v1.3.1 Release Notes

[brrygrdn]

Highlights

This release is primarily catching up on our dependencies, but it also includes a few bug fixes:

• Correctly populate Dependabot Alert metadata when a manifest is located in the project root, thanks @SalimBensiali
• Add a workaround for a dependabot-core bug that causes the update-type to be blank occasionally, thanks @mwaddell

What's Changed

• If the update-type is missing for some reason, calculate it by @mwaddell in If the update-type is missing for some reason, calculate it #173
• Updated readme to explain when you need to use a PAT by @mwaddell in Updated readme to explain when you need to use a PAT #183
• Updated auto approve example to minimizing notifications by @mwaddell in Updated auto approve example to minimizing notifications #188
• Bump @types/node from 17.0.19 to 17.0.23 by @dependabot in Bump @types/node from 17.0.19 to 17.0.23 #191
• Bump @types/jest from 27.4.0 to 27.4.1 by @dependabot in Bump @types/jest from 27.4.0 to 27.4.1 #168
• Fix incorrect vulnerable manifest path check by @SalimBensiali in Fix incorrect vulnerable manifest path check #186
• Bump @types/yargs from 17.0.8 to 17.0.10 by @dependabot in Bump @types/yargs from 17.0.8 to 17.0.10 #181
• Bump @typescript-eslint/parser from 5.12.1 to 5.17.0 by @dependabot in Bump @typescript-eslint/parser from 5.12.1 to 5.17.0 #194
• Bump eslint from 8.9.0 to 8.12.0 by @dependabot in Bump eslint from 8.9.0 to 8.12.0 #190
• Bump ts-node from 10.5.0 to 10.7.0 by @dependabot in Bump ts-node from 10.5.0 to 10.7.0 #196
• Bump eslint from 8.12.0 to 8.13.0 by @dependabot in Bump eslint from 8.12.0 to 8.13.0 #198
• Bump typescript from 4.5.5 to 4.6.3 by @dependabot in Bump typescript from 4.5.5 to 4.6.3 #193
• Bump minimist from 1.2.5 to 1.2.6 by @dependabot in Bump minimist from 1.2.5 to 1.2.6 #204
• Bump yargs from 17.3.1 to 17.4.1 by @dependabot in Bump yargs from 17.3.1 to 17.4.1 #199
• Bump @typescript-eslint/parser from 5.17.0 to 5.20.0 by @dependabot in Bump @typescript-eslint/parser from 5.17.0 to 5.20.0 #202
• Bump @typescript-eslint/eslint-plugin from 5.12.1 to 5.20.0 by @dependabot in Bump @typescript-eslint/eslint-plugin from 5.12.1 to 5.20.0 #203
• Dependabot updates run monthly and attempt to auto-compile dist/ by @brrygrdn in Dependabot updates run monthly and attempt to auto-compile dist/ #205
• Bump @actions/github from 5.0.0 to 5.0.1 by @dependabot in Bump @actions/github from 5.0.0 to 5.0.1 #197
• Bump eslint-plugin-import from 2.25.4 to 2.26.0 by @dependabot in Bump eslint-plugin-import from 2.25.4 to 2.26.0 #207
• Bump @types/node from 17.0.23 to 17.0.25 by @dependabot in Bump @types/node from 17.0.23 to 17.0.25 #208
• Bump @vercel/ncc from 0.33.3 to 0.33.4 by @dependabot in Bump @vercel/ncc from 0.33.3 to 0.33.4 #209
• Bump yaml from 1.10.2 to 2.0.1 by @dependabot in Bump yaml from 1.10.2 to 2.0.1 #206

New Contributors

• @SalimBensiali made their first contribution in Fix incorrect vulnerable manifest path check #186

Full Changelog: v1.3.0...v1.3.1