search

dadi / web

Web is a drop in front end for websites and web apps. Consumes data from DADI API and others
https://dadi.cloud/en/web/
Other
48 stars 16 forks source link

Update snyk to the latest version 🚀 #433

Closed greenkeeper[bot] closed 5 years ago

greenkeeper[bot] commented 6 years ago

Version 1.95.0 of snyk was just published.

Dependency snyk
Current Version 1.88.4
Type dependency

The version 1.95.0 is not covered by your current version range.

If you don’t accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.

It might be worth looking into these changes and trying to get this project onto the latest version of snyk.

If you have a solid test suite and good coverage, a passing build is a strong indicator that you can take advantage of these changes directly by merging the proposed change into your project. If the build fails or you don’t have such unconditional trust in your tests, this branch is a great starting point for you to work on the update.

Release Notes v1.95.0

1.95.0 (2018-09-07)

Features

  • Bump snyk mvn plugin to latest (62374b0)
Commits

The new version differs by 78 commits.

  • d9304ee Merge pull request #212 from snyk/feat/bump-snyk-mvn-plugin
  • 62374b0 feat: Bump snyk mvn plugin to latest
  • 174217b Merge pull request #209 from snyk/feat/tracing_info_on_docker_entry
  • 979fe5d feat: add more tracing info on docker entrypoint
  • 16929f3 Merge pull request #206 from snyk/feat/add_debug_info_on_docker
  • 716ea3e feat: add debugging info on docker entrypoint
  • 6eeface Merge pull request #205 from snyk/test/tap-update
  • 0b39604 test: adjust patch test fixture
  • 6938cf2 fix: don't throw error if callback provided
  • 64d9ad2 test: update tap version
  • acfab6d Merge pull request #204 from snyk/fix/bump-nuget-plugin
  • ff819a5 test: upgrade tap for better dev deps
  • 6b7dd3d fix: bump snyk-nuget-plugin for a more modern zip library
  • 1b0ca39 Merge pull request #202 from snyk/fix/bump-docker-plugin
  • c583e34 Merge pull request #203 from snyk/fix/explicit-files-instead-of-ignores

There are 78 commits in total.

See the full diff

FAQ and help There is a collection of [frequently asked questions](https://greenkeeper.io/faq.html). If those don’t help, you can always [ask the humans behind Greenkeeper](https://github.com/greenkeeperio/greenkeeper/issues/new).

Your Greenkeeper bot :palm_tree:

greenkeeper[bot] commented 6 years ago

Version 1.95.1 just got published.

Update to this version instead 🚀

Release Notes v1.95.1

1.95.1 (2018-09-09)

Bug Fixes

  • bump mvn,gradle and sbt plugins for better error handling (34dc3a6)
Commits

The new version differs by 2 commits.

  • f650729 Merge pull request #213 from snyk/fix/bump-plugins
  • 34dc3a6 fix: bump mvn,gradle and sbt plugins for better error handling

See the full diff

greenkeeper[bot] commented 6 years ago

Version 1.95.2 just got published.

Update to this version instead 🚀

Release Notes v1.95.2

1.95.2 (2018-09-09)

Bug Fixes

  • clear spinner labels on errors (6f0f37f)
Commits

The new version differs by 2 commits.

  • fb1d018 Merge pull request #214 from snyk/fix/clear-spinner-on-errors
  • 6f0f37f fix: clear spinner labels on errors

See the full diff

greenkeeper[bot] commented 6 years ago

Version 1.95.3 just got published.

Update to this version instead 🚀

Release Notes v1.95.3

1.95.3 (2018-09-09)

Bug Fixes

  • allow silent clearing of non-existent spinner labels (fa520a3)
  • better readability on monitor output (f455f65)
  • exit code 1 on snyk monitor failure (1a30329)
Commits

The new version differs by 4 commits.

