[Snyk] Upgrade: , ,

[Ganjahmanvenenodedios]

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@actions/http-client
from 2.0.1 to 2.2.2 | 5 versions ahead of your current version | 25 days ago
on 2024-08-16
@octokit/plugin-paginate-rest
from 2.17.0 to 2.21.3 | 7 versions ahead of your current version | 2 years ago
on 2022-07-21
@octokit/plugin-rest-endpoint-methods
from 5.13.0 to 5.16.2 | 6 versions ahead of your current version | 2 years ago
on 2022-07-05

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	58	Proof of Concept

Release notes

Package name: @actions/http-client

• 2.2.2 - 2024-08-16
• 2.2.1 - 2024-03-04
• 2.2.0 - 2023-10-06
• 2.1.1 - 2023-08-04
  

  …ponse #1475

• 2.1.0 - 2023-03-06
• 2.0.1 - 2022-05-13
  

  …r stream extract

from @actions/http-client GitHub release notes

Package name: @octokit/plugin-paginate-rest

• 2.21.3 - 2022-07-21
  

  2.21.3 (2022-07-21)

  Bug Fixes

  • revert change to @ octokit/core peer dependency (#420) (b638bab), closes #418
• 2.21.2 - 2022-07-08
  

  2.21.2 (2022-07-08)

  Bug Fixes

  • deps: update dependency @ octokit/core to v4 (7b25d72)
• 2.21.1 - 2022-07-02
  

  2.21.1 (2022-07-02)

  Bug Fixes

  • rename org_id path parameter for GET /orgs/{org_id}/codespaces to org (1ae2a09)
• 2.21.0 - 2022-06-30
  

  2.21.0 (2022-06-30)

  Features

  • add pagination support for 2 new APIs and 10 omitted existing ones (4c6b596)
• 2.20.0 - 2022-06-28
  

  2.20.0 (2022-06-28)

  Features

  • add support for pagination in GET /orgs/{org_id}/codespaces (#397) (3e38fbf)
• 2.19.0 - 2022-06-20
  

  2.19.0 (2022-06-20)

  Features

  • POST /repos/{owner}/{repo}/dependency-graph/snapshots (2537cce)
• 2.18.0 - 2022-06-15
  

  New endpoint types

  • GET /enterprises/{enterprise}/actions/runners/{runner_id}/labels
  • GET /enterprises/{enterprise}/secret-scanning/alerts
  • GET /organizations/{organization_id}/custom_roles
  • GET /orgs/{org}/actions/runners/{runner_id}/labels
  • GET /orgs/{org}/code-scanning/alerts
  • GET /orgs/{org}/dependabot/secrets
  • GET /orgs/{org}/dependabot/secrets/{secret_name}/repositories
  • GET /orgs/{org}/external-groups
  • GET /orgs/{org}/teams/{team_slug}/external-groups
  • GET /repos/{owner}/{repo}/actions/runners/{runner_id}/labels
  • GET /repos/{owner}/{repo}/codespaces
  • GET /repos/{owner}/{repo}/codespaces/devcontainers
  • GET /repos/{owner}/{repo}/codespaces/secrets
  • GET /repos/{owner}/{repo}/dependabot/secrets
  • GET /repos/{owner}/{repo}/releases/{release_id}/reactions
  • GET /repos/{owner}/{repo}/secret-scanning/alerts/{alert_number}/locations
  • GET /repos/{owner}/{repo}/tags/protection
  • GET /user/codespaces
  • GET /user/codespaces/secrets
• 2.17.0 - 2021-10-11
  

  2.17.0 (2021-10-11)

  Features

  • GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobs (#372) (3a8fd41)

from @octokit/plugin-paginate-rest GitHub release notes

Package name: @octokit/plugin-rest-endpoint-methods

• 5.16.2 - 2022-07-05
  

  5.16.2 (2022-07-05)

  Bug Fixes

  • clarify docs to make it clear that POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments is only available to required reviewers (#506) (015cabe)
• 5.16.1 - 2022-07-02
  

  5.16.1 (2022-07-02)

  Bug Fixes

  • gracefully rename org_id path parameter for GET /orgs/{org_id}/codespaces to org (f11c732)
  • mark PUT /enterprises/{enterprise}/actions/oidc/customization/issuer as GitHub Enterprise (b3451de)
  • update operation docs to reflect current API (c6d49a5)
• 5.16.0 - 2022-06-28
  

  5.16.0 (2022-06-28)

  Features

  • feat: PUT /enterprises/{enterprise}/actions/oidc/customization/issuer
  • feat: GET /orgs/{org_id}/codespaces
  • feat: POST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stop
  • feat: GET /orgs/{org}/actions/oidc/customization/sub
  • feat: PUT /orgs/{org}/actions/oidc/customization/sub
  • feat: DELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}
  • feat: GET /repos/{owner}/{repo}/actions/caches
  • feat: DELETE /repos/{owner}/{repo}/actions/caches
  • feat: DELETE /repos/{owner}/{repo}/actions/caches/{cache_id}
  • feat: GET /repos/{owner}/{repo}/actions/oidc/customization/sub
  • feat: PUT /repos/{owner}/{repo}/actions/oidc/customization/sub
  • feat POST /repos/{owner}/{repo}/dependency-graph/snapshots
• 5.15.0 - 2022-06-20
  

  5.15.0 (2022-06-20)

  Features

  • add new before and after parameters to GET /orgs/{org}/secret-scanning/alerts and GET /repos/{owner}/{repo}/secret-scanning/alerts (1f8b9b1)
• 5.14.1 - 2022-06-20
  

  5.14.1 (2022-06-20)

  Bug Fixes

  • update descriptions and examples (6867fec)
• 5.14.0 - 2022-06-15
  

  Features

  • .rest.dependabot.addSelectedRepoToOrgSecret()
  • .rest.dependabot.removeSelectedRepoFromOrgSecret()
  • .rest.teams.listLinkedExternalIdpGroupsToTeamForOrg()
  • .rest.teams.linkExternalIdpGroupToTeamForOrg()
  • .rest.teams.unlinkExternalIdpGroupFromTeamForOrg()
  • .rest.enterpriseAdmin.listLabelsForSelfHostedRunnerForEnterprise()
  • .rest.enterpriseAdmin.addCustomLabelsToSelfHostedRunnerForEnterprise()
  • .rest.enterpriseAdmin.setCustomLabelsForSelfHostedRunnerForEnterprise()
  • .rest.enterpriseAdmin.removeAllCustomLabelsFromSelfHostedRunnerForEnterprise()
  • .rest.actions.listLabelsForSelfHostedRunnerForOrg()
  • .rest.actions.addCustomLabelsToSelfHostedRunnerForOrg()
  • .rest.actions.setCustomLabelsForSelfHostedRunnerForOrg()
  • .rest.actions.removeAllCustomLabelsFromSelfHostedRunnerForOrg()
  • .rest.actions.listLabelsForSelfHostedRunnerForRepo()
  • .rest.actions.addCustomLabelsToSelfHostedRunnerForRepo()
  • .rest.actions.setCustomLabelsForSelfHostedRunnerForRepo()
  • .rest.actions.removeAllCustomLabelsFromSelfHostedRunnerForRepo()
  • .rest.codespaces.listInRepositoryForAuthenticatedUser()
  • .rest.codespaces.createWithRepoForAuthenticatedUser()
  • .rest.repos.listTagProtection()
  • .rest.repos.createTagProtection()
  • .rest.codespaces.listForAuthenticatedUser()
  • .rest.codespaces.createForAuthenticatedUser()
  • .rest.codespaces.listSecretsForAuthenticatedUser()
  • .rest.codespaces.getPublicKeyForAuthenticatedUser()
  • .rest.codespaces.getSecretForAuthenticatedUser()
  • .rest.codespaces.createOrUpdateSecretForAuthenticatedUser()
  • .rest.codespaces.deleteSecretForAuthenticatedUser()
  • .rest.codespaces.listRepositoriesForSecretForAuthenticatedUser()
  • .rest.codespaces.setRepositoriesForSecretForAuthenticatedUser()
  • .rest.codespaces.addRepositoryForSecretForAuthenticatedUser()
  • .rest.codespaces.removeRepositoryForSecretForAuthenticatedUser()
  • .rest.codespaces.getForAuthenticatedUser()
  • .rest.codespaces.updateForAuthenticatedUser()
  • .rest.codespaces.deleteForAuthenticatedUser()
  • .rest.codespaces.exportForAuthenticatedUser()
  • .rest.codespaces.getExportDetailsForAuthenticatedUser()
  • .rest.codespaces.codespaceMachinesForAuthenticatedUser()
  • .rest.codespaces.startForAuthenticatedUser()
  • .rest.codespaces.stopForAuthenticatedUser()
  • .rest.dependabot.getOrgSecret()
  • .rest.dependabot.createOrUpdateOrgSecret()
  • .rest.dependabot.deleteOrgSecret()
  • .rest.codespaces.getRepoSecret()
  • .rest.codespaces.createOrUpdateRepoSecret()
  • .rest.codespaces.deleteRepoSecret()
  • .rest.dependabot.getRepoSecret()
  • .rest.dependabot.createOrUpdateRepoSecret()
  • .rest.dependabot.deleteRepoSecret()
  • .rest.actions.getGithubActionsDefaultWorkflowPermissionsOrganization()
  • .rest.actions.setGithubActionsDefaultWorkflowPermissionsOrganization()
  • .rest.dependabot.listSelectedReposForOrgSecret()
  • .rest.dependabot.setSelectedReposForOrgSecret()
  • .rest.actions.getWorkflowAccessToRepository()
  • .rest.actions.setWorkflowAccessToRepository()
  • .rest.actions.getGithubActionsDefaultWorkflowPermissionsRepository()
  • .rest.actions.setGithubActionsDefaultWorkflowPermissionsRepository()
  • .rest.orgs.listCustomRoles()
  • .rest.actions.getActionsCacheUsageForOrg()
  • .rest.enterpriseAdmin.removeCustomLabelFromSelfHostedRunnerForEnterprise()
  • .rest.actions.removeCustomLabelFromSelfHostedRunnerForOrg()
  • .rest.actions.removeCustomLabelFromSelfHostedRunnerForRepo()
  • .rest.reactions.deleteForRelease()
  • .rest.repos.deleteTagProtection()
  • .rest.enterpriseAdmin.getServerStatistics()
  • .rest.actions.getActionsCacheUsageForEnterprise()
  • .rest.actions.getGithubActionsDefaultWorkflowPermissionsEnterprise()
  • .rest.enterpriseAdmin.listSelfHostedRunnerGroupsForEnterprise() - visible-to-organization paramter
  • .rest.secretScanning.listAlertsForEnterprise()
  • .rest.billing.getGithubAdvancedSecurityBillingGhe()
  • .rest.actions.getActionsCacheUsageByRepoForOrg()
  • .rest.actions.listSelfHostedRunnerGroupsForOrg() - new parameter: visible_to_repository
  • .rest.codeScanning.listAlertsForOrg()
  • .rest.orgs.listSamlSsoAuthorizations() - new parameters: per_page, page, login
  • .rest.dependabot.getOrgPublicKey()
  • .rest.dependabot.listOrgSecrets()
  • .rest.teams.externalIdpGroupInfoForOrg()
  • .rest.teams.listExternalIdpGroupsForOrg()
  • .rest.secretScanning.listAlertsForOrg() - new parameters: sort, direction
  • .rest.billing.getGithubAdvancedSecurityBillingOrg()
  • .rest.repos.codeownersErrors()
  • .rest.codespaces.listDevcontainersInRepositoryForAuthenticatedUser()
  • .rest.codespaces.repoMachinesForAuthenticatedUser()
  • .rest.codespaces.getRepoPublicKey()
  • .rest.codespaces.listRepoSecrets()
  • .rest.dependabot.getRepoPublicKey()
  • .rest.dependabot.listRepoSecrets()
  • .rest.dependencyGraph.diffRange()
  • .rest.reactions.listForRelease()
  • .rest.secretScanning.listLocationsForAlert()
  • .rest.actions.updateSelfHostedRunnerGroupForOrg() - new parameters: allows_public_repositories, restricted_to_workflows, selected_workflows
  • .rest.orgs.update() - new parameter: members_can_fork_private_repositories
  • .rest.actions.createSelfHostedRunnerGroupForOrg() - new parameters: allows_public_repositories, restricted_to_workflows, selected_workflows
  • .rest.migrations.startForOrg() - new parrameters: exclude_metadata, exclude_git_data, org_metadata_only
  • .rest.repos.createInOrg() - new parameter: use_squash_pr_title_as_default
  • .rest.actions.reRunJobForWorkflowRun()
  • .rest.actions.reRunWorkflowFailedJobs()
  • .rest.codespaces.createWithPrForAuthenticatedUser()
  • .rest.migrations.startForAuthenticatedUser() - new parrameters: exclude_metadata, exclude_git_data, org_metadata_only
  • .rest.actions.setGithubActionsDefaultWorkflowPermissionsEnterprise()
  • .rest.orgs.convertMemberToOutsideCollaborator() - new parameter: async
  • .rest.actions.getActionsCacheUsage()
  • .rest.actions.listWorkflowRunsForRepo(): new parameter: check_suite_id
  • .rest.actions.listWorkflowRuns(): new parameter: check_suite_id
  • .rest.codeScanning.listAlertsForRepo(): new parameters: direction, sort
  • .rest.repos.getAllEnvironments(): new parameters: per_page, page
  • .rest.secretScanning.listAlertsForRepo(): new parameters: direction, sort
  • .rest.repos.updatePullRequestReviewProtection(): new parameters: dismissal_restrictions.apps, bypass_pull_request_allowances
  • .rest.repos.updateStatusCheckProtection(): new parameter: checks
  • .rest.codeScanning.updateAlert(): new parameter: dismissed_comment
  • .rest.repos.update(): secret_scanning_push_protection, use_squash_pr_title_as_default
  • .rest.actions.reRunWorkflow(): new parameter: enable_debug_logging
  • .rest.users.createGpgKeyForAuthenticatedUser(): new parameter: name
  • .rest.repos.updateBranchProtection(): new parameter: required_status_checks.checks, required_pull_request_reviews.{apps,bypass_pull_request_allowances}, block_creations

  Bug Fixes

  • .rest.apps.createFromManifest() has no request body
  • .rest.projects.getPermissionForUser(): correct response type and example
  • .rest.repos.update(): visibility parameter cannot be set to visibility
  • .rest.actions.reRunWorkflow(): no longer deprecated
  • remove defunkt .rest.reactions.deleteLegacy()
  • remove defunkt .rest.apps.createContentAttachment()
• 5.13.0 - 2021-10-11
  

  5.13.0 (2021-10-11)

  Features

  • GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobs (#465) (dfc6f58)

from @octokit/plugin-rest-endpoint-methods GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs