KostyaSha / github-integration-plugin

Jenkins GitHub Integration Plugin
https://wiki.jenkins-ci.org/display/JENKINS/GitHub+Integration+Plugin
MIT License
97 stars 84 forks source link

Bump matrix-auth from 1.4 to 2.6.2 in /github-pullrequest-plugin #363

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 2 years ago

Bumps matrix-auth from 1.4 to 2.6.2.

Release notes

Sourced from matrix-auth's releases.

Version 2.5.2

Fix SECURITY-2180 as a backport on top of 2.5.1.

Not a pre-release, but GitHub's "latest release" feature is trash.

Changelog

Sourced from matrix-auth's changelog.

Version 2.6.2 (2020-07-15)

Version 2.6.1 (2020-05-08)

  • JENKINS-62202: Fix regression introduced in 2.6 that disabled per-job/folder/agent configuration UI for users without Overall/Administer.

Version 2.6 (2020-04-30)

  • Increase minimum required Jenkins version to 2.222.1.
  • Remove support for setting "dangerous permissions" as they are deprecated from Jenkins 2.222.x anyway. (Jenkins LTS upgrade guide, SECURITY-410 in the 2017-04-10 security advisory)
  • Add support for Overall/System Read permission (global configuration is rendered with disabled checkboxes).
  • JENKINS-36625: Allow wrapping long user and group names to limit width of the configuration table.
  • Internal: Parent POM update, update test dependencies (Pipeline: Groovy Plugin, JCasC test harness).

Version 2.5.1 (2020-07-15)

Version 2.5 (2019-10-14)

  • JENKINS-58703: Creating items through the remote API (createItem) could result in duplicate XML elements.
  • JENKINS-54568: Make authorizationMatrix work in declarative snippet generator.
  • JENKINS-46914: Better indicate implied permissions in the checkbox grid by disabling implied permission checkboxes.
  • JENKINS-47885: Make node property work in Kubernetes (and old versions of Docker) Plugin templates.
  • Move plugin documentation from the Jenkins wiki to GitHub.

Version 2.4.2 (2019-05-02)

  • JENKINS-57313: Fix a bug introduced in 2.4 that could result in exception error messages shown on the configuration page when permissions are assigned to valid user accounts that have never logged in to Jenkins.

Version 2.4.1 (2019-04-27)

  • Fix a bug introduced in 2.4 that could prevent agent configurations from being loaded

Version 2.4 (2019-04-24)

  • Increase core dependency from 2.60.1 to 2.138.3
  • Configuration as Code compatibility: Integrate configurators for global and agent permissions.
  • Job DSL compatibility: Add support for configuring folder permission inheritance using authorizationMatrix symbol
  • Job DSL compatibility: Allow setting permissions using user-friendly names like Overall/Read

... (truncated)

Commits
  • db472ba [maven-release-plugin] prepare release matrix-auth-2.6.2
  • e263a2f [SECURITY-1909]
  • 19ff186 Fix formatting
  • 8ab18e1 Insert 2.6.1 release date
  • ce5e227 [maven-release-plugin] prepare for next development iteration
  • af82b43 [maven-release-plugin] prepare release matrix-auth-2.6.1
  • e48fc0e Merge pull request #82 from daniel-beck/JENKINS-62202
  • 93be17b Add changelog
  • 706b64c Clarify comments
  • 827c538 Add test confirming the read only mode works as expected
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/KostyaSha/github-integration-plugin/network/alerts).

This change is Reviewable

dependabot[bot] commented 1 year ago

Superseded by #371.