Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump node-fetch from 2.6.6 to 2.6.7 #105

Merged
merged 1 commit into from
Sep 22, 2022

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 25, 2022

Bumps node-fetch from 2.6.6 to 2.6.7.

Release notes

Sourced from node-fetch's releases.

v2.6.7

Security patch release

Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred

What's Changed

Full Changelog: node-fetch/node-fetch@v2.6.6...v2.6.7

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.6 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.6...v2.6.7)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 25, 2022
@machulav machulav merged commit 6b4d495 into main Sep 22, 2022
@machulav machulav deleted the dependabot/npm_and_yarn/node-fetch-2.6.7 branch September 22, 2022 10:29
johnsonrw82 pushed a commit to physion/ec2-github-runner that referenced this pull request Oct 27, 2022
* Use the paginate API call to get all runners instead of just the first page. (machulav#51)

* Update dist

* Bump glob-parent from 5.1.1 to 5.1.2 (machulav#47)

Bumps [glob-parent](https://github.com/gulpjs/glob-parent) from 5.1.1 to 5.1.2.
- [Release notes](https://github.com/gulpjs/glob-parent/releases)
- [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md)
- [Commits](gulpjs/glob-parent@v5.1.1...v5.1.2)

---
updated-dependencies:
- dependency-name: glob-parent
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix PR automation, update the action version in the example (machulav#54)

* Update tag in the example

* Remove package from the PR automations

* Allow user to pass in a custom actions-runner directory (machulav#56)

* Allow user to pass in a custom actions-runner directory which contains pre-installed runner software and scripts

* Add comment

* Fix input refs

* Fix linter error

* Update dist

* Update the runner version to the latest one (machulav#67)

* Update dist

* fix: `invalid culture identifier` (machulav#88)

* remove `DOTNET_SYSTEM_GLOBALIZATION_INVARIANT`

* build index.js

Signed-off-by: Alex Chi <iskyzh@gmail.com>

* Version updates (machulav#92)

* Update runner version

* Update package-lock.json

* Update dist

* Add link for donation to help Ukraine protect itself from russian occupants

* Update donation URL

* Update wordings

* Bump @actions/core from 1.6.0 to 1.9.1 (machulav#109)

Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.6.0 to 1.9.1.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update dist

* Bump node-fetch from 2.6.6 to 2.6.7 (machulav#105)

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.6 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.6...v2.6.7)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update dist

* bump to node16 in action.yml

* lint error

* update dist file

* Revert "update dist file"

This reverts commit fa73d35.

* use buildUserDataScript and remove trailing comma

Signed-off-by: Alex Chi <iskyzh@gmail.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Davin Chia <davinchia@gmail.com>
Co-authored-by: GitHub Actions <runner@fv-az93-126.zwmoqlwq51iuvls2zdlc0jzybe.xx.internal.cloudapp.net>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Volodymyr Machula <machulav@gmail.com>
Co-authored-by: Jukka Palomäki <jukka.palomaki@paf.com>
Co-authored-by: GitHub Actions <runner@fv-az90-268.oknmvzgco44exlvyi5fejcivhg.gx.internal.cloudapp.net>
Co-authored-by: Alex Chi <iskyzh@gmail.com>
Co-authored-by: GitHub Actions <runner@fv-az238-896.lrtv1j1tcsgurjp4mtmc3vvjre.gx.internal.cloudapp.net>
Co-authored-by: GitHub Actions <runner@fv-az335-98.st3fsr2bvbpu5iwsufzt3hrohh.gx.internal.cloudapp.net>
Co-authored-by: GitHub Actions <runner@fv-az502-646.yzlryxntam3u3auahceqrxiktg.dx.internal.cloudapp.net>
johnsonrw82 added a commit to physion/ec2-github-runner that referenced this pull request Dec 7, 2023
* Use the paginate API call to get all runners instead of just the first page. (machulav#51)

* Update dist

* Bump glob-parent from 5.1.1 to 5.1.2 (machulav#47)

Bumps [glob-parent](https://github.com/gulpjs/glob-parent) from 5.1.1 to 5.1.2.
- [Release notes](https://github.com/gulpjs/glob-parent/releases)
- [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md)
- [Commits](gulpjs/glob-parent@v5.1.1...v5.1.2)

---
updated-dependencies:
- dependency-name: glob-parent
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix PR automation, update the action version in the example (machulav#54)

* Update tag in the example

* Remove package from the PR automations

* Allow user to pass in a custom actions-runner directory (machulav#56)

* Allow user to pass in a custom actions-runner directory which contains pre-installed runner software and scripts

* Add comment

* Fix input refs

* Fix linter error

* Update dist

* Update the runner version to the latest one (machulav#67)

* Update dist

* fix: `invalid culture identifier` (machulav#88)

* remove `DOTNET_SYSTEM_GLOBALIZATION_INVARIANT`

* build index.js

Signed-off-by: Alex Chi <iskyzh@gmail.com>

* Version updates (machulav#92)

* Update runner version

* Update package-lock.json

* Update dist

* Add link for donation to help Ukraine protect itself from russian occupants

* Update donation URL

* Update wordings

* Bump @actions/core from 1.6.0 to 1.9.1 (machulav#109)

Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.6.0 to 1.9.1.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update dist

* Bump node-fetch from 2.6.6 to 2.6.7 (machulav#105)

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.6 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.6...v2.6.7)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update dist

* Fix deprecation warnings (machulav#123)

* Update node version

* Update version of packages

* Update version of runner

* Update version of actions

* Update dist

* Add required package to the documentation

* Add 'pre-runner-script' option (machulav#154)

Add a 'pre-runner-script' option to specify arbitrary bash commands to run
before the runner starts up on the instance.  This is useful if you need
to install dependencies or have OS-specific setup steps.  For example:

      - name: Start EC2 runner
        with:
	 mode: start
	 ec2-image-id: ami-07bdb09c49774f92e
	 pre-runner-script: |
	      sudo yum update -y && \
	      sudo yum install docker git libicu -y \
	      sudo systemctl enable docker

Signed-off-by: Tony Hutter <hutter2@llnl.gov>

* Compile dist

* Removing dist

---------

Signed-off-by: Alex Chi <iskyzh@gmail.com>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Tony Hutter <hutter2@llnl.gov>
Co-authored-by: Davin Chia <davinchia@gmail.com>
Co-authored-by: GitHub Actions <runner@fv-az93-126.zwmoqlwq51iuvls2zdlc0jzybe.xx.internal.cloudapp.net>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Volodymyr Machula <machulav@gmail.com>
Co-authored-by: Jukka Palomäki <jukka.palomaki@paf.com>
Co-authored-by: GitHub Actions <runner@fv-az90-268.oknmvzgco44exlvyi5fejcivhg.gx.internal.cloudapp.net>
Co-authored-by: Alex Chi <iskyzh@gmail.com>
Co-authored-by: GitHub Actions <runner@fv-az238-896.lrtv1j1tcsgurjp4mtmc3vvjre.gx.internal.cloudapp.net>
Co-authored-by: GitHub Actions <runner@fv-az335-98.st3fsr2bvbpu5iwsufzt3hrohh.gx.internal.cloudapp.net>
Co-authored-by: GitHub Actions <runner@fv-az502-646.yzlryxntam3u3auahceqrxiktg.dx.internal.cloudapp.net>
Co-authored-by: Tony Hutter <hutter2@llnl.gov>
johnsonrw82 added a commit to physion/ec2-github-runner that referenced this pull request Dec 7, 2023
* Use the paginate API call to get all runners instead of just the first page. (machulav#51)

* Update dist

* Bump glob-parent from 5.1.1 to 5.1.2 (machulav#47)

Bumps [glob-parent](https://github.com/gulpjs/glob-parent) from 5.1.1 to 5.1.2.
- [Release notes](https://github.com/gulpjs/glob-parent/releases)
- [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md)
- [Commits](gulpjs/glob-parent@v5.1.1...v5.1.2)

---
updated-dependencies:
- dependency-name: glob-parent
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix PR automation, update the action version in the example (machulav#54)

* Update tag in the example

* Remove package from the PR automations

* Allow user to pass in a custom actions-runner directory (machulav#56)

* Allow user to pass in a custom actions-runner directory which contains pre-installed runner software and scripts

* Add comment

* Fix input refs

* Fix linter error

* Update dist

* Update the runner version to the latest one (machulav#67)

* Update dist

* fix: `invalid culture identifier` (machulav#88)

* remove `DOTNET_SYSTEM_GLOBALIZATION_INVARIANT`

* build index.js

Signed-off-by: Alex Chi <iskyzh@gmail.com>

* Version updates (machulav#92)

* Update runner version

* Update package-lock.json

* Update dist

* Add link for donation to help Ukraine protect itself from russian occupants

* Update donation URL

* Update wordings

* Bump @actions/core from 1.6.0 to 1.9.1 (machulav#109)

Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.6.0 to 1.9.1.
- [Release notes](https://github.com/actions/toolkit/releases)
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update dist

* Bump node-fetch from 2.6.6 to 2.6.7 (machulav#105)

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.6 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.6...v2.6.7)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update dist

* Fix deprecation warnings (machulav#123)

* Update node version

* Update version of packages

* Update version of runner

* Update version of actions

* Update dist

* Add required package to the documentation

* Add 'pre-runner-script' option (machulav#154)

Add a 'pre-runner-script' option to specify arbitrary bash commands to run
before the runner starts up on the instance.  This is useful if you need
to install dependencies or have OS-specific setup steps.  For example:

      - name: Start EC2 runner
        with:
	 mode: start
	 ec2-image-id: ami-07bdb09c49774f92e
	 pre-runner-script: |
	      sudo yum update -y && \
	      sudo yum install docker git libicu -y \
	      sudo systemctl enable docker

Signed-off-by: Tony Hutter <hutter2@llnl.gov>

* Compile dist

* Removing dist

* Add back dist

---------

Signed-off-by: Alex Chi <iskyzh@gmail.com>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Tony Hutter <hutter2@llnl.gov>
Co-authored-by: Davin Chia <davinchia@gmail.com>
Co-authored-by: GitHub Actions <runner@fv-az93-126.zwmoqlwq51iuvls2zdlc0jzybe.xx.internal.cloudapp.net>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Volodymyr Machula <machulav@gmail.com>
Co-authored-by: Jukka Palomäki <jukka.palomaki@paf.com>
Co-authored-by: GitHub Actions <runner@fv-az90-268.oknmvzgco44exlvyi5fejcivhg.gx.internal.cloudapp.net>
Co-authored-by: Alex Chi <iskyzh@gmail.com>
Co-authored-by: GitHub Actions <runner@fv-az238-896.lrtv1j1tcsgurjp4mtmc3vvjre.gx.internal.cloudapp.net>
Co-authored-by: GitHub Actions <runner@fv-az335-98.st3fsr2bvbpu5iwsufzt3hrohh.gx.internal.cloudapp.net>
Co-authored-by: GitHub Actions <runner@fv-az502-646.yzlryxntam3u3auahceqrxiktg.dx.internal.cloudapp.net>
Co-authored-by: Tony Hutter <hutter2@llnl.gov>
mmoriani pushed a commit to ottimis/ec2-github-runner that referenced this pull request Feb 15, 2024
Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.6 to 2.6.7.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](node-fetch/node-fetch@v2.6.6...v2.6.7)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant