Releases: wayfair-incubator/forker
Releases · wayfair-incubator/forker
Set forkUrl as Output Value
What's Changed
- Update dependency typescript to v4.8.3 by @renovate in #222
- Update ESLint by @renovate in #221
- v0.0.5 by @lelia in #224
- Update actions/stale action to v6 by @renovate in #226
- Update ESLint by @renovate in #225
- Update dependency @actions/core to v1.10.0 by @renovate in #229
- Update dependency typescript to v4.8.4 by @renovate in #228
- Update ESLint by @renovate in #227
- Update ESLint by @renovate in #231
- Update ESLint by @renovate in #232
- Update dependency minimist to v1.2.7 by @renovate in #233
- Set forkUrl as Output Value by @lelia in #230
Full Changelog: v0.0.5...v0.0.6
Refactor user management workflow
Added
- Support for enforcing existing membership in a specified GitHub organization (see
checkUser
) - Support for granting organization users
admin
permissions on the repository they wish to fork (seepromoteUser
)
Changed
- Updated Jest unit tests to validate all env inputs
- Downgraded all Jest packages from v29 to v28 to resolve mismatch with
ts-jest
- Updated README to document new inputs (
checkuser
,promoteUser
) and remove deprecated ones (addUser
)
Removed
- Support for sending GitHub organization invitations to users who were not already a member (see
addUser
)
Bug fixes + Dependabot upgrades
Added
- Numerous Dependabot dependency vulnerabilities and recommended upgrades
Fixed
- Bug with license compliance check failing when the license format is invalid
- Edge case where Github users were invited when no organization was specified
Major enhancements, dependency upgrades + CI fixes
This is a fairly significant release which provides several quality of life enhancements, package vulnerability fixes, CI workflow improvements, plus tooling and content to help enforce open source project standards.
Added
- Missing content from Wayfair's official OSS Template
- Dynamic release badging system for README
- Linting configuration for all markdown files, including local and CI
- Several major
npm
package upgrades suggested by Dependabot
Changed
- Improved
README
content and clarified developer instructions - Used named constants instead of numerical response codes
- Used OSPO service account for all workflow tests
- Updated vulnerable
npm
packages to compliant versions - Updated Dependabot configuration to search for
github-actions
updates
Fixed
- Token access issue with actions integration tests
- Numerous
npm
andtypescript
dependency conflicts
Repository org transfer + some minor enhancements
Changes
- Updates all known repository owner refs from
lelia
towayfair-incubator
org - Temporarily disables actions integration tests while diagnosing a token access issue
- Resolves numerous node + typescript dependency vulnerabilities