-
Notifications
You must be signed in to change notification settings - Fork 14
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update build dependencies, update octokit request #40
Conversation
e5aa2e6
to
f6373d2
Compare
cf904b2
to
517349f
Compare
This reverts commit 6764bdb.
@@ -12,6 +12,12 @@ jobs: | |||
- name: 'Checkout Repository' | |||
uses: actions/checkout@v3 | |||
- uses: actions/setup-node@v3 | |||
# As of 2023-02-22, the ubuntu-latest image uses npm v8.3.1. This version |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I get my developer card back with this one
@@ -1,7 +1,7 @@ | |||
{ | |||
"name": "npm-dependency-submission-example", | |||
"name": "@github/npm-dependency-submission-example", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A hacker namespace squatted the old name and published malware to npmjs.org with it. Clever! Putting this unpublished package under @github/
prevents future squatting.
Updates dependencies (
@vercel/ncc
in particular) so builds can succeed.octokit
was updated to include some clever typing information based on the endpoint being requested. This required a change in our use of octokit to POST a snapshot.Includes other fixes caused by build-tool bugs.