Bump packageurl-js from 1.1.1 to 1.2.1 (#549)

* Bump packageurl-js from 1.1.1 to 1.2.1

Bumps [packageurl-js](https://github.com/package-url/packageurl-js) from 1.1.1 to 1.2.1.
- [Changelog](https://github.com/package-url/packageurl-js/blob/master/CHANGELOG.md)
- [Commits](package-url/packageurl-js@v1.1.1...v1.2.1)

---
updated-dependencies:
- dependency-name: packageurl-js
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* `makers setup && makers build`

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kenichi Kamiya <kachick1@gmail.com>

Author: dependabot[bot]

dist/index.js

@@ -38755,11 +38755,20 @@ var require_package_url2 = __commonJS({
       _handlePyPi() {
         this.name = this.name.toLowerCase().replace(/_/g, "-");
       }
+      _handlePub() {
+        this.name = this.name.toLowerCase();
+        if (!/^[a-z0-9_]+$/i.test(this.name)) {
+          throw new Error("Invalid purl: contains an illegal character.");
+        }
+      }
       toString() {
         var purl = ["pkg:", encodeURIComponent(this.type), "/"];
         if (this.type === "pypi") {
           this._handlePyPi();
         }
+        if (this.type === "pub") {
+          this._handlePub();
+        }
         if (this.namespace) {
           purl.push(
             encodeURIComponent(this.namespace).replace(/%3A/g, ":").replace(/%2F/g, "/")
@@ -38769,7 +38778,7 @@ var require_package_url2 = __commonJS({
         purl.push(encodeURIComponent(this.name).replace(/%3A/g, ":"));
         if (this.version) {
           purl.push("@");
-          purl.push(encodeURIComponent(this.version).replace(/%3A/g, ":"));
+          purl.push(encodeURIComponent(this.version).replace(/%3A/g, ":").replace(/%2B/g, "+"));
         }
         if (this.qualifiers) {
           purl.push("?");
@@ -38792,7 +38801,8 @@ var require_package_url2 = __commonJS({
         if (!purl || typeof purl !== "string" || !purl.trim()) {
           throw new Error("A purl string argument is required.");
         }
-        let [scheme, remainder] = purl.split(":", 2);
+        let scheme = purl.slice(0, purl.indexOf(":"));
+        let remainder = purl.slice(purl.indexOf(":") + 1);
         if (scheme !== "pkg") {
           throw new Error('purl is missing the required "pkg" scheme component.');
         }
@@ -38825,7 +38835,7 @@ var require_package_url2 = __commonJS({
           let index = path.indexOf("@");
           let rawVersion = path.substring(index + 1);
           version2 = decodeURIComponent(rawVersion);
-          let versionEncoded = encodeURIComponent(version2).replace(/%3A/g, ":");
+          let versionEncoded = encodeURIComponent(version2).replace(/%3A/g, ":").replace(/%2B/g, "+");
           if (rawVersion !== versionEncoded) {
             throw new Error("Invalid purl: version must be percent-encoded");
           }

package-lock.json

@@ -25,7 +25,7 @@
     "@actions/core": "^1.10.1",
     "@actions/github": "^6.0.0",
     "@github/dependency-submission-toolkit": "^1.2.10",
-    "packageurl-js": "^1.1.1",
+    "packageurl-js": "^1.2.1",
     "zod": "^3.22.4"
   },
   "devDependencies": {