-
Notifications
You must be signed in to change notification settings - Fork 5
chore(deps): bump @hey-api/client-fetch from 0.6.0 to 0.7.1 #153
chore(deps): bump @hey-api/client-fetch from 0.6.0 to 0.7.1 #153
Conversation
Minder Vulnerability Report ✅Minder analyzed this PR and found it does not add any new vulnerable dependencies.
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Pull Request Test Coverage Report for Build 12954472498Details
💛 - Coveralls |
174146e
to
9d090f4
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.2 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 37 |
Number of git tags or releases | 174 |
Versions matched to tags or releases | 36 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=164026569 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
node-fetch | 0 | |
isomorphic-fetch | 0 |
9d090f4
to
4f74b71
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.2 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 37 |
Number of git tags or releases | 174 |
Versions matched to tags or releases | 36 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=164026569 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
node-fetch | 0 | |
isomorphic-fetch | 0 |
4f74b71
to
3ef22ec
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.2 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 37 |
Number of git tags or releases | 174 |
Versions matched to tags or releases | 36 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=164026569 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
node-fetch | 0 | |
isomorphic-fetch | 0 |
3ef22ec
to
abf5ae3
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.2 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 37 |
Number of git tags or releases | 174 |
Versions matched to tags or releases | 36 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=164026569 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
node-fetch | 0 | |
isomorphic-fetch | 0 |
abf5ae3
to
ffd6e89
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.2 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 37 |
Number of git tags or releases | 174 |
Versions matched to tags or releases | 36 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=164026569 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
node-fetch | 0 | |
isomorphic-fetch | 0 |
ffd6e89
to
4d257d1
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.2 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 37 |
Number of git tags or releases | 174 |
Versions matched to tags or releases | 36 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=164026569 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
isomorphic-fetch | 0 |
4d257d1
to
a6e084a
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.3 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 37 |
Number of git tags or releases | 174 |
Versions matched to tags or releases | 36 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=164026569 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
isomorphic-fetch | 0 |
Bumps [@hey-api/client-fetch](https://github.com/hey-api/openapi-ts) from 0.6.0 to 0.7.1. - [Release notes](https://github.com/hey-api/openapi-ts/releases) - [Changelog](https://github.com/hey-api/openapi-ts/blob/main/docs/CHANGELOG.md) - [Commits](https://github.com/hey-api/openapi-ts/compare/@hey-api/[email protected]...@hey-api/[email protected]) --- updated-dependencies: - dependency-name: "@hey-api/client-fetch" dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
a6e084a
to
cdf7c78
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @hey-api/client-fetch
Trusty Score: 0
Scoring details
Component | Score |
---|---|
Package activity | 7.3 |
Repository activity | 5.3 |
User activity | 9.2 |
Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
Published package versions | 37 |
Number of git tags or releases | 174 |
Versions matched to tags or releases | 36 |
This package has been digitally signed using sigtore.
Source repository | https://github.com/hey-api/openapi-ts |
Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
GitHub action workflow | .github/workflows/release.yml |
Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=164026569 |
Alternatives
Package | Score | Description |
---|---|---|
axios | 0 | |
isomorphic-fetch | 0 |
Bumps @hey-api/client-fetch from 0.6.0 to 0.7.1.
Release notes
Sourced from
@hey-api/client-fetch
's releases.Changelog
Sourced from
@hey-api/client-fetch
's changelog.... (truncated)
Commits
ea24bca
Merge pull request #1595 from hey-api/changeset-release/main8d6753e
Version Packages5164eb3
Merge pull request #1602 from hey-api/fix/oauth2-flows-sdk194f941
fix: support all oauth2 flows in sdk auth1b73773
Merge pull request #1600 from hey-api/refactor/client-bundle-index0432418
fix: bundle clients from compiled index file7eebbef
Merge pull request #1596 from hey-api/fix/text-plain-body-serializer4784727
fix: do not use a body serializer on text/plain sdks548e5d8
Merge pull request #1594 from hey-api/fix/text-plain-serializerc26e792
Merge pull request #1593 from bvincent1/patch-1Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)