mirror of
https://github.com/actions/publish-action.git
synced 2026-10-17 04:35:28 +02:00
Resolves npm audit advisories flagged in Basic Validation CI: - brace-expansion (high): GHSA-mh99-v99m-4gvg, GHSA-rgw5-rvv9-x895 - js-yaml (high): GHSA-5p4m-2wfm-xmqj - undici (moderate): GHSA-8xcm-r25x-g524, GHSA-m8rv-5g2x-5cg5, GHSA-v3r7-h72x-cjcm - baseline-browser-mapping / browserslist (transitively coupled) Applied via `npm audit fix --package-lock-only` (no breaking changes, package.json unchanged). Refreshed .licenses/npm/undici.dep.yml to match the bumped undici version. Rebuilt dist/index.js. Rebased on latest main (post ESM migration) to avoid merge conflicts. Validated locally on Node 24: npm audit (0 vulnerabilities), licensed status (0 errors), format-check, lint, build, and test all pass. Co-authored-by: HarithaVattikuti <73516759+HarithaVattikuti@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>