-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): bump @hey-api/client-fetch from 0.6.0 to 0.7.0 #117
chore(deps): bump @hey-api/client-fetch from 0.6.0 to 0.7.0 #117
Conversation
Minder Vulnerability Report ✅Minder analyzed this PR and found it does not add any new vulnerable dependencies.
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.2 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 36 |
Number of git tags or releases | 168 |
Versions matched to tags or releases | 35 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=162356337 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
isomorphic-fetch | 0 |
Pull Request Test Coverage Report for Build 12865054690Details
💛 - Coveralls |
2ddbdcc
to
6605d10
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.2 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 36 |
Number of git tags or releases | 168 |
Versions matched to tags or releases | 35 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=162356337 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
node-fetch | 0 | |
isomorphic-fetch | 0 |
6605d10
to
82c29d3
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.2 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 36 |
Number of git tags or releases | 168 |
Versions matched to tags or releases | 35 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=162356337 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
node-fetch | 0 | |
isomorphic-fetch | 0 |
82c29d3
to
bad9f25
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.2 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 36 |
Number of git tags or releases | 168 |
Versions matched to tags or releases | 35 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=162356337 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
node-fetch | 0 | |
isomorphic-fetch | 0 |
bad9f25
to
ce28005
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.2 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 36 |
Number of git tags or releases | 168 |
Versions matched to tags or releases | 35 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=162356337 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
node-fetch | 0 | |
isomorphic-fetch | 0 |
Bumps [@hey-api/client-fetch](https://github.com/hey-api/openapi-ts) from 0.6.0 to 0.7.0. - [Release notes](https://github.com/hey-api/openapi-ts/releases) - [Changelog](https://github.com/hey-api/openapi-ts/blob/main/docs/CHANGELOG.md) - [Commits](https://github.com/hey-api/openapi-ts/compare/@hey-api/[email protected]...@hey-api/[email protected]) --- updated-dependencies: - dependency-name: "@hey-api/client-fetch" dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
ce28005
to
90dfd8f
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.2 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 36 |
Number of git tags or releases | 168 |
Versions matched to tags or releases | 35 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=162356337 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
node-fetch | 0 | |
isomorphic-fetch | 0 |
Superseded by #153. |
Bumps @hey-api/client-fetch from 0.6.0 to 0.7.0.
Release notes
Sourced from
@hey-api/client-fetch
's releases.Changelog
Sourced from
@hey-api/client-fetch
's changelog.... (truncated)
Commits
55f27bf
Merge pull request #1567 from hey-api/changeset-release/main91a83c1
Version Packagesf8bf82d
Merge pull request #1568 from hey-api/feat/experimental-parser-release465410c
feat: change the default parserf5e5fca
Merge pull request #1566 from hey-api/fix/sdk-options-override39d558a
fix: spread sdk options at the end to allow overriding generated valuesfc7ebbd
Merge pull request #1553 from hey-api/changeset-release/mainddcdddc
Version Packagescfe6c77
Merge pull request #1560 from hey-api/docs/announcemente8634a9
docs: add announcement componentDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)