Skip to content
This repository has been archived by the owner on Feb 29, 2024. It is now read-only.

Update all dependencies #87

Merged
merged 9 commits into from
Oct 20, 2023
Merged

Update all dependencies #87

merged 9 commits into from
Oct 20, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 19, 2023

Mend Renovate

This PR contains the following updates:

Package Type Update Change
asecurityteam/sdcli stage minor v1.2.3 -> v1.5.0
bitbucket.org/atlassian/go-asap require major v0.0.0-20190921160616-bb88d6193af9 -> v2.6.0
github.com/SermoDigital/jose require digest f6df55f -> 803625b
github.com/apache/thrift replace minor v0.0.0-20180902110319-2566ecd5d999 -> v0.19.0
github.com/asecurityteam/httpstats require major v0.0.0-20200806153718-d71ff7ed1047 -> v2.3.0
github.com/asecurityteam/runhttp require patch v0.6.0 -> v0.6.1
github.com/asecurityteam/settings require major v0.7.0 -> v1.0.0
github.com/getkin/kin-openapi require minor v0.69.0 -> v0.120.0
github.com/stretchr/testify require patch v1.8.2 -> v1.8.4
github.com/vincent-petithory/dataurl require major v0.0.0-20160330182126-9a301d65acbb -> v1.0.0

Release Notes

asecurityteam/sdcli (asecurityteam/sdcli)

v1.5.0: Dependencies and golang update

Compare Source

What's Changed

New Contributors

Full Changelog: asecurityteam/sdcli@v1.4.1...v1.5.0

v1.4.1: Update go package x and fresh run of apt upgrades to resolve VULN

Compare Source

v1.4.0: Default golint config

Compare Source

This adds in a default golangci.yaml file for linting with via the SDCLI.

This checks if the running directory has a .golangci.yaml and if not, uses the default one that has been added under defaults/.golangci.yaml.

v1.3.1

Compare Source

What's Changed

Full Changelog: asecurityteam/sdcli@v1.3.0...v1.3.1

v1.3.0

Compare Source

  • Fixes for arm64 compatibility
  • Invoke help command if no parameters were passed

v1.2.9: Provide compose plugin and cli tool simultanously

Compare Source

Apparently the docker compose and docker-compose are not 100% compatible. Providing both to allow legacy builds to keep working as is.

v1.2.8: Fix missing docker-compose command

Compare Source

Fixes a regression introduced in 1.2.6 and adds tests to check for run-able docker and docker-compose commands.

v1.2.7: Run integration tests from all subdirectories of the tests directory

Compare Source

  • Recursively search for integration tests to run in tests/

v1.2.6: Update Docker Compose to Version 2

Compare Source

Updates our Docker Compose version from 1.x to the latest 2.11.2 version

v1.2.5: Update linter to new source path

Compare Source

Updates our linter to use the new sourcing path, as the old one was deprecated and no longer exists

Fixes:
  • Linter

v1.2.4: Upgrading Golang to 1.17.7

Compare Source

Updates our base Golang image to 1.17.7

atlassian/go-asap (bitbucket.org/atlassian/go-asap)

v2.6.0

Compare Source

v2.5.0

Compare Source

v2.4.0

Compare Source

v2.3.0

Compare Source

apache/thrift (github.com/apache/thrift)

v0.19.0: Version 0.19.0

Compare Source

Please head over to the official release download source:
http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

v0.18.1: Version 0.18.1

Compare Source

Please head over to the official release download source:
http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

v0.18.0: Version 0.18.0

Compare Source

Please head over to the official release download source:
http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

v0.17.0: Version 0.17.0

Compare Source

Please head over to the official release download source:
http://thrift.apache.org/download

The assets listed below are added by Github based on the release tag and they will therefore not match the checkums published on the Thrift project website.

v0.16.0: Version 0.16.0

Compare Source

For release 0.16.0 head over to the official release download source:
http://thrift.apache.org/download

The assets below are added by Github based on the release tag and they may therefore not match the checkums.

v0.15.0: Version 0.15.0

Compare Source

For release 0.15.0 head over to the official release download source:
http://thrift.apache.org/download

The assets below are added by Github based on the release tag and they may therefore not match the checkums.

v0.14.2: Version 0.14.2

Compare Source

For release 0.14.0 head over to the official release download source:
http://thrift.apache.org/download

The assets below are added by Github based on the release tag and they may therefore not match the checkums.

v0.14.1: Version 0.14.1

Compare Source

For release 0.14.1 head over to the official release download source:
http://thrift.apache.org/download

The assets below are added by Github based on the release tag and they may therefore not match the checkums.

v0.14.0: Version 0.14.0

Compare Source

For release 0.14.0 head over to the official release download source:
http://thrift.apache.org/download

