Adrian Adewunmi
|
f45ec4cae0
|
Merge pull request #58 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/multi-96c788614a
chore(deps): bump on-headers and compression in /etc/quiz-app
|
2026-07-09 12:47:02 +01:00 |
adrian adewunmi
|
d281940e7b
|
ci(scorecard): use actions/download-artifact@v4 to avoid deprecated v3
|
2026-07-09 12:39:19 +01:00 |
adrian adewunmi
|
dddc4d2a71
|
chore(ci): remove dummy CI trigger file
|
2026-07-09 12:38:06 +01:00 |
dependabot[bot]
|
6acc19483f
|
chore(deps): bump on-headers and compression in /etc/quiz-app
Bumps [on-headers](https://github.com/jshttp/on-headers) and [compression](https://github.com/expressjs/compression). These dependencies needed to be updated together.
Updates `on-headers` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/jshttp/on-headers/releases)
- [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md)
- [Commits](https://github.com/jshttp/on-headers/compare/v1.0.2...v1.1.0)
Updates `compression` from 1.7.4 to 1.8.1
- [Release notes](https://github.com/expressjs/compression/releases)
- [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/compression/compare/1.7.4...v1.8.1)
---
updated-dependencies:
- dependency-name: on-headers
dependency-version: 1.1.0
dependency-type: indirect
- dependency-name: compression
dependency-version: 1.8.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-09 11:36:55 +00:00 |
adrian adewunmi
|
75dded3914
|
ci(scorecard): move SARIF debug to separate job to satisfy scorecard restrictions
|
2026-07-09 12:30:13 +01:00 |
adrian adewunmi
|
da007b9d5b
|
for # npm_and_yarn in /etc/quiz-app for on-headers - Update #1453585651 #66
|
2026-07-09 12:06:00 +01:00 |
adrian adewunmi
|
8fc21a69c2
|
Merge branch 'fix/scorecard-upload-artifact-node24'
ci(scorecard): use safe artifact name and add SARIF pre-upload debug
|
2026-07-09 11:55:54 +01:00 |
adrian adewunmi
|
1cc4c372e3
|
ci(scorecard): use safe artifact name and add SARIF pre-upload debug
|
2026-07-09 11:43:08 +01:00 |
adrian adewunmi
|
98d5bac4e8
|
fix(quiz-app): restore package.json and package-lock.json for Node 24
|
2026-07-09 11:38:26 +01:00 |
Adrian Adewunmi
|
081c61cc2d
|
Merge pull request #45 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/vue-3.5.12
Bump vue from 2.6.12 to 3.5.12 in /etc/quiz-app
|
2026-07-09 11:25:10 +01:00 |
Adrian Adewunmi
|
38e8b35abc
|
Merge pull request #46 from AAdewunmi/dependabot/pip/binder/keras-3.8.0
Bump keras from 2.8.0 to 3.8.0 in /binder
|
2026-07-09 11:24:31 +01:00 |
Adrian Adewunmi
|
b753f51796
|
Merge branch 'main' into dependabot/pip/binder/keras-3.8.0
|
2026-07-09 11:24:22 +01:00 |
Adrian Adewunmi
|
607190b225
|
Merge pull request #57 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/multi-ff1d7b345e
chore(deps): bump qs and express in /etc/quiz-app
|
2026-07-09 11:23:56 +01:00 |
Adrian Adewunmi
|
5e49b27032
|
Merge branch 'main' into dependabot/npm_and_yarn/etc/quiz-app/vue-3.5.12
|
2026-07-09 11:23:13 +01:00 |
dependabot[bot]
|
8b0ab75db2
|
chore(deps): bump qs and express in /etc/quiz-app
Bumps [qs](https://github.com/ljharb/qs) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.
