Bump spdx-expression-parse from 3.0.1 to 4.0.0 in the spdx-licenses group across 1 directory by dependabot[bot] · Pull Request #931 · actions/dependency-review-action

dependabot · 2025-05-12T01:10:49Z

Bumps the spdx-licenses group with 1 update in the / directory: spdx-expression-parse.

Updates spdx-expression-parse from 3.0.1 to 4.0.0

Commits

bb753f1 4.0.0
f4d2941 Configure GitHub to also test on latest Node.js
19f25b5 Configure GitHub Action for CI
86ebef5 Mention case-insensitive operators in README
e1dbc13 Test mixed-case operators
c0e25f8 Accept mixed-case operators
52cb46f Test lower-case operators
18bd587 Accept lower-case or upper-case operators
2919fa9 README: Do not test on new SPDX IDs ending with +
See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

dependabot · 2025-11-17T01:14:08Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

ahpook · 2026-02-19T05:21:25Z

@dependabot recreate

Bumps the spdx-licenses group with 1 update in the / directory: [spdx-expression-parse](https://github.com/jslicense/spdx-expression-parse.js). Updates `spdx-expression-parse` from 3.0.1 to 4.0.0 - [Commits](jslicense/spdx-expression-parse.js@v3.0.1...v4.0.0) --- updated-dependencies: - dependency-name: spdx-expression-parse dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: spdx-licenses ... Signed-off-by: dependabot[bot] <support@github.com>

ahpook · 2026-02-19T05:28:42Z

This looks safe, the only change between 3.0.1 and 4 is to permit the use of case insensitive operators in compound expressions MIT and Apache-2.0 - this update will also bump the spdx-license-ids package as requested in #1044

ahpook

This is a major version bump but only adds support for case-insensitive operators. There are some transitive updates that are also desirable , LGTM

