- upgrade dependencies

- audit fix
- move some dependencies

dist/index.js

@@ -28301,6 +28301,14 @@ const { isUint8Array, isArrayBuffer } = __nccwpck_require__(8253)
 const { File: UndiciFile } = __nccwpck_require__(3041)
 const { parseMIMEType, serializeAMimeType } = __nccwpck_require__(4322)
 
+let random
+try {
+  const crypto = __nccwpck_require__(7598)
+  random = (max) => crypto.randomInt(0, max)
+} catch {
+  random = (max) => Math.floor(Math.random(max))
+}
+
 let ReadableStream = globalThis.ReadableStream
 
 /** @type {globalThis['File']} */
@@ -28386,7 +28394,7 @@ function extractBody (object, keepalive = false) {
     // Set source to a copy of the bytes held by object.
     source = new Uint8Array(object.buffer.slice(object.byteOffset, object.byteOffset + object.byteLength))
   } else if (util.isFormDataLike(object)) {
-    const boundary = `----formdata-undici-0${`${Math.floor(Math.random() * 1e11)}`.padStart(11, '0')}`
+    const boundary = `----formdata-undici-0${`${random(1e11)}`.padStart(11, '0')}`
     const prefix = `--${boundary}\r\nContent-Disposition: form-data`
 
     /*! formdata-polyfill. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> */
@@ -42513,6 +42521,13 @@ module.exports = __WEBPACK_EXTERNAL_createRequire(import.meta.url)("net");
 
 /***/ }),
 
+/***/ 7598:
+/***/ ((module) => {
+
+module.exports = __WEBPACK_EXTERNAL_createRequire(import.meta.url)("node:crypto");
+
+/***/ }),
+
 /***/ 8474:
 /***/ ((module) => {
 
