azure-devops-demo
azure-devops-demo copied to clipboard
slsa-framework
SLSA Azure DevOps Pipelines Extension
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/slsa-framework/azure-devops-demo). ## Config Migration Needed - [ ]...
![forking-renovate[bot] avatar](https://avatars.githubusercontent.com/in/7402?v=4 "forking-renovate[bot] avatar"){kind=avatar}
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [azure-pipelines-task-lib](https://redirect.github.com/Microsoft/azure-pipelines-task-lib) | [`4.1.0` -> `4.17.3`](https://renovatebot.com/diffs/npm/azure-pipelines-task-lib/4.1.0/4.17.3) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/)...
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v3` -> `v4` | | [actions/checkout](https://redirect.github.com/actions/checkout) |...
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v3.6.0` -> `v4.4.0` | --- ### Release...
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | major | `v2` -> `v3` | --- ### Release...
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | minor | `v3.6.0` -> `v3.9.1` | --- ### Release...
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | minor | `v3.5.0` -> `v3.6.0` | --- ### Release...
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4. Release notes Sourced from word-wrap's releases. 1.2.4 What's Changed Remove default indent by @mohd-akram in jonschlinkert/word-wrap#24 🔒fix: CVE 2023 26115 (2) by @OlafConijn in...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps [semver](https://github.com/npm/node-semver) from 5.7.1 to 5.7.2. Release notes Sourced from semver's releases. v5.7.2 5.7.2 (2023-07-10) Bug Fixes 2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys) Changelog Sourced from semver's...
This PR includes: - Moving `package.json`, `package-lock.json`, `.eslintrc.json`, and `task.json` to the root of the repository - Renaming `buildAndReleaseTask` to `src` - Adding the `build` task as an npm script...
