fix(deps): update osv-scanner minor #1414
Open
+83
−70
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
forking-renovate
bot
added
the
dependencies
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #1414 +/- ##
=======================================
Coverage 67.32% 67.32%
=======================================
Files 194 194
Lines 18354 18354
=======================================
Hits 12356 12356
Misses 5327 5327
Partials 671 671 ☔ View full report in Codecov by Sentry. |
renovate-bot
changed the title
renovate-bot
force-pushed
the
renovate/osv-scanner-minor
branch
2 times, most recently
from
d86dc3e to
f7d71fc
Compare
renovate-bot
changed the title
renovate-bot
force-pushed
the
renovate/osv-scanner-minor
branch
2 times, most recently
from
6426bc7 to
cdf323c
Compare
ℹ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate-bot
force-pushed
the
renovate/osv-scanner-minor
branch
8 times, most recently
from
ee40aef to
07f93c2
Compare
renovate-bot
force-pushed
the
renovate/osv-scanner-minor
branch
13 times, most recently
from
df8683e to
e24c981
Compare
renovate-bot
force-pushed
the
renovate/osv-scanner-minor
branch
3 times, most recently
from
7bd171b to
e04a778
Compare
|
renovate-bot
force-pushed
the
renovate/osv-scanner-minor
branch
7 times, most recently
from
6510fa2 to
e8b1fed
Compare
cuixq
approved these changes
Dec 23, 2024
renovate-bot
force-pushed
the
renovate/osv-scanner-minor
branch
from
3962f3b to
d2d07fa
Compare
renovate-bot
force-pushed
the
renovate/osv-scanner-minor
branch
from
dd2f961 to
909c675
Compare
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v3.0.0-20241010035105-b3ba03369df1->v3.0.0-20241223232618-f8b47b9fbbab3890182->3e2fcc73890182->d36e05eb3ba033->018358fv0.9.1->v0.9.2v1.1.1->v1.2.4v5.5.0->v5.6.06da1802->fd6877fv6.6.0->v6.6.5c44c784->57fd3ddf66d83c->b2144cdv0.21.0->v0.22.0v1.67.1->v1.69.2v1.35.1->v1.36.1Release Notes
CycloneDX/cyclonedx-go (github.com/CycloneDX/cyclonedx-go)
v0.9.2Compare Source
Changelog
Features
39ede21: feat: add MarshalXML and UnmarshalXML (@DmitriyLewen)e9191ed: feat: add UnmarshalJSON (@DmitriyLewen)Fixes
80fede1: fix: add json tag forIdentity(@DmitriyLewen)24e9503: fix: tests (@DmitriyLewen)d68a199: fix: useidentityas array invalid-evidence.json(@DmitriyLewen)ff9cc28: fix: use componentEvidence array for Evidence.Identity field (@DmitriyLewen)Building and Packaging
016ee29: build(deps): bump actions/checkout from 4.1.7 to 4.2.0 (@dependabot[bot])77153ab: build(deps): bump actions/checkout from 4.2.0 to 4.2.1 (@dependabot[bot])4f50d02: build(deps): bump actions/checkout from 4.2.1 to 4.2.2 (@dependabot[bot])b844512: build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 (@dependabot[bot])238cbea: build(deps): bump actions/setup-go from 5.1.0 to 5.2.0 (@dependabot[bot])bbe8f3c: build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (@dependabot[bot])05f8930: build(deps): bump github.com/terminalstatic/go-xsd-validate (@dependabot[bot])082f877: build(deps): bump gitpod/workspace-go from2a9e01cto9c95281(@dependabot[bot])093b1c1: build(deps): bump gitpod/workspace-go from9c95281to6932342(@dependabot[bot])47b7e01: build(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 (@dependabot[bot])ce6eb84: build(deps): bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 (@dependabot[bot])Others
4d3aff9: UPDATE_SNAPSHOTS=true make test (@DmitriyLewen)31d9544: refactor (@DmitriyLewen)0170729: refactor: update convert package (@DmitriyLewen)charmbracelet/bubbletea (github.com/charmbracelet/bubbletea)
v1.2.4Compare Source
Changelog
Bug fixes
4ad0792: fix: cursor position adjustment after exiting alt screen (#1241) (@semihbkgr)ede8caa: fix: renderer: keep a separate count of lines rendered in the alt screen (@aymanbagabas)Other work
76b0f81: ci: fix goreleaser config (#1238) (@caarlos0)Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.
v1.2.3Compare Source
Altscreen-not-altscreen
This release fixes a sneaky longstanding bug in the renderer where mis-paints could happen when toggling in and out of the altscreen if the height of the TUI changed whilst in the altscreen. Special thanks to @applejag for reporting the issue and @semihbkgr for the fix.
Changelog
f8f840c: fix: cursor position adjustment after exiting alt screen (#1241) (@semihbkgr)Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.
v1.2.2Compare Source
Hi! This release fixes some bugs found the fast new renderer introduced in v1.2.0. Happy rendering!
Fixed
New Contributors
Full Changelog: charmbracelet/bubbletea@v1.2.0...v1.2.2
Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.
v1.2.1Compare Source
v1.2.0Compare Source
It’s performance boost time
Sometimes you have to take matters into your own hands. That’s exactly what @LeperGnome did when he wanted faster rendering. This release features adjustments to the rendering algorithm for faster repaints. We encourage you to upgrade and give it a go!
Changelog
New Contributors
Full Changelog: charmbracelet/bubbletea@v1.1.2...v1.2.0
Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.
v1.1.2Compare Source
A tiny tiny release that fixes the tests on Windows, and uses the latest
ansipackage definitions.Changelog
New Features
Bug fixes
Documentation updates
Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.
go-git/go-billy (github.com/go-git/go-billy/v5)
v5.6.0Compare Source
What's Changed
Memory.ReadDir()should return an error when path isn't found. by @weberc2-tempus in https://github.com/go-git/go-billy/pull/38New Contributors
Full Changelog: go-git/go-billy@v5.5.0...v5.6.0
jedib0t/go-pretty (github.com/jedib0t/go-pretty/v6)
v6.6.5Compare Source
What's Changed
Full Changelog: jedib0t/go-pretty@v6.6.4...v6.6.5
v6.6.4Compare Source
What's Changed
Full Changelog: jedib0t/go-pretty@v6.6.3...v6.6.4
v6.6.3Compare Source
What's Changed
Full Changelog: jedib0t/go-pretty@v6.6.2...v6.6.3
v6.6.2Compare Source
What's Changed
Full Changelog: jedib0t/go-pretty@v6.6.1...v6.6.2
v6.6.1Compare Source
What's Changed
Full Changelog: jedib0t/go-pretty@v6.6.0...v6.6.1
grpc/grpc-go (google.golang.org/grpc)
v1.69.2: Release 1.69.2Compare Source
Bug Fixes
Metrics/etc) that were moved to the stats package (#7929).v1.69.0: Release 1.69.0Compare Source
Known Issues
grpc.NewClientfunction is incompatible with forward proxies, because it resolves the target hostname on the client instead of passing the hostname to the proxy. A fix is expected to be a part of grpc-go v1.70. (#7556)New Features
pickfirstLB policy (disabled by default) supports Happy Eyeballs, interleaving IPv4 and IPv6 address as described in RFC-8305 section 4, to attempt connections to multiple backends concurrently. The experimentalpickfirstpolicy can be enabled by setting the environment variableGRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRSTtotrue. (#7725, #7742)pick_firstload balancing policy (#7839)MethodHandler, which is the type of an already-exported field inMethodDesc(#7796)Bug Fixes
Behavior Changes
pick_firstLB policy to manage connections (#7826)API Changes
balancer.SubConninterface to force implementors to embed a delegate implementation. This requirement is present in the interface documentation, but wasn't enforced earlier. (#7840)Performance Improvements
ReadAll()method for more efficientio.Readerconsumption (#7653)Documentation
v1.68.2: Release 1.68.2Compare Source
Dependencies
stats/opentelemetrymodule and instead add the experimental packages it contains directly into the maingoogle.golang.org/grpcmodule (#7936)v1.68.1: Release 1.68.1Compare Source
Bug Fixes
Dependencies
go1.22.7togo1.22. (#7831)v1.68.0: Release 1.68.0Compare Source
Behavior Changes
ClientConn.Close()now closes transports simultaneously and waits for transports to be closed before returning. (#7666)NewTLSthat usetls.Config.GetConfigForClientwill now have CipherSuites, supported TLS versions and ALPN configured automatically. These were previously only set for configs not using theGetConfigForClientoption. (#7709)Bug Fixes
Dependencies
go1.22.7. (#7624)v1.67.3: Release 1.67.3Compare Source
Dependencies
stats/opentelemetrymodule and instead add the experimental packages it contains directly into the maingoogle.golang.org/grpcmodule.v1.67.2: Release 1.67.2Compare Source
Bug Fixes
protocolbuffers/protobuf-go (google.golang.org/protobuf)
v1.36.1Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.36.0...v1.36.1
Bug fixes:
CL/638495: internal/impl: revert IsSynthetic() check to fix panic
Maintenance:
CL/637475: internal/errors: delete compatibility code for Go before 1.13
v1.36.0Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.35.2...v1.36.0
User-visible changes:
CL/635139: src/google/protobuf: document UnmarshalJSON / API level behavior
CL/635138: reflect/protoreflect: use [] syntax to reference method
CL/635137: proto: add reference to size semantics with lazy decoding to comment
CL/634818: compiler/protogen: allow overriding API level from --go_opt
CL/634817: cmd/protoc-gen-go: generate _protoopaque variant for hybrid
CL/634816: all: regenerate.bash for Opaque API
CL/634815: all: Release the Opaque API
CL/634015: types/descriptorpb: regenerate using latest protobuf v29.1 release
CL/632735: internal/impl: skip synthetic oneofs in messageInfo
CL/627876: all: start v1.35.2-devel
v1.35.2Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.35.1...v1.35.2
Maintenance:
CL/623115: proto: refactor equal_test from explicit table to use makeMessages()
CL/623116: encoding/prototext: use testmessages_test.go approach, too
CL/623117: internal/testprotos/test: add nested message field with [lazy=true]
CL/624415: proto: switch messageset_test to use makeMessages() injection point
CL/624416: internal/impl: fix TestMarshalMessageSetLazyRace (was a no-op!)
User-visible changes:
CL/618395: encoding/protojson: allow missing value for Any of type Empty
CL/618979: all: implement strip_enum_prefix editions feature
CL/622575: testing/protocmp: document behavior when combining Ignore and Sort
Configuration
📅 Schedule: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.