renovate/38.52.0 package update #27039
Conversation
![octo-sts[bot]](https://avatars.githubusercontent.com/in/801323?s=60&v=4){kind=small}
octo-sts
bot
commented
Aug 24, 2024
octo-sts
bot
commented
Signed-off-by: wolfi-bot <[email protected]>
octo-sts
bot
added
request-version-update
Package renovate: Click to expand/collapsePackage renovate:
(
"""
# Generated by melange
pkgname = renovate
- pkgver = 38.48.0-r0
+ pkgver = 38.52.0-r0
arch = x86_64
- size = 241084545
+ size = 243439730
origin = renovate
pkgdesc = Automated dependency updates. Multi-platform and multi-language.
url =
- commit = 205eecbaa81e07d628a623f012f2bc9672fd57ac
- builddate = 1724356997
+ commit = 50231a5289fa38ff6da18f4bff7b936c98ee1580
license = AGPL-3.0-only
depend = git
... // 4 identical lines
depend = so:libstdc++.so.6
# vendored = so:better_sqlite3.node=0
- datahash = 0b19d8f3ab870eb739bf31755aed7c9368c99bf95a6e33da290ef3e47157e13a
+ datahash = 5d82cd96bf650b496eeeae2b44878fad673bd972ccc91ac4ea6e205a077dd16f
"""
)
Added: /usr/local/lib/node_modules/renovate/dist/modules/manager/bazel-module/parser/maven.d.ts bincapz found differences: Click to expand/collapsetime=2024-08-24T13:56:05.613Z level=ERROR source=github.com/chainguard-dev/bincapz/pkg/action/scan.go:222 msg="unable to process /tmp/wolfictl-apk-1673690839/renovate/usr/local/lib/node_modules/renovate/node_modules/tar-fs/test/fixtures/invalid.tar: extract to temp: failed to extract /tmp/wolfictl-apk-1673690839/renovate/usr/local/lib/node_modules/renovate/node_modules/tar-fs/test/fixtures/invalid.tar: failed to create directory for file: mkdir /tmp/invalid.tar3187174814/foo: not a directory" Deleted: renovate/var/lib/db/sbom/renovate-38.48.0-r0.spdx.json [
|
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/download | download files | downloadLocation |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/b51ccadbcd131ab8f9d57f4e58e8 |
Added: renovate/usr/local/lib/node_modules/renovate/node_modules/protobufjs/dist/protobuf.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | get system identification | process.versions |
| +MEDIUM | ref/path/relative | references and possibly executes relative path | ./compiled |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval("quire" |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | fs/file/read | reads files | fs.readFile |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/Sending_a https://developers.google.com/protocol-buffers/docs/proto3?hl=en protobufjs/protobuf.js#665 https://github.com/dcodeio/protobuf.js |
Added: renovate/usr/local/lib/node_modules/renovate/node_modules/protobufjs/dist/minimal/protobuf.min.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | get system identification | process.versions |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval("require")(t) |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/dcodeio/protobuf.js |
Added: renovate/usr/local/lib/node_modules/renovate/node_modules/protobufjs/dist/light/protobuf.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | get system identification | process.versions |
| +MEDIUM | ref/path/relative | references and possibly executes relative path | ./compiled |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval("quire" |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | fs/file/read | reads files | fs.readFile |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/Sending_a https://developers.google.com/protocol-buffers/docs/proto3?hl=en protobufjs/protobuf.js#665 https://github.com/dcodeio/protobuf.js |
Added: renovate/usr/local/lib/node_modules/renovate/node_modules/protobufjs/dist/minimal/protobuf.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | get system identification | process.versions |
| +MEDIUM | ref/path/relative | references and possibly executes relative path | ./compiled |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval("quire" |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://developers.google.com/protocol-buffers/docs/proto3?hl=en protobufjs/protobuf.js#665 https://github.com/dcodeio/protobuf.js |
Added: renovate/usr/local/lib/node_modules/renovate/node_modules/protobufjs/dist/light/protobuf.min.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | get system identification | process.versions |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval("require")(t) |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | fs/file/read | reads files | fs.readFile |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/dcodeio/protobuf.js |
Added: renovate/usr/local/lib/node_modules/renovate/node_modules/protobufjs/dist/protobuf.min.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | get system identification | process.versions |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval("require")(t) |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | fs/file/read | reads files | fs.readFile |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/dcodeio/protobuf.js |
Added: renovate/var/lib/db/sbom/renovate-38.52.0-r0.spdx.json [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/download | download files | downloadLocation |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/246a64195a3bf24e2a2b09564b97 |
Changed: /tmp/wolfictl-apk-882697929/renovate/usr/local/lib/node_modules/renovate/node_modules/@smithy/core/dist-es/submodules/cbor/cbor-encode.js
Changed: /tmp/wolfictl-apk-882697929/renovate/usr/local/lib/node_modules/renovate/node_modules/@smithy/core/dist-cjs/submodules/cbor/index.js
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
