Closed dependabot[bot] closed 1 year ago
👍 No new dependency issues detected in pull request
Issue | Status |
---|---|
Install scripts | ✅ 0 issues |
Native code | ✅ 0 issues |
Bin script confusion | ✅ 0 issues |
Bin script shell injection | ✅ 0 issues |
Unresolved require | ✅ 0 issues |
Invalid package.json | ✅ 0 issues |
HTTP dependency | ✅ 0 issues |
Git dependency | ✅ 0 issues |
Potential typo squat | ✅ 0 issues |
Known Malware | ✅ 0 issues |
Telemetry | ✅ 0 issues |
Protestware/Troll package | ✅ 0 issues |
To ignore an alert, reply with a comment starting with @SocketSecurity ignore
followed by a space separated list of package-name@version
specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@2.4.2
Powered by socket.dev
Merging #275 (67da27c) into main (8b97c14) will not change coverage. The diff coverage is
n/a
.
:mega: This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more
@@ Coverage Diff @@
## main #275 +/- ##
=======================================
Coverage 95.32% 95.32%
=======================================
Files 11 11
Lines 792 792
Branches 180 180
=======================================
Hits 755 755
Misses 36 36
Partials 1 1
:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more
Bumps c8 from 7.12.0 to 7.13.0.
Release notes
Sourced from c8's releases.
Changelog
Sourced from c8's changelog.
Commits
2f36fe9
chore(main): release 7.13.0 (#428)8e56b23
docs: use Github actions official badged17d02a
chore(deps): update dependency@types/node
to v18 (#430)7263c8d
docs: add--per-file
(#435)2a3d0c7
build(deps): bump json5 from 1.0.1 to 1.0.2 (#445)3646e6e
feat(types): add typings for reporterOptions (#446)bc347a9
feat: support passing reporter options (#423)b93b9c0
feat: addskipFull
andexcludeNodeModules
to type definitions (#417)4ab9fba
docs: change 'master' to 'main' in git commands and links (#418)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)