Files
webhook-action/package.json
Joel Male 0aba98e44b fix: resolve security vulnerabilities in dependencies
- Upgraded @actions/core 1.x -> 2.x (removes bundled vulnerable undici)
- Upgraded @actions/github 6.x -> 7.x (ESM-compatible with ncc)
- Upgraded @actions/http-client to ^4.0.1
- Upgraded @typescript-eslint/parser to ^7.x (matches plugin version)
- Upgraded uuid dev dep to ^11.1.1
- Added npm overrides and yarn resolutions to pin undici >= 6.26.0, braces >= 3.0.3, micromatch >= 4.0.8
- Rebuilt dist with updated dependencies

Resolves: undici CVE-2026-1526, CVE-2026-2229, braces CVE-2024-4068, micromatch CVE-2024-4067
2026-06-02 09:42:18 +10:00

61 lines
1.5 KiB
JSON

{
"name": "webhook-action",
"version": "2.4.1",
"description": "Github Webhook Action",
"main": "dist/main.js",
"scripts": {
"build": "tsc && ncc build --license licenses.txt",
"format": "prettier --write '**/*.ts'",
"format-check": "prettier --check '**/*.ts'",
"lint": "eslint src/**/*.ts",
"test": "jest",
"all": "npm run format && npm run lint && npm run test&& npm run build"
},
"repository": {
"type": "git",
"url": "git+https://github.com/joelwmale/webhook-action.git"
},
"keywords": [
"github",
"actions",
"node",
"webhook",
"action"
],
"author": "Joel Male",
"license": "MIT",
"dependencies": {
"@actions/core": "^2.0.3",
"@actions/github": "^7.0.0",
"@actions/http-client": "^4.0.1",
"@vercel/ncc": "^0.38.4",
"node-fetch": "^3.3.2"
},
"devDependencies": {
"@babel/preset-env": "^7.20.2",
"@types/node": "^18.19.26",
"@typescript-eslint/eslint-plugin": "^7.4.0",
"@typescript-eslint/parser": "^7.18.0",
"babel-jest": "^29.3.1",
"eslint": "^8.57.0",
"eslint-plugin-github": "^4.10.2",
"eslint-plugin-jest": "^27.9.0",
"https": "^1.0.0",
"jest": "^29.7.0",
"js-yaml": "^4.1.0",
"prettier": "3.2.5",
"semver": "^7.6.0",
"ts-jest": "^29.0.3",
"typescript": "^5.4.3",
"uuid": "^11.1.1"
},
"overrides": {
"undici": "^6.26.0"
},
"resolutions": {
"undici": "^6.26.0",
"braces": "^3.0.3",
"micromatch": "^4.0.8"
}
}