mirror of
https://github.com/joelwmale/webhook-action.git
synced 2026-06-12 02:36:00 -05:00
- Upgraded @actions/core 1.x -> 2.x (removes bundled vulnerable undici) - Upgraded @actions/github 6.x -> 7.x (ESM-compatible with ncc) - Upgraded @actions/http-client to ^4.0.1 - Upgraded @typescript-eslint/parser to ^7.x (matches plugin version) - Upgraded uuid dev dep to ^11.1.1 - Added npm overrides and yarn resolutions to pin undici >= 6.26.0, braces >= 3.0.3, micromatch >= 4.0.8 - Rebuilt dist with updated dependencies Resolves: undici CVE-2026-1526, CVE-2026-2229, braces CVE-2024-4068, micromatch CVE-2024-4067