Updates `qs` from 6.13.0 to 6.15.3
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.13.0...v6.15.3)
Updates `express` from 4.21.1 to 4.22.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.2/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.1...v4.22.2)
---
updated-dependencies:
- dependency-name: qs
dependency-version: 6.15.3
dependency-type: indirect
- dependency-name: express
dependency-version: 4.22.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-09 10:22:06 +00:00 |
Adrian Adewunmi
|
89ebe1589f
|
Merge pull request #44 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/multi-9f37c16f8f
Bump cookie and express in /etc/quiz-app
|
2026-07-09 11:18:27 +01:00 |
Adrian Adewunmi
|
53bba4c560
|
Merge branch 'main' into dependabot/npm_and_yarn/etc/quiz-app/multi-9f37c16f8f
|
2026-07-09 11:16:42 +01:00 |
Adrian Adewunmi
|
4918bb81a2
|
Merge pull request #43 from AAdewunmi/dependabot/pip/dot-devcontainer/tensorflow-2.12.1
Bump tensorflow from 2.8.1 to 2.12.1 in /.devcontainer
|
2026-07-09 11:15:28 +01:00 |
Adrian Adewunmi
|
ea29dd3162
|
Merge branch 'main' into dependabot/pip/dot-devcontainer/tensorflow-2.12.1
|
2026-07-09 11:12:41 +01:00 |
Adrian Adewunmi
|
05c234bc84
|
Merge pull request #56 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/multi-4e67b7c87e
chore(deps): bump ws in /etc/quiz-app
|
2026-07-09 10:39:20 +01:00 |
dependabot[bot]
|
e9439055c9
|
chore(deps): bump ws in /etc/quiz-app
Bumps and [ws](https://github.com/websockets/ws). These dependencies needed to be updated together.
Updates `ws` from 7.5.9 to 7.5.11
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/7.5.9...7.5.11)
Updates `ws` from 8.11.0 to 8.21.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/7.5.9...7.5.11)
---
updated-dependencies:
- dependency-name: ws
dependency-version: 7.5.11
dependency-type: indirect
- dependency-name: ws
dependency-version: 8.21.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-09 09:37:16 +00:00 |
Adrian Adewunmi
|
072ad557f0
|
Merge pull request #14 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/loader-utils-and-vue/cli-plugin-babel-and-vue/cli-plugin-eslint-and-vue/cli-service-1.4.2
Bump loader-utils, @vue/cli-plugin-babel, @vue/cli-plugin-eslint and @vue/cli-service in /etc/quiz-app
|
2026-07-09 10:35:39 +01:00 |
adrian adewunmi
|
c050e3f395
|
Merge remote-tracking branch 'origin/main' into dependabot/npm_and_yarn/etc/quiz-app/loader-utils-and-vue/cli-plugin-babel-and-vue/cli-plugin-eslint-and-vue/cli-service-1.4.2
Merge main into dependent branch
|
2026-07-09 10:13:16 +01:00 |
adrian adewunmi
|
95d3d8a6c1
|
Fix scorecard artifact upload action
|
2026-07-09 09:53:57 +01:00 |
Adrian Adewunmi
|
53f5610fbc
|
Merge pull request #55 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/svgo-2.8.2
chore(deps-dev): bump svgo from 2.8.0 to 2.8.2 in /etc/quiz-app
|
2026-07-07 11:15:21 +01:00 |
dependabot[bot]
|
5921bcb2fe
|
chore(deps-dev): bump svgo from 2.8.0 to 2.8.2 in /etc/quiz-app
Bumps [svgo](https://github.com/svg/svgo) from 2.8.0 to 2.8.2.
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](https://github.com/svg/svgo/compare/v2.8.0...v2.8.2)
---
updated-dependencies:
- dependency-name: svgo
dependency-version: 2.8.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-07 10:12:30 +00:00 |
Adrian Adewunmi
|
7dd35dace2
|
Merge pull request #54 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/node-forge-1.4.0
chore(deps-dev): bump node-forge from 1.3.1 to 1.4.0 in /etc/quiz-app
|
2026-07-07 11:10:53 +01:00 |
dependabot[bot]
|
1db56297bc
|
chore(deps-dev): bump node-forge from 1.3.1 to 1.4.0 in /etc/quiz-app
Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.1 to 1.4.0.
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md)
- [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.1...v1.4.0)
---
updated-dependencies:
- dependency-name: node-forge
dependency-version: 1.4.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-07 10:01:09 +00:00 |
Adrian Adewunmi
|
bf2370caba
|
Merge pull request #53 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/lodash-4.18.1
chore(deps-dev): bump lodash from 4.17.21 to 4.18.1 in /etc/quiz-app
|
2026-07-07 10:59:00 +01:00 |
dependabot[bot]
|
5f0725030f
|
chore(deps-dev): bump lodash from 4.17.21 to 4.18.1 in /etc/quiz-app
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.18.1)
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.18.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-07 09:57:31 +00:00 |
Adrian Adewunmi
|
d6117c5487
|
Merge pull request #52 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/babel/plugin-transform-modules-systemjs-7.29.7
chore(deps-dev): bump @babel/plugin-transform-modules-systemjs from 7.20.11 to 7.29.7 in /etc/quiz-app
|
2026-07-07 10:56:07 +01:00 |
Adrian Adewunmi
|
1e6e5d76c5
|
Merge pull request #51 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/follow-redirects-1.16.0
chore(deps-dev): bump follow-redirects from 1.15.2 to 1.16.0 in /etc/quiz-app
|
2026-07-07 10:55:52 +01:00 |
Adrian Adewunmi
|
80cf9bebb6
|
Merge pull request #29 from AAdewunmi/dependabot/pip/dot-devcontainer/transformers-4.38.0
Bump transformers from 4.30.0 to 4.38.0 in /.devcontainer
|
2026-07-07 10:54:11 +01:00 |
Adrian Adewunmi
|
b68fafe336
|
Merge branch 'main' into dependabot/pip/dot-devcontainer/transformers-4.38.0
|
2026-07-07 10:54:02 +01:00 |
Adrian Adewunmi
|
e5dd8df5fc
|
Merge pull request #28 from AAdewunmi/dependabot/pip/binder/transformers-4.38.0
Bump transformers from 4.30.0 to 4.38.0 in /binder
|
2026-07-07 10:53:37 +01:00 |
Adrian Adewunmi
|
a8ad23b10d
|
Merge branch 'main' into dependabot/pip/binder/transformers-4.38.0
|
2026-07-07 10:53:26 +01:00 |
Adrian Adewunmi
|
dd6673df7e
|
Merge pull request #12 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/decode-uri-component-0.2.2
Bump decode-uri-component from 0.2.0 to 0.2.2 in /etc/quiz-app
|
2026-07-07 10:51:49 +01:00 |
Adrian Adewunmi
|
bc4b496717
|
Merge branch 'main' into dependabot/npm_and_yarn/etc/quiz-app/decode-uri-component-0.2.2
|
2026-07-07 10:50:24 +01:00 |
Adrian Adewunmi
|
afacbbfd87
|
Merge pull request #6 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/minimatch-3.1.2
Bump minimatch from 3.0.4 to 3.1.2 in /etc/quiz-app
|
2026-07-07 10:49:39 +01:00 |
Adrian Adewunmi
|
f9726250ef
|
Merge branch 'main' into dependabot/npm_and_yarn/etc/quiz-app/minimatch-3.1.2
|
2026-07-07 10:49:31 +01:00 |
dependabot[bot]
|
0e031d038c
|
chore(deps-dev): bump @babel/plugin-transform-modules-systemjs
Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) from 7.20.11 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-modules-systemjs)
---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-modules-systemjs"
dependency-version: 7.29.7
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-07 09:42:38 +00:00 |
dependabot[bot]
|
ef81f9fa56
|
chore(deps-dev): bump follow-redirects in /etc/quiz-app
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.2 to 1.16.0.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.2...v1.16.0)
---
updated-dependencies:
- dependency-name: follow-redirects
dependency-version: 1.16.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-07 09:42:35 +00:00 |
Adrian Adewunmi
|
70fb31c981
|
Merge pull request #47 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/shell-quote-1.9.0
chore(deps-dev): bump shell-quote from 1.7.3 to 1.9.0 in /etc/quiz-app
|
2026-07-07 10:41:22 +01:00 |
Adrian Adewunmi
|
22e2c53ea1
|
Merge pull request #49 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/launch-editor-2.14.1
chore(deps-dev): bump launch-editor from 2.2.1 to 2.14.1 in /etc/quiz-app
|
2026-07-07 10:40:57 +01:00 |
dependabot[bot]
|
57a0b95562
|
chore(deps-dev): bump shell-quote from 1.7.3 to 1.9.0 in /etc/quiz-app
Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.7.3 to 1.9.0.
