5162c108f41289844eea3025930fa0785ea1"><code>e15e516</code></a>
Fix typo in IPC documentation (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1121">#1121</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/4044152329a177a1463e8398e55058dfcb3571df"><code>4044152</code></a>
Automatically check Markdown links (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1120">#1120</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sindresorhus/execa/compare/v9.1.0...v9.3.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `yaml` from 2.4.2 to 2.4.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eemeli/yaml/releases">yaml's
releases</a>.</em></p>
<blockquote>
<h2>v2.4.5</h2>
<ul>
<li>Improve tab handling (<a
href="https://redirect.github.com/eemeli/yaml/issues/553">#553</a>,
yaml-test-suite tests <a
href="https://github.com/yaml/yaml-test-suite/blob/main/src/DK95.yaml">DK95</a>
&amp; <a
href="https://github.com/yaml/yaml-test-suite/blob/main/src/Y79Y.yaml">Y79Y</a>)</li>
</ul>
<h2>v2.4.4</h2>
<p>With special thanks to <a
href="https://github.com/RedCMD"><code>@​RedCMD</code></a> for finding
and reporting all of the following:</p>
<ul>
<li>Allow comment after top-level block scalar with explicit indent
indicator (<a
href="https://redirect.github.com/eemeli/yaml/issues/547">#547</a>)</li>
<li>Allow tab as indent for line comments before nodes (<a
href="https://redirect.github.com/eemeli/yaml/issues/548">#548</a>)</li>
<li>Do not allow tab before block collection (<a
href="https://redirect.github.com/eemeli/yaml/issues/549">#549</a>)</li>
<li>In flow collections, allow <code>[]{}</code> immediately after
<code>:</code> with plain key (<a
href="https://redirect.github.com/eemeli/yaml/issues/550">#550</a>)</li>
<li>Require indentation for <code>?</code> explicit-key contents (<a
href="https://redirect.github.com/eemeli/yaml/issues/551">#551</a>)</li>
<li>Require indentation from block scalar header &amp; flow collections
in mapping values (<a
href="https://redirect.github.com/eemeli/yaml/issues/553">#553</a>)</li>
</ul>
<h2>v2.4.3</h2>
<ul>
<li>Improve error when parsing a non-string value (<a
href="https://redirect.github.com/eemeli/yaml/issues/459">#459</a>)</li>
<li>Do not parse <code>-.NaN</code> or <code>+.nan</code> as NaN (<a
href="https://redirect.github.com/eemeli/yaml/issues/546">#546</a>)</li>
<li>Support <code>#</code> within <code>%TAG</code> prefixes with
trailing <code>#comments</code></li>
<li>Check for non-node complex keys when stringifying with simpleKeys
(<a
href="https://redirect.github.com/eemeli/yaml/issues/541">#541</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eemeli/yaml/commit/1b8fde6717c096446d4b1cf9e21ef1fb87090385"><code>1b8fde6</code></a>
2.4.5</li>
<li><a
href="https://github.com/eemeli/yaml/commit/f3c7d030e919347c20f414c08c8110bf9974dc85"><code>f3c7d03</code></a>
test: Obey yaml-test-suite skip instructions</li>
<li><a
href="https://github.com/eemeli/yaml/commit/4e66d72c7666de561de2f03aea555ef8d85f82ea"><code>4e66d72</code></a>
fix: Improve tab handling (tests DK95 &amp; Y79Y, <a
href="https://redirect.github.com/eemeli/yaml/issues/553">#553</a>)</li>
<li><a
href="https://github.com/eemeli/yaml/commit/d06f3867ae9af453ad115f73b83bad0095b65125"><code>d06f386</code></a>
2.4.4</li>
<li><a
href="https://github.com/eemeli/yaml/commit/39053e83bb82fdaae06f484d25145b0f08f8b71b"><code>39053e8</code></a>
chore: Satisfy strict TS</li>
<li><a
href="https://github.com/eemeli/yaml/commit/8baee44423baded552bab0390e10c48662af08ad"><code>8baee44</code></a>
test: Use source files for yaml-test-suite tests</li>
<li><a
href="https://github.com/eemeli/yaml/commit/280a861919b77a3e04e774ceca548732ac7e64ec"><code>280a861</code></a>
fix: Allow comment after top-level block scalar with explicit indent
indicato...</li>
<li><a
href="https://github.com/eemeli/yaml/commit/767bc477e63138cac21cb29664d911b97363e8a2"><code>767bc47</code></a>
fix: Require indentation from block scalar header &amp; flow collections
in mappi...</li>
<li><a
href="https://github.com/eemeli/yaml/commit/5096f837863a63abda5fb0204e251ba286d11acc"><code>5096f83</code></a>
fix: Require indentation for ? explicit-key contents (fixes <a
href="https://redirect.github.com/eemeli/yaml/issues/551">#551</a>)</li>
<li><a
href="https://github.com/eemeli/yaml/commit/22f2c6faddb6c3bff77ec0a8e42f169d4c0a9e48"><code>22f2c6f</code></a>
fix: In flow collections, allow []{} immediately after : with plain key
(fixe...</li>
<li>Additional commits viewable in <a
href="https://github.com/eemeli/yaml/compare/v2.4.2...v2.4.5">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Gregor Martynus <39992+gr2m@users.noreply.github.com>
2024-07-01 12:02:56 -07:00
semantic-release-bot 31c86eb3b3 build(release): 1.10.3 [skip ci]
## [1.10.3](https://github.com/actions/create-github-app-token/compare/v1.10.2...v1.10.3) (2024-07-01)

### Bug Fixes

* **deps:** bump undici from 6.18.2 to 6.19.2 in the production-dependencies group ([#149](https://github.com/actions/create-github-app-token/issues/149)) ([cc82279](https://github.com/actions/create-github-app-token/commit/cc82279e84540c5543078cedc5af4fcfab0a96bb)), closes [#3337](https://github.com/actions/create-github-app-token/issues/3337) [nodejs/undici#3338](https://github.com/nodejs/undici/issues/3338) [nodejs/undici#3340](https://github.com/nodejs/undici/issues/3340) [nodejs/undici#3332](https://github.com/nodejs/undici/issues/3332) [nodejs/undici#3335](https://github.com/nodejs/undici/issues/3335) [nodejs/undici#3305](https://github.com/nodejs/undici/issues/3305) [nodejs/undici#3303](https://github.com/nodejs/undici/issues/3303) [nodejs/undici#3304](https://github.com/nodejs/undici/issues/3304) [nodejs/undici#3306](https://github.com/nodejs/undici/issues/3306) [nodejs/undici#3309](https://github.com/nodejs/undici/issues/3309) [nodejs/undici#3313](https://github.com/nodejs/undici/issues/3313) [nodejs/undici#3311](https://github.com/nodejs/undici/issues/3311) [nodejs/undici#3107](https://github.com/nodejs/undici/issues/3107) [nodejs/undici#3302](https://github.com/nodejs/undici/issues/3302) [nodejs/undici#3320](https://github.com/nodejs/undici/issues/3320) [nodejs/undici#3321](https://github.com/nodejs/undici/issues/3321) [nodejs/undici#3316](https://github.com/nodejs/undici/issues/3316) [nodejs/undici#3318](https://github.com/nodejs/undici/issues/3318) [nodejs/undici#3326](https://github.com/nodejs/undici/issues/3326) [nodejs/undici#3324](https://github.com/nodejs/undici/issues/3324) [nodejs/undici#3325](https://github.com/nodejs/undici/issues/3325) [nodejs/undici#3316](https://github.com/nodejs/undici/issues/3316) [nodejs/undici#3318](https://github.com/nodejs/undici/issues/3318) [#3342](https://github.com/actions/create-github-app-token/issues/3342) [#3332](https://github.com/actions/create-github-app-token/issues/3332) [#3340](https://github.com/actions/create-github-app-token/issues/3340) [#3337](https://github.com/actions/create-github-app-token/issues/3337) [#3338](https://github.com/actions/create-github-app-token/issues/3338) [#3336](https://github.com/actions/create-github-app-token/issues/3336) [#3335](https://github.com/actions/create-github-app-token/issues/3335) [#3325](https://github.com/actions/create-github-app-token/issues/3325) [#3324](https://github.com/actions/create-github-app-token/issues/3324) [#3326](https://github.com/actions/create-github-app-token/issues/3326)
2024-07-01 13:15:08 +00:00
dependabot[bot] cc82279e84 fix(deps): bump undici from 6.18.2 to 6.19.2 in the production-dependencies group (#149)
Bumps the production-dependencies group with 1 update:
[undici](https://github.com/nodejs/undici).

