search

cisagov / cyber.dhs.gov

A site for CISA directives
https://cyber.dhs.gov
Other
157 stars 61 forks source link

Bump snyk from 1.676.0 to 1.695.0 #279

Closed dependabot[bot] closed 3 years ago

dependabot[bot] commented 3 years ago

Bumps snyk from 1.676.0 to 1.695.0.

Release notes

Sourced from snyk's releases.

v1.695.0

1.695.0 (2021-08-29)

Features

  • Return vulns from shaded jars (8767af0)

v1.694.0

1.694.0 (2021-08-27)

Features

  • fail fast when cliFailFast feature flag is set (747f8ce)
  • remove default HTML report from Docker images (cdc35ac)

v1.693.0

1.693.0 (2021-08-27)

Features

  • add VS Code as an integration (28b66a6)

v1.692.0

1.692.0 (2021-08-26)

Bug Fixes

  • @​snyk/fix: support deeply nested requires in req*.txt (c499b69)

v1.691.0

1.691.0 (2021-08-26)

Bug Fixes

  • support oauth tokens for feature flags (0095f37)

v1.690.0

1.690.0 (2021-08-26)

Bug Fixes

  • revert python plugin upgrade (1c7ff9f)

v1.689.0

... (truncated)

Commits
  • 392ccd7 Merge pull request #2200 from snyk/feat/shaded-jars-snanning
  • f23fc8b Merge pull request #2197 from snyk/test/use-fake-server-for-cli-args-tests
  • 44a75a6 test: disable analytics on jest acceptance tests
  • 208417d test: use fake server for cli-args acc tests
  • 0751804 Merge pull request #2173 from snyk/feat/cli-ff
  • 747f8ce feat: fail fast when cliFailFast feature flag is set
  • 8767af0 feat: Return vulns from shaded jars
  • 63975ce Merge pull request #2199 from snyk/chore/sync-snyk-fix
  • 1350317 Merge pull request #2091 from snyk/chore/remove-jq-from-docker
  • 6d9008d chore: always use local @​snyk/fix package
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 3 years ago

Superseded by #287.