jslicense/spdx-expression-parse.js@v3.0.1...v4.0.0

Bumps the github-actions group with 3 updates: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action), [github/codeql-action](https://github.com/github/codeql-action) and [actions/dependency-review-action](https://github.com/actions/dependency-review-action). Updates `anthropics/claude-code-action` from 1.0.51 to 1.0.55 Release notes *Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).* > v1.0.55 > ------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.55> > > v1.0.54 > ------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.54> > > v1.0.53 > ------- > > What's Changed > -------------- > > * fix: grant write permissions and use [`@main`](https://github.com/main) in claude workflow by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#950](https://redirect.github.com/anthropics/claude-code-action/pull/950) > * feat: add display\_report option to disable step summary by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#952](https://redirect.github.com/anthropics/claude-code-action/pull/952) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.53> > > v1.0.52 > ------- > > What's Changed > -------------- > > * Fix stale claudeCodeVersion and update bump script to keep run.ts in sync by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#943](https://redirect.github.com/anthropics/claude-code-action/pull/943) > * fix: revert to colon-based wildcard syntax for git permissions by [`@ashwin-ant`](https://github.com/ashwin-ant) in [anthropics/claude-code-action#949](https://redirect.github.com/anthropics/claude-code-action/pull/949) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.52> Commits * [`edd85d6`](anthropics/claude-code-action@edd85d6) chore: bump Claude Code to 2.1.49 and Agent SDK to 0.2.49 * [`0cf5eee`](anthropics/claude-code-action@0cf5eee) chore: bump Claude Code to 2.1.47 and Agent SDK to 0.2.47 * [`e6cb7a7`](anthropics/claude-code-action@e6cb7a7) chore: bump Claude Code to 2.1.45 and Agent SDK to 0.2.45 * [`2f8ba26`](anthropics/claude-code-action@2f8ba26) chore: bump Claude Code to 2.1.44 and Agent SDK to 0.2.44 * [`cc5ef44`](anthropics/claude-code-action@cc5ef44) feat: add display\_report option to disable step summary ([#952](https://redirect.github.com/anthropics/claude-code-action/issues/952)) * [`f6a1c4c`](anthropics/claude-code-action@f6a1c4c) fix: grant write permissions and use [`@main`](https://github.com/main) in claude workflow ([#950](https://redirect.github.com/anthropics/claude-code-action/issues/950)) * [`68cfeea`](anthropics/claude-code-action@68cfeea) Revert "fix: replace deprecated :\* with modern \* wildcard in git permissions ... * [`f508883`](anthropics/claude-code-action@f508883) Fix stale claudeCodeVersion in run.ts and update bump automation ([#943](https://redirect.github.com/anthropics/claude-code-action/issues/943)) * See full diff in [compare view](anthropics/claude-code-action@ea36d6a...edd85d6) Updates `github/codeql-action` from 4.32.3 to 4.32.4 Release notes *Sourced from [github/codeql-action's releases](https://github.com/github/codeql-action/releases).* > v4.32.4 > ------- > > * Update default CodeQL bundle version to [2.24.2](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.2). [#3493](https://redirect.github.com/github/codeql-action/pull/3493) > * Added an experimental change which improves how certificates are generated for the authentication proxy that is used by the CodeQL Action in Default Setup when [private package registries are configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries). This is expected to generate more widely compatible certificates and should have no impact on analyses which are working correctly already. We expect to roll this change out to everyone in February. [#3473](https://redirect.github.com/github/codeql-action/pull/3473) > * When the CodeQL Action is run [with debugging enabled in Default Setup](https://docs.github.com/en/code-security/how-tos/scan-code-for-vulnerabilities/troubleshooting/troubleshooting-analysis-errors/logs-not-detailed-enough#creating-codeql-debugging-artifacts-for-codeql-default-setup) and [private package registries are configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries), the "Setup proxy for registries" step will output additional diagnostic information that can be used for troubleshooting. [#3486](https://redirect.github.com/github/codeql-action/pull/3486) > * Added a setting which allows the CodeQL Action to enable network debugging for Java programs. This will help GitHub staff support customers with troubleshooting issues in GitHub-managed CodeQL workflows, such as Default Setup. This setting can only be enabled by GitHub staff. [#3485](https://redirect.github.com/github/codeql-action/pull/3485) > * Added a setting which enables GitHub-managed workflows, such as Default Setup, to use a [nightly CodeQL CLI release](https://github.com/dsp-testing/codeql-cli-nightlies) instead of the latest, stable release that is used by default. This will help GitHub staff support customers whose analyses for a given repository or organization require early access to a change in an upcoming CodeQL CLI release. This setting can only be enabled by GitHub staff. [#3484](https://redirect.github.com/github/codeql-action/pull/3484) Changelog *Sourced from [github/codeql-action's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > No user facing changes. > > 4.32.4 - 20 Feb 2026 > -------------------- > > * Update default CodeQL bundle version to [2.24.2](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.2). [#3493](https://redirect.github.com/github/codeql-action/pull/3493) > * Added an experimental change which improves how certificates are generated for the authentication proxy that is used by the CodeQL Action in Default Setup when [private package registries are configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries). This is expected to generate more widely compatible certificates and should have no impact on analyses which are working correctly already. We expect to roll this change out to everyone in February. [#3473](https://redirect.github.com/github/codeql-action/pull/3473) > * When the CodeQL Action is run [with debugging enabled in Default Setup](https://docs.github.com/en/code-security/how-tos/scan-code-for-vulnerabilities/troubleshooting/troubleshooting-analysis-errors/logs-not-detailed-enough#creating-codeql-debugging-artifacts-for-codeql-default-setup) and [private package registries are configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries), the "Setup proxy for registries" step will output additional diagnostic information that can be used for troubleshooting. [#3486](https://redirect.github.com/github/codeql-action/pull/3486) > * Added a setting which allows the CodeQL Action to enable network debugging for Java programs. This will help GitHub staff support customers with troubleshooting issues in GitHub-managed CodeQL workflows, such as Default Setup. This setting can only be enabled by GitHub staff. [#3485](https://redirect.github.com/github/codeql-action/pull/3485) > * Added a setting which enables GitHub-managed workflows, such as Default Setup, to use a [nightly CodeQL CLI release](https://github.com/dsp-testing/codeql-cli-nightlies) instead of the latest, stable release that is used by default. This will help GitHub staff support customers whose analyses for a given repository or organization require early access to a change in an upcoming CodeQL CLI release. This setting can only be enabled by GitHub staff. [#3484](https://redirect.github.com/github/codeql-action/pull/3484) > > 4.32.3 - 13 Feb 2026 > -------------------- > > * Added experimental support for testing connections to [private package registries](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries). This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. [#3466](https://redirect.github.com/github/codeql-action/pull/3466) > > 4.32.2 - 05 Feb 2026 > -------------------- > > * Update default CodeQL bundle version to [2.24.1](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.1). [#3460](https://redirect.github.com/github/codeql-action/pull/3460) > > 4.32.1 - 02 Feb 2026 > -------------------- > > * A warning is now shown in Default Setup workflow logs if a [private package registry is configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) using a GitHub Personal Access Token (PAT), but no username is configured. [#3422](https://redirect.github.com/github/codeql-action/pull/3422) > * Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. [#3421](https://redirect.github.com/github/codeql-action/pull/3421) > > 4.32.0 - 26 Jan 2026 > -------------------- > > * Update default CodeQL bundle version to [2.24.