Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Helm release redis from 19.1.5 to ~19.2.0 (helm/defectdojo/Chart.yaml) #10139

Merged
merged 1 commit into from
May 9, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 7, 2024

Mend Renovate

This PR contains the following updates:

Package Update Change
redis (source) minor ~19.1.0 -> ~19.2.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label May 7, 2024
@github-actions github-actions bot added the helm label May 7, 2024
Copy link

dryrunsecurity bot commented May 7, 2024

Hi there 👋, @DryRunSecurity here, below is a summary of our analysis and findings.

DryRun Security Status Findings
Sensitive Files Analyzer 0 findings
Secrets Analyzer 0 findings
Configured Codepaths Analyzer 0 findings
AppSec Analyzer 0 findings
Authn/Authz Analyzer 0 findings

Note

🟢 Risk threshold not exceeded.

Change Summary (click to expand)

The following is a summary of changes in this pull request made by me, your security buddy 🤖.
Note that this summary is auto-generated and not meant to be a definitive list of security issues
but rather a helpful summary from a security perspective.

Summary:

The changes in this pull request are focused on updating the version of the Redis dependency in the helm/defectdojo/Chart.yaml file, as well as the corresponding updates in the helm/defectdojo/Chart.lock file.

From an application security perspective, the changes do not introduce any obvious security concerns. Updating dependencies to their latest versions is generally a good practice as it can include security fixes and improvements. However, it's important to thoroughly test the application after the dependency update to ensure there are no regressions or unexpected behavior changes.

The ~ version constraint in the dependency specification for Redis means that the latest patch version of the 19.2.x series will be used. This is a common practice to allow for automatic updates to the latest patch version while still maintaining compatibility with the 19.2 major and minor versions.

Overall, this code change appears to be a routine dependency update, which is a common and recommended practice in software development. As long as the application is thoroughly tested after the update, there are no major security concerns to highlight.

Files Changed:

  1. helm/defectdojo/Chart.yaml: This file has been updated to change the version of the Redis dependency from ~19.1.0 to ~19.2.0.
  2. helm/defectdojo/Chart.lock: This file has been updated to reflect the changes in the Redis Helm chart version, from 19.1.5 to 19.2.0. The digest value and generated timestamp have also been updated accordingly.

Powered by DryRun Security

@renovate renovate bot force-pushed the renovate/redis-19.x branch from 6d0bc1b to 32e5f55 Compare May 9, 2024 00:04
Copy link
Contributor

@mtesauro mtesauro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@mtesauro mtesauro merged commit 6e901bb into dev May 9, 2024
126 checks passed
@renovate renovate bot deleted the renovate/redis-19.x branch May 9, 2024 05:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file helm
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants