Commit Graph

1303 Commits

Author SHA1 Message Date
Adrian Adewunmi f45ec4cae0
Merge pull request #58 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/multi-96c788614a
chore(deps): bump on-headers and compression in /etc/quiz-app
2026-07-09 12:47:02 +01:00
adrian adewunmi d281940e7b ci(scorecard): use actions/download-artifact@v4 to avoid deprecated v3 2026-07-09 12:39:19 +01:00
adrian adewunmi dddc4d2a71 chore(ci): remove dummy CI trigger file 2026-07-09 12:38:06 +01:00
dependabot[bot] 6acc19483f
chore(deps): bump on-headers and compression in /etc/quiz-app
Bumps [on-headers](https://github.com/jshttp/on-headers) and [compression](https://github.com/expressjs/compression). These dependencies needed to be updated together.

Updates `on-headers` from 1.0.2 to 1.1.0
- [Release notes](https://github.com/jshttp/on-headers/releases)
- [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md)
- [Commits](https://github.com/jshttp/on-headers/compare/v1.0.2...v1.1.0)

Updates `compression` from 1.7.4 to 1.8.1
- [Release notes](https://github.com/expressjs/compression/releases)
- [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md)
- [Commits](https://github.com/expressjs/compression/compare/1.7.4...v1.8.1)

---
updated-dependencies:
- dependency-name: on-headers
  dependency-version: 1.1.0
  dependency-type: indirect
- dependency-name: compression
  dependency-version: 1.8.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-09 11:36:55 +00:00
adrian adewunmi 75dded3914 ci(scorecard): move SARIF debug to separate job to satisfy scorecard restrictions 2026-07-09 12:30:13 +01:00
adrian adewunmi da007b9d5b for # npm_and_yarn in /etc/quiz-app for on-headers - Update #1453585651 #66 2026-07-09 12:06:00 +01:00
adrian adewunmi 8fc21a69c2 Merge branch 'fix/scorecard-upload-artifact-node24'
ci(scorecard): use safe artifact name and add SARIF pre-upload debug
2026-07-09 11:55:54 +01:00
adrian adewunmi 1cc4c372e3 ci(scorecard): use safe artifact name and add SARIF pre-upload debug 2026-07-09 11:43:08 +01:00
adrian adewunmi 98d5bac4e8 fix(quiz-app): restore package.json and package-lock.json for Node 24 2026-07-09 11:38:26 +01:00
Adrian Adewunmi 081c61cc2d
Merge pull request #45 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/vue-3.5.12
Bump vue from 2.6.12 to 3.5.12 in /etc/quiz-app
2026-07-09 11:25:10 +01:00
Adrian Adewunmi 38e8b35abc
Merge pull request #46 from AAdewunmi/dependabot/pip/binder/keras-3.8.0
Bump keras from 2.8.0 to 3.8.0 in /binder
2026-07-09 11:24:31 +01:00
Adrian Adewunmi b753f51796
Merge branch 'main' into dependabot/pip/binder/keras-3.8.0 2026-07-09 11:24:22 +01:00
Adrian Adewunmi 607190b225
Merge pull request #57 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/multi-ff1d7b345e
chore(deps): bump qs and express in /etc/quiz-app
2026-07-09 11:23:56 +01:00
Adrian Adewunmi 5e49b27032
Merge branch 'main' into dependabot/npm_and_yarn/etc/quiz-app/vue-3.5.12 2026-07-09 11:23:13 +01:00
dependabot[bot] 8b0ab75db2
chore(deps): bump qs and express in /etc/quiz-app
Bumps [qs](https://github.com/ljharb/qs) and [express](https://github.com/expressjs/express). These dependencies needed to be updated together.

Updates `qs` from 6.13.0 to 6.15.3
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.13.0...v6.15.3)

Updates `express` from 4.21.1 to 4.22.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.2/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.21.1...v4.22.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.3
  dependency-type: indirect
- dependency-name: express
  dependency-version: 4.22.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-09 10:22:06 +00:00
Adrian Adewunmi 89ebe1589f
Merge pull request #44 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/multi-9f37c16f8f
Bump cookie and express in /etc/quiz-app
2026-07-09 11:18:27 +01:00
Adrian Adewunmi 53bba4c560
Merge branch 'main' into dependabot/npm_and_yarn/etc/quiz-app/multi-9f37c16f8f 2026-07-09 11:16:42 +01:00
Adrian Adewunmi 4918bb81a2
Merge pull request #43 from AAdewunmi/dependabot/pip/dot-devcontainer/tensorflow-2.12.1
Bump tensorflow from 2.8.1 to 2.12.1 in /.devcontainer
2026-07-09 11:15:28 +01:00
Adrian Adewunmi ea29dd3162
Merge branch 'main' into dependabot/pip/dot-devcontainer/tensorflow-2.12.1 2026-07-09 11:12:41 +01:00
Adrian Adewunmi 05c234bc84
Merge pull request #56 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/multi-4e67b7c87e
chore(deps): bump ws in /etc/quiz-app
2026-07-09 10:39:20 +01:00
dependabot[bot] e9439055c9
chore(deps): bump ws in /etc/quiz-app
Bumps  and [ws](https://github.com/websockets/ws). These dependencies needed to be updated together.

Updates `ws` from 7.5.9 to 7.5.11
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/7.5.9...7.5.11)

Updates `ws` from 8.11.0 to 8.21.0
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](https://github.com/websockets/ws/compare/7.5.9...7.5.11)

---
updated-dependencies:
- dependency-name: ws
  dependency-version: 7.5.11
  dependency-type: indirect
- dependency-name: ws
  dependency-version: 8.21.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-09 09:37:16 +00:00
Adrian Adewunmi 072ad557f0
Merge pull request #14 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/loader-utils-and-vue/cli-plugin-babel-and-vue/cli-plugin-eslint-and-vue/cli-service-1.4.2
Bump loader-utils, @vue/cli-plugin-babel, @vue/cli-plugin-eslint and @vue/cli-service in /etc/quiz-app
2026-07-09 10:35:39 +01:00
adrian adewunmi c050e3f395 Merge remote-tracking branch 'origin/main' into dependabot/npm_and_yarn/etc/quiz-app/loader-utils-and-vue/cli-plugin-babel-and-vue/cli-plugin-eslint-and-vue/cli-service-1.4.2
Merge main into dependent branch
2026-07-09 10:13:16 +01:00
adrian adewunmi 95d3d8a6c1 Fix scorecard artifact upload action 2026-07-09 09:53:57 +01:00
Adrian Adewunmi 53f5610fbc
Merge pull request #55 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/svgo-2.8.2
chore(deps-dev): bump svgo from 2.8.0 to 2.8.2 in /etc/quiz-app
2026-07-07 11:15:21 +01:00
dependabot[bot] 5921bcb2fe
chore(deps-dev): bump svgo from 2.8.0 to 2.8.2 in /etc/quiz-app
Bumps [svgo](https://github.com/svg/svgo) from 2.8.0 to 2.8.2.
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](https://github.com/svg/svgo/compare/v2.8.0...v2.8.2)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 2.8.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-07 10:12:30 +00:00
Adrian Adewunmi 7dd35dace2
Merge pull request #54 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/node-forge-1.4.0
chore(deps-dev): bump node-forge from 1.3.1 to 1.4.0 in /etc/quiz-app
2026-07-07 11:10:53 +01:00
dependabot[bot] 1db56297bc
chore(deps-dev): bump node-forge from 1.3.1 to 1.4.0 in /etc/quiz-app
Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.3.1 to 1.4.0.
- [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md)
- [Commits](https://github.com/digitalbazaar/forge/compare/v1.3.1...v1.4.0)

---
updated-dependencies:
- dependency-name: node-forge
  dependency-version: 1.4.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-07 10:01:09 +00:00
Adrian Adewunmi bf2370caba
Merge pull request #53 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/lodash-4.18.1
chore(deps-dev): bump lodash from 4.17.21 to 4.18.1 in /etc/quiz-app
2026-07-07 10:59:00 +01:00
dependabot[bot] 5f0725030f
chore(deps-dev): bump lodash from 4.17.21 to 4.18.1 in /etc/quiz-app
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.18.1)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-07 09:57:31 +00:00
Adrian Adewunmi d6117c5487
Merge pull request #52 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/babel/plugin-transform-modules-systemjs-7.29.7
chore(deps-dev): bump @babel/plugin-transform-modules-systemjs from 7.20.11 to 7.29.7 in /etc/quiz-app
2026-07-07 10:56:07 +01:00
Adrian Adewunmi 1e6e5d76c5
Merge pull request #51 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/follow-redirects-1.16.0
chore(deps-dev): bump follow-redirects from 1.15.2 to 1.16.0 in /etc/quiz-app
2026-07-07 10:55:52 +01:00
Adrian Adewunmi 80cf9bebb6
Merge pull request #29 from AAdewunmi/dependabot/pip/dot-devcontainer/transformers-4.38.0
Bump transformers from 4.30.0 to 4.38.0 in /.devcontainer
2026-07-07 10:54:11 +01:00
Adrian Adewunmi b68fafe336
Merge branch 'main' into dependabot/pip/dot-devcontainer/transformers-4.38.0 2026-07-07 10:54:02 +01:00
Adrian Adewunmi e5dd8df5fc
Merge pull request #28 from AAdewunmi/dependabot/pip/binder/transformers-4.38.0
Bump transformers from 4.30.0 to 4.38.0 in /binder
2026-07-07 10:53:37 +01:00
Adrian Adewunmi a8ad23b10d
Merge branch 'main' into dependabot/pip/binder/transformers-4.38.0 2026-07-07 10:53:26 +01:00
Adrian Adewunmi dd6673df7e
Merge pull request #12 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/decode-uri-component-0.2.2
Bump decode-uri-component from 0.2.0 to 0.2.2 in /etc/quiz-app
2026-07-07 10:51:49 +01:00
Adrian Adewunmi bc4b496717
Merge branch 'main' into dependabot/npm_and_yarn/etc/quiz-app/decode-uri-component-0.2.2 2026-07-07 10:50:24 +01:00
Adrian Adewunmi afacbbfd87
Merge pull request #6 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/minimatch-3.1.2
Bump minimatch from 3.0.4 to 3.1.2 in /etc/quiz-app
2026-07-07 10:49:39 +01:00
Adrian Adewunmi f9726250ef
Merge branch 'main' into dependabot/npm_and_yarn/etc/quiz-app/minimatch-3.1.2 2026-07-07 10:49:31 +01:00
dependabot[bot] 0e031d038c
chore(deps-dev): bump @babel/plugin-transform-modules-systemjs
Bumps [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) from 7.20.11 to 7.29.7.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-plugin-transform-modules-systemjs)

---
updated-dependencies:
- dependency-name: "@babel/plugin-transform-modules-systemjs"
  dependency-version: 7.29.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-07 09:42:38 +00:00
dependabot[bot] ef81f9fa56
chore(deps-dev): bump follow-redirects in /etc/quiz-app
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.2 to 1.16.0.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.2...v1.16.0)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-version: 1.16.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-07 09:42:35 +00:00
Adrian Adewunmi 70fb31c981
Merge pull request #47 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/shell-quote-1.9.0
chore(deps-dev): bump shell-quote from 1.7.3 to 1.9.0 in /etc/quiz-app
2026-07-07 10:41:22 +01:00
Adrian Adewunmi 22e2c53ea1
Merge pull request #49 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/launch-editor-2.14.1
chore(deps-dev): bump launch-editor from 2.2.1 to 2.14.1 in /etc/quiz-app
2026-07-07 10:40:57 +01:00
dependabot[bot] 57a0b95562
chore(deps-dev): bump shell-quote from 1.7.3 to 1.9.0 in /etc/quiz-app
Bumps [shell-quote](https://github.com/ljharb/shell-quote) from 1.7.3 to 1.9.0.
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/shell-quote/compare/v1.7.3...v1.9.0)

---
updated-dependencies:
- dependency-name: shell-quote
  dependency-version: 1.9.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-07 09:39:43 +00:00
dependabot[bot] 84a9525166
chore(deps-dev): bump launch-editor in /etc/quiz-app
Bumps [launch-editor](https://github.com/vitejs/launch-editor) from 2.2.1 to 2.14.1.
- [Commits](https://github.com/vitejs/launch-editor/compare/v2.2.1...v2.14.1)

---
updated-dependencies:
- dependency-name: launch-editor
  dependency-version: 2.14.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-07 09:39:30 +00:00
Adrian Adewunmi 7429c22774
Merge pull request #50 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/webpack-5.108.4
chore(deps-dev): bump webpack from 5.75.0 to 5.108.4 in /etc/quiz-app
2026-07-07 10:36:52 +01:00
dependabot[bot] a07c936dcb
chore(deps-dev): bump webpack from 5.75.0 to 5.108.4 in /etc/quiz-app
Bumps [webpack](https://github.com/webpack/webpack) from 5.75.0 to 5.108.4.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack/compare/v5.75.0...v5.108.4)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.108.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-07 09:31:18 +00:00
Adrian Adewunmi 5be5c3d785
Merge pull request #15 from AAdewunmi/dependabot/npm_and_yarn/etc/quiz-app/json5-and-vue/cli-plugin-babel-and-vue/cli-plugin-eslint-and-vue/cli-service-2.2.3
Bump json5, @vue/cli-plugin-babel, @vue/cli-plugin-eslint and @vue/cli-service in /etc/quiz-app
2026-07-07 10:28:42 +01:00
dependabot[bot] 3680c01ce2 Bump json5, @vue/cli-plugin-babel, @vue/cli-plugin-eslint and @vue/cli-service
Bumps [json5](https://github.com/json5/json5) to 2.2.3 and updates ancestor dependencies [json5](https://github.com/json5/json5), [@vue/cli-plugin-babel](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-babel), [@vue/cli-plugin-eslint](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-plugin-eslint) and [@vue/cli-service](https://github.com/vuejs/vue-cli/tree/HEAD/packages/@vue/cli-service). These dependencies need to be updated together.

Updates `json5` from 0.5.1 to 2.2.3
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](https://github.com/json5/json5/compare/v0.5.1...v2.2.3)

Updates `@vue/cli-plugin-babel` from 4.5.19 to 5.0.8
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.8/packages/@vue/cli-plugin-babel)

Updates `@vue/cli-plugin-eslint` from 4.5.19 to 5.0.8
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.8/packages/@vue/cli-plugin-eslint)

Updates `@vue/cli-service` from 4.5.19 to 5.0.8
- [Release notes](https://github.com/vuejs/vue-cli/releases)
- [Changelog](https://github.com/vuejs/vue-cli/blob/dev/CHANGELOG.md)
- [Commits](https://github.com/vuejs/vue-cli/commits/v5.0.8/packages/@vue/cli-service)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
- dependency-name: "@vue/cli-plugin-babel"
  dependency-type: direct:development
- dependency-name: "@vue/cli-plugin-eslint"
  dependency-type: direct:development
- dependency-name: "@vue/cli-service"
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-07 10:21:56 +01:00