@octokit/action - npm Package Compare versions

Comparing version 3.15.6 to 3.15.7

dist-node/index.js

@@ -5,2 +5,4 @@ 'use strict';
 
+function _interopDefault (ex) { return (ex && (typeof ex === 'object') && 'default' in ex) ? ex['default'] : ex; }
+
 var core = require('@octokit/core');
@@ -10,3 +12,3 @@ var authAction = require('@octokit/auth-action');
 var pluginRestEndpointMethods = require('@octokit/plugin-rest-endpoint-methods');
-var httpsProxyAgent = require('https-proxy-agent');
+var ProxyAgent = _interopDefault(require('proxy-agent'));
 
@@ -66,3 +68,3 @@ function ownKeys(object, enumerableOnly) {
 
-const VERSION = "3.15.6";
+const VERSION = "3.15.7";
 
@@ -77,3 +79,3 @@ const DEFAULTS = {
     request: _objectSpread2({
-      agent: getHttpsProxyAgent()
+      agent: new ProxyAgent()
     }, options.request)
@@ -88,9 +90,3 @@ });
 
-function getHttpsProxyAgent() {
-  const proxy = process.env["HTTPS_PROXY"] || process.env["https_proxy"];
-  if (!proxy) return undefined;
-  return new httpsProxyAgent.HttpsProxyAgent(proxy);
-}
-
 exports.Octokit = Octokit;
 //# sourceMappingURL=index.js.map

dist-src/index.js

@@ -6,3 +6,3 @@ import { Octokit as Core } from "@octokit/core";
 import { VERSION } from "./version";
-import { HttpsProxyAgent } from "https-proxy-agent";
+import ProxyAgent from "proxy-agent";
 const DEFAULTS = {
@@ -18,3 +18,3 @@ authStrategy: createActionAuth,
         request: {
-            agent: getHttpsProxyAgent(),
+            agent: new ProxyAgent(),
             ...options.request,
@@ -28,7 +28,1 @@ },
 }
-function getHttpsProxyAgent() {
-    const proxy = process.env["HTTPS_PROXY"] || process.env["https_proxy"];
-    if (!proxy)
-        return undefined;
-    return new HttpsProxyAgent(proxy);
-}

dist-src/version.js

@@ -1,1 +0,1 @@
-export const VERSION = "3.15.6";
+export const VERSION = "3.15.7";

dist-types/version.d.ts

@@ -1,1 +0,1 @@
-export declare const VERSION = "3.15.6";
+export declare const VERSION = "3.15.7";

package.json

 {
   "name": "@octokit/action",
   "description": "GitHub API client for GitHub Actions",
-  "version": "3.15.6",
+  "version": "3.15.7",
   "license": "MIT",
@@ -26,3 +26,3 @@ "files": [
     "@octokit/types": "^6.16.1",
-    "https-proxy-agent": "^5.0.0"
+    "proxy-agent": "^5.0.0"
   },
@@ -29,0 +29,0 @@ "devDependencies": {

README.md

@@ -131,2 +131,6 @@ # action.js
 
+### Proxy Servers
+
+If you use [self-hosted runners](https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners) and require a proxy server to access internet resources then you will need to ensure that you have correctly configured the runner for [proxy servers](https://docs.github.com/en/actions/hosting-your-own-runners/using-a-proxy-server-with-self-hosted-runners). `@octokit/action` will pick up the configured proxy server environment variables and configure `@octokit/core` with the correct `request.agent` using [proxy-agent](https://github.com/TooTallNate/node-proxy-agent/blob/master/index.js). If you need to supply a different `request.agent` then you should ensure that it handles proxy servers if needed.
+
 ## How it works
@@ -133,0 +137,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Number of lines in readme file

144

increased by2.86%

Number of low supply chain risk alerts

3

decreased by-57.14%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Lines of code

103

decreased by-8.85%

Dependency changes

• + Addedproxy-agent@^5.0.0

• + Added@tootallnate/once@1.1.2(transitive)

• + Addedacorn@8.12.1(transitive)

• + Addedacorn-walk@8.3.4(transitive)

• + Addedast-types@0.13.4(transitive)

• + Addedbytes@3.1.2(transitive)

• + Addedcore-util-is@1.0.3(transitive)

• + Addeddata-uri-to-buffer@3.0.1(transitive)

• + Addeddeep-is@0.1.4(transitive)

• + Addeddegenerator@3.0.4(transitive)

• + Addeddepd@2.0.0(transitive)

• + Addedescodegen@1.14.3(transitive)

• + Addedesprima@4.0.1(transitive)

• + Addedestraverse@4.3.0(transitive)

• + Addedesutils@2.0.3(transitive)

• + Addedfast-levenshtein@2.0.6(transitive)

• + Addedfile-uri-to-path@2.0.0(transitive)

• + Addedfs-extra@8.1.0(transitive)

• + Addedftp@0.3.10(transitive)

• + Addedget-uri@3.0.2(transitive)

• + Addedgraceful-fs@4.2.11(transitive)

• + Addedhttp-errors@2.0.0(transitive)

• + Addedhttp-proxy-agent@4.0.1(transitive)

• + Addediconv-lite@0.4.24(transitive)

• + Addedinherits@2.0.4(transitive)

• + Addedip@1.1.9(transitive)

• + Addedip-address@9.0.5(transitive)

• + Addedisarray@0.0.1(transitive)

• + Addedjsbn@1.1.0(transitive)

• + Addedjsonfile@4.0.0(transitive)

• + Addedlevn@0.3.0(transitive)

• + Addedlru-cache@5.1.1(transitive)

• + Addednetmask@2.0.2(transitive)

• + Addedoptionator@0.8.3(transitive)

• + Addedpac-proxy-agent@5.0.0(transitive)

• + Addedpac-resolver@5.0.1(transitive)

• + Addedprelude-ls@1.1.2(transitive)

• + Addedproxy-agent@5.0.0(transitive)

• + Addedproxy-from-env@1.1.0(transitive)

• + Addedraw-body@2.5.2(transitive)

• + Addedreadable-stream@1.1.14(transitive)

• + Addedsafer-buffer@2.1.2(transitive)

• + Addedsetprototypeof@1.2.0(transitive)

• + Addedsmart-buffer@4.2.0(transitive)

• + Addedsocks@2.8.3(transitive)

• + Addedsocks-proxy-agent@5.0.1(transitive)

• + Addedsource-map@0.6.1(transitive)

• + Addedsprintf-js@1.1.3(transitive)

• + Addedstatuses@2.0.1(transitive)

• + Addedstring_decoder@0.10.31(transitive)

• + Addedtoidentifier@1.0.1(transitive)

• + Addedtslib@2.7.0(transitive)

• + Addedtype-check@0.3.2(transitive)

• + Addeduniversalify@0.1.2(transitive)

• + Addedunpipe@1.0.0(transitive)

• + Addedvm2@3.9.19(transitive)

• + Addedword-wrap@1.2.5(transitive)

• + Addedxregexp@2.0.0(transitive)

• + Addedyallist@3.1.1(transitive)

• - Removedhttps-proxy-agent@^5.0.0