Skip to content

Update build dependencies, update octokit request #40

New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Merged
merged 12 commits into from
Feb 23, 2023

Conversation

lseppala
Copy link
Contributor

@lseppala lseppala commented Feb 22, 2023

Updates dependencies (@vercel/ncc in particular) so builds can succeed.

octokit was updated to include some clever typing information based on the endpoint being requested. This required a change in our use of octokit to POST a snapshot.

Includes other fixes caused by build-tool bugs.

@lseppala lseppala requested a review from a team as a code owner February 22, 2023 21:28
@lseppala lseppala marked this pull request as draft February 22, 2023 21:30
@lseppala lseppala force-pushed the lsep/update-dependencies branch from e5aa2e6 to f6373d2 Compare February 22, 2023 22:17
@lseppala lseppala force-pushed the lsep/update-dependencies branch from cf904b2 to 517349f Compare February 22, 2023 23:34
@@ -12,6 +12,12 @@ jobs:
- name: 'Checkout Repository'
uses: actions/checkout@v3
- uses: actions/setup-node@v3
# As of 2023-02-22, the ubuntu-latest image uses npm v8.3.1. This version
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I get my developer card back with this one

@@ -1,7 +1,7 @@
{
"name": "npm-dependency-submission-example",
"name": "@github/npm-dependency-submission-example",
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A hacker namespace squatted the old name and published malware to npmjs.org with it. Clever! Putting this unpublished package under @github/ prevents future squatting.

@lseppala lseppala marked this pull request as ready for review February 22, 2023 23:58
@lseppala lseppala merged commit c3d41ec into main Feb 23, 2023
@lseppala lseppala deleted the lsep/update-dependencies branch February 23, 2023 00:08
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants