From 868c383d7f607e845a0d9d6327c3d988cf250d2c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sun, 9 Feb 2020 23:07:10 +0000 Subject: [PATCH] fix: upgrade @actions/github from 2.0.0 to 2.0.1 Snyk has created this PR to upgrade @actions/github from 2.0.0 to 2.0.1. See this package in NPM: https://www.npmjs.com/package/@actions/github See this project in Snyk: https://app.snyk.io/org/webbertakken/project/89dd41e1-8254-4c72-ab5d-3b28b3093f1b?utm_source=github&utm_medium=upgrade-pr --- package.json | 2 +- yarn.lock | 21 +++++++++++++++++---- 2 files changed, 18 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index df31d1d..4984a1b 100644 --- a/package.json +++ b/package.json @@ -14,7 +14,7 @@ "dependencies": { "@actions/core": "^1.2.1", "@actions/exec": "1.0.2", - "@actions/github": "^2.0.0" + "@actions/github": "^2.0.1" }, "devDependencies": { "@babel/cli": "7.7.5", diff --git a/yarn.lock b/yarn.lock index fa8cb19..c0247bc 100644 --- a/yarn.lock +++ b/yarn.lock @@ -14,14 +14,22 @@ dependencies: "@actions/io" "^1.0.1" -"@actions/github@^2.0.0": - version "2.0.0" - resolved "https://registry.yarnpkg.com/@actions/github/-/github-2.0.0.tgz#5b066b1a8747bbf48d47a058d9c241a2e37d5ee7" - integrity sha512-sNpZ5dJyJyfJIO5lNYx8r/Gha4Tlm8R0MLO2cBkGdOnAAEn3t1M/MHVcoBhY/VPfjGVe5RNAUPz+6INrViiUPA== +"@actions/github@^2.0.1": + version "2.1.0" + resolved "https://registry.yarnpkg.com/@actions/github/-/github-2.1.0.tgz#ca36cfb146b4c8955f3d5f88d8dde5f89194de21" + integrity sha512-G4ncMlh4pLLAvNgHUYUtpWQ1zPf/VYqmRH9oshxLabdaOOnp7i1hgSgzr2xne2YUaSND3uqemd3YYTIsm2f/KQ== dependencies: + "@actions/http-client" "^1.0.3" "@octokit/graphql" "^4.3.1" "@octokit/rest" "^16.15.0" +"@actions/http-client@^1.0.3": + version "1.0.6" + resolved "https://registry.yarnpkg.com/@actions/http-client/-/http-client-1.0.6.tgz#6f9267ca50e1d74d8581f4a894a943cd4c97b49a" + integrity sha512-LGmio4w98UyGX33b/W6V6Nx/sQHRXZ859YlMkn36wPsXPB82u8xTVlA/Dq2DXrm6lEq9RVmisRJa1c+HETAIJA== + dependencies: + tunnel "0.0.6" + "@actions/io@^1.0.1": version "1.0.1" resolved "https://registry.yarnpkg.com/@actions/io/-/io-1.0.1.tgz#81a9418fe2bbdef2d2717a8e9f85188b9c565aca" @@ -5769,6 +5777,11 @@ tunnel-agent@^0.6.0: dependencies: safe-buffer "^5.0.1" +tunnel@0.0.6: + version "0.0.6" + resolved "https://registry.yarnpkg.com/tunnel/-/tunnel-0.0.6.tgz#72f1314b34a5b192db012324df2cc587ca47f92c" + integrity sha512-1h/Lnq9yajKY2PEbBadPXj3VxsDDu844OnaAo52UVmIzIvwwtBPIuNvkjuzBlTWpfJyUbG3ez0KSBibQkj4ojg== + tweetnacl@^0.14.3, tweetnacl@~0.14.0: version "0.14.5" resolved "https://registry.yarnpkg.com/tweetnacl/-/tweetnacl-0.14.5.tgz#5ae68177f192d4456269d108afa93ff8743f4f64"