-
Notifications
You must be signed in to change notification settings - Fork 5
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): update advanced-security/maven-dependency-submission-action action to v4 #30
Conversation
Dependency Review✅ No vulnerabilities or license issues found.Scanned Manifest Files.github/workflows/java-maven-openjdk-dependency-submission.yml
|
@@ -52,7 +52,7 @@ jobs: | |||
${{ runner.os }}-maven- | |||
|
|||
- name: Submit Dependency Snapshot | |||
uses: advanced-security/maven-dependency-submission-action@v3 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hello @jebeaudet, do you think you could test this update too?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sure, from the release notes it seems the only breaking thing is the name of the report, but we didn't use that afaik
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Marche bien leur affaire
/usr/bin/docker exec 6c2a38d387a518a6ab933caa14c4caead85dffe3342bb8cdf2639e0a57d25f95 sh -c "cat /etc/*release | grep ^ID"
ReferenceError: require is not defined in ES module scope, you can use import instead
This file is being treated as an ES module because it has a '.js' file extension and '/__w/_actions/advanced-security/maven-dependency-submission-action/v4/dist/package.json' contains "type": "module". To treat it as a CommonJS script, rename it to use the '.cjs' file extension.
at eval (eval at 5178 (file:///__w/_actions/advanced-security/maven-dependency-submission-action/v4/node_modules/@vercel/ncc/dist/ncc/@@notfound.js:1:1), <anonymous>:1:1)
at Object.5178 (file:///__w/_actions/advanced-security/maven-dependency-submission-action/v4/node_modules/@vercel/ncc/dist/ncc/@@notfound.js:1:1)
at __nccwpck_require__ (file:///__w/_actions/advanced-security/maven-dependency-submission-action/v4/webpack/bootstrap:21:1)
at file:///__w/_actions/advanced-security/maven-dependency-submission-action/v4/dist/index.js:30[9](https://github.com/coveo/authorizationserver/actions/runs/8020670938/job/21910986360?pr=1910#step:5:10)38:35
at file:///__w/_actions/advanced-security/maven-dependency-submission-action/v4/dist/index.js:30986:3
at ModuleJob.run (node:internal/modules/esm/module_job:217:25)
at ModuleLoader.import (node:internal/modules/esm/loader:316:24)
at loadESM (node:internal/process/esm_loader:34:7)
at handleMainPromise (node:internal/modules/run_main:66:[12](https://github.com/coveo/authorizationserver/actions/runs/8020670938/job/21910986360?pr=1910#step:5:13))```
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Alright, on ice for now then! Thanks :)
DEF-160
This PR contains the following updates:
v3
->v4
Release Notes
advanced-security/maven-dependency-submission-action (advanced-security/maven-dependency-submission-action)
v4
Compare Source
Configuration
📅 Schedule: Branch creation - "before 4am on Monday" in timezone America/Toronto, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by the Coveo Renovate Bot