create-github-app-token

Author	SHA1	Message	Date
semantic-release-bot	a0de6af839	build(release): 1.10.0 [skip ci] # [1.10.0](https://github.com/actions/create-github-app-token/compare/v1.9.3...v1.10.0) (2024-05-01) ### Features * `private-key`: escaped newlines will be replaced ([#132](https://github.com/actions/create-github-app-token/issues/132)) ([`9d23fb9`](https://github.com/actions/create-github-app-token/commit/9d23fb93dd620572046d85c7c1032b488c12514f))	2024-05-01 18:16:16 +00:00
dependabot[bot]	9d23fb93dd	feat(`private-key`): escaped newlines will be replaced (#132 ) via https://github.com/gr2m/universal-github-app-jwt/releases/tag/v2.1.1	2024-05-01 11:15:40 -07:00
dependabot[bot]	3cef845e01	build(deps-dev): bump yaml from 2.4.1 to 2.4.2 in the development-dependencies group (#133 ) Bumps the development-dependencies group with 1 update: [yaml](https://github.com/eemeli/yaml). Updates `yaml` from 2.4.1 to 2.4.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eemeli/yaml/releases">yaml's releases</a>.</em></p> <blockquote> <h2>v2.4.2</h2> <ul> <li>Restrict YAML 1.1 boolean strings to their explicit capitalization (<a href="https://redirect.github.com/eemeli/yaml/issues/530">#530</a>)</li> <li>Add sponsorship by <a href="https://www.scipress.io/">Scipress</a> (<a href="https://redirect.github.com/eemeli/yaml/issues/536">#536</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eemeli/yaml/commit/f792d1b72fb98792a66ca2dcf5b606448e762b16"><code>f792d1b</code></a> 2.4.2</li> <li><a href="https://github.com/eemeli/yaml/commit/de120d69ab908946843749ebb0cecb0522a0b671"><code>de120d6</code></a> docs: Move sponsor section up</li> <li><a href="https://github.com/eemeli/yaml/commit/5410c25083f4105d9911aa77449c7aa41e4a7fec"><code>5410c25</code></a> ci: Drop tests in EOL Node.js versions</li> <li><a href="https://github.com/eemeli/yaml/commit/30868a8135175aef7e18880fc8fde077af947344"><code>30868a8</code></a> chore: Add sponsorship by Scipress (<a href="https://redirect.github.com/eemeli/yaml/issues/536">#536</a>)</li> <li><a href="https://github.com/eemeli/yaml/commit/1c6fd6a76a92ce8dda28a66b2af6f3e6a3182958"><code>1c6fd6a</code></a> fix: Restrict YAML 1.1 boolean strings to their explicit capitalization (<a href="https://redirect.github.com/eemeli/yaml/issues/530">#530</a>)</li> <li>See full diff in <a href="https://github.com/eemeli/yaml/compare/v2.4.1...v2.4.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=yaml&package-manager=npm_and_yarn&previous-version=2.4.1&new-version=2.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-05-01 08:37:51 -07:00
semantic-release-bot	7bfa3a4717	build(release): 1.9.3 [skip ci] ## [1.9.3](https://github.com/actions/create-github-app-token/compare/v1.9.2...v1.9.3) (2024-04-04) ### Bug Fixes * deps: bump undici from 6.10.2 to 6.11.1 ([#125](https://github.com/actions/create-github-app-token/issues/125)) ([`3c223c7`](https://github.com/actions/create-github-app-token/commit/3c223c7336e276235eb843dd4e6ad42147199cbf)), closes [#3024](https://github.com/actions/create-github-app-token/issues/3024) [nodejs/undici#3044](https://github.com/nodejs/undici/issues/3044) [#3023](https://github.com/actions/create-github-app-token/issues/3023) [nodejs/undici#3025](https://github.com/nodejs/undici/issues/3025) [nodejs/undici#3024](https://github.com/nodejs/undici/issues/3024) [nodejs/undici#3034](https://github.com/nodejs/undici/issues/3034) [nodejs/undici#3038](https://github.com/nodejs/undici/issues/3038) [nodejs/undici#2947](https://github.com/nodejs/undici/issues/2947) [nodejs/undici#3040](https://github.com/nodejs/undici/issues/3040) [nodejs/undici#3036](https://github.com/nodejs/undici/issues/3036) [nodejs/undici#3041](https://github.com/nodejs/undici/issues/3041) [#3024](https://github.com/actions/create-github-app-token/issues/3024) [#3041](https://github.com/actions/create-github-app-token/issues/3041) [#3036](https://github.com/actions/create-github-app-token/issues/3036)	2024-04-04 17:10:12 +00:00
dependabot[bot]	3c223c7336	fix(deps): bump undici from 6.10.2 to 6.11.1 (#125 ) Bumps [undici](https://github.com/nodejs/undici) from 6.10.2 to 6.11.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nodejs/undici/releases">undici's releases</a>.</em></p> <blockquote> <h2>v6.11.1</h2> <h1>⚠️ Security Release ⚠️</h1> <h2>What's Changed</h2> <ul> <li>Fixes <a href="https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7">https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7</a> CVE-2024-30260</li> <li>Fixes <a href="https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672">https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672</a> CVE-2024-30261</li> <li>Revert "fix: don't leak internal class (<a href="https://redirect.github.com/nodejs/undici/issues/3024">#3024</a>)" by <a href="https://github.com/mcollina"><code>@mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/3044">nodejs/undici#3044</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/nodejs/undici/compare/v6.11.0...v6.11.1">https://github.com/nodejs/undici/compare/v6.11.0...v6.11.1</a></p> <h2>v6.11.0</h2> <h2>What's Changed</h2> <ul> <li>refactor(<a href="https://redirect.github.com/nodejs/undici/issues/3023">#3023</a>): Pass headers as array instead by <a href="https://github.com/metcoder95"><code>@metcoder95</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/3025">nodejs/undici#3025</a></li> <li>fix: don't leak internal class by <a href="https://github.com/ronag"><code>@ronag</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/3024">nodejs/undici#3024</a></li> <li>build(deps): bump codecov/codecov-action from 4.1.0 to 4.1.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/3034">nodejs/undici#3034</a></li> <li>build(deps-dev): bump tsd from 0.30.7 to 0.31.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/3038">nodejs/undici#3038</a></li> <li>build(deps-dev): bump borp from 0.9.1 to 0.10.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/2947">nodejs/undici#2947</a></li> <li>missing commits by <a href="https://github.com/ronag"><code>@ronag</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/3040">nodejs/undici#3040</a></li> <li>build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/3036">nodejs/undici#3036</a></li> <li>fix: regexp pattern by <a href="https://github.com/tsctx"><code>@tsctx</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/3041">nodejs/undici#3041</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/nodejs/undici/compare/v6.10.2...v6.11.0">https://github.com/nodejs/undici/compare/v6.10.2...v6.11.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodejs/undici/commit/6df3c738d03dc4014a26640316bf699950d62024"><code>6df3c73</code></a> Bumped v6.11.1</li> <li><a href="https://github.com/nodejs/undici/commit/c346b66287c873f3c81a71b3cedd2bb222c4bb8b"><code>c346b66</code></a> Revert "fix: don't leak internal class (<a href="https://redirect.github.com/nodejs/undici/issues/3024">#3024</a>)"</li> <li><a href="https://github.com/nodejs/undici/commit/d542b8cd39ec1ba303f038ea26098c3f355974f3"><code>d542b8c</code></a> Merge pull request from GHSA-9qxr-qj54-h672</li> <li><a href="https://github.com/nodejs/undici/commit/6805746680d27a5369d7fb67bc05f95a28247d75"><code>6805746</code></a> Merge pull request from GHSA-m4v8-wqvr-p9f7</li> <li><a href="https://github.com/nodejs/undici/commit/ee5f892f3955eaca37730ed30349153ba203e9cd"><code>ee5f892</code></a> Bumped v6.11.0</li> <li><a href="https://github.com/nodejs/undici/commit/71a6d749b200e25359fdb0142dd398bfa52dc46d"><code>71a6d74</code></a> Merge branch 'main' of github.com:nodejs/undici</li> <li><a href="https://github.com/nodejs/undici/commit/0f0f239d939ec617ac4f4278c6f64fccc8928283"><code>0f0f239</code></a> fix: regexp pattern (<a href="https://redirect.github.com/nodejs/undici/issues/3041">#3041</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/31f9e67368bf98464c7d99eac08a63894ddc05f9"><code>31f9e67</code></a> build(deps): bump actions/checkout from 4.1.1 to 4.1.2 (<a href="https://redirect.github.com/nodejs/undici/issues/3036">#3036</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/c8a43aed8e08e278471eb7dee27b5d782098a7bc"><code>c8a43ae</code></a> fixup</li> <li><a href="https://github.com/nodejs/undici/commit/8b5e2c8f3667c2fdfbcf956b20bcaa159ab8082f"><code>8b5e2c8</code></a> fixup</li> <li>Additional commits viewable in <a href="https://github.com/nodejs/undici/compare/v6.10.2...v6.11.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=undici&package-manager=npm_and_yarn&previous-version=6.10.2&new-version=6.11.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/actions/create-github-app-token/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2024-04-04 10:09:43 -07:00

