dependabot
Bump the dependencies group with 2 updates
Bumps the dependencies group with 2 updates: @actions/core and @actions/github.
Updates @actions/core from 1.10.0 to 1.11.1
Changelog
Sourced from @actions/core's changelog.
1.11.1
- Fix uses of
crypto.randomUUIDon Node 18 and earlier #18421.11.0
1.10.1
- Fix error message reference in oidc utils #1511
Commits
- See full diff in compare view
Updates @actions/github from 5.1.1 to 6.0.0
Changelog
Sourced from @actions/github's changelog.
6.0.0
- Support the latest Octokit in
@actions/github#1553
- Drop support of NodeJS v14, v16
Commits
- See full diff in compare view
You can trigger a rebase of this PR by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency -
@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) -
@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) -
@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) -
@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency -
@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions
Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "Published by a pub.dev verified publisher"){kind=small}
9s Run npm test
[email protected] test jest
PASS src/dependabot/update_metadata.test.ts (6317 ms) Error: github-token is not set! Please add 'github-token: "${{ secrets.GITHUB_TOKEN }}"' to your workflow file.
PASS src/main.test.ts (6843 ms)
Error: HttpError: Bad credentials - https://docs.github.com/rest
at node_modules/@octokit/request/dist-node/index.js:125:21
at getMessage (src/dependabot/verified_commits.ts:32:29)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:49:10)
Error: HttpError: Bad credentials - https://docs.github.com/rest
at node_modules/@octokit/request/dist-node/index.js:125:21
at getMessage (src/dependabot/verified_commits.ts:32:29)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:70:10)
Error: HttpError: Bad credentials - https://docs.github.com/rest
at node_modules/@octokit/request/dist-node/index.js:125:21
at getMessage (src/dependabot/verified_commits.ts:32:29)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:87:10)
Error: HttpError: Bad credentials - https://docs.github.com/rest
at node_modules/@octokit/request/dist-node/index.js:125:21
at getMessage (src/dependabot/verified_commits.ts:32:29)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:106:10)
Error: HttpError: Bad credentials - https://docs.github.com/rest
at node_modules/@octokit/request/dist-node/index.js:125:21
at getMessage (src/dependabot/verified_commits.ts:32:29)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:125:10)
Error: HttpError: Bad credentials - https://docs.github.com/rest
at node_modules/@octokit/request/dist-node/index.js:125:21
at getMessage (src/dependabot/verified_commits.ts:32:29)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:149:10)
Error: HttpError: Bad credentials - https://docs.github.com/graphql
at node_modules/@octokit/request/dist-node/index.js:125:21
at getAlert (src/dependabot/verified_commits.ts:60:23)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:196:10)
Error: HttpError: Bad credentials - https://docs.github.com/graphql
at node_modules/@octokit/request/dist-node/index.js:125:21
at getAlert (src/dependabot/verified_commits.ts:60:23)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:208:10)
Error: HttpError: Bad credentials - https://docs.github.com/graphql
at node_modules/@octokit/request/dist-node/index.js:125:21
at getAlert (src/dependabot/verified_commits.ts:60:23)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:220:10)
Error: HttpError: Bad credentials - https://docs.github.com/graphql
at node_modules/@octokit/request/dist-node/index.js:125:21
at getAlert (src/dependabot/verified_commits.ts:60:23)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:232:10)
Error: HttpError: Bad credentials - https://docs.github.com/graphql
at node_modules/@octokit/request/dist-node/index.js:125:21
at getAlert (src/dependabot/verified_commits.ts:60:23)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:244:10)
FAIL src/dependabot/verified_commits.test.ts (6870 ms) ✓ it returns false if the action is not invoked on a PullRequest (8 ms) ✓ it returns false for an event triggered by someone other than Dependabot (1 ms) ✕ it returns false if the commit was authored by someone other than Dependabot (142 ms) ✕ it returns false if the commit is has no verification payload (62 ms) ✕ it returns the message if the commit is has no verification payload but verification is skipped (39 ms) ✕ it returns the message when skip-verification is enabled (52 ms) ✕ it returns false if the commit is not verified (36 ms) ✕ it returns the commit message for a PR authored exclusively by Dependabot with verified commits (33 ms) ✕ it returns the alert state if it matches all 3 (55 ms) ✕ it returns the alert state if it matches 2 and the version is blank (42 ms) ✕ it returns default if it does not match the version (28 ms) ✕ it returns default if it does not match the directory (46 ms) ✕ it returns default if it does not match the name (32 ms) ✓ trimSlashes should only trim slashes from both ends (1 ms) ✓ getCompatibility pulls out the score (21 ms) ✓ getCompatibility fails gracefully (5 ms) ✓ getCompatibility handles errors (4 ms)
PASS src/dependabot/output.test.ts (937 ms)
Errors thrown in src/dependabot/verified_commits.test.ts
Test Suites: 1 failed, 3 passed, 4 total Tests: 11 failed, 36 passed, 47 total Snapshots: 0 total Time: 8.061 s Ran all test suites. Error: Process completed with exit code 1. 0s NO GITHUB TOKEN IS NOT SET EITHER. NEEDS WORK.
