actions/add-and-commit
1
0
Fork 0
mirror of https://github.com/EndBug/add-and-commit.git synced 2026-08-29 08:02:18 -05:00
Code Issues Packages Projects Releases Wiki Activity
851 Commits 3 Branches 62 Tags
v11
Commit Graph
851 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Federico Grandi cc9c08ba6c 11.1.1 latest v11 v11.1.1 2026-08-19 16:48:07 +02:00
Federico GrandiGitHubCursor
 		3446398e33 fix: validate denylisted git args on every token (#784) 
Short-option clusters such as -Sm were treated as consuming the next
argument, which let --pathspec-from-file reach git and leak file
contents into workflow logs.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-19 14:47:41 +00:00
Dan ZiringandGitHub b0ca32735a fix: Remove GH var interpolation in action.yml docstring (#783) 
* fix: Remove GH var interpolation in action.yml docstring

* docs: reword to avoid escaping whole sentence
 2026-08-19 14:44:55 +00:00
Federico GrandiGitHubCursor
 		3e1240df48 docs: highlight untrusted git-arg interpolation as a warning callout (#781) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-19 01:04:34 +02:00
Federico Grandi fc1cf1dd87 11.1.0 v11.1.0 2026-08-19 00:43:00 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		f14ee6db07 chore(deps-dev): bump @vercel/ncc from 0.44.1 to 0.45.0 (#779) 
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.44.1 to 0.45.0.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.44.1...0.45.0)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-version: 0.45.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-18 22:37:54 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>github-actions <41898282+github-actions[bot]@users.noreply.github.com>
 		bccc19ea17 chore(deps): bump js-yaml from 5.2.3 to 5.3.0 (#780) 
* chore(deps): bump js-yaml from 5.2.3 to 5.3.0

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.2.3 to 5.3.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/5.2.3...5.3.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore: rebuild lib

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
 2026-08-19 00:35:07 +02:00
Federico GrandiandCursor 7a6d750564 ci: rebuild lib on Dependabot PRs so CI can re-run 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-19 00:29:42 +02:00
Federico GrandiGitHubCursor
 		66d71debe9 fix: reject glued quotes that string-argv would split into extra git flags (#778) 
* fix: reject glued quotes that string-argv would split into extra git flags

A balanced form like 'main'--force is still two argv tokens under string-argv, so refuse it before git push can see a standalone --force.

Co-authored-by: Cursor <cursoragent@cursor.com>

* docs: describe glued-quote rejection as an argument-boundary check

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-16 23:48:44 +00:00
Federico GrandiGitHubCursor
 		60ff4bbcac fix: neutralize workflow-command injection in info logs (#776) 
core.info writes raw stdout, so inputs like message could inject
::stop-commands:: via a newline. Route info through safeInfo().

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-16 23:41:44 +00:00
Federico GrandiGitHubCursor
 		c8ad2e2815 fix: reject --pathspec-from-file to prevent log disclosure (#777) 
Git interpolates unmatched pathspecs into fatal errors, so these options can copy an arbitrary runner file into the action log.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-17 01:32:04 +02:00
allcontributors[bot]GitHuballcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
 		d809cc8948 docs: add louisabraham as a contributor for ideas (#775) 
* docs: update README.md

* docs: update .all-contributorsrc

---------

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
 2026-08-14 21:30:07 +00:00
allcontributors[bot]GitHuballcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
 		d903e56c18 docs: add ross-spencer as a contributor for bug (#774) 
* docs: update README.md

* docs: update .all-contributorsrc

---------

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
 2026-08-14 23:29:25 +02:00
Federico GrandiGitHubCursor
 		f0d523cb47 feat: treat pull: true as a default git pull (#498) (#773) 
YAML true was passed through as git pull arguments, so pull: true ran `git pull true` instead of a default pull.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-14 21:15:51 +00:00
Federico GrandiGitHubCursor
 		c5e28a6f24 fix: resolve absolute cwd without dumping the minified bundle (#495) (#772) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-14 21:11:22 +00:00
Federico GrandiGitHubCursor
 		ce01340b68 fix: block scheme:: remote helpers and restrict git transports (#771) 
* fix: block scheme:: remote helpers and restrict git transports

Harden fetch/pull/push argument handling against ext:: (and other
scheme::) remote-helper URLs, and allowlist safe transports by default,
with allow_unsafe_git_protocols as an explicit opt-out.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: quote allow_unsafe description and correct README anchor

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-14 21:21:17 +02:00
Federico GrandiGitHubCursor Agent
 		ee94c9b2c5 fix: reject remote-helper overrides skipped by -u (#770) 
matchGitArgs treated -u as always consuming the next token, so fetch/push
args like -u --upl=CMD bypassed the denylist. Validate remote-helper
options on every token and stop treating -u as a value option.

