fetch-metadata

fetch-metadata copied to clipboard

`fetch-metadata` action returns `/` for directory output

1

I am using the `dependabot/fetch-metadata` action (latest version) in my workflow to handle Dependabot pull requests. However, I am encountering an issue where the `directory` output is returning `/` for...

navruzm

Given a branch name with a non-standard separator like: `dependabot|pip|dirname|dirname|stripe-8.1.0`: fetch-metadata incorrectly constructs the directory name as `/dirname|dirname` when it should be `/dirname/dirname`.

dreid

Adds several fields for alerts

5

timothy-humphrey

Adds multiple path matching

1

Covers situations where vulnerableManifestPath does not include a directory. Example: Dependency Names = nth-check, @svgr/webpack Directory = "/nth-check-and-svgr" Package Ecosystem = npm_and_yarn vulnerableManifestFilename = "package-lock.json" vulnerableManifestPath = "package-lock.json" ghsa-id =...

timothy-humphrey

Allow for additional event types / Ignore "pull-request"+"pull-request-target" event types?

1

Hello 👋 ! First of all, thanks for a great Github Actions plugin! Second, I'd like to create a feature-request in regards to which events being listened too (or rather,...

vegaasen

Add alert number to outputs

1

Having the alert number linked to the PR could be really useful when trying to get about the alert through the GitHub REST API

LeonardoBerlatto

This would be really useful to have this value easily extracted and it would be possible to do many integrations with it. If the PR is linked to a security...

LeonardoBerlatto

Fetch Metadata action returns null update-type output for pull requests

14

## Description I am using the `dependabot/fetch-metadata` action (v1.3.6) in my workflow to handle Dependabot pull requests. However, I am encountering an issue where the `update-type` output is returning null,...

oguzhanmeteozturk

Support `newVersion` and `prevVersion` for updates with multiple dependencies

2

Add support for the `newVersion` and `prevVersion` fields for updates with multiple dependencies. Right now these fields are empty when there are multiple dependencies, so this affects both [grouped updates](https://github.com/dependabot/fetch-metadata/pull/396/commits/b534cb5e81bd66664f33772f7d740d370980104d)...

Nishnha

Auto-merge not adhering to Branch Protection Rules

3

First and foremost, I am not 100% confident this is the right place to report this in. So, if not, feel free to move my request or me somewhere else....

smcvb