Skip to content

Develra v0.1.1

Choose a tag to compare

@forrestelliott forrestelliott released this 14 Aug 06:04
· 29 commits to main since this release

Develra v0.1.1

Develra v0.1.1 is a security maintenance release for the bundled GitHub
Action. Scanner behavior and lockfile output are unchanged from v0.1.0.

Security

  • Updated the official GitHub Actions toolkit dependency from @actions/core
    1.11.1 to 2.0.3.
  • Replaced bundled undici 5.29.0 with patched 6.28.0.
  • Confirmed the production dependency graph has no known vulnerabilities with
    pnpm audit --prod.

The standalone npm CLI continues to have zero runtime dependencies and default
scans remain offline.

Verify the release

npx develra@0.1.1 --version
npx develra@0.1.1 scan

Use the patched Action channel in GitHub workflows:

- uses: develra-dev/develra@v0
  with:
    command: check

Full documentation and source: https://github.com/develra-dev/develra