  • 4a20b1d Merge pull request #215 from snyk/feat/exit-code-1-on-monitor-failure
  • f455f65 fix: better readability on monitor output
  • 1a30329 fix: exit code 1 on snyk monitor failure
  • fa520a3 fix: allow silent clearing of non-existent spinner labels

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.96.0

1.96.0 (2018-09-18)

Features

  • upgrade snyk-docker-plugin (4353b9f)
Commits

The new version differs by 3 commits.

  • c12e44c Merge pull request #218 from snyk/feat/upgrade-docker-plugin
  • 275aa58 chore: downgrade Node test runner to 8.11.4
  • 4353b9f feat: upgrade snyk-docker-plugin

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.97.0

1.97.0 (2018-09-21)

Features

Commits

The new version differs by 10 commits.

  • 0f96166 Merge pull request #216 from snyk/chore/typescript-cli
  • 50d37c9 chore: update pkg script for standalone binaries
  • c5ebbff chore: updating default node version
  • 53ab388 refactor: better typescript in converted files
  • 146cb24 chore: convert first two files to typescript to be sure it works
  • 35c715a chore: remove tap-only
  • c42f2dc chore: typescript support in tests
  • 75961b7 feat: add typescript support
  • f7dedae Merge pull request #217 from snyk/chore/src
  • 5946610 chore: move lib and cli to src

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.97.1

1.97.1 (2018-09-23)

Bug Fixes

  • bump needle to ^2.2.4 to fix bug with node 8.12.0 (79a8992)
Commits

The new version differs by 2 commits.

  • 142379b Merge pull request #222 from snyk/fix/bump-needle
  • 79a8992 fix: bump needle to ^2.2.4 to fix bug with node 8.12.0

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.98.0

1.98.0 (2018-09-25)

Bug Fixes

  • better error messaging for wizard without node_modules (45d892e)

Features

Commits

The new version differs by 6 commits.

  • 4ba7ad4 Merge pull request #221 from snyk/feat/add-yarn-lock-support
  • 45d892e fix: better error messaging for wizard without node_modules
  • da3d92c test: verify behaviour on node 4
  • 08d6248 feat: add yarn.lock support
  • d0a19b3 test: yarn.lock coverage
  • 95144e8 chore: update lockfile parser version

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.99.0

1.99.0 (2018-09-25)

Features

  • upgrade maven, gradle and SBT plugins to reduce payload size (6b54007)
Commits

The new version differs by 2 commits.

  • 1b5ae22 Merge pull request #224 from snyk/feat/upgrade-maven-sbt-gradle-plugins
  • 6b54007 feat: upgrade maven, gradle and SBT plugins to reduce payload size

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.99.1

1.99.1 (2018-09-27)

Bug Fixes

  • bump gradle plugin to fix dep tree annotations (f6aeb61)
Commits

The new version differs by 2 commits.

  • 479260b Merge pull request #227 from snyk/fix/upgradle
  • f6aeb61 fix: bump gradle plugin to fix dep tree annotations

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.100.0

1.100.0 (2018-10-03)

Features

  • Bump resolve-deps to latest (72df523)
Commits

The new version differs by 4 commits.

  • ddf13ee Merge pull request #229 from snyk/feat/bump-resolve-deps
  • 72df523 feat: Bump resolve-deps to latest
  • 3af11b8 Merge pull request #223 from snyk/chore/remove-package-lock
  • 6713708 chore: remove package-lock and ignore it

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.100.1

1.100.1 (2018-10-03)

Bug Fixes

  • move constants for test-unpublished to json and add it to package #225 (242a7c9)
Commits

The new version differs by 3 commits.

  • b0bbb4d Merge pull request #230 from snyk/fix/unpublished
  • 53f1c49 chore: var -> const, let in test-unpublished
  • 242a7c9 fix: move constants for test-unpublished to json and add it to package #225

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.100.2

1.100.2 (2018-10-05)

Bug Fixes

  • bump snyk-resolve-deps version (ca32550)
  • look for node_modules by package.json file location (fa4fa08)
Commits

The new version differs by 5 commits.