Updates `undici` from 6.18.2 to 6.19.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v6.19.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix <a
href="https://redirect.github.com/nodejs/undici/issues/3337">#3337</a>
by <a href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/3338">nodejs/undici#3338</a></li>
<li>build: use <code>husky</code> as <code>husky install</code> is
deprecated by <a
href="https://github.com/jazelly"><code>@​jazelly</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3340">nodejs/undici#3340</a></li>
<li>fix: interceptors.d.ts has no default export by <a
href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3332">nodejs/undici#3332</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v6.19.1...v6.19.2">https://github.com/nodejs/undici/compare/v6.19.1...v6.19.2</a></p>
<h2>v6.19.1</h2>
<h2>What's Changed</h2>
<ul>
<li>don't append empty origin by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3335">nodejs/undici#3335</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v6.19.0...v6.19.1">https://github.com/nodejs/undici/compare/v6.19.0...v6.19.1</a></p>
<h2>v6.19.0</h2>
<h2>What's Changed</h2>
<ul>
<li>build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3305">nodejs/undici#3305</a></li>
<li>build(deps): bump codecov/codecov-action from 4.3.1 to 4.4.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3303">nodejs/undici#3303</a></li>
<li>build(deps): bump step-security/harden-runner from 2.7.1 to 2.8.0 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/nodejs/undici/pull/3304">nodejs/undici#3304</a></li>
<li>build(deps): bump github/codeql-action from 3.25.3 to 3.25.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3306">nodejs/undici#3306</a></li>
<li>build(deps): bump node from <code>9e8f45f</code> to
<code>dd7e693</code> in /build by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3309">nodejs/undici#3309</a></li>
<li>build(deps): bump node from <code>dd7e693</code> to
<code>e6d4495</code> in /build by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3313">nodejs/undici#3313</a></li>
<li>remove websocket experimental warning by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3311">nodejs/undici#3311</a></li>
<li>perf: optimization of request instantiation by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3107">nodejs/undici#3107</a></li>
<li>perf: convert object to params by <a
href="https://github.com/DarkGL"><code>@​DarkGL</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3302">nodejs/undici#3302</a></li>
<li>build(deps-dev): bump borp from 0.14.0 to 0.15.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3320">nodejs/undici#3320</a></li>
<li>build(deps-dev): bump c8 from 9.1.0 to 10.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3321">nodejs/undici#3321</a></li>
<li>fix: add missing error classes to types by <a
href="https://github.com/maxbeatty"><code>@​maxbeatty</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3316">nodejs/undici#3316</a></li>
<li>export interceptor to type def file by <a
href="https://github.com/jakecastelli"><code>@​jakecastelli</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/3318">nodejs/undici#3318</a></li>
<li>build(deps): bump node from <code>e6d4495</code> to
<code>075a5cc</code> in /build by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3326">nodejs/undici#3326</a></li>
<li>doc: clearify the behaviour of <code>bodyTimeout</code> in the
request by <a
href="https://github.com/jakecastelli"><code>@​jakecastelli</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/3324">nodejs/undici#3324</a></li>
<li>feature: support pre-shared sessions by <a
href="https://github.com/tastypackets"><code>@​tastypackets</code></a>
in <a
href="https://redirect.github.com/nodejs/undici/pull/3325">nodejs/undici#3325</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/maxbeatty"><code>@​maxbeatty</code></a>
made their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/3316">nodejs/undici#3316</a></li>
<li><a
href="https://github.com/jakecastelli"><code>@​jakecastelli</code></a>
made their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/3318">nodejs/undici#3318</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v6.18.2...v6.19.0">https://github.com/nodejs/undici/compare/v6.18.2...v6.19.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodejs/undici/commit/532b7b28827afe52ed7b43cbb210ac8425516c28"><code>532b7b2</code></a>
Bumped v6.19.2 (<a
href="https://redirect.github.com/nodejs/undici/issues/3342">#3342</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/a7441d8aaa44f9eec111a23a5df238d77b150c3a"><code>a7441d8</code></a>
fix: interceptors.d.ts has no default export (<a
href="https://redirect.github.com/nodejs/undici/issues/3332">#3332</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/5dadb95f10cebf5f82050a8174d515d5abac9732"><code>5dadb95</code></a>
build: use <code>husky</code> as <code>husky install</code> is
deprecated (<a
href="https://redirect.github.com/nodejs/undici/issues/3340">#3340</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/035524e71756f1f6e2f9886f3c7227394bdb5363"><code>035524e</code></a>
fix <a
href="https://redirect.github.com/nodejs/undici/issues/3337">#3337</a>
(<a
href="https://redirect.github.com/nodejs/undici/issues/3338">#3338</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/f6b9b442b02d8ab81b06ea0473e1c22bc8ddc254"><code>f6b9b44</code></a>
Bumped v6.19.1 (<a
href="https://redirect.github.com/nodejs/undici/issues/3336">#3336</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/1573f693db99d30a1ee13f2704f04181e88960c4"><code>1573f69</code></a>
don't append empty origin (<a
href="https://redirect.github.com/nodejs/undici/issues/3335">#3335</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/981fb3d72a4393f77c9f28e3ea2f77dc4cf6e9ad"><code>981fb3d</code></a>
Bumped v6.19.0</li>
<li><a
href="https://github.com/nodejs/undici/commit/39869b29966ac68157f5cbd27f3cf65cd2ab763d"><code>39869b2</code></a>
feature: support pre-shared sessions (<a
href="https://redirect.github.com/nodejs/undici/issues/3325">#3325</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/7f54a24a4a573088937530708be91586160d2d83"><code>7f54a24</code></a>
doc: clearify the behaviour of <code>bodyTimeout</code> in the request
(<a
href="https://redirect.github.com/nodejs/undici/issues/3324">#3324</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/9785b15cbd7831c4501e76c749fa3a6873042e6d"><code>9785b15</code></a>
build(deps): bump node from <code>e6d4495</code> to <code>075a5cc</code>
in /build (<a
href="https://redirect.github.com/nodejs/undici/issues/3326">#3326</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/nodejs/undici/compare/v6.18.2...v6.19.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=undici&package-manager=npm_and_yarn&previous-version=6.18.2&new-version=6.19.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-01 06:14:36 -07:00
Anuraag (Rag) Agrawal 74cd7f68cb docs(README): fix committer string example and add git config example (#145) 2024-06-28 07:51:24 -07:00
semantic-release-bot ad38cffc07 build(release): 1.10.2 [skip ci]
## [1.10.2](https://github.com/actions/create-github-app-token/compare/v1.10.1...v1.10.2) (2024-06-26)

### Bug Fixes

* do not revoke token if already expired ([#147](https://github.com/actions/create-github-app-token/issues/147)) ([66a7045](https://github.com/actions/create-github-app-token/commit/66a70456860bafc79e37635eea77b8b2a929f6c8)), closes [#140](https://github.com/actions/create-github-app-token/issues/140) [#95](https://github.com/actions/create-github-app-token/issues/95)
2024-06-26 01:11:30 +00:00
Wechuli 66a7045686 fix: do not revoke token if already expired (#147)
Closes #140 