6 changed files with 39457 additions and 13391 deletions

									
										README.md
									
		+1
		-1
	
												View File
												
				@@ -211,7 +211,7 @@ jobs:

				### `private-key`

				**Required:** GitHub App private key.

				**Required:** GitHub App private key. Escaped newlines (`\\n`) will be automatically replaced with actual newlines.

				### `owner`

dist/main.cjs

Vendored

+20893 -11506

View File

File diff suppressed because one or more lines are too long

dist/post.cjs

Vendored

+18235 -1264

View File

File diff suppressed because one or more lines are too long

package-lock.json

Generated

+318 -616

View File

File diff suppressed because it is too large Load Diff

									
										package.json
									
		+4
		-4
	
												View File
												
				@@ -2,7 +2,7 @@

				  "name": "create-github-app-token",

				  "private": true,

				  "type": "module",

				  "version": "1.9.2",

				  "version": "1.10.0",

				  "description": "GitHub Action for creating a GitHub App Installation Access Token",

				  "scripts": {

				    "build": "esbuild main.js post.js --bundle --outdir=dist --out-extension:.js=.cjs --platform=node --target=node20.0.0",

				@@ -13,10 +13,10 @@

				  "license": "MIT",

				  "dependencies": {

				    "@actions/core": "^1.10.1",

				    "@octokit/auth-app": "^6.0.4",

				    "@octokit/auth-app": "^7.0.0",

				    "@octokit/request": "^9.0.1",

				    "p-retry": "^6.2.0",

				    "undici": "^6.10.2"

				    "undici": "^6.15.0"

				  },

				  "devDependencies": {

				    "@sinonjs/fake-timers": "^11.2.2",

				@@ -26,7 +26,7 @@

				    "esbuild": "^0.20.2",

				    "execa": "^8.0.1",

				    "open-cli": "^8.0.0",

				    "yaml": "^2.4.1"

				    "yaml": "^2.4.2"

				  },

				  "release": {

				    "branches": [

									
										tests/main-private-key-with-escaped-newlines.js
									
		+6
		
												View File
												
				@@ -0,0 +1,6 @@

				import { test, DEFAULT_ENV } from "./main.js";

				// Verify `main` works correctly when `private-key` input has escaped newlines

				await test(() => {

				  process.env['INPUT_PRIVATE-KEY'] = DEFAULT_ENV.PRIVATE_KEY.replace(/\n/g, '\\n')

				});

Compare commits

5 Commits

v1.9.2 .. v1.10.0

Compare commits

5 Commits v1.9.2 .. v1.10.0

5 Commits

v1.9.2 .. v1.10.0