actions/cache-apt-pkgs-action
1
0
Fork 0
mirror of https://github.com/awalsh128/cache-apt-pkgs-action.git synced 2026-11-13 21:36:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

build: remove unused dependencies and address npm audit findings

Browse source 
Remove dependencies nothing imports or runs: class-transformer, tar and
@types/tar (archives use system tar), internet-message,
@devcontainers/cli, @typescript-eslint/eslint-plugin, typedoc and
typedoc-plugin-markdown (with the dead docs:api script). Move rollup to
devDependencies since it is only used to build the bundle.

Update dependencies within their declared ranges and add scoped
overrides: glob 9.0.0 - 14.0.1 to ^14.0.4, and minimatch ^11.0.5 for
eslint, @typescript-eslint/parser and type-coverage only. minimatch is
not overridden for @actions/glob because minimatch 11 removed matchOne,
which @actions/glob calls (breaking cache hashFiles).

npm audit goes from 66 (2 critical, 10 high) to 39 (0 critical, 0 high).
Remaining: minimatch inside @actions/glob (production), npm's bundled
dependencies under @semantic-release/npm, and deepmerge (no fix).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
awalsh128 2026-11-07 13:37:21 -08:00
parent 0bd871219b
commit a914a0f41a
2 changed files with 1272 additions and 2192 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3441
package-lock.json generated
View file

File diff suppressed because it is too large Load diff

23
package.json
View file

@ -72,7 +72,6 @@
"repo:tags:upload": "npm run repo::sync -- upload --target tags",
"repo:all:download": "npm run repo::sync -- download --target all",
"repo:all:upload": "npm run repo::sync -- upload --target all",
"docs:api": "typedoc --options typedoc.json",
"release": "semantic-release",
"release:dry-run": "semantic-release --dry-run",
"lint": "eslint src test scripts --ext .ts,.mts",
@ -85,14 +84,10 @@
"@actions/artifact": "^6.2.1",
"@actions/cache": "^6.1.0",
"@actions/core": "^3.0.1",
"class-transformer": "^0.5.1",
"rollup": "^4.62.2",
"tar": "^7.4.3",
"ts-apt": "git+https://github.com/awalsh128/ts-apt.git#342c7d0f453dcf1a69da83d7d195f9df2611a351",
"winston": "^3.19.0"
},
"devDependencies": {
"@devcontainers/cli": "^0.87.0",
"@robingenz/zli": "^0.2.0",
"@rollup/plugin-commonjs": "^29.0.3",
"@rollup/plugin-json": "^6.1.0",
@ -104,19 +99,27 @@
"@semantic-release/npm": "^13.1.5",
"@semantic-release/release-notes-generator": "^14.1.1",
"@types/node": "^24.1.0",
"@types/tar": "^6.1.13",
"@typescript-eslint/eslint-plugin": "^8.62.1",
"@typescript-eslint/parser": "^8.62.1",
"@vitest/coverage-v8": "^4.1.9",
"eslint": "^10.6.0",
"internet-message": "^1.0.0",
"npm-run-all": "^4.1.5",
"rollup": "^4.68.0",
"semantic-release": "^25.0.5",
"type-coverage": "^2.29.7",
"typedoc": "^0.28.19",
"typedoc-plugin-markdown": "^4.12.0",
"typescript": "^6.0.3",
"vitest": "^4.1.10",
"zod": "^4.4.3"
},
"overrides": {
"glob@>=9.0.0 <14.0.2": "^14.0.4",
"eslint": {
"minimatch": "^11.0.5"
},
"@typescript-eslint/parser": {
"minimatch": "^11.0.5"
},
"type-coverage": {
"minimatch": "^11.0.5"
}
}
}