• TypeScript 83.6%
  • JavaScript 16.4%
Find a file
Haritha 2989960493
fix: resolve audit vulnerabilities, refresh license cache, rebuild dist (#143)
Resolves npm audit advisories flagged in Basic Validation CI:
- brace-expansion (high): GHSA-mh99-v99m-4gvg, GHSA-rgw5-rvv9-x895
- js-yaml (high): GHSA-5p4m-2wfm-xmqj
- undici (moderate): GHSA-8xcm-r25x-g524, GHSA-m8rv-5g2x-5cg5, GHSA-v3r7-h72x-cjcm
- baseline-browser-mapping / browserslist (transitively coupled)

Applied via `npm audit fix --package-lock-only` (no breaking changes,
package.json unchanged). Refreshed .licenses/npm/undici.dep.yml to
match the bumped undici version. Rebuilt dist/index.js.

Rebased on latest main (post ESM migration) to avoid merge conflicts.

Validated locally on Node 24: npm audit (0 vulnerabilities), licensed
status (0 errors), format-check, lint, build, and test all pass.

Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-09-15 10:06:41 -05:00
.github Bump actions/checkout from 6 to 7 (#129) 2026-08-11 12:25:02 -05:00
.licenses/npm fix: resolve audit vulnerabilities, refresh license cache, rebuild dist (#143) 2026-09-15 10:06:41 -05:00
__tests__ Migrate to ESM and upgrade dependencies (#135) 2026-07-22 09:49:51 -05:00
dist fix: resolve audit vulnerabilities, refresh license cache, rebuild dist (#143) 2026-09-15 10:06:41 -05:00
src Migrate to ESM and upgrade dependencies (#135) 2026-07-22 09:49:51 -05:00
.gitattributes Add and configure ESLint and update configuration for Prettier (#26) 2023-03-08 09:50:45 +01:00
.gitignore Implement the "publish-action" action 2021-05-21 19:59:44 +03:00
.licensed.yml Migrate to ESM and upgrade dependencies (#135) 2026-07-22 09:49:51 -05:00
.prettierignore Add and configure ESLint and update configuration for Prettier (#26) 2023-03-08 09:50:45 +01:00
.prettierrc.json Migrate to ESM and upgrade dependencies (#135) 2026-07-22 09:49:51 -05:00
action.yml Node24 (#92) 2025-09-02 21:38:09 -05:00
eslint.config.mjs Migrate to ESM and upgrade dependencies (#135) 2026-07-22 09:49:51 -05:00
jest.config.ts Migrate to ESM and upgrade dependencies (#135) 2026-07-22 09:49:51 -05:00
LICENSE Implement the "publish-action" action 2021-05-21 19:59:44 +03:00
package-lock.json fix: resolve audit vulnerabilities, refresh license cache, rebuild dist (#143) 2026-09-15 10:06:41 -05:00
package.json Migrate to ESM and upgrade dependencies (#135) 2026-07-22 09:49:51 -05:00
README.md Document update - permission section (#44) 2025-01-16 08:47:36 -06:00
tsconfig.json Migrate to ESM and upgrade dependencies (#135) 2026-07-22 09:49:51 -05:00

publish-action

Basic validation

Please note: this action is for internal usage only, issues are disabled and contributing PRs will not be reviewed. We also do not recommend this action for public or production usage while it is still in development.

This action adds reliability to the new action versions publishing and handles the following cases:

  • Update a major tag (v1, for example) to point to the latest release (v1.2.1, for example).
  • Create a major tag from the latest released tag if a major tag doesn't exist

Status

Alpha. Action is under development and internal testing.

Usage

This action can be triggered automatically when a release is created or manually using a workflow_dispatch event. The actual major tag update will require manual approval. See release-new-action-version.yml for usage example.

See action.yml for a complete description of input and output fields. Read more about action versioning notation in action-versioning.md.

To roll back a release in case of customer impact, start the workflow manually and specify the previous stable tag.

When using the publish-action in your GitHub Actions workflow, it is recommended to set the following permissions to ensure proper functionality:

permissions:
  contents: write # access to publish release

Conributions

We don't accept contributions until the action is ready for production.

License

The scripts and documentation in this project are released under the MIT License.