search

actions / attest-sbom

Action for generating SBOM attestations for workflow artifacts
MIT License
18 stars 4 forks source link

Bump the npm-development group with 3 updates #99

Closed dependabot[bot] closed 3 weeks ago

dependabot[bot] commented 3 weeks ago

Bumps the npm-development group with 3 updates: @actions/attest, @types/node and ts-jest.

Updates @actions/attest from 1.4.0 to 1.4.1

Changelog

Sourced from @​actions/attest's changelog.

1.4.1

  • Bump @​actions/http-client from 2.2.1 to 2.2.3 #1805
Commits


Updates @types/node from 22.4.1 to 22.5.0

Commits


Updates ts-jest from 29.2.4 to 29.2.5

Release notes

Sourced from ts-jest's releases.

v29.2.5

Please refer to CHANGELOG.md for details.

Changelog

Sourced from ts-jest's changelog.

29.2.5 (2024-08-23)

Bug Fixes

  • build: build package with NodeNext module (9b3ade5)
  • fix: set value ts/tsx extensionsToTreatAsEsm in default esm preset (d9ff362)
  • fix(compiler): fallback to NodeJS module resolution for ts 4.8 (b7d3409), closes #4499
Commits
  • 500a863 chore(release): 29.2.5
  • dce986e build(deps): Update dependency @​babel/preset-env to ^7.25.4
  • 48a28a6 build(deps): Update dependency vite to ^5.4.2
  • d9ff362 fix: set value ts/tsx extensionsToTreatAsEsm in default esm preset
  • 00550ef test: add e2e test case for ESM features
  • 978169b build(deps): Update dependency @​types/node to v20.16.1
  • e9a643c build(deps): Update dependency @​types/node to v20.16.0
  • 535edab build(deps): Update dependency @​types/node to v20.15.0
  • 011a9d8 build(deps): Update dependency vite to ^5.4.1
  • 4eb8ccd build: update renovate bot
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions