audit-ci

What's Changed

• Bump audit-types to support Yarn v4 by @quinnturner in https://github.com/IBM/audit-ci/pull/338
• fix: braces audit by @quinnturner in https://github.com/IBM/audit-ci/pull/342
• Try yargs import by @quinnturner in https://github.com/IBM/audit-ci/pull/341

Full Changelog: https://github.com/IBM/audit-ci/compare/v7.0.1...v7.1.0

What's Changed

• fix: add hideBin(process.argv) #334 by @quinnturner in https://github.com/IBM/audit-ci/pull/335

Full Changelog: https://github.com/IBM/audit-ci/compare/v7.0.0...v7.0.1

Do not use this release, use v7.0.1 or greater!

What's Changed

• [BREAKING] feat: Improved scripting support and TypeScript tests by @quinnturner in https://github.com/IBM/audit-ci/pull/297
• chore: Add tslib dependency for smaller size by @quinnturner in https://github.com/IBM/audit-ci/pull/313
• [BREAKING] Remove printing audit-ci version by @quinnturner in https://github.com/IBM/audit-ci/pull/310
• fix: sort all outputs for cleanliness and consistency by @quinnturner in https://github.com/IBM/audit-ci/pull/314
• Support ESM by @quinnturner in https://github.com/IBM/audit-ci/pull/311
• Fix audits by @quinnturner in https://github.com/IBM/audit-ci/pull/321
• fix: dist/bin.js path by @quinnturner in https://github.com/IBM/audit-ci/pull/322
• BREAKING: Require Node 18, support ESM and CJS by @quinnturner in https://github.com/IBM/audit-ci/pull/319
• fix: auditer -> auditor by @quinnturner in https://github.com/IBM/audit-ci/pull/323
• Add files for Yarn 3 by @quinnturner in https://github.com/IBM/audit-ci/pull/305

Full Changelog: https://github.com/IBM/audit-ci/compare/v6.6.1...v7.0.0

What's Changed

• fix(#301): Handle JSONStream.parse() errors more gracefully by @quinnturner in https://github.com/IBM/audit-ci/pull/306
• Update README.md for improved docs on extra-args by @quinnturner in https://github.com/IBM/audit-ci/pull/304
• Release 6.6.1 by @quinnturner in https://github.com/IBM/audit-ci/pull/307

Full Changelog: https://github.com/IBM/audit-ci/compare/v6.6.0...v6.6.1

What's Changed

• chore(deps): bump json5 from 1.0.1 to 1.0.2 by @dependabot in https://github.com/IBM/audit-ci/pull/299
• Add --extra-args to fix #298 by @sargunv in https://github.com/IBM/audit-ci/pull/300
• chore: Release 6.6.0 by @quinnturner in https://github.com/IBM/audit-ci/pull/303

New Contributors

• @dependabot made their first contribution in https://github.com/IBM/audit-ci/pull/299
• @sargunv made their first contribution in https://github.com/IBM/audit-ci/pull/300

Full Changelog: https://github.com/IBM/audit-ci/compare/v6.5.0...v6.6.0

What's Changed

Features

• Added support for registry flag for pnpm by @DiogoVCS in https://github.com/IBM/audit-ci/pull/293

Internal

• Update CircleCI base image by @quinnturner in https://github.com/IBM/audit-ci/pull/295
• Add ignore to linguist for Yarn Berry by @quinnturner in https://github.com/IBM/audit-ci/pull/296
• Release 6.5.0 by @quinnturner in https://github.com/IBM/audit-ci/pull/294

New Contributors

• @DiogoVCS made their first contribution in https://github.com/IBM/audit-ci/pull/293

Full Changelog: https://github.com/IBM/audit-ci/compare/v6.4.1...v6.5.0

What's Changed

Fixes

• fix: fix config parsing when using objects in allowlist by @kyletsang in https://github.com/IBM/audit-ci/pull/289
• Warn invalid NSP empty record by @quinnturner in https://github.com/IBM/audit-ci/pull/291

Internal

• chore: Update action dependencies by @quinnturner in https://github.com/IBM/audit-ci/pull/287
• Release 6.4.1 by @quinnturner in https://github.com/IBM/audit-ci/pull/290

Full Changelog: https://github.com/IBM/audit-ci/compare/v6.4.0...v6.4.1

What's Changed

Features

• implement allowlist records by @kyletsang in https://github.com/IBM/audit-ci/pull/284

Internal

• chore: Update CodeQL by @quinnturner in https://github.com/IBM/audit-ci/pull/276
• chore: remove husky and pretty-quick by @quinnturner in https://github.com/IBM/audit-ci/pull/275
• chore: fix yarn-auditor tests by @kyletsang in https://github.com/IBM/audit-ci/pull/283
• Update devDependencies and release 6.4.0 by @quinnturner in https://github.com/IBM/audit-ci/pull/286

Full Changelog: https://github.com/IBM/audit-ci/compare/v6.3.0...v6.4.0

What's Changed

Features

• feat: Add support for importing audit-ci by @quinnturner in https://github.com/IBM/audit-ci/pull/271

Fixes

• chore: Remove can't find package.json warning. by @quinnturner in https://github.com/IBM/audit-ci/pull/269
• fix: Downgrade sinon for Node 12 support by @quinnturner in https://github.com/IBM/audit-ci/pull/272
• docs: Pin running audit-ci to major version by @quinnturner in https://github.com/IBM/audit-ci/pull/273

Internal

• fix: improve gitignore to avoid adding yarn files by @quinnturner in https://github.com/IBM/audit-ci/pull/266
• feat: Add coverage checks and minimum levels by @quinnturner in https://github.com/IBM/audit-ci/pull/267
• chore: Improve test and code type-safety by @quinnturner in https://github.com/IBM/audit-ci/pull/268
• chore: Improve tests and typing & package d.ts files. by @quinnturner in https://github.com/IBM/audit-ci/pull/270
• chore: Release 6.3.0 by @quinnturner in https://github.com/IBM/audit-ci/pull/274

Full Changelog: https://github.com/IBM/audit-ci/compare/v6.2.1...v6.3.0

What's Changed

• chore: fix typo in lint:fix script by @kyletsang in https://github.com/IBM/audit-ci/pull/250
• chore(deps): Add audit-types by @quinnturner in https://github.com/IBM/audit-ci/pull/251
• docs: Add a ton of detail to allowlist documentation. by @quinnturner in https://github.com/IBM/audit-ci/pull/254
• fix: Handle unhandled promise rejections in bin by @quinnturner in https://github.com/IBM/audit-ci/pull/255
• fix: minor lint by @quinnturner in https://github.com/IBM/audit-ci/pull/256
• fix: PNPM audit registry warning by @quinnturner in https://github.com/IBM/audit-ci/pull/257
• fix: Handle NPM 7+'s message (error) response by @quinnturner in https://github.com/IBM/audit-ci/pull/258
• chore: Release 6.2.1 by @quinnturner in https://github.com/IBM/audit-ci/pull/259

Full Changelog: https://github.com/IBM/audit-ci/compare/v6.2.0...v6.2.1

What's Changed

Features

• fix: fix Yarn Berry workspace audit when skip-dev=true by @kyletsang in https://github.com/IBM/audit-ci/pull/248

Internal

• chore: Add dependabot for updating dependencies by @quinnturner in https://github.com/IBM/audit-ci/pull/245
• docs: CircleCI run audit-ci before npm install by @quinnturner in https://github.com/IBM/audit-ci/pull/246
• chore: Release 6.2.0 by @quinnturner in https://github.com/IBM/audit-ci/pull/249

Full Changelog: https://github.com/IBM/audit-ci/compare/v6.1.2...v6.2.0

What's Changed

• add note about executing right after checkout by @capaj in https://github.com/IBM/audit-ci/pull/242
• fix: dedupe advisory paths in yarn auditor by @kyletsang in https://github.com/IBM/audit-ci/pull/243
• chore: Release 6.1.2 by @quinnturner in https://github.com/IBM/audit-ci/pull/244

New Contributors

• @capaj made their first contribution in https://github.com/IBM/audit-ci/pull/242

Full Changelog: https://github.com/IBM/audit-ci/compare/v6.1.1...v6.1.2

What's Changed

• docs: Add json-schema support by @quinnturner in https://github.com/IBM/audit-ci/pull/238
• chore: Use @types/node^12 by @quinnturner in https://github.com/IBM/audit-ci/pull/237
• fix: Deduplicate advisoryPathsFound by @quinnturner in https://github.com/IBM/audit-ci/pull/240
• chore: Release 6.1.1 by @quinnturner in https://github.com/IBM/audit-ci/pull/241

Full Changelog: https://github.com/IBM/audit-ci/compare/v6.1.0...v6.1.1

What's Changed

PNPM is supported!

• feat: PNPM support by @quinnturner in https://github.com/IBM/audit-ci/pull/235
• docs: Improvements on config explanations by @quinnturner in https://github.com/IBM/audit-ci/pull/233
• Type improvements and better functional structuring by @quinnturner in https://github.com/IBM/audit-ci/pull/234
• chore: Release 6.1.0 by @quinnturner in https://github.com/IBM/audit-ci/pull/236

Full Changelog: https://github.com/IBM/audit-ci/compare/v6.0.0...v6.1.0

What's Changed

BREAKING

• Drop Node 10 support by @quinnturner in https://github.com/IBM/audit-ci/pull/219
• Rewrite NPM 7/8 to fix audit path resolution by @quinnturner in https://github.com/IBM/audit-ci/pull/219
• Remove deprecated props advisories, path-whitelist, whitelist (codemod available) by @quinnturner in https://github.com/IBM/audit-ci/pull/219
• Switch identifier to be taken from github_advisory_id (codemod available) by @mobilutz in https://github.com/IBM/audit-ci/pull/217

Features

• docs: Add codemod instructions and set Node v12 by @quinnturner in https://github.com/IBM/audit-ci/pull/223
• feat: Print path for vulnerable advisories by @quinnturner in https://github.com/IBM/audit-ci/pull/230

Internal

• set package-lock.json lockfile to version 2 by @quinnturner in https://github.com/IBM/audit-ci/pull/219
• update dependencies by @quinnturner in https://github.com/IBM/audit-ci/pull/219
• chore: Release 6.0.0-beta.0 by @quinnturner in https://github.com/IBM/audit-ci/pull/220
• fix: update npm fixtures by @quinnturner in https://github.com/IBM/audit-ci/pull/221
• chore: remove audit-ci allowlist value by @quinnturner in https://github.com/IBM/audit-ci/pull/222
• chore: Release 6.0.0-beta.1 by @quinnturner in https://github.com/IBM/audit-ci/pull/224
• TypeScript support by @quinnturner in https://github.com/IBM/audit-ci/pull/226
• chore: Release 6.0.0-beta.2 by @quinnturner in https://github.com/IBM/audit-ci/pull/229
• chore: Release 6.0.0 by @quinnturner in https://github.com/IBM/audit-ci/pull/231

Full Changelog: https://github.com/IBM/audit-ci/compare/v5.1.2...v6.0.0

What's Changed

BREAKING

• Drop Node 10 support, rewrite NPM 7/8, update dependencies, remove deprecated props, set package-lock.json lockfile to version 2 by @quinnturner in https://github.com/IBM/audit-ci/pull/219
• Switch identifier to be taken from github_advisory_id by @mobilutz in https://github.com/IBM/audit-ci/pull/217

Features

• docs: Add codemod instructions and set Node v12 by @quinnturner in https://github.com/IBM/audit-ci/pull/223

Internal

• chore: Release 6.0.0-beta.0 by @quinnturner in https://github.com/IBM/audit-ci/pull/220
• fix: update npm fixtures by @quinnturner in https://github.com/IBM/audit-ci/pull/221
• chore: remove audit-ci allowlist value by @quinnturner in https://github.com/IBM/audit-ci/pull/222
• chore: Release 6.0.0-beta.1 by @quinnturner in https://github.com/IBM/audit-ci/pull/224
• TypeScript support by @quinnturner in https://github.com/IBM/audit-ci/pull/226
• chore: Release 6.0.0-beta.2 by @quinnturner in https://github.com/IBM/audit-ci/pull/229

Full Changelog: https://github.com/IBM/audit-ci/compare/v5.1.2...v6.0.0-beta.2

What's Changed

BREAKING

• Drop Node 10 support, rewrite NPM 7/8, update dependencies, remove deprecated props, set package-lock.json lockfile to version 2 by @quinnturner in https://github.com/IBM/audit-ci/pull/219
• Switch identifier to be taken from github_advisory_id by @mobilutz in https://github.com/IBM/audit-ci/pull/217

Features

• docs: Add codemod instructions and set Node v12 by @quinnturner in https://github.com/IBM/audit-ci/pull/223

Internal

• chore: Release 6.0.0-beta.0 by @quinnturner in https://github.com/IBM/audit-ci/pull/220
• fix: update npm fixtures by @quinnturner in https://github.com/IBM/audit-ci/pull/221
• chore: remove audit-ci allowlist value by @quinnturner in https://github.com/IBM/audit-ci/pull/222
• chore: Release 6.0.0-beta.1 by @quinnturner in https://github.com/IBM/audit-ci/pull/224

Full Changelog: https://github.com/IBM/audit-ci/compare/v5.1.2...v6.0.0-beta.1

What's Changed

• Drop Node 10 support, rewrite NPM 7/8, update dependencies, remove deprecated props, set package-lock.json lockfile to version 2 by @quinnturner in https://github.com/IBM/audit-ci/pull/219
• chore: Release 6.0.0-beta.0 by @quinnturner in https://github.com/IBM/audit-ci/pull/220

Full Changelog: https://github.com/IBM/audit-ci/compare/v5.1.2...v6.0.0-beta.0

#208 - fix: prevent hang when packages reference each other in via

This is a re-publish of v5.1.0. There was an outage of NPM when v5.1.0 was published, making v5.1.0 inaccessible.

Closes: #206