-
Notifications
You must be signed in to change notification settings - Fork 0
[pull] main from actions:main #7
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Reviewer's Guide by SourceryThis pull request includes several significant changes across multiple packages in the actions/toolkit repository. The changes primarily focus on updating dependencies, improving error handling, enhancing security, and refactoring code for better performance and maintainability. Key updates include modifications to the artifact upload process, changes to OIDC token handling, improvements to the HTTP client, and updates to the glob and attest packages. Class diagram for OIDC Token HandlingclassDiagram
class OIDCConfig {
string issuer
string jwks_uri
}
class ClaimSet {
string iss
string ref
string sha
string repository
string event_name
string job_workflow_ref
string workflow_ref
string repository_id
string repository_owner_id
}
class OIDC {
+getIDTokenClaims(issuer: string): Promise<ClaimSet>
+decodeOIDCToken(token: string, issuer: string): Promise<JWTPayload>
+getJWKS(issuer: string): Promise<JSONWebKeySet>
+getIssuer(): string
}
OIDC --> OIDCConfig
OIDC --> ClaimSet
Class diagram for HTTP Client Proxy HandlingclassDiagram
class DecodedURL {
string username
string password
string href
}
class HttpClient {
+getProxyUrl(reqUrl: URL): URL | undefined
+getAgent(url: string): any
}
HttpClient --> DecodedURL
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We have skipped reviewing this pull request. It seems to have been created by a bot (hey, pull[bot]!). We assume it knows what it's doing!
…-release Prepare Cache v4.0.3 & Artifact v2.3.2 releases
fix link in `@actions/artifact` `RELEASES.md`
Fix cache tests
NPM Audit Fixes
NPM audit fixes
Bumps [@octokit/endpoint](https://github.com/octokit/endpoint.js) from 9.0.5 to 9.0.6. - [Release notes](https://github.com/octokit/endpoint.js/releases) - [Commits](octokit/endpoint.js@v9.0.5...v9.0.6) --- updated-dependencies: - dependency-name: "@octokit/endpoint" dependency-version: 9.0.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@octokit/request-error](https://github.com/octokit/request-error.js) from 5.1.0 to 5.1.1. - [Release notes](https://github.com/octokit/request-error.js/releases) - [Commits](octokit/request-error.js@v5.1.0...v5.1.1) --- updated-dependencies: - dependency-name: "@octokit/request-error" dependency-version: 5.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…s/attest/octokit/request-error-5.1.1 Bump @octokit/request-error from 5.1.0 to 5.1.1 in /packages/attest
…s/attest/octokit/endpoint-9.0.6 Bump @octokit/endpoint from 9.0.5 to 9.0.6 in /packages/attest
Bumps [undici](https://github.com/nodejs/undici) from 5.28.5 to 5.29.0. - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v5.28.5...v5.29.0) --- updated-dependencies: - dependency-name: undici dependency-version: 5.29.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
…s/attest/undici-5.29.0 Bump undici from 5.28.5 to 5.29.0 in /packages/attest
Use node24 for publishing
chore(cache): bump @actions/* dependencies to v2/v3
…eprecation warning
Prepare cache v5 release
chore(artifact): bump dependencies for Node.js 24 support
docs(artifact): add v5.0.0 release notes
… deprecation - Removed direct @azure/core-http dependency - Updated @azure/storage-blob from ^12.15.0 to ^12.29.1 - Newer storage-blob uses @azure/core-rest-pipeline instead of deprecated @azure/core-http - Fixes Node.js 24 deprecation warning for punycode module
…precation - Updated @azure/storage-blob from ^12.13.0 to ^12.29.1 - Newer storage-blob uses @azure/core-rest-pipeline instead of deprecated @azure/core-http - Fixes Node.js 24 deprecation warning for punycode module
fix(cache): update @azure/storage-blob to fix Node.js 24 punycode deprecation
fix(artifact): update @azure/storage-blob to fix Node.js 24 punycode deprecation
docs(cache): release @actions/cache v5.0.1
docs(artifact): release @actions/artifact v5.0.1
See Commits and Changes for more details.
Created by
pull[bot]
Can you help keep this open source service alive? 💖 Please sponsor : )