The assets below are added by Github based on the release tag and they may therefore not match the checkums.

v0.13.0: Version 0.13.0

Compare Source

For release 0.13.0 head over to the official release download source:
http://thrift.apache.org/download

The assets below are added by Github based on the release tag and they may therefore not match the checkums.

asecurityteam/httpstats (github.com/asecurityteam/httpstats)

v2.3.0: Add stat transport and confirm to go mod v2 requirements

Compare Source

This release confirms the library to go mod's v2 required package structure, and it adds a small new feature: a transport.Decorator that wraps an http.RoundTripper with an http.RoundTripper that injects a logevent.Logger into the current request context.

asecurityteam/runhttp (github.com/asecurityteam/runhttp)

v0.6.1: New release for renovate

Compare Source

The old 0.6.0 tag had renovate confused with the changes we made so adding a new 0.6.1 tag to force renovate to get the latest changes.

asecurityteam/settings (github.com/asecurityteam/settings)

v1.0.0: support variable expansion

Compare Source

This is the v1.0.0 release, which includes support for variable expansion. One may place a string literal in one of the built-in sources like "${A}" and the library will expand the variable if it is found, and leave it as-is if not found. See README and unit tests for complete documentation.

getkin/kin-openapi (github.com/getkin/kin-openapi)

v0.120.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.119.0...v0.120.0

v0.119.0

Compare Source

What's Changed
New Contributors

Full Changelog: getkin/kin-openapi@v0.118.0...v0.119.0

v0.118.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.117.0...v0.118.0

v0.117.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.116.0...v0.117.0

v0.116.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.115.0...v0.116.0

v0.115.0

Compare Source

What's Changed

Full Changelog: getkin/kin-openapi@v0.114.0...v0.115.0

v0.114.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.113.0...v0.114.0

v0.113.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.112.0...v0.113.0

v0.112.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.111.0...v0.112.0

v0.111.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.110.0...v0.111.0

v0.110.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.109.0...v0.110.0

v0.109.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.108.0...v0.109.0

v0.108.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.107.0...v0.108.0

v0.107.0

Compare Source

What's Changed

Full Changelog: getkin/kin-openapi@v0.106.0...v0.107.0

v0.106.0

Compare Source

What's Changed

Full Changelog: getkin/kin-openapi@v0.105.0...v0.106.0

v0.105.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.104.0...v0.105.0

v0.104.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.103.0...v0.104.0

v0.103.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.102.0...v0.103.0

v0.102.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.101.0...v0.102.0

v0.101.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.100.0...v0.101.0

v0.100.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.99.0...v0.100.0

v0.99.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.98.0...v0.99.0

v0.98.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.97.0...v0.98.0

v0.97.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.96.0...v0.97.0

v0.96.0

Compare Source

What's Changed

Full Changelog: getkin/kin-openapi@v0.95.0...v0.96.0

v0.95.0

Compare Source

What's Changed


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot requested a review from a team as a code owner April 19, 2023 17:54
@codecov
Copy link

codecov bot commented Apr 19, 2023

Codecov Report

Merging #87 (0d46b71) into master (e273069) will increase coverage by 31.39%.
The diff coverage is n/a.

@@             Coverage Diff             @@
##           master      #87       +/-   ##
===========================================
+ Coverage   57.08%   88.48%   +31.39%     
===========================================
  Files          25       25               
  Lines         790      790               
===========================================
+ Hits          451      699      +248     
+ Misses        331       66      -265     
- Partials        8       25       +17     

see 16 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@renovate
Copy link
Contributor Author

renovate bot commented Oct 18, 2023

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

Warning: custom changes will be lost.

@@ -37,11 +37,6 @@ linters-settings:
min-len: 3
# minimal occurrences count to trigger, 3 by default
min-occurrences: 3
depguard:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to disable this as Snyk provides much better dependency scanning AND depguard introduced breaking changes. golangci/golangci-lint-action#442 (comment) re: changes.

schema:
type: string
format: binary
content:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The previous file we used for integration tests had invalid OpenAPI syntax.
image

schema:
type: string
format: binary
content:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same issue with OpenAPI syntax.

@ensary ensary requested review from mikerott, dkolbly and a team October 19, 2023 20:00
Copy link

@dkolbly dkolbly left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀


require (
bitbucket.org/atlassian/go-asap v0.0.0-20190921160616-bb88d6193af9
github.com/SermoDigital/jose v0.9.2-0.20161205224733-f6df55f235c2
github.com/SermoDigital/jose v0.9.2-0.20180104203859-803625baeddc
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are they actually bumping the code w/o bumping the version??

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I assume so :(

@ensary ensary requested a review from a team October 20, 2023 15:02
@ensary ensary merged commit 10f2710 into master Oct 20, 2023
4 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants