react-native-macos/bots
Adam Gleitman 6d74fc35c4 Upgrade to `firebase^9.0.2` in ./bots (#32218)
Summary:
Addresses the following couple security vulnerabilities.

- https://github.com/advisories/GHSA-9r2w-394v-53qc
- https://github.com/advisories/GHSA-qq89-hq3f-393p

Newer versions of the `firebase` dependency no longer depends on `tar`.

[Internal]

Pull Request resolved: https://github.com/facebook/react-native/pull/32218

Test Plan: See bots run on this pull request.

Reviewed By: sammy-SC

Differential Revision: D30969643

Pulled By: yungsters

fbshipit-source-id: 85c886ead7d8563dcaaef537f34bda57c7dc23a5
2022-03-15 14:19:37 -07:00
..
.babelrc Move danger to bots directory 2018-01-31 16:42:41 -08:00
README.md Merge 0.66 into master (#951) 2022-01-14 13:11:09 -08:00
code-analysis-bot.js Merge 0.66 into master (#951) 2022-01-14 13:11:09 -08:00
dangerfile.js Merge 0.66 into master (#951) 2022-01-14 13:11:09 -08:00
datastore.js Upgrade to `firebase^9.0.2` in ./bots (#32218) 2022-03-15 14:19:37 -07:00
make-comment.js v0.63 sync from upstream (#613) 2020-09-30 18:38:06 +02:00
package.json Upgrade to `firebase^9.0.2` in ./bots (#32218) 2022-03-15 14:19:37 -07:00
report-bundle-size.js Upgrade to `firebase^9.0.2` in ./bots (#32218) 2022-03-15 14:19:37 -07:00
yarn.lock Upgrade to `firebase^9.0.2` in ./bots (#32218) 2022-03-15 14:19:37 -07:00

README.md

Danger

Danger is a JavaScript runtime which helps you provide continuous feedback inside GitHub. It's used by @pull-bot to analyze the contents of a GitHub pull request.

If you want to test changes to Danger, I'd recommend checking out an existing PR and then running the danger pr command. You'll need a GitHub token. You can re-use this one: a6edf8e8d40ce4e8b11a 150e1341f4dd9c944d2a (just remove the space). So, for example:

DANGER_GITHUB_API_TOKEN=[ENV_ABOVE] yarn danger pr https://github.com/facebook/react-native/pull/1234

Code Analysis Bot

The code analysis bot provides lint and other results as inline reviews on GitHub. It runs as part of the Circle CI analysis workflow.

If you want to test changes to the Code Analysis Bot, I'd recommend checking out an existing PR and then running the analyze pr command. You'll need a GitHub token. You can re-use this one: 312d354b5c36f082cfe9 07973d757026bdd9f196 (just remove the space). So, for example:

GITHUB_TOKEN=[ENV_ABOVE] GITHUB_PR_NUMBER=1234 yarn lint-ci