@@ -48435,6 +48450,20 @@ var Api = class extends HttpClient {
         secure: true,
         type: "application/json" /* Json */
       }, params)),
+      /**
+       * No description
+       *
+       * @tags repository
+       * @name RepoGetRunnerRegistrationToken
+       * @summary Get a repository's actions runner registration token
+       * @request GET:/repos/{owner}/{repo}/actions/runners/registration-token
+       * @secure
+       */
+      repoGetRunnerRegistrationToken: (owner, repo, params = {}) => this.request(__spreadValues({
+        path: `/repos/${owner}/${repo}/actions/runners/registration-token`,
+        method: "GET",
+        secure: true
+      }, params)),
       /**
        * No description
        *
@@ -48481,6 +48510,21 @@ var Api = class extends HttpClient {
         secure: true,
         type: "application/json" /* Json */
       }, params)),
+      /**
+       * No description
+       *
+       * @tags repository
+       * @name ListActionTasks
+       * @summary List a repository's action tasks
+       * @request GET:/repos/{owner}/{repo}/actions/tasks
+       * @secure
+       */
+      listActionTasks: (owner, repo, query, params = {}) => this.request(__spreadValues({
+        path: `/repos/${owner}/${repo}/actions/tasks`,
+        method: "GET",
+        query,
+        secure: true
+      }, params)),
       /**
        * No description
        *
@@ -48659,6 +48703,22 @@ var Api = class extends HttpClient {
         secure: true,
         type: "application/json" /* Json */
       }, params)),
+      /**
+       * No description
+       *
+       * @tags repository
+       * @name RepoUpdateBranchProtectionPriories
+       * @summary Update the priorities of branch protections for a repository.
+       * @request POST:/repos/{owner}/{repo}/branch_protections/priority
+       * @secure
+       */
+      repoUpdateBranchProtectionPriories: (owner, repo, body, params = {}) => this.request(__spreadValues({
+        path: `/repos/${owner}/${repo}/branch_protections/priority`,
+        method: "POST",
+        body,
+        secure: true,
+        type: "application/json" /* Json */
+      }, params)),
       /**
        * No description
        *
@@ -48762,6 +48822,22 @@ var Api = class extends HttpClient {
         method: "DELETE",
         secure: true
       }, params)),
+      /**
+       * No description
+       *
+       * @tags repository
+       * @name RepoUpdateBranch
+       * @summary Update a branch
+       * @request PATCH:/repos/{owner}/{repo}/branches/{branch}
+       * @secure
+       */
+      repoUpdateBranch: (owner, repo, branch, body, params = {}) => this.request(__spreadValues({
+        path: `/repos/${owner}/${repo}/branches/${branch}`,
+        method: "PATCH",
+        body,
+        secure: true,
+        type: "application/json" /* Json */
+      }, params)),
       /**
        * No description
        *
@@ -48796,7 +48872,7 @@ var Api = class extends HttpClient {
        *
        * @tags repository
        * @name RepoAddCollaborator
-       * @summary Add a collaborator to a repository
+       * @summary Add or Update a collaborator to a repository
        * @request PUT:/repos/{owner}/{repo}/collaborators/{collaborator}
        * @secure
        */
@@ -48885,7 +48961,7 @@ var Api = class extends HttpClient {
        *
        * @tags repository
        * @name RepoGetCommitPullRequest
-       * @summary Get the pull request of the commit
+       * @summary Get the merged pull request of the commit
        * @request GET:/repos/{owner}/{repo}/commits/{sha}/pull
        * @secure
        */
@@ -50378,6 +50454,20 @@ var Api = class extends HttpClient {
         method: "GET",
         secure: true
       }, params)),
+      /**
+       * No description
+       *
+       * @tags repository
+       * @name RepoGetLicenses
+       * @summary Get repo licenses
+       * @request GET:/repos/{owner}/{repo}/licenses
+       * @secure
+       */
+      repoGetLicenses: (owner, repo, params = {}) => this.request(__spreadValues({
+        path: `/repos/${owner}/${repo}/licenses`,
+        method: "GET",
+        secure: true
+      }, params)),
       /**
        * No description
        *
@@ -50393,6 +50483,22 @@ var Api = class extends HttpClient {
         query,
         secure: true
       }, params)),
+      /**
+       * No description
+       *
+       * @tags repository
+       * @name RepoMergeUpstream
+       * @summary Merge a branch from upstream
+       * @request POST:/repos/{owner}/{repo}/merge-upstream
+       * @secure
+       */
+      repoMergeUpstream: (owner, repo, body, params = {}) => this.request(__spreadValues({
+        path: `/repos/${owner}/${repo}/merge-upstream`,
+        method: "POST",
+        body,
+        secure: true,
+        type: "application/json" /* Json */
+      }, params)),
       /**
        * No description
        *
@@ -51164,20 +51270,6 @@ var Api = class extends HttpClient {
         method: "GET",
         secure: true
       }, params)),
-      /**
-       * No description
-       *
-       * @tags repository
-       * @name RepoGetRunnerRegistrationToken
-       * @summary Get a repository's actions runner registration token
-       * @request GET:/repos/{owner}/{repo}/runners/registration-token
-       * @secure
-       */
-      repoGetRunnerRegistrationToken: (owner, repo, params = {}) => this.request(__spreadValues({
-        path: `/repos/${owner}/${repo}/runners/registration-token`,
-        method: "GET",
-        secure: true
-      }, params)),
       /**
        * No description
        *
@@ -51295,6 +51387,80 @@ var Api = class extends HttpClient {
         method: "DELETE",
         secure: true
       }, params)),
+      /**
+       * No description
+       *
+       * @tags repository
+       * @name RepoListTagProtection
+       * @summary List tag protections for a repository
+       * @request GET:/repos/{owner}/{repo}/tag_protections
+       * @secure
+       */
+      repoListTagProtection: (owner, repo, params = {}) => this.request(__spreadValues({
+        path: `/repos/${owner}/${repo}/tag_protections`,
+        method: "GET",
+        secure: true
+      }, params)),
+      /**
+       * No description
+       *
+       * @tags repository
+       * @name RepoCreateTagProtection
+       * @summary Create a tag protections for a repository
+       * @request POST:/repos/{owner}/{repo}/tag_protections
+       * @secure
+       */
+      repoCreateTagProtection: (owner, repo, body, params = {}) => this.request(__spreadValues({
+        path: `/repos/${owner}/${repo}/tag_protections`,
+        method: "POST",
+        body,
+        secure: true,
+        type: "application/json" /* Json */
+      }, params)),
+      /**
+       * No description
+       *
+       * @tags repository
+       * @name RepoGetTagProtection
+       * @summary Get a specific tag protection for the repository
+       * @request GET:/repos/{owner}/{repo}/tag_protections/{id}
+       * @secure
+       */
+      repoGetTagProtection: (owner, repo, id, params = {}) => this.request(__spreadValues({
+        path: `/repos/${owner}/${repo}/tag_protections/${id}`,
+        method: "GET",
+        secure: true
+      }, params)),
+      /**
+       * No description
+       *
+       * @tags repository
+       * @name RepoDeleteTagProtection
+       * @summary Delete a specific tag protection for the repository
+       * @request DELETE:/repos/{owner}/{repo}/tag_protections/{id}
+       * @secure
+       */
+      repoDeleteTagProtection: (owner, repo, id, params = {}) => this.request(__spreadValues({
+        path: `/repos/${owner}/${repo}/tag_protections/${id}`,
+        method: "DELETE",
+        secure: true
+      }, params)),
+      /**
+       * No description
+       *
+       * @tags repository
+       * @name RepoEditTagProtection
+       * @summary Edit a tag protections for a repository. Only fields that are set will be changed
+       * @request PATCH:/repos/{owner}/{repo}/tag_protections/{id}
+       * @secure
+       */
+      repoEditTagProtection: (owner, repo, id, body, params = {}) => this.request(__spreadValues({
+        path: `/repos/${owner}/${repo}/tag_protections/${id}`,
+        method: "PATCH",
+        body,
+        secure: true,
+        type: "application/json" /* Json */
+      }, params)),
       /**
        * No description
        *
@@ -53058,7 +53224,7 @@ function giteaApi(baseUrl, options) {
 