The pull request at #95 introduced changes to avoid revoking expired
tokens by saving the `expiresAt` value in the state. The change,
however, used `core.setOutput` instead of `core.setState` meaning the
value is not saved in the state but rather available in the output.

```javascript
if (!skipTokenRevoke) {
    core.saveState("token", authentication.token);
    core.setOutput("expiresAt", authentication.expiresAt);
  }
```
This means that when we use the value downstream, it evaluates to an
empty string and the following code block is never run:

```javascript
 const expiresAt = core.getState("expiresAt"); 
 if (expiresAt && tokenExpiresIn(expiresAt) < 0) { 
   core.info("Token expired, skipping token revocation"); 
   return; 
 } 
```
This is a tiny PR to correct that typo.
2024-06-25 18:10:54 -07:00
dependabot[bot] d2eeb384df build(deps-dev): bump braces from 3.0.2 to 3.0.3 (#146)
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to
3.0.3.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/micromatch/braces/commit/74b2db2938fad48a2ea54a9c8bf27a37a62c350d"><code>74b2db2</code></a>
3.0.3</li>
<li><a
href="https://github.com/micromatch/braces/commit/88f1429a0f47e1dd3813de35211fc97ffda27f9e"><code>88f1429</code></a>
update eslint. lint, fix unit tests.</li>
<li><a
href="https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff"><code>415d660</code></a>
Snyk js braces 6838727 (<a
href="https://redirect.github.com/micromatch/braces/issues/40">#40</a>)</li>
<li><a
href="https://github.com/micromatch/braces/commit/190510f79db1adf21d92798b0bb6fccc1f72c9d6"><code>190510f</code></a>
fix tests, skip 1 test in test/braces.expand</li>
<li><a
href="https://github.com/micromatch/braces/commit/716eb9f12d820b145a831ad678618731927e8856"><code>716eb9f</code></a>
readme bump</li>
<li><a
href="https://github.com/micromatch/braces/commit/a5851e57f45c3431a94d83fc565754bc10f5bbc3"><code>a5851e5</code></a>
Merge pull request <a
href="https://redirect.github.com/micromatch/braces/issues/37">#37</a>
from coderaiser/fix/vulnerability</li>
<li><a
href="https://github.com/micromatch/braces/commit/2092bd1fb108d2c59bd62e243b70ad98db961538"><code>2092bd1</code></a>
feature: braces: add maxSymbols (<a
href="https://github.com/micromatch/braces/issues/">https://github.com/micromatch/braces/issues/</a>...</li>
<li><a
href="https://github.com/micromatch/braces/commit/9f5b4cf47329351bcb64287223ffb6ecc9a5e6d3"><code>9f5b4cf</code></a>
fix: vulnerability (<a
href="https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727">https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727</a>)</li>
<li><a
href="https://github.com/micromatch/braces/commit/98414f9f1fabe021736e26836d8306d5de747e0d"><code>98414f9</code></a>
remove funding file</li>
<li><a
href="https://github.com/micromatch/braces/commit/665ab5d561c017a38ba7aafd92cc6655b91d8c14"><code>665ab5d</code></a>
update keepEscaping doc (<a
href="https://redirect.github.com/micromatch/braces/issues/27">#27</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/micromatch/braces/compare/3.0.2...3.0.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=braces&package-manager=npm_and_yarn&previous-version=3.0.2&new-version=3.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/actions/create-github-app-token/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-21 21:06:17 -07:00
Gregor Martynus 0fd38177ed docs(README): add note about expiration (#141)
addresses https://github.com/actions/create-github-app-token/issues/121#issuecomment-2043214796

Co-authored-by: Parker Brown <17183625+parkerbxyz@users.noreply.github.com>
2024-06-11 20:56:57 -07:00
Gregor Martynus b3be847492 docs(README): Create a git committer string for an app installation (#142)
closes #137
2024-06-11 10:16:50 -07:00
semantic-release-bot c8f55efbd4 build(release): 1.10.1 [skip ci]
## [1.10.1](https://github.com/actions/create-github-app-token/compare/v1.10.0...v1.10.1) (2024-06-03)

### Bug Fixes

* **deps:** bump the production-dependencies group with 2 updates ([#138](https://github.com/actions/create-github-app-token/issues/138)) ([8d81a59](https://github.com/actions/create-github-app-token/commit/8d81a59103d6d17f5ecc243eb5fd53757607a1d2)), closes [#606](https://github.com/actions/create-github-app-token/issues/606) [#606](https://github.com/actions/create-github-app-token/issues/606) [#605](https://github.com/actions/create-github-app-token/issues/605) [#604](https://github.com/actions/create-github-app-token/issues/604) [nodejs/undici#3295](https://github.com/nodejs/undici/issues/3295) [nodejs/undici#3298](https://github.com/nodejs/undici/issues/3298) [nodejs/undici#3294](https://github.com/nodejs/undici/issues/3294) [nodejs/undici#3281](https://github.com/nodejs/undici/issues/3281) [nodejs/undici#3286](https://github.com/nodejs/undici/issues/3286) [nodejs/undici#3284](https://github.com/nodejs/undici/issues/3284) [nodejs/undici#3291](https://github.com/nodejs/undici/issues/3291) [nodejs/undici#3290](https://github.com/nodejs/undici/issues/3290) [nodejs/undici#3283](https://github.com/nodejs/undici/issues/3283) [nodejs/undici#3281](https://github.com/nodejs/undici/issues/3281) [nodejs/undici#3263](https://github.com/nodejs/undici/issues/3263) [nodejs/undici#3279](https://github.com/nodejs/undici/issues/3279) [nodejs/undici#3227](https://github.com/nodejs/undici/issues/3227) [nodejs/undici#3234](https://github.com/nodejs/undici/issues/3234) [nodejs/undici#3240](https://github.com/nodejs/undici/issues/3240) [nodejs/undici#3245](https://github.com/nodejs/undici/issues/3245) [nodejs/undici#3241](https://github.com/nodejs/undici/issues/3241) [nodejs/undici#3247](https://github.com/nodejs/undici/issues/3247) [nodejs/undici#3248](https://github.com/nodejs/undici/issues/3248) [nodejs/undici#3219](https://github.com/nodejs/undici/issues/3219) [nodejs/undici#3251](https://github.com/nodejs/undici/issues/3251) [nodejs/undici#3254](https://github.com/nodejs/undici/issues/3254) [nodejs/undici#3258](https://github.com/nodejs/undici/issues/3258) [nodejs/undici#3257](https://github.com/nodejs/undici/issues/3257) [nodejs/undici#3259](https://github.com/nodejs/undici/issues/3259) [nodejs/undici#3262](https://github.com/nodejs/undici/issues/3262) [nodejs/undici#3264](https://github.com/nodejs/undici/issues/3264) [nodejs/undici#3118](https://github.com/nodejs/undici/issues/3118) [nodejs/undici#3269](https://github.com/nodejs/undici/issues/3269) [#3301](https://github.com/actions/create-github-app-token/issues/3301) [#3294](https://github.com/actions/create-github-app-token/issues/3294) [#3298](https://github.com/actions/create-github-app-token/issues/3298) [#3295](https://github.com/actions/create-github-app-token/issues/3295) [#3293](https://github.com/actions/create-github-app-token/issues/3293) [#3283](https://github.com/actions/create-github-app-token/issues/3283) [#3290](https://github.com/actions/create-github-app-token/issues/3290) [#3291](https://github.com/actions/create-github-app-token/issues/3291) [#3284](https://github.com/actions/create-github-app-token/issues/3284) [#3286](https://github.com/actions/create-github-app-token/issues/3286)
2024-06-03 04:38:42 +00:00
dependabot[bot] 2aec84ed45 build(deps-dev): bump the development-dependencies group with 3 updates (#139)
Bumps the development-dependencies group with 3 updates:
[ava](https://github.com/avajs/ava),
[esbuild](https://github.com/evanw/esbuild) and
[execa](https://github.com/sindresorhus/execa).

