Commit Graph

8 Commits

Author SHA1 Message Date
Claude
f7570c7b51 Fix npm security vulnerabilities using package overrides
Resolved all 27 npm security vulnerabilities by:
- Adding npm overrides to force js-yaml@^4.1.1 across all dependencies
- Rebuilding package-lock.json with clean install
- Fixed vulnerabilities in: braces, form-data, js-yaml, node-notifier, tough-cookie

All vulnerabilities resolved: 0 vulnerabilities remaining
2025-11-14 15:33:30 +00:00
Claude
9d3fe9dc92 Update package-lock.json after npm install 2025-11-14 15:16:39 +00:00
pacnpal
aa1ffd4d99 Update 2025-11-14 14:59:00 +00:00
pacnpal
b516288da6 Update 2025-11-14 14:57:19 +00:00
pacnpal
7fae28e1ff Update js-yaml version to use caret notation 2025-11-14 09:48:54 -05:00
Claude
183d49dd6a Improve code resilience, error handling, and logging
Major improvements:
- Add comprehensive logging with @actions/core (info, warning, error, debug)
- Implement retry logic with exponential backoff for all network operations
- Add timeout handling for API calls (2 minute default)
- Improve error handling with specific messages and context
- Add input validation for API keys and PR numbers
- Implement rate limit handling (429 responses)
- Add diff size limits to prevent API token overflow
- Fix flawed markdown escape logic in review posting
- Add progress indicators with core.startGroup/endGroup
- Mask sensitive data (API keys) in logs
- Add unhandled rejection and exception handlers
- Improve git operation error handling and output capture
- Add JSDoc comments for all functions
- Fix npm security vulnerabilities

The action is now much more resilient to:
- Network failures and transient errors
- API rate limiting
- Large diffs
- Timeout issues
- Invalid inputs

Logging improvements provide better visibility into:
- Operation progress and timing
- Retry attempts
- Error context and debugging information
- Resource usage (diff size, review length)
2025-11-14 14:30:56 +00:00
dependabot[bot]
ada4f6b4ed Bump undici in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [undici](https://github.com/nodejs/undici).


Updates `undici` from 5.28.4 to 5.28.5
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5)

---
updated-dependencies:
- dependency-name: undici
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-01-22 00:48:58 +00:00
pacnpal
5f46e3056e added packages 2024-12-10 18:47:28 -05:00