 /**
  * @title Gitea API
- * @version 1.22.0
+ * @version 1.23.1
  * @license MIT (http://opensource.org/licenses/MIT)
  * @baseUrl /api/v1
  *

package.json

@@ -40,11 +40,8 @@
     "@actions/core": "^1.11.1",
     "@actions/exec": "^1.1.1",
     "@actions/github": "^6.0.0",
-    "@eslint/eslintrc": "^3.2.0",
-    "@eslint/js": "^9.17.0",
     "@octokit/rest": "^20.1.1",
-    "eslint-import-resolver-typescript": "^3.7.0",
+    "gitea-js": "^1.23.0",
-    "gitea-js": "^1.22.0",
     "globals": "^15.14.0",
     "https-proxy-agent": "^7.0.6",
     "moment": "^2.30.1",
@@ -52,21 +49,27 @@
   },
   "devDependencies": {
     "@types/jest": "^29.5.14",
-    "@types/node": "^22.10.2",
+    "@types/node": "^22.10.10",
     "@types/semver": "^7.5.8",
-    "@typescript-eslint/eslint-plugin": "^8.18.1",
+    "@typescript-eslint/eslint-plugin": "^8.21.0",
-    "@typescript-eslint/parser": "^8.18.1",
+    "@typescript-eslint/parser": "^8.21.0",
     "@vercel/ncc": "^0.38.3",
-    "eslint": "^9.17.0",
+    "eslint": "^9.19.0",
-    "eslint-plugin-github": "^5.1.4",
+    "eslint-plugin-github": "^5.1.5",
     "eslint-plugin-import": "^2.31.0",
-    "eslint-plugin-jest": "^28.10.0",
+    "eslint-plugin-jest": "^28.11.0",
-    "eslint-plugin-prettier": "^5.2.1",
+    "eslint-plugin-prettier": "^5.2.3",
+    "eslint-import-resolver-typescript": "^3.7.0",
     "jest": "^29.7.0",
     "jest-circus": "^29.7.0",
     "js-yaml": "^4.1.0",
     "prettier": "3.4.2",
     "ts-jest": "^29.2.5",
-    "typescript": "^5.7.2"
+    "typescript": "^5.7.3",
+    "@eslint/eslintrc": "^3.2.0",
+    "@eslint/js": "^9.19.0"
+  },
+  "overrides": {
+    "glob": "11.0.1"
   }
 }