Updates `ava` from 6.1.2 to 6.1.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/avajs/ava/releases">ava's
releases</a>.</em></p>
<blockquote>
<h2>v6.1.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Include Node.js 22 in supported engines and test matrix by <a
href="https://github.com/lenovouser"><code>@​lenovouser</code></a> in <a
href="https://redirect.github.com/avajs/ava/pull/3328">avajs/ava#3328</a></li>
<li>Add VS Code debugging instructions for Yarn PnP projects by <a
href="https://github.com/bitjson"><code>@​bitjson</code></a> in <a
href="https://redirect.github.com/avajs/ava/pull/3317">avajs/ava#3317</a></li>
<li>Document <code>serial</code> configuration option by <a
href="https://github.com/turadg"><code>@​turadg</code></a> in <a
href="https://redirect.github.com/avajs/ava/pull/3321">avajs/ava#3321</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/bitjson"><code>@​bitjson</code></a> made
their first contribution in <a
href="https://redirect.github.com/avajs/ava/pull/3317">avajs/ava#3317</a></li>
<li><a href="https://github.com/turadg"><code>@​turadg</code></a> made
their first contribution in <a
href="https://redirect.github.com/avajs/ava/pull/3321">avajs/ava#3321</a></li>
<li><a
href="https://github.com/lenovouser"><code>@​lenovouser</code></a> made
their first contribution in <a
href="https://redirect.github.com/avajs/ava/pull/3328">avajs/ava#3328</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/avajs/ava/compare/v6.1.2...v6.1.3">https://github.com/avajs/ava/compare/v6.1.2...v6.1.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/avajs/ava/commit/f8bf00cd988b5e981b6c7d87523a1e0c5dc947c0"><code>f8bf00c</code></a>
6.1.3</li>
<li><a
href="https://github.com/avajs/ava/commit/002b3a0e936a2e8a7b91395c1fbfd128e2248966"><code>002b3a0</code></a>
Include Node.js 22 in supported engines and test matrix</li>
<li><a
href="https://github.com/avajs/ava/commit/ec1a8d2336e55011aaea966c2273bb86e4dafa88"><code>ec1a8d2</code></a>
Document <code>serial</code> configuration option</li>
<li><a
href="https://github.com/avajs/ava/commit/01ec2804ab9db0ab3ef11e3b5b0c5697d68f8bc5"><code>01ec280</code></a>
Add VS Code debugging instructions for Yarn PnP projects</li>
<li>See full diff in <a
href="https://github.com/avajs/ava/compare/v6.1.2...v6.1.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `esbuild` from 0.20.2 to 0.21.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/releases">esbuild's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.4</h2>
<ul>
<li>
<p>Update support for import assertions and import attributes in node
(<a
href="https://redirect.github.com/evanw/esbuild/issues/3778">#3778</a>)</p>
<p>Import assertions (the <code>assert</code> keyword) have been removed
from node starting in v22.0.0. So esbuild will now strip them and
generate a warning with <code>--target=node22</code> or above:</p>
<pre><code>▲ [WARNING] The &quot;assert&quot; keyword is not supported
in the configured target environment (&quot;node22&quot;)
[assert-to-with]
<pre><code>example.mjs:1:40:
1 │ import json from &amp;quot;esbuild/package.json&amp;quot; assert {
type: &amp;quot;json&amp;quot; }
    │                                         ~~~~~~
    ╵                                         with
</code></pre>
<p>Did you mean to use &quot;with&quot; instead of &quot;assert&quot;?
</code></pre></p>
<p>Import attributes (the <code>with</code> keyword) have been
backported to node 18 starting in v18.20.0. So esbuild will no longer
strip them with <code>--target=node18.N</code> if <code>N</code> is 20
or greater.</p>
</li>
<li>
<p>Fix <code>for await</code> transform when a label is present</p>
<p>This release fixes a bug where the <code>for await</code> transform,
which wraps the loop in a <code>try</code> statement, previously failed
to also move the loop's label into the <code>try</code> statement. This
bug only affects code that uses both of these features in combination.
Here's an example of some affected code:</p>
<pre lang="js"><code>// Original code
async function test() {
  outer: for await (const x of [Promise.resolve([0, 1])]) {
    for (const y of x) if (y) break outer
    throw 'fail'
  }
}
<p>// Old output (with --target=es6)
function test() {
return __async(this, null, function* () {
outer: try {
for (var iter = __forAwait([Promise.resolve([0, 1])]), more, temp,
error; more = !(temp = yield iter.next()).done; more = false) {
const x = temp.value;
for (const y of x) if (y) break outer;
throw &quot;fail&quot;;
}
} catch (temp) {
error = [temp];
} finally {
try {
more &amp;&amp; (temp = iter.return) &amp;&amp; (yield temp.call(iter));
} finally {
if (error)
throw error[0];
}
}
</code></pre></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/evanw/esbuild/blob/main/CHANGELOG.md">esbuild's
changelog</a>.</em></p>
<blockquote>
<h2>0.21.4</h2>
<ul>
<li>
<p>Update support for import assertions and import attributes in node
(<a
href="https://redirect.github.com/evanw/esbuild/issues/3778">#3778</a>)</p>
<p>Import assertions (the <code>assert</code> keyword) have been removed
from node starting in v22.0.0. So esbuild will now strip them and
generate a warning with <code>--target=node22</code> or above:</p>
<pre><code>▲ [WARNING] The &quot;assert&quot; keyword is not supported
in the configured target environment (&quot;node22&quot;)
[assert-to-with]
<pre><code>example.mjs:1:40:
1 │ import json from &amp;quot;esbuild/package.json&amp;quot; assert {
type: &amp;quot;json&amp;quot; }
    │                                         ~~~~~~
    ╵                                         with
</code></pre>
<p>Did you mean to use &quot;with&quot; instead of &quot;assert&quot;?
</code></pre></p>
<p>Import attributes (the <code>with</code> keyword) have been
backported to node 18 starting in v18.20.0. So esbuild will no longer
strip them with <code>--target=node18.N</code> if <code>N</code> is 20
or greater.</p>
</li>
<li>
<p>Fix <code>for await</code> transform when a label is present</p>
<p>This release fixes a bug where the <code>for await</code> transform,
which wraps the loop in a <code>try</code> statement, previously failed
to also move the loop's label into the <code>try</code> statement. This
bug only affects code that uses both of these features in combination.
Here's an example of some affected code:</p>
<pre lang="js"><code>// Original code
async function test() {
  outer: for await (const x of [Promise.resolve([0, 1])]) {
    for (const y of x) if (y) break outer
    throw 'fail'
  }
}
<p>// Old output (with --target=es6)
function test() {
return __async(this, null, function* () {
outer: try {
for (var iter = __forAwait([Promise.resolve([0, 1])]), more, temp,
error; more = !(temp = yield iter.next()).done; more = false) {
const x = temp.value;
for (const y of x) if (y) break outer;
throw &quot;fail&quot;;
}
} catch (temp) {
error = [temp];
} finally {
try {
more &amp;&amp; (temp = iter.return) &amp;&amp; (yield temp.call(iter));
} finally {
if (error)
throw error[0];
}
</code></pre></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/evanw/esbuild/commit/67cbf87a4909d87a902ca8c3b69ab5330defab0a"><code>67cbf87</code></a>
publish 0.21.4 to npm</li>
<li><a
href="https://github.com/evanw/esbuild/commit/4ad11c303e9fdbbd2dc6198f69abf9e18a8658e5"><code>4ad11c3</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3639">#3639</a>,
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3646">#3646</a>:
pass <code>with</code> to <code>onResolve</code></li>
<li><a
href="https://github.com/evanw/esbuild/commit/516ca317a40185e69265cb50a146130b2e6a7fe6"><code>516ca31</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3343">#3343</a>:
allow bundle-internal string aliases</li>
<li><a
href="https://github.com/evanw/esbuild/commit/9e2f304cb651d8dfe1a82a26c8d6e38d83046da2"><code>9e2f304</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3416">#3416</a>,
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3425">#3425</a>:
better enum constant folding</li>
<li><a
href="https://github.com/evanw/esbuild/commit/8f1faf7d4a9e5d26768e7b29dc6f5a983be98dbc"><code>8f1faf7</code></a>
implement late constant-folding for <code>&amp;&amp; || ??</code></li>
<li><a
href="https://github.com/evanw/esbuild/commit/7d50a50dccbbba7db0633e9f930249853d5cf241"><code>7d50a50</code></a>
implement late constant-folding of string enums</li>
<li><a
href="https://github.com/evanw/esbuild/commit/1b29ac7d0a85db78d9cb1b39d36f1e0d6284526d"><code>1b29ac7</code></a>
fold equality checks after cross-module inlining</li>
<li><a
href="https://github.com/evanw/esbuild/commit/d7a8bf32702fe5b4a91c2aecf66ae52117f901d8"><code>d7a8bf3</code></a>
formatting support for <code>@position-try</code> (for <a
href="https://redirect.github.com/evanw/esbuild/issues/3773">#3773</a>)</li>
<li><a
href="https://github.com/evanw/esbuild/commit/5069410dafd95f44b7d66732d8bfd0aef6321c3b"><code>5069410</code></a>
fix <a
href="https://redirect.github.com/evanw/esbuild/issues/3778">#3778</a>:
import assertions/attributes for node</li>
<li><a
href="https://github.com/evanw/esbuild/commit/11d568c87468b4af3ea70b01944c1e7d1314ed97"><code>11d568c</code></a>
run <code>make update-compat-table</code></li>
<li>Additional commits viewable in <a
href="https://github.com/evanw/esbuild/compare/v0.20.2...v0.21.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `execa` from 8.0.1 to 9.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sindresorhus/execa/releases">execa's
releases</a>.</em></p>
<blockquote>
<h2>v9.1.0</h2>
<h2>Features (types)</h2>
<ul>
<li>Export <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/typescript.md#available-types"><code>TemplateExpression</code></a>
type. (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1049">#1049</a>)</li>
</ul>
<h2>v9.0.2</h2>
<h2>Bug fixes (types)</h2>
<ul>
<li>Do not require using <code>--lib dom</code> for TypeScript users (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1043">#1043</a>,
<a
href="https://redirect.github.com/sindresorhus/execa/issues/1044">#1044</a>)</li>
<li>Fix type of the <code>reject</code> option (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1046">#1046</a>)</li>
</ul>
<h2>v9.0.1</h2>
<h2>Bug fixes (types)</h2>
<ul>
<li>Fix types not being importable (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1033">#1033</a>)
3bdab60</li>
<li>Fix complexity bug with types (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1037">#1037</a>)
6cc519b</li>
<li>Fix complexity bug with types (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1035">#1035</a>)
fee011d</li>
</ul>
<h2>v9.0.0</h2>
<p>This major release brings many important features including:</p>
<ul>
<li><a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#3a26">Split
the output</a> into lines, or <a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#3a26">progressively
iterate</a> over them.</li>
<li><a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#cbd6">Transform
or filter</a> the input/output using <a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#399a">simple
functions</a>.</li>
<li>Print the output <a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#693f">to
the terminal</a> while still retrieving it programmatically.</li>
<li>Redirect the input/output <a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#693f">from/to
a file</a>.</li>
<li><a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#ec17">Advanced
piping</a> between multiple subprocesses.</li>
<li>Improved <a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#2913">verbose
mode</a>, for debugging.</li>
<li>More <a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#40d7">detailed
errors</a>, including when <a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#668c">terminating
subprocesses</a>.</li>
<li>Enhanced <a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#725b">template
string syntax</a>.</li>
<li><a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#bcbf">Global/shared
options</a>.</li>
<li><a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#5731">Web
streams</a> and Transform streams support.</li>
<li><a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f#47b9">Convert
the subprocess</a> to a stream.</li>
<li><a
href="https://github.com/sindresorhus/execa/blob/HEAD/readme.md#documentation">New
documentation</a> with many examples.</li>
</ul>
<p>Please check the <a
href="https://medium.com/@ehmicky/execa-9-release-d0d5daaa097f">release
post</a> for a high-level overview! For the full list of breaking
changes, features and bug fixes, please read below.</p>
<p>Thanks <a
href="https://github.com/younggglcy"><code>@​younggglcy</code></a>, <a
href="https://github.com/koshic"><code>@​koshic</code></a>, <a
href="https://github.com/am0o0"><code>@​am0o0</code></a> and <a
href="https://github.com/codesmith-emmy"><code>@​codesmith-emmy</code></a>
for your help!</p>
<hr />
<p>One of the maintainers <a
href="https://github.com/ehmicky"><code>@​ehmicky</code></a> is looking
for a remote full-time position. Specialized in Node.js back-ends and
CLIs, he led Netlify <a
href="https://www.netlify.com/platform/core/build/">Build</a>, <a
href="https://www.netlify.com/integrations/">Plugins</a> and
Configuration for 2.5 years. Feel free to contact him on <a
href="https://www.mickael-hebert.com">his website</a> or on <a
href="https://www.linkedin.com/in/mickaelhebert/">LinkedIn</a>!</p>
<hr />
<h2>Breaking changes (not types)</h2>
<ul>
<li>
<p>Dropped support for Node.js version <code>&lt;18.19.0</code> and
<code>20.0.0 - 20.4.0</code>. (834e3726)</p>
</li>
<li>
<p>When the <a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/api.md#optionsencoding"><code>encoding</code>
option</a> is <code>'buffer'</code>, the output (<a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/api.md#resultstdout"><code>result.stdout</code></a>,
<a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/api.md#resultstderr"><code>result.stderr</code></a>,
<a
href="https://github.com/sindresorhus/execa/blob/HEAD/docs/api.md#resultall"><code>result.all</code></a>)
is now an <a
href="https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array"><code>Uint8Array</code></a>
instead of a <a
href="https://nodejs.org/api/buffer.html#class-buffer"><code>Buffer</code></a>.
For more information, see <a
href="https://sindresorhus.com/blog/goodbye-nodejs-buffer">this blog
post</a>. (by <a
href="https://github.com/younggglcy"><code>@​younggglcy</code></a>) (<a
href="https://redirect.github.com/sindresorhus/execa/issues/586">#586</a>)</p>
</li>
</ul>
<pre lang="js"><code>&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sindresorhus/execa/commit/62d02af66940551bfb50699d7d02eed942453952"><code>62d02af</code></a>
9.1.0</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/733d6ff6c2cae3a64ef003accf7c419a6235900f"><code>733d6ff</code></a>
Split CI jobs (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1052">#1052</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/3b11ac87d9c6230710dc69e0bceadd45ae7e4d86"><code>3b11ac8</code></a>
Check types on TypeScript 5.1 + latest (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1051">#1051</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/de8e7daabefbc6f4af36ef9647b37b6a0dfca7fa"><code>de8e7da</code></a>
Document minimum TypeScript version (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1050">#1050</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/2d8475291b260aa79d2654793d9f6e8db88c06eb"><code>2d84752</code></a>
Export <code>TemplateExpression</code> type (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1049">#1049</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/b8c131ce8ef2c3c1ec0c4dc3a7059c0d59ef28d9"><code>b8c131c</code></a>
9.0.2</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/e2903e990fa04f0c15e3c2cf27ebd04ce332a60d"><code>e2903e9</code></a>
Run TypeScript on the types (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1042">#1042</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/ab2a9ed13cde3f88696a2b0a8eef6c98e0022bb5"><code>ab2a9ed</code></a>
Fix type of result when using the <code>reject: false</code> option (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1046">#1046</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/11bbd9d6411644764526c3fa1942c0a650caa25f"><code>11bbd9d</code></a>
Fix type of <code>TransformStream</code> (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1044">#1044</a>)</li>
<li><a
href="https://github.com/sindresorhus/execa/commit/6f4941e2a13c0f356ca3064327f5e2802e9180ac"><code>6f4941e</code></a>
Fix typing of web streams (<a
href="https://redirect.github.com/sindresorhus/execa/issues/1043">#1043</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sindresorhus/execa/compare/v8.0.1...v9.1.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-02 21:38:14 -07:00
dependabot[bot] 8d81a59103 fix(deps): bump the production-dependencies group with 2 updates (#138)
Bumps the production-dependencies group with 2 updates:
[@octokit/auth-app](https://github.com/octokit/auth-app.js) and
[undici](https://github.com/nodejs/undici).

Updates `@octokit/auth-app` from 7.0.0 to 7.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/octokit/auth-app.js/releases"><code>@​octokit/auth-app</code>'s
releases</a>.</em></p>
<blockquote>
<h2>v7.1.0</h2>
<h1><a
href="https://github.com/octokit/auth-app.js/compare/v7.0.0...v7.1.0">7.1.0</a>
(2024-05-09)</h1>
<h3>Features</h3>
<ul>
<li><code>appId</code> argument can be set to Client ID string (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/606">#606</a>)
(<a
href="https://github.com/octokit/auth-app.js/commit/7dc08e59f559758d123918622b0549ae004f1764">7dc08e5</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/octokit/auth-app.js/commit/7dc08e59f559758d123918622b0549ae004f1764"><code>7dc08e5</code></a>
feat: <code>appId</code> argument can be set to Client ID string (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/606">#606</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/81ac6ecd51985906888c31b4f43c83402ffc03ef"><code>81ac6ec</code></a>
chore(deps): update dependency esbuild to ^0.21.0 (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/605">#605</a>)</li>
<li><a
href="https://github.com/octokit/auth-app.js/commit/1314f7b48a6410cd28eacef0077d549a316459e9"><code>1314f7b</code></a>
build(deps): lock file maintenance (<a
href="https://redirect.github.com/octokit/auth-app.js/issues/604">#604</a>)</li>
<li>See full diff in <a
href="https://github.com/octokit/auth-app.js/compare/v7.0.0...v7.1.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `undici` from 6.15.0 to 6.18.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v6.18.2</h2>
<h2>What's Changed</h2>
<ul>
<li>don't use internal header state for cookies by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3295">nodejs/undici#3295</a></li>
<li>build(deps-dev): bump borp from 0.13.0 to 0.14.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3298">nodejs/undici#3298</a></li>
<li>fix: retry on body support by <a
href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3294">nodejs/undici#3294</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v6.18.1...v6.18.2">https://github.com/nodejs/undici/compare/v6.18.1...v6.18.2</a></p>
<h2>v6.18.1</h2>
<h2>What's Changed</h2>
<ul>
<li>docs: Update references to dispatcher in docs by <a
href="https://github.com/haikyuu"><code>@​haikyuu</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3281">nodejs/undici#3281</a></li>
<li>fix: compatibility for global headers by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3286">nodejs/undici#3286</a></li>
<li>websocket: pre-calculated length by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3284">nodejs/undici#3284</a></li>
<li>ci: fix autobahn workflow by <a
href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3291">nodejs/undici#3291</a></li>
<li>revert: &quot;websocket: pre-calculated length&quot; by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3290">nodejs/undici#3290</a></li>
<li>websocket: use FixedQueue instead of Set by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3283">nodejs/undici#3283</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/haikyuu"><code>@​haikyuu</code></a> made
their first contribution in <a
href="https://redirect.github.com/nodejs/undici/pull/3281">nodejs/undici#3281</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v6.18.0...v6.18.1">https://github.com/nodejs/undici/compare/v6.18.0...v6.18.1</a></p>
<h2>v6.18.0</h2>
<h2>What's Changed</h2>
<ul>
<li>permessage-deflate decompression support in websocket by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3263">nodejs/undici#3263</a></li>
<li>fix: Fix server closing in tests. by <a
href="https://github.com/ShogunPanda"><code>@​ShogunPanda</code></a> in
<a
href="https://redirect.github.com/nodejs/undici/pull/3279">nodejs/undici#3279</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v6.17.0...v6.18.0">https://github.com/nodejs/undici/compare/v6.17.0...v6.18.0</a></p>
<h2>v6.17.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fetch: fix captureStackTrace by <a
href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3227">nodejs/undici#3227</a></li>
<li>fetch: fix wpt test request-upload.any.js by <a
href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3234">nodejs/undici#3234</a></li>
<li>websocket: don't clone buffer by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3240">nodejs/undici#3240</a></li>
<li>Remove unecessary async from writeBuffer by <a
href="https://github.com/DarkGL"><code>@​DarkGL</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3245">nodejs/undici#3245</a></li>
<li>refactor websocket control frame handling by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3241">nodejs/undici#3241</a></li>
<li>fix parsing continuation frames in websocket by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3247">nodejs/undici#3247</a></li>
<li>ci: node nightly test should use node 23 by <a
href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3248">nodejs/undici#3248</a></li>
<li>Add test to verify if the connection is correctly aborted on cancel
by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in
<a
href="https://redirect.github.com/nodejs/undici/pull/3219">nodejs/undici#3219</a></li>
<li>Autobahn suite by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3251">nodejs/undici#3251</a></li>
<li>websocket: fix 6 autobahn tests by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3254">nodejs/undici#3254</a></li>
<li>websocket: checkout correct commit in autobahn workflow by <a
href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3258">nodejs/undici#3258</a></li>
<li>Cleanup websocket by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3257">nodejs/undici#3257</a></li>
<li>websocket: autobahn workflow should fail on error by <a
href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3259">nodejs/undici#3259</a></li>
<li>add bodymixin bytes by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3262">nodejs/undici#3262</a></li>
<li>perf: avoid buffer cloning by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3264">nodejs/undici#3264</a></li>
<li>feat: dump interceptor by <a
href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3118">nodejs/undici#3118</a></li>
<li>use private properties in Headers by <a
href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3269">nodejs/undici#3269</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodejs/undici/commit/665f24738041757789fab95cce40cb0345cf2c0f"><code>665f247</code></a>
Bumped v6.18.2 (<a
href="https://redirect.github.com/nodejs/undici/issues/3301">#3301</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/5f11247b34510a3dc821da3c10d3cea0f39a7b13"><code>5f11247</code></a>
fix: retry on body support (<a
href="https://redirect.github.com/nodejs/undici/issues/3294">#3294</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/18af4b07c3602c09a432c07e0c305deed5fbb08c"><code>18af4b0</code></a>
build(deps-dev): bump borp from 0.13.0 to 0.14.0 (<a
href="https://redirect.github.com/nodejs/undici/issues/3298">#3298</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/a4879b4663f1cbe190bcd6e62879ab4f994a0409"><code>a4879b4</code></a>
don't use internal header state for cookies (<a
href="https://redirect.github.com/nodejs/undici/issues/3295">#3295</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/eed423a66960d61da56f6185d9b6624e32cd4ff9"><code>eed423a</code></a>
Bumped v6.18.1 (<a
href="https://redirect.github.com/nodejs/undici/issues/3293">#3293</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/eeae378333fe5e9ae34bd0c6be856356b548d983"><code>eeae378</code></a>
websocket: use FixedQueue instead of Set (<a
href="https://redirect.github.com/nodejs/undici/issues/3283">#3283</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/fcfa4db6809885b9272bcaf7aaf6f5a498592ad4"><code>fcfa4db</code></a>
revert: &quot;websocket: pre-calculated length&quot; (<a
href="https://redirect.github.com/nodejs/undici/issues/3290">#3290</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/0564b46e64e6dcec483e4512a5fd732f7eabec0d"><code>0564b46</code></a>
ci: fix autobahn workflow (<a
href="https://redirect.github.com/nodejs/undici/issues/3291">#3291</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/13523fd7fe66a4238f9ee79326b64cac4fc47d15"><code>13523fd</code></a>
websocket: pre-calculated length (<a
href="https://redirect.github.com/nodejs/undici/issues/3284">#3284</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/064b08d35b9372259a07c84f4d0c37da55b130c2"><code>064b08d</code></a>
fix: compatibility for global headers (<a
href="https://redirect.github.com/nodejs/undici/issues/3286">#3286</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/nodejs/undici/compare/v6.15.0...v6.18.2">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-02 21:38:05 -07:00
semantic-release-bot a0de6af839 build(release): 1.10.0 [skip ci]
# [1.10.0](https://github.com/actions/create-github-app-token/compare/v1.9.3...v1.10.0) (2024-05-01)

### Features

* **`private-key`:** escaped newlines will be replaced ([#132](https://github.com/actions/create-github-app-token/issues/132)) ([9d23fb9](https://github.com/actions/create-github-app-token/commit/9d23fb93dd620572046d85c7c1032b488c12514f))
2024-05-01 18:16:16 +00:00
dependabot[bot] 9d23fb93dd feat(private-key): escaped newlines will be replaced (#132)
via https://github.com/gr2m/universal-github-app-jwt/releases/tag/v2.1.1
2024-05-01 11:15:40 -07:00
dependabot[bot] 3cef845e01 build(deps-dev): bump yaml from 2.4.1 to 2.4.2 in the development-dependencies group (#133)
Bumps the development-dependencies group with 1 update:
[yaml](https://github.com/eemeli/yaml).

Updates `yaml` from 2.4.1 to 2.4.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/eemeli/yaml/releases">yaml's
releases</a>.</em></p>
<blockquote>
<h2>v2.4.2</h2>
<ul>
<li>Restrict YAML 1.1 boolean strings to their explicit capitalization
(<a
href="https://redirect.github.com/eemeli/yaml/issues/530">#530</a>)</li>
<li>Add sponsorship by <a href="https://www.scipress.io/">Scipress</a>
(<a
href="https://redirect.github.com/eemeli/yaml/issues/536">#536</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/eemeli/yaml/commit/f792d1b72fb98792a66ca2dcf5b606448e762b16"><code>f792d1b</code></a>
2.4.2</li>
<li><a
href="https://github.com/eemeli/yaml/commit/de120d69ab908946843749ebb0cecb0522a0b671"><code>de120d6</code></a>
docs: Move sponsor section up</li>
<li><a
href="https://github.com/eemeli/yaml/commit/5410c25083f4105d9911aa77449c7aa41e4a7fec"><code>5410c25</code></a>
ci: Drop tests in EOL Node.js versions</li>
<li><a
href="https://github.com/eemeli/yaml/commit/30868a8135175aef7e18880fc8fde077af947344"><code>30868a8</code></a>
chore: Add sponsorship by Scipress (<a
href="https://redirect.github.com/eemeli/yaml/issues/536">#536</a>)</li>
<li><a
href="https://github.com/eemeli/yaml/commit/1c6fd6a76a92ce8dda28a66b2af6f3e6a3182958"><code>1c6fd6a</code></a>
fix: Restrict YAML 1.1 boolean strings to their explicit capitalization
(<a
href="https://redirect.github.com/eemeli/yaml/issues/530">#530</a>)</li>
<li>See full diff in <a
href="https://github.com/eemeli/yaml/compare/v2.4.1...v2.4.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=yaml&package-manager=npm_and_yarn&previous-version=2.4.1&new-version=2.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-01 08:37:51 -07:00
semantic-release-bot 7bfa3a4717 build(release): 1.9.3 [skip ci]
## [1.9.3](https://github.com/actions/create-github-app-token/compare/v1.9.2...v1.9.3) (2024-04-04)

