GITHUB_MIRRORS/setup-python
1
0
Fork 0
mirror of https://github.com/actions/setup-python.git synced 2026-08-27 23:38:58 -04:00
Code Issues Packages Projects Releases Wiki Activity
518 Commits 23 Branches 65 Tags
main
Commit Graph
5 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
HarithaandCopilot 9191ea1a55 fix: resolve npm audit high severity vulnerabilities (#1350) 
Bumps transitive dependencies to patched versions:
- brace-expansion 5.0.8 -> 5.0.9 (GHSA-rgw5-rvv9-x895)
- js-yaml 3.15.0 -> 3.15.1 (GHSA-5p4m-2wfm-xmqj)
- undici 6.27.0 -> 6.28.0 (GHSA-8xcm-r25x-g524, GHSA-m8rv-5g2x-5cg5, GHSA-v3r7-h72x-cjcm)

Refreshes .licenses/ cache for the updated packages and rebuilds dist/.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-08-18 08:57:23 -05:00
HarithaandCopilot 8549b9f8f5 fix: resolve npm audit high severity vulnerabilities (#1347) 
- Upgrade fast-xml-parser to 5.10.1 (fixes GHSA-8r6m-32jq-jx6q)
- Add package.json override to force brace-expansion >=5.0.8 across
  all transitive dependencies (fixes GHSA-mh99-v99m-4gvg) without
  downgrading jest/ts-jest
- Refresh .licenses/npm cache to match updated dependency tree
- Rebuild dist/setup and dist/cache-save

npm audit now reports 0 vulnerabilities. Pre-existing test suite
failures (7 suites, ESM/jest teardown issue) verified unrelated to
this change - identical on unmodified main with node 24.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-08-03 11:18:19 -05:00
Haritha 5fda3b95a4 Pin SHA commits and update docs with latest versions (#1338) 
* Update GitHub Actions to use checkout and setup-python actions version 7

* Fix formatting in publish-immutable-actions.yml
 2026-07-19 22:02:03 -05:00
Harithaandcopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> d2b357a6a3 Update dependency versions and test workflow configuration (#1322) 
* chore: update dependencies in project configuration files

* Add bootstrap step for packaging tools

Added a step to bootstrap packaging tools before installing dependencies.

* Resolve audit issues

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
 2026-06-23 11:35:00 -05:00
HarithaVattikuti e3dfaac0fd Configure Dependabot settings (#1008) 
* Create dependabot.yml

* Update e2e-cache.yml
 2025-01-22 12:59:38 -06:00