  • 29b8dc9 Merge pull request #233 from snyk/fix/snyk-resolve-deps-update
  • fa4fa08 fix: look for node_modules by package.json file location
  • ca32550 fix: bump snyk-resolve-deps version
  • 03ccd68 Merge pull request #231 from snyk/chore/refactoring
  • 8d02572 chore: js -> ts

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.101.0

1.101.0 (2018-10-07)

Features

  • '--gradle-sub-project' option to handle multip-project gradle (e986f79)
Commits

The new version differs by 2 commits.

  • 974949e Merge pull request #234 from snyk/feat/gradle-sub-project-option
  • e986f79 feat: '--gradle-sub-project' option to handle multip-project gradle

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.101.1

1.101.1 (2018-10-07)

Bug Fixes

  • bump snyk-python-plugin to 1.8.2 - to handle pip 18 (d24ce74)
Commits

The new version differs by 2 commits.

  • d7aa9dc Merge pull request #235 from snyk/fix/bump-python-plugin-support-pip-18
  • d24ce74 fix: bump snyk-python-plugin to 1.8.2 - to handle pip 18

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.102.0

1.102.0 (2018-10-08)

Bug Fixes

  • check if user specify package file name as part of path (1138eb2)
  • Fall back to config org if no option passed (99021be)
  • pass if yarn remove called with no packages (8ad52a1)
  • replace yarn.lock with package.json when falling back to node_modules (032aa1f)
  • Update runtime helper path (39976bc)

Features

  • autodetection for test, monitor, wizard & protect (20b8ccc)
Commits

The new version differs by 16 commits.

  • ae88c53 Merge pull request #232 from snyk/fix/alert-if-path-with-filename
  • b5217fd chore: disable object-literal-sort-keys
  • 1138eb2 fix: check if user specify package file name as part of path
  • 23fd0df chore: js -> ts
  • 7bb4c89 Merge pull request #228 from snyk/fix/lockfiles-monitor
  • 032aa1f fix: replace yarn.lock with package.json when falling back to node_modules
  • 8ad52a1 fix: pass if yarn remove called with no packages
  • f1224ab Merge pull request #236 from snyk/chore/no-default-export
  • 3cb5d6e chore: enable tslint no-default-export
  • 68d5c6d tests: update protect-vis-snyk fixture
  • 5307275 tests: Fixes for outdated tests
  • 6faa02b test: Update tests
  • 39976bc fix: Update runtime helper path
  • 5f4399b chore: var => const
  • 99021be fix: Fall back to config org if no option passed

There are 16 commits in total.

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.103.0

1.103.0 (2018-10-09)

Features

  • docker base image remediation advice (5df5863)
Commits

The new version differs by 2 commits.

  • 596c18f Merge pull request #238 from snyk/feat/docker-remediation
  • 5df5863 feat: docker base image remediation advice

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.103.1

1.103.1 (2018-10-10)

Bug Fixes

  • Add missing CLI help text for docker remediation (6f83cd1)
Commits

The new version differs by 2 commits.

  • 903e6c9 Merge pull request #240 from snyk/fix/add-missing-remediation-help-text
  • 6f83cd1 fix: Add missing CLI help text for docker remediation

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.103.2

1.103.2 (2018-10-11)

Bug Fixes

  • do not traverse node_modules on wizard monitor for yarn (8c41db7)
  • update message for path with file name error (e01f60a)
Commits

The new version differs by 4 commits.

  • ef4bc3a Merge pull request #237 from snyk/fix/message
  • f688f5f Merge pull request #239 from snyk/fix/yarn-wizard
  • 8c41db7 fix: do not traverse node_modules on wizard monitor for yarn
  • e01f60a fix: update message for path with file name error

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.103.3

1.103.3 (2018-10-11)

Bug Fixes

  • update resolve-deps to skip ~ directory (a8938f9)
Commits

The new version differs by 2 commits.

  • 2730ede Merge pull request #242 from snyk/fix/skip-tilde-dir
  • a8938f9 fix: update resolve-deps to skip ~ directory

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.103.4

1.103.4 (2018-10-12)

Bug Fixes

  • bump nodejs-lockfile-parser to allow 0 deps (50a954d)
Commits

The new version differs by 2 commits.

  • 4d7ee9e Merge pull request #243 from snyk/fix/bump-lockfile-parser-to-allow-0-deps
  • 50a954d fix: bump nodejs-lockfile-parser to allow 0 deps

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.104.0

1.104.0 (2018-10-16)

Features

  • bump python & golang plugins (00e91f5)
Commits

The new version differs by 2 commits.

  • 52b5ea2 Merge pull request #245 from snyk/feat/bump-python-and-go-plugins
  • 00e91f5 feat: bump python & golang plugins

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.104.1

1.104.1 (2018-10-16)

Bug Fixes

Commits

The new version differs by 2 commits.

  • 146185c Merge pull request #246 from snyk/fix/delete-right-answer
  • 63a1f5f fix: not delete from this

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.104.2

1.104.2 (2018-10-23)

Bug Fixes

  • don't print vulnerable paths count for docker tests (eb06722)
Commits

The new version differs by 3 commits.

  • be98a50 Merge pull request #252 from snyk/feat/rm-num-of-vuln-paths
  • 76eda06 chore: extened the vuln ignore of nyc
  • eb06722 fix: don't print vulnerable paths count for docker tests

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.105.0

1.105.0 (2018-10-24)

Features

  • Rename cliMessage to userMessage for consistency (d04d675)
Commits

The new version differs by 2 commits.

  • c98b8b3 Merge pull request #253 from snyk/feat/climessage-rename
  • d04d675 feat: Rename cliMessage to userMessage for consistency

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.105.1

1.105.1 (2018-10-31)

Bug Fixes

  • fix for assumed patch paths (370c0be)
Commits

The new version differs by 9 commits.

  • 3eb66e0 Merge pull request #257 from snyk/fix/file-path-fix
  • 4d8aa01 tests: update how tests execute patching
  • 7f21759 Merge pull request #254 from snyk/docs/fix-typos
  • 0c0c33e Merge pull request #255 from snyk/test/upgrade-sinon
  • 370c0be fix: fix for assumed patch paths
  • ea7e50b test: upgrade sinon to 4 (last version to support node4)
  • 83d4fc1 chore: upgrade sinon
  • 63ca7a3 Merge pull request #251 from pavel-github/docs/report-names-docker-section
  • e8b8c6d docs: fix names for snyk report files

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.106.0

1.106.0 (2018-11-01)

Features

  • display suggestion for using dockerfile (006a2f6)
Commits

The new version differs by 2 commits.

  • b7644e0 Merge pull request #260 from snyk/feat/display-tip-dockerfile-option
  • 006a2f6 feat: display suggestion for using dockerfile

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.106.1

1.106.1 (2018-11-04)

Bug Fixes

  • avoid docker image name@tag being confused with a real package (846ebbd)
Commits

The new version differs by 2 commits.

  • 5ac246c Merge pull request #261 from snyk/fix/exclude_image_name_from_scan
  • 846ebbd fix: avoid docker image name@tag being confused with a real package

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.107.0

1.107.0 (2018-11-05)

Features

  • allow git urls in manifest file (3e86cfd)
Commits

The new version differs by 3 commits.

  • a7013cd Merge pull request #264 from snyk/feat/allow-urls-on-mafinest-file
  • 404dca2 chore: update snyk-policy
  • 3e86cfd feat: allow git urls in manifest file

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.107.1

1.107.1 (2018-11-05)

Bug Fixes

  • Fallback to node_modules for initial wizard test (3362312)
Commits

The new version differs by 2 commits.

  • e7472a0 Merge pull request #262 from snyk/fix