### Bug Fixes

* **deps:** bump undici from 6.10.2 to 6.11.1 ([#125](https://github.com/actions/create-github-app-token/issues/125)) ([3c223c7](https://github.com/actions/create-github-app-token/commit/3c223c7336e276235eb843dd4e6ad42147199cbf)), closes [#3024](https://github.com/actions/create-github-app-token/issues/3024) [nodejs/undici#3044](https://github.com/nodejs/undici/issues/3044) [#3023](https://github.com/actions/create-github-app-token/issues/3023) [nodejs/undici#3025](https://github.com/nodejs/undici/issues/3025) [nodejs/undici#3024](https://github.com/nodejs/undici/issues/3024) [nodejs/undici#3034](https://github.com/nodejs/undici/issues/3034) [nodejs/undici#3038](https://github.com/nodejs/undici/issues/3038) [nodejs/undici#2947](https://github.com/nodejs/undici/issues/2947) [nodejs/undici#3040](https://github.com/nodejs/undici/issues/3040) [nodejs/undici#3036](https://github.com/nodejs/undici/issues/3036) [nodejs/undici#3041](https://github.com/nodejs/undici/issues/3041) [#3024](https://github.com/actions/create-github-app-token/issues/3024) [#3041](https://github.com/actions/create-github-app-token/issues/3041) [#3036](https://github.com/actions/create-github-app-token/issues/3036)
2024-04-04 17:10:12 +00:00
dependabot[bot] 3c223c7336 fix(deps): bump undici from 6.10.2 to 6.11.1 (#125)
Bumps [undici](https://github.com/nodejs/undici) from 6.10.2 to 6.11.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v6.11.1</h2>
<h1>⚠️ Security Release ⚠️</h1>
<h2>What's Changed</h2>
<ul>
<li>Fixes <a
href="https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7">https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7</a>
CVE-2024-30260</li>
<li>Fixes <a
href="https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672">https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672</a>
CVE-2024-30261</li>
<li>Revert &quot;fix: don't leak internal class (<a
href="https://redirect.github.com/nodejs/undici/issues/3024">#3024</a>)&quot;
by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in
<a
href="https://redirect.github.com/nodejs/undici/pull/3044">nodejs/undici#3044</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v6.11.0...v6.11.1">https://github.com/nodejs/undici/compare/v6.11.0...v6.11.1</a></p>
<h2>v6.11.0</h2>
<h2>What's Changed</h2>
<ul>
<li>refactor(<a
href="https://redirect.github.com/nodejs/undici/issues/3023">#3023</a>):
Pass headers as array instead by <a
href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3025">nodejs/undici#3025</a></li>
<li>fix: don't leak internal class by <a
href="https://github.com/ronag"><code>@​ronag</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3024">nodejs/undici#3024</a></li>
<li>build(deps): bump codecov/codecov-action from 4.1.0 to 4.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3034">nodejs/undici#3034</a></li>
<li>build(deps-dev): bump tsd from 0.30.7 to 0.31.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3038">nodejs/undici#3038</a></li>
<li>build(deps-dev): bump borp from 0.9.1 to 0.10.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/2947">nodejs/undici#2947</a></li>
<li>missing commits by <a
href="https://github.com/ronag"><code>@​ronag</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3040">nodejs/undici#3040</a></li>
<li>build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3036">nodejs/undici#3036</a></li>
<li>fix: regexp pattern by <a
href="https://github.com/tsctx"><code>@​tsctx</code></a> in <a
href="https://redirect.github.com/nodejs/undici/pull/3041">nodejs/undici#3041</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v6.10.2...v6.11.0">https://github.com/nodejs/undici/compare/v6.10.2...v6.11.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodejs/undici/commit/6df3c738d03dc4014a26640316bf699950d62024"><code>6df3c73</code></a>
Bumped v6.11.1</li>
<li><a
href="https://github.com/nodejs/undici/commit/c346b66287c873f3c81a71b3cedd2bb222c4bb8b"><code>c346b66</code></a>
Revert &quot;fix: don't leak internal class (<a
href="https://redirect.github.com/nodejs/undici/issues/3024">#3024</a>)&quot;</li>
<li><a
href="https://github.com/nodejs/undici/commit/d542b8cd39ec1ba303f038ea26098c3f355974f3"><code>d542b8c</code></a>
Merge pull request from GHSA-9qxr-qj54-h672</li>
<li><a
href="https://github.com/nodejs/undici/commit/6805746680d27a5369d7fb67bc05f95a28247d75"><code>6805746</code></a>
Merge pull request from GHSA-m4v8-wqvr-p9f7</li>
<li><a
href="https://github.com/nodejs/undici/commit/ee5f892f3955eaca37730ed30349153ba203e9cd"><code>ee5f892</code></a>
Bumped v6.11.0</li>
<li><a
href="https://github.com/nodejs/undici/commit/71a6d749b200e25359fdb0142dd398bfa52dc46d"><code>71a6d74</code></a>
Merge branch 'main' of github.com:nodejs/undici</li>
<li><a
href="https://github.com/nodejs/undici/commit/0f0f239d939ec617ac4f4278c6f64fccc8928283"><code>0f0f239</code></a>
fix: regexp pattern (<a
href="https://redirect.github.com/nodejs/undici/issues/3041">#3041</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/31f9e67368bf98464c7d99eac08a63894ddc05f9"><code>31f9e67</code></a>
build(deps): bump actions/checkout from 4.1.1 to 4.1.2 (<a
href="https://redirect.github.com/nodejs/undici/issues/3036">#3036</a>)</li>
<li><a
href="https://github.com/nodejs/undici/commit/c8a43aed8e08e278471eb7dee27b5d782098a7bc"><code>c8a43ae</code></a>
fixup</li>
<li><a
href="https://github.com/nodejs/undici/commit/8b5e2c8f3667c2fdfbcf956b20bcaa159ab8082f"><code>8b5e2c8</code></a>
fixup</li>
<li>Additional commits viewable in <a
href="https://github.com/nodejs/undici/compare/v6.10.2...v6.11.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=undici&package-manager=npm_and_yarn&previous-version=6.10.2&new-version=6.11.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/actions/create-github-app-token/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-04 10:09:43 -07:00
10 changed files with 42198 additions and 14788 deletions
+11
View File
@@ -0,0 +1,11 @@
on:
workflow_dispatch:
jobs:
build:
runs-on: ubuntu-latest
steps:
- name: Setup tmate session
uses: mxschmitt/action-tmate@v3
env:
test_app_private_key: ${{ secrets.TEST_APP_PRIVATE_KEY }}
+85 -2
View File
@@ -12,6 +12,9 @@ In order to use this action, you need to:
2. [Store the App's ID in your repository environment variables](https://docs.github.com/actions/learn-github-actions/variables#defining-configuration-variables-for-multiple-workflows) (example: `APP_ID`)
3. [Store the App's private key in your repository secrets](https://docs.github.com/actions/security-guides/encrypted-secrets?tool=webui#creating-encrypted-secrets-for-a-repository) (example: `PRIVATE_KEY`)
> [!IMPORTANT]
> An installation access token expires after 1 hour. Please [see this comment](https://github.com/actions/create-github-app-token/issues/121#issuecomment-2043214796) for alternative approaches if you have long-running processes.
### Create a token for the current repository
```yaml
@@ -61,6 +64,68 @@ jobs:
github_token: ${{ steps.app-token.outputs.token }}
```
### Create a git committer string for an app installation
```yaml
on: [pull_request]
jobs:
auto-format:
runs-on: ubuntu-latest
steps:
- uses: actions/create-github-app-token@v1
id: app-token
with:
# required
app-id: ${{ vars.APP_ID }}
private-key: ${{ secrets.PRIVATE_KEY }}
- name: Get GitHub App User ID
id: get-user-id
run: echo "user-id=$(gh api "/users/${{ steps.app-token.outputs.app-slug }}[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
env:
GH_TOKEN: ${{ steps.app-token.outputs.token }}
- id: committer
run: echo "string=${{ steps.app-token.outputs.app-slug }}[bot] <${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com>" >> "$GITHUB_OUTPUT"
- run: echo "committer string is ${ {steps.committer.outputs.string }}"
```
### Configure git CLI for an app's bot user
```yaml
on: [pull_request]
jobs:
auto-format:
runs-on: ubuntu-latest
steps:
- uses: actions/create-github-app-token@v1
id: app-token
with:
# required
app-id: ${{ vars.APP_ID }}
private-key: ${{ secrets.PRIVATE_KEY }}
- name: Get GitHub App User ID
id: get-user-id
run: echo "user-id=$(gh api "/users/${{ steps.app-token.outputs.app-slug }}[bot]" --jq .id)" >> "$GITHUB_OUTPUT"
env:
GH_TOKEN: ${{ steps.app-token.outputs.token }}
- run: |
git config --global user.name '${{ steps.app-token.outputs.app-slug }}[bot]'
git config --global user.email '${{ steps.get-user-id.outputs.user-id }}+${{ steps.app-token.outputs.app-slug }}[bot]@users.noreply.github.com>'
# git commands like commit work using the bot user
- run: |
git add .
git commit -m "Auto-generated changes"
git push
```
> [!TIP]
> The `<BOT USER ID>` is the numeric user ID of the app's bot user, which can be found under `https://api.github.com/users/<app-slug>%5Bbot%5D`.
>
> For example, we can check at `https://api.github.com/users/dependabot[bot]` to see the user ID of Dependabot is 49699333.
>
> Alternatively, you can use the [octokit/request-action](https://github.com/octokit/request-action) to get the ID.
### Create a token for all repositories in the current owner's installation
```yaml
@@ -142,7 +207,7 @@ jobs:
set-matrix:
runs-on: ubuntu-latest
outputs:
matrix: ${{steps.set.outputs.matrix }}
matrix: ${{ steps.set.outputs.matrix }}
steps:
- id: set
run: echo 'matrix=[{"owner":"owner1"},{"owner":"owner2","repos":["repo1"]}]' >>"$GITHUB_OUTPUT"
@@ -211,7 +276,25 @@ jobs:
### `private-key`
**Required:** GitHub App private key.
**Required:** GitHub App private key. Escaped newlines (`\\n`) will be automatically replaced with actual newlines.
Some other actions may require the private key to be Base64 encoded. To avoid recreating a new secret, it can be decoded on the fly, but it needs to be managed securely. Here is an example of how this can be achieved:
```yaml
steps:
- name: Decode the GitHub App Private Key
id: decode
run: |
private_key=$(echo "${{ secrets.PRIVATE_KEY }}" | base64 -d | awk 'BEGIN {ORS="\\n"} {print}' | head -c -2) &> /dev/null
echo "::add-mask::$private_key"
echo "private-key=$private_key" >> "$GITHUB_OUTPUT"
- name: Generate GitHub App Token
id: app-token
uses: actions/create-github-app-token@v1
with:
app-id: ${{ vars.APP_ID }}
private-key: ${{ steps.decode.outputs.private-key }}
```
### `owner`
+21911 -12093
View File
File diff suppressed because one or more lines are too long
+19260 -1851
View File
File diff suppressed because one or more lines are too long
+1 -1
View File
@@ -104,7 +104,7 @@ export async function main(
// Make token accessible to post function (so we can invalidate it)
if (!skipTokenRevoke) {
core.saveState("token", authentication.token);
core.setOutput("expiresAt", authentication.expiresAt);
core.saveState("expiresAt", authentication.expiresAt);
}
}
+906 -814
View File
File diff suppressed because it is too large Load Diff
+9 -9
View File
@@ -2,10 +2,10 @@
"name": "create-github-app-token",
"private": true,
"type": "module",
"version": "1.9.2",
"version": "1.10.3",
"description": "GitHub Action for creating a GitHub App Installation Access Token",
"scripts": {
"build": "esbuild main.js post.js --bundle --outdir=dist --out-extension:.js=.cjs --platform=node --target=node20.0.0",
"build": "esbuild main.js post.js --bundle --outdir=dist --out-extension:.js=.cjs --platform=node --target=node20.0.0 --packages=bundle",
"test": "c8 --100 ava tests/index.js",
"coverage": "c8 report --reporter html",
"postcoverage": "open-cli coverage/index.html"
@@ -13,20 +13,20 @@
"license": "MIT",
"dependencies": {
"@actions/core": "^1.10.1",
"@octokit/auth-app": "^6.0.4",
"@octokit/auth-app": "^7.1.0",
"@octokit/request": "^9.0.1",
"p-retry": "^6.2.0",
"undici": "^6.10.2"
"undici": "^6.19.2"
},
"devDependencies": {
"@sinonjs/fake-timers": "^11.2.2",
"ava": "^6.1.2",
"c8": "^9.1.0",
"ava": "^6.1.3",
"c8": "^10.1.2",
"dotenv": "^16.4.5",
"esbuild": "^0.20.2",
"execa": "^8.0.1",
"esbuild": "^0.22.0",
"execa": "^9.3.0",
"open-cli": "^8.0.0",
"yaml": "^2.4.1"
"yaml": "^2.4.5"
},
"release": {
"branches": [
@@ -0,0 +1,6 @@
import { test, DEFAULT_ENV } from "./main.js";
// Verify `main` works correctly when `private-key` input has escaped newlines
await test(() => {
process.env['INPUT_PRIVATE-KEY'] = DEFAULT_ENV.PRIVATE_KEY.replace(/\n/g, '\\n')
});
+9 -18
View File
@@ -33,8 +33,7 @@ Generated by [AVA](https://avajs.dev).
::set-output name=app-slug::github-actions␊
::save-state name=token::ghs_16C7e42F292c6912E7710c838347Ae178B4a␊
::set-output name=expiresAt::2016-07-11T22:14:10Z`
::save-state name=expiresAt::2016-07-11T22:14:10Z`
## main-missing-app-id.test.js
@@ -94,8 +93,7 @@ Generated by [AVA](https://avajs.dev).
::set-output name=app-slug::github-actions␊
::save-state name=token::ghs_16C7e42F292c6912E7710c838347Ae178B4a␊
::set-output name=expiresAt::2016-07-11T22:14:10Z`
::save-state name=expiresAt::2016-07-11T22:14:10Z`
## main-token-get-owner-set-repo-set-to-many.test.js
@@ -114,8 +112,7 @@ Generated by [AVA](https://avajs.dev).
::set-output name=app-slug::github-actions␊
::save-state name=token::ghs_16C7e42F292c6912E7710c838347Ae178B4a␊
::set-output name=expiresAt::2016-07-11T22:14:10Z`
::save-state name=expiresAt::2016-07-11T22:14:10Z`
## main-token-get-owner-set-repo-set-to-one.test.js
@@ -134,8 +131,7 @@ Generated by [AVA](https://avajs.dev).
::set-output name=app-slug::github-actions␊
::save-state name=token::ghs_16C7e42F292c6912E7710c838347Ae178B4a␊
::set-output name=expiresAt::2016-07-11T22:14:10Z`
::save-state name=expiresAt::2016-07-11T22:14:10Z`
## main-token-get-owner-set-to-org-repo-unset.test.js
@@ -154,8 +150,7 @@ Generated by [AVA](https://avajs.dev).
::set-output name=app-slug::github-actions␊
::save-state name=token::ghs_16C7e42F292c6912E7710c838347Ae178B4a␊
::set-output name=expiresAt::2016-07-11T22:14:10Z`
::save-state name=expiresAt::2016-07-11T22:14:10Z`
## main-token-get-owner-set-to-user-fail-response.test.js
@@ -175,8 +170,7 @@ Generated by [AVA](https://avajs.dev).
::set-output name=app-slug::github-actions␊
::save-state name=token::ghs_16C7e42F292c6912E7710c838347Ae178B4a␊
::set-output name=expiresAt::2016-07-11T22:14:10Z`
::save-state name=expiresAt::2016-07-11T22:14:10Z`
## main-token-get-owner-set-to-user-repo-unset.test.js
@@ -195,8 +189,7 @@ Generated by [AVA](https://avajs.dev).
::set-output name=app-slug::github-actions␊
::save-state name=token::ghs_16C7e42F292c6912E7710c838347Ae178B4a␊
::set-output name=expiresAt::2016-07-11T22:14:10Z`
::save-state name=expiresAt::2016-07-11T22:14:10Z`
## main-token-get-owner-unset-repo-set.test.js
@@ -215,8 +208,7 @@ Generated by [AVA](https://avajs.dev).
::set-output name=app-slug::github-actions␊
::save-state name=token::ghs_16C7e42F292c6912E7710c838347Ae178B4a␊
::set-output name=expiresAt::2016-07-11T22:14:10Z`
::save-state name=expiresAt::2016-07-11T22:14:10Z`
## main-token-get-owner-unset-repo-unset.test.js
@@ -235,8 +227,7 @@ Generated by [AVA](https://avajs.dev).
::set-output name=app-slug::github-actions␊
::save-state name=token::ghs_16C7e42F292c6912E7710c838347Ae178B4a␊
::set-output name=expiresAt::2016-07-11T22:14:10Z`
::save-state name=expiresAt::2016-07-11T22:14:10Z`
## post-revoke-token-fail-response.test.js
Binary file not shown.