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
 2026-08-14 20:54:57 +02:00
allcontributors[bot]GitHuballcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
 		d229871fec docs: add jcbhmr as a contributor for ideas (#768) 
* docs: update README.md

* docs: update .all-contributorsrc

---------

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
 2026-08-09 23:18:21 +02:00
allcontributors[bot]GitHuballcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
 		60fbdfcaec docs: add nmattia as a contributor for ideas (#767) 
* docs: update README.md

* docs: update .all-contributorsrc

---------

Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
 2026-08-09 21:17:20 +00:00
Federico GrandiGitHubCursor
 		e1aaefa5cf feat: add dry_run input (#765) 
* feat: add dry_run input to preview without mutating

Closes #511

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: tighten dry_run typing and temp-index gitlink checks

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: seed empty temp index when HEAD is unborn

Co-authored-by: Cursor <cursoragent@cursor.com>

* test: broaden dry_run coverage and add update-tests rule

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-09 23:16:20 +02:00
Federico GrandiGitHubCursor
 		f958857000 test: add integration tests for the shipped action (#766) 
* test: add integration tests for the shipped action

Cover commit, tag, push, and pathspec flows against temp git fixtures with local bare remotes (#479).

Co-authored-by: Cursor <cursoragent@cursor.com>

* test: pin fixture default branch to main for CI

GitHub runners often have no init.defaultBranch set, so git config --get exits 1 and broke fixture setup.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-09 23:09:44 +02:00
Federico GrandiGitHubCursor
 		df70d113de feat: add push_attempts to retry failed pushes (#321) (#764) 
Allow concurrent workflows to recover from push races by re-pulling between attempts when pull is configured.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-09 20:33:31 +02:00
Federico Grandi 645ecc0dd0 11.0.0 v11.0.0 2026-08-09 01:07:55 +02:00
Federico GrandiGitHubCursor
 		06e788f69a fix: neutralize bidi and control chars in action logs (#763) 
* fix: neutralize bidi and control chars in action logs

Prevent Trojan Source-style filename spoofing when git status paths are printed via log(), and sanitize conflicted paths in pull errors.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: guard neutralizeForLog against circular references

Track visited arrays/objects with a WeakSet so log() returns a marker instead of overflowing on cyclic values.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-09 00:51:33 +02:00
Federico GrandiGitHubCursor
 		68ec86a31c ci: pin actions-tagger and restrict release workflow permissions (#762) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-09 00:36:00 +02:00
Federico GrandiGitHubCursor
 		f1bb0cc0a7 fix: do not report committed=true for empty commit SHA (#757) 
* fix: do not report committed=true for empty commit SHA

simple-git can resolve successfully with an empty commit hash when no
commit was actually created; keep the committed output accurate.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: stop tagging/pushing after empty commit SHA

Let empty-SHA failures reject so the outer catch stops the action instead of continuing after setFailed.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-08 22:21:22 +00:00
Federico GrandiGitHubCursor
 		ebc24bfdec fix: refuse unexpected gitlinks staged by git add (#761) 
* fix: refuse unexpected gitlinks staged by git add

Detect new mode-160000 entries after add via git diff --cached --raw so nested .git directories cannot be silently committed as attacker-chosen gitlinks.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: harden gitlink raw-diff parsing for renames

Accept scored R/C statuses and destination paths, and use -- in rm remediation hints.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-09 00:18:54 +02:00
Federico GrandiGitHubCursor
 		75038f8fb4 fix: reject unmatched quotes in matchGitArgs to prevent flag injection (#760) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-09 00:07:23 +02:00
Federico GrandiGitHubCursor
 		d07c930b6a fix: reject -F/--file git args that can exfiltrate runner files (#759) 
* fix: reject -F/--file git args that can exfiltrate runner files

Co-authored-by: Cursor <cursoragent@cursor.com>

* docs: document -F/--file blocks on tag and commit inputs

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: do not treat -m values as -F/--file flags

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-08 23:36:58 +02:00
Federico GrandiGitHubCursor
 		0971289a81 fix: stop logging full git config (credential leak) (#758) 
Avoid dumping listConfig().all via core.debug so checkout extraheader tokens are never written to action logs.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-08 23:16:29 +02:00
Federico GrandiGitHubCursor
 		c38a33b50a fix: verify committed lib/ matches source in CI (#756) 
* fix: verify committed lib/ matches source in CI

Add a post-build diff check so the shipped action bundle cannot drift from src without failing CI, even when local hooks are bypassed.

Co-authored-by: Cursor <cursoragent@cursor.com>

* chore: rebuild lib/ against lockfile for CI integrity check

Co-authored-by: Cursor <cursoragent@cursor.com>

* ci: tighten lib integrity check and workflow permissions

Detect untracked lib/ artifacts, drop checkout credentials, and document Node 24 for local builds.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-08 20:44:15 +00:00
Federico GrandiGitHubCursor
 		b4a0134716 fix: prevent git option injection via new_branch (#755) 
* fix: prevent git option injection via new_branch

Validate new_branch as a branch name and pass it after -- so values like --force cannot force-checkout or force-push.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: tighten new_branch validation and simplify checkout

Reject Unicode whitespace/C1 controls in branch names, and drop the checkout -- separator after early validation.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: validate new_branch with git check-ref-format

Reject invalid ref forms via check-ref-format --branch, align docs, and clarify the remote-helper warning wording.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-08 22:38:05 +02:00
Federico GrandiGitHubCursor
 		86ab5dca75 fix: reject remote-helper git flags that enable RCE (#754) 
* fix: reject remote-helper git flags that enable RCE

Block --upload-pack, --receive-pack, --exec (and abbreviations) in matchGitArgs so injected fetch/pull/push/tag_push args cannot execute local commands.