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/shell-quote/compare/v1.7.3...v1.9.0)
---
updated-dependencies:
- dependency-name: shell-quote
dependency-version: 1.9.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-07 09:39:43 +00:00 |
dependabot[bot]
|
84a9525166
|
chore(deps-dev): bump launch-editor in /etc/quiz-app
Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.2.1 to 2.14.1.
- [Commits](https://github.com/vitejs/launch-editor/compare/v2.2.1...v2.14.1)
---
updated-dependencies:
- dependency-name: launch-editor
dependency-version: 2.14.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-07 09:39:30 +00:00 |
Adrian Adewunmi
|
7429c22774
|
Merge pull request #50 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/webpack-5.108.4
chore(deps-dev): bump webpack from 5.75.0 to 5.108.4 in /etc/quiz-app
|
2026-07-07 10:36:52 +01:00 |
dependabot[bot]
|
a07c936dcb
|
chore(deps-dev): bump webpack from 5.75.0 to 5.108.4 in /etc/quiz-app
Bumps [webpack](https://github.com/webpack/webpack) from 5.75.0 to 5.108.4.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack/compare/v5.75.0...v5.108.4)
---
updated-dependencies:
- dependency-name: webpack
dependency-version: 5.108.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-07 09:31:18 +00:00 |
Adrian Adewunmi
|
5be5c3d785
|
Merge pull request #15 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/json5-and-vue/cli-plugin-babel-and-vue/cli-plugin-eslint-and-vue/cli-service-2.2.3
Bump json5, @vue/cli-plugin-babel, @vue/cli-plugin-eslint and @vue/cli-service in /etc/quiz-app
|
2026-07-07 10:28:42 +01:00 |
dependabot[bot]
|
3680c01ce2
|
Bump json5, @vue/cli-plugin-babel, @vue/cli-plugin-eslint and @vue/cli-service
Bumps [json5](https://github.com/json5/json5) to 2.2.3 and updates ancestor dependencies [json5](https://github.com/json5/json5), [@vue/cli-plugin-babel](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-babel), [@vue/cli-plugin-eslint](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-eslint) and [@vue/cli-service](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-service). These dependencies need to be updated together.
Updates `json5` from 0.5.1 to 2.2.3
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](https://github.com/json5/json5/compare/v0.5.1...v2.2.3)
Updates `@vue/cli-plugin-babel` from 4.5.19 to 5.0.8
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.8/packages/@vue/cli-plugin-babel)
Updates `@vue/cli-plugin-eslint` from 4.5.19 to 5.0.8
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.8/packages/@vue/cli-plugin-eslint)
Updates `@vue/cli-service` from 4.5.19 to 5.0.8
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.8/packages/@vue/cli-service)
---
updated-dependencies:
- dependency-name: json5
dependency-type: indirect
- dependency-name: "@vue/cli-plugin-babel"
dependency-type: direct:development
- dependency-name: "@vue/cli-plugin-eslint"
dependency-type: direct:development
- dependency-name: "@vue/cli-service"
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-07-07 10:21:56 +01:00 |