@octokit/action - npm Package Compare versions

Comparing version 6.0.2 to 6.0.3

dist-node/index.js

@@ -32,3 +32,3 @@ "use strict";
 // pkg/dist-src/version.js
-var VERSION = "6.0.2";
+var VERSION = "6.0.3";
 
@@ -35,0 +35,0 @@ // pkg/dist-src/index.js

dist-src/version.js

@@ -1,4 +0,4 @@
-const VERSION = "6.0.2";
+const VERSION = "6.0.3";
 export {
   VERSION
 };

dist-types/version.d.ts

@@ -1,1 +0,1 @@
-export declare const VERSION = "6.0.2";
+export declare const VERSION = "6.0.3";

dist-web/index.js

@@ -8,3 +8,3 @@ // pkg/dist-src/index.js
 // pkg/dist-src/version.js
-var VERSION = "6.0.2";
+var VERSION = "6.0.3";
 
@@ -11,0 +11,0 @@ // pkg/dist-src/index.js

package.json

 {
   "name": "@octokit/action",
-  "version": "6.0.2",
+  "version": "6.0.3",
   "publishConfig": {
@@ -19,3 +19,3 @@ "access": "public"
   "dependencies": {
-    "@octokit/auth-action": "^2.0.0",
+    "@octokit/auth-action": "^3.0.0",
     "@octokit/core": "^4.0.0",
@@ -22,0 +22,0 @@ "@octokit/plugin-paginate-rest": "^7.0.0",

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

15

decreased by-50%

Dependency changes

• + Added@octokit/auth-action@3.0.2(transitive)

• + Added@octokit/auth-token@4.0.0(transitive)

• - Removed@octokit/auth-action@2.1.1(transitive)

• Updated@octokit/auth-action@^3.0.0