microsoft / microsoft/setup-msbuild

Unneeded dependency on @actions/tool-cache

Open
#135 1 comment 0 reactions 1 assignee View on GitHub

@timheuer is already working on this.

Since Nov 19, 2024.

dependencies
Dominant language
TypeScript
Stars
398
Forks
93
Avg merge
21d 14h
Merged PRs (30d)
1

Description

Looks like this code once directly depended on @actions/tool-cache but no longer does.

This dependency could be removed from package.json which clears this transitive semver vulnerability CVE-2022-25883
"@actions/tool-cache": "^1.3.0"

~/src/setup-msbuild/src$ git grep tool-cache $(git rev-list --all)
3ef0817a4abf99a3632a7c77a60e982a156db578:main.ts:import * as toolCache from '@actions/tool-cache'
5817abf347fd91d634f86da6635e14e39a3b1b66:main.ts:import * as toolCache from '@actions/tool-cache'
dd9521cc411535ba013905b144116257817da37b:main.ts:import * as toolCache from '@actions/tool-cache'
5a941602d277d18f27537d169fc01b7696c3e095:main.ts:import * as toolCache from '@actions/tool-cache'
6a7105d96d081fdf3bdb20ec966186aa56cd9a82:main.ts:import * as toolCache from '@actions/tool-cache'
5639ea3d911c64ff68d708ddd6aa66c905716e67:main.ts:import * as toolCache from '@actions/tool-cache'
ded5a39da68208ac982f80008c4e9f72f77229f7:main.ts:import * as toolCache from '@actions/tool-cache'
~/src/setup-msbuild/src$ grep tool-cache main.ts
~/src/setup-msbuild/src$

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.