-
Notifications
You must be signed in to change notification settings - Fork 14
Update build dependencies, update octokit request #40
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
Conversation
e5aa2e6
to
f6373d2
Compare
cf904b2
to
517349f
Compare
This reverts commit 6764bdb.
@@ -12,6 +12,12 @@ jobs: | |||
- name: 'Checkout Repository' | |||
uses: actions/checkout@v3 | |||
- uses: actions/setup-node@v3 | |||
# As of 2023-02-22, the ubuntu-latest image uses npm v8.3.1. This version |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I get my developer card back with this one
@@ -1,7 +1,7 @@ | |||
{ | |||
"name": "npm-dependency-submission-example", | |||
"name": "@github/npm-dependency-submission-example", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A hacker namespace squatted the old name and published malware to npmjs.org with it. Clever! Putting this unpublished package under @github/
prevents future squatting.
Updates dependencies (
@vercel/ncc
in particular) so builds can succeed.octokit
was updated to include some clever typing information based on the endpoint being requested. This required a change in our use of octokit to POST a snapshot.Includes other fixes caused by build-tool bugs.