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.0). [#3425](https://redirect.github.com/github/codeql-action/pull/3425) > > 4.31.11 - 23 Jan 2026 > --------------------- > > * When running a Default Setup workflow with [Actions debugging enabled](https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging), the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. [#3409](https://redirect.github.com/github/codeql-action/pull/3409) > * Improved error handling throughout the CodeQL Action. [#3415](https://redirect.github.com/github/codeql-action/pull/3415) > * Added experimental support for automatically excluding [generated files](https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github) from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. [#3318](https://redirect.github.com/github/codeql-action/pull/3318) > * The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. [#3403](https://redirect.github.com/github/codeql-action/pull/3403) > > 4.31.10 - 12 Jan 2026 > --------------------- > > * Update default CodeQL bundle version to 2.23.9. [#3393](https://redirect.github.com/github/codeql-action/pull/3393) > > 4.31.9 - 16 Dec 2025 > -------------------- > > No user facing changes. > > 4.31.8 - 11 Dec 2025 > -------------------- ... (truncated) Commits * [`89a39a4`](github/codeql-action@89a39a4) Merge pull request [#3494](https://redirect.github.com/github/codeql-action/issues/3494) from github/update-v4.32.4-39ba80c47 * [`e5d84c8`](github/codeql-action@e5d84c8) Apply remaining review suggestions * [`0c20209`](github/codeql-action@0c20209) Apply suggestions from code review * [`314172e`](github/codeql-action@314172e) Fix typo * [`cdda72d`](github/codeql-action@cdda72d) Add changelog entries * [`cfda84c`](github/codeql-action@cfda84c) Update changelog for v4.32.4 * [`39ba80c`](github/codeql-action@39ba80c) Merge pull request [#3493](https://redirect.github.com/github/codeql-action/issues/3493) from github/update-bundle/codeql-bundle-v2.24.2 * [`00150da`](github/codeql-action@00150da) Add changelog note * [`d97dce6`](github/codeql-action@d97dce6) Update default bundle to codeql-bundle-v2.24.2 * [`50fdbb9`](github/codeql-action@50fdbb9) Merge pull request [#3492](https://redirect.github.com/github/codeql-action/issues/3492) from github/henrymercer/new-repository-properties-ff * Additional commits viewable in [compare view](github/codeql-action@9e907b5...89a39a4) Updates `actions/dependency-review-action` from 4.8.2 to 4.8.3 Release notes *Sourced from [actions/dependency-review-action's releases](https://github.com/actions/dependency-review-action/releases).* > 4.8.3 > ----- > > Dependency Review Action v4.8.3 > ------------------------------- > > This is a bugfix release that updates a number of upstream dependencies and includes a fix for the earlier feature that detected oversized summaries and upload them as artifacts, which could occasionally crash the action. > > We have also updated the release process to use a long-lived `v4` **branch** for the action, instead of a force-pushed tag, which aligns better with git branching strategies; the change should be transparent to end users. > > What's Changed > -------------- > > * GitHub Actions can't push to our protected main by [`@dangoor`](https://github.com/dangoor) in [actions/dependency-review-action#1017](https://redirect.github.com/actions/dependency-review-action/pull/1017) > * Bump actions/stale from 9.1.0 to 10.1.0 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#995](https://redirect.github.com/actions/dependency-review-action/pull/995) > * Bump github/codeql-action from 3 to 4 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#1003](https://redirect.github.com/actions/dependency-review-action/pull/1003) > * Bump actions/setup-node from 4 to 6 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#1005](https://redirect.github.com/actions/dependency-review-action/pull/1005) > * Upgrade glob to address a vulnerability by [`@brrygrdn`](https://github.com/brrygrdn) in [actions/dependency-review-action#1024](https://redirect.github.com/actions/dependency-review-action/pull/1024) > * Bump js-yaml by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#1020](https://redirect.github.com/actions/dependency-review-action/pull/1020) > * Addressing vulnerabilities by [`@Ahmed3lmallah`](https://github.com/Ahmed3lmallah) in [actions/dependency-review-action#1036](https://redirect.github.com/actions/dependency-review-action/pull/1036) > * Bump fast-xml-parser from 5.3.3 to 5.3.5 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#1050](https://redirect.github.com/actions/dependency-review-action/pull/1050) > * Bump fast-xml-parser from 5.3.5 to 5.3.6 by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#1053](https://redirect.github.com/actions/dependency-review-action/pull/1053) > * Properly truncate long summaries and catch errors by [`@juxtin`](https://github.com/juxtin) in [actions/dependency-review-action#1052](https://redirect.github.com/actions/dependency-review-action/pull/1052) > * Bump spdx-expression-parse from 3.0.1 to 4.0.0 in the spdx-licenses group across 1 directory by [`@dependabot`](https://github.com/dependabot)[bot] in [actions/dependency-review-action#931](https://redirect.github.com/actions/dependency-review-action/pull/931) > * Changes for Release 4.8.3 by [`@ahpook`](https://github.com/ahpook) in [actions/dependency-review-action#1054](https://redirect.github.com/actions/dependency-review-action/pull/1054) > > **Full Changelog**: <https://github.com/actions/dependency-review-action/compare/v4.8.2..v4.8.3> Commits * [`05fe457`](actions/dependency-review-action@05fe457) Merge pull request [#1054](https://redirect.github.com/actions/dependency-review-action/issues/1054) from actions/ahpook/release-4.8.3 * [`3a8496c`](actions/dependency-review-action@3a8496c) Update generated package files for v4.8.3 * [`0f22a01`](actions/dependency-review-action@0f22a01) Update CONTRIBUTING for new release process * [`58be343`](actions/dependency-review-action@58be343) Updating package versions for 4.8.3 * [`9284e0c`](actions/dependency-review-action@9284e0c) Merge pull request [#931](https://redirect.github.com/actions/dependency-review-action/issues/931) from actions/dependabot/npm\_and\_yarn/spdx-licenses-20... * [`8b76656`](actions/dependency-review-action@8b76656) Bump spdx-expression-parse in the spdx-licenses group across 1 directory * [`43f5f02`](actions/dependency-review-action@43f5f02) Merge pull request [#1052](https://redirect.github.com/actions/dependency-review-action/issues/1052) from actions/juxtin/fix-long-summaries * [`f0033fc`](actions/dependency-review-action@f0033fc) Merge pull request [#1053](https://redirect.github.com/actions/dependency-review-action/issues/1053) from actions/dependabot/npm\_and\_yarn/fast-xml-parser... * [`b379e2e`](actions/dependency-review-action@b379e2e) Bump fast-xml-parser from 5.3.5 to 5.3.6 * [`2e1cf54`](actions/dependency-review-action@2e1cf54) Properly truncate long summaries and catch errors * Additional commits viewable in [compare view](actions/dependency-review-action@3c4e3dc...05fe457) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 12, 2025

dependabot bot requested a review from a team as a code owner May 12, 2025 01:10

dependabot bot added the javascript Pull requests that update Javascript code label May 12, 2025

dependabot bot force-pushed the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch from 671663d to 4dda711 Compare May 19, 2025 01:04

dependabot bot force-pushed the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch from 4dda711 to 615772a Compare July 14, 2025 01:37

dependabot bot force-pushed the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch from 615772a to 01c7367 Compare July 28, 2025 01:31

dependabot bot force-pushed the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch from 01c7367 to 2efb961 Compare August 25, 2025 01:23

dependabot bot force-pushed the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch from 2efb961 to e6f5e60 Compare September 1, 2025 02:34

dependabot bot force-pushed the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch from e6f5e60 to 376715b Compare September 29, 2025 01:02

dependabot bot force-pushed the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch from 376715b to f01bacf Compare October 13, 2025 01:02

dependabot bot force-pushed the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch from f01bacf to 4f8d5b3 Compare October 20, 2025 01:02

dependabot bot force-pushed the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch 2 times, most recently from 4385fb8 to 8379217 Compare November 10, 2025 01:02

dependabot bot force-pushed the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch from 8379217 to 6b884ad Compare November 24, 2025 01:03

dependabot bot force-pushed the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch from 6b884ad to 77431cc Compare December 1, 2025 01:34

dependabot bot force-pushed the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch from 77431cc to ad8c962 Compare January 12, 2026 01:42

dependabot bot force-pushed the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch from ad8c962 to 8b76656 Compare February 19, 2026 05:22

ahpook approved these changes Feb 19, 2026

View reviewed changes

ahpook merged commit 9284e0c into main Feb 19, 2026
7 checks passed

ahpook deleted the dependabot/npm_and_yarn/spdx-licenses-208b55449f branch February 19, 2026 05:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump spdx-expression-parse from 3.0.1 to 4.0.0 in the spdx-licenses group across 1 directory#931

Bump spdx-expression-parse from 3.0.1 to 4.0.0 in the spdx-licenses group across 1 directory#931
ahpook merged 1 commit intomainfrom
dependabot/npm_and_yarn/spdx-licenses-208b55449f

dependabot bot commented on behalf of github May 12, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Nov 17, 2025

Uh oh!

ahpook commented Feb 19, 2026

Uh oh!

ahpook commented Feb 19, 2026 •

edited

Loading

Uh oh!

ahpook left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github May 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot bot commented on behalf of github Nov 17, 2025

Uh oh!

ahpook commented Feb 19, 2026

Uh oh!

ahpook commented Feb 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

ahpook left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github May 12, 2025 •

edited

Loading

ahpook commented Feb 19, 2026 •

edited

Loading