Skip to content

Commit 685f94f

Browse files
committed
chore(deps): Update dependencies and resolve security vulnerabilities
- Update actions/setup-node from v4 to v6 (#42) - Update github/codeql-action from v3 to v4 (#41) - Update actions/stale from v9 to v10 (#36) - Update @eslint/js from 9.33.0 to 9.38.0 (#44) - Update eslint from 9.32.0 to 9.38.0 (#43) - Remove coveralls package (vulnerable, not needed - GitHub Action handles it) Security fixes: - Resolved 4 vulnerabilities (2 moderate, 2 critical) - All npm audit issues resolved (0 vulnerabilities) All tests passing (224/224) All quality gates passing
1 parent 87f8bd2 commit 685f94f

File tree

7 files changed

+54
-628
lines changed

7 files changed

+54
-628
lines changed

.github/workflows/codeql-analysis.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ jobs:
4242

4343
# Initializes the CodeQL tools for scanning.
4444
- name: Initialize CodeQL
45-
uses: github/codeql-action/init@v3
45+
uses: github/codeql-action/init@v4
4646
with:
4747
languages: ${{ matrix.language }}
4848
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -53,7 +53,7 @@ jobs:
5353
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
5454
# If this step fails, then you should remove it and run the build manually (see below)
5555
- name: Autobuild
56-
uses: github/codeql-action/autobuild@v3
56+
uses: github/codeql-action/autobuild@v4
5757

5858
# ℹ️ Command-line programs to run using the OS shell.
5959
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -67,4 +67,4 @@ jobs:
6767
# make release
6868

6969
- name: Perform CodeQL Analysis
70-
uses: github/codeql-action/analyze@v3
70+
uses: github/codeql-action/analyze@v4

.github/workflows/node.js.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
steps:
2020
- uses: actions/checkout@v4
2121
- name: Use Node.js ${{ matrix.node-version }}
22-
uses: actions/setup-node@v4
22+
uses: actions/setup-node@v6
2323
with:
2424
node-version: ${{ matrix.node-version }}
2525
cache: "npm"

.github/workflows/npm-publish-github-packages.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414
steps:
1515
- uses: actions/checkout@v4
16-
- uses: actions/setup-node@v4
16+
- uses: actions/setup-node@v6
1717
with:
1818
node-version: 20
1919
- run: npm ci
@@ -29,7 +29,7 @@ jobs:
2929
packages: write
3030
steps:
3131
- uses: actions/checkout@v4
32-
- uses: actions/setup-node@v4
32+
- uses: actions/setup-node@v6
3333
with:
3434
node-version: 20
3535
registry-url: https://npm.pkg.github.com/

.github/workflows/npm-publish.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414
steps:
1515
- uses: actions/checkout@v4
16-
- uses: actions/setup-node@v4
16+
- uses: actions/setup-node@v6
1717
with:
1818
node-version: 20
1919
- run: npm ci
@@ -26,7 +26,7 @@ jobs:
2626
runs-on: ubuntu-latest
2727
steps:
2828
- uses: actions/checkout@v4
29-
- uses: actions/setup-node@v4
29+
- uses: actions/setup-node@v6
3030
with:
3131
node-version: 20
3232
registry-url: https://registry.npmjs.org/

.github/workflows/stale.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ jobs:
88
stale:
99
runs-on: ubuntu-latest
1010
steps:
11-
- uses: actions/stale@v9
11+
- uses: actions/stale@v10
1212
with:
1313
repo-token: ${{ secrets.GITHUB_TOKEN }}
1414
stale-issue-message: "This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs."

0 commit comments

Comments
 (0)