Co-authored-by: Cursor <cursoragent@cursor.com>

* chore(deps): bump simple-git to ^3.36.0

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: reject shortest Git abbreviations of remote-helper flags

Co-authored-by: Cursor <cursoragent@cursor.com>

* npm audit fix

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-08 19:55:37 +02:00
dependabot[bot]Federico Grandidependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Cursor
 		2b9ea5bc7f chore(deps-dev): bump typescript from 5.9.3 to v6 (#748) 
* chore(deps-dev): use TypeScript 6 instead of 7

TypeScript 7 lacks the compiler API required by ts-jest and ncc. Update tsconfig for TS6 breaking changes.

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Federico Grandi <fgrandi30@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-08 18:55:57 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		3dd9d9166d chore(deps): bump undici from 6.27.0 to 6.28.0 (#753) 
Bumps [undici](https://github.com/nodejs/undici) from 6.27.0 to 6.28.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.27.0...v6.28.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.28.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-08 18:26:30 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		80be11cd9c chore(deps): bump js-yaml from 5.2.1 to 5.2.2 (#751) 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.2.1 to 5.2.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/5.2.1...5.2.2)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-08 16:23:06 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		506b552d3d chore(deps-dev): bump ts-jest from 29.4.11 to 29.4.12 (#750) 
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.4.11 to 29.4.12.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.4.11...v29.4.12)

---
updated-dependencies:
- dependency-name: ts-jest
  dependency-version: 29.4.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-08 18:21:57 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		a65f80b151 chore(deps): bump js-yaml from 4.2.0 to 5.2.1 (#747) 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.2.0 to 5.2.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.2.0...5.2.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-20 23:14:22 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		4598e4feeb chore(deps-dev): bump @vercel/ncc from 0.38.4 to 0.44.1 (#746) 
Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.38.4 to 0.44.1.
- [Release notes](https://github.com/vercel/ncc/releases)
- [Commits](https://github.com/vercel/ncc/compare/0.38.4...0.44.1)

---
updated-dependencies:
- dependency-name: "@vercel/ncc"
  dependency-version: 0.44.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-20 23:13:25 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		df1d5f24eb ci(deps): bump actions/setup-node from 6 to 7 (#749) 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 01:12:08 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		a8e2f379c5 chore(deps): bump undici from 6.24.1 to 6.27.0 (#744) 
Bumps [undici](https://github.com/nodejs/undici) from 6.24.1 to 6.27.0.
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v6.24.1...v6.27.0)

---
updated-dependencies:
- dependency-name: undici
  dependency-version: 6.27.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 08:57:41 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		00d216f8f8 ci(deps): bump actions/checkout from 6 to 7 (#741) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-12 11:56:56 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		c6986aa2b7 chore(deps): bump js-yaml from 4.1.1 to 4.2.0 (#739) 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/commits)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-06 15:51:51 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		cc538c3632 chore(deps-dev): bump eslint-plugin-prettier from 5.5.5 to 5.5.6 (#738) 
Bumps [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) from 5.5.5 to 5.5.6.
- [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases)
- [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-plugin-prettier/compare/v5.5.5...v5.5.6)

---
updated-dependencies:
- dependency-name: eslint-plugin-prettier
  dependency-version: 5.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-06 17:49:20 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		12a805ecf2 chore(deps-dev): bump jest from 30.3.0 to 30.4.2 (#735) 
Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) from 30.3.0 to 30.4.2.
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest)

---
updated-dependencies:
- dependency-name: jest
  dependency-version: 30.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-29 08:07:24 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		df0b8f8a30 chore(deps-dev): bump ts-jest from 29.4.9 to 29.4.11 (#736) 
Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.4.9 to 29.4.11.
- [Release notes](https://github.com/kulshekhar/ts-jest/releases)
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.4.9...v29.4.11)

---
updated-dependencies:
- dependency-name: ts-jest
  dependency-version: 29.4.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-29 10:04:22 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		acccd2a9bd ci(deps): bump actions/dependency-review-action from 4 to 5 (#734) 
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4 to 5.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-16 12:47:31 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		bb0c6fb8ee chore(deps): bump @actions/core from 3.0.0 to 3.0.1 (#733) 
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 3.0.0 to 3.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)

---
updated-dependencies:
- dependency-name: "@actions/core"
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-09 17:08:23 +00:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		8e4266ae06 chore(deps): bump @actions/github from 9.1.0 to 9.1.1 (#732) 
Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) from 9.1.0 to 9.1.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

---
updated-dependencies:
- dependency-name: "@actions/github"
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-09 19:06:42 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		3455676f90 chore(deps): bump @actions/github from 9.0.0 to 9.1.0 (#729) 
Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) from 9.0.0 to 9.1.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github)

---
updated-dependencies:
- dependency-name: "@actions/github"
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-04-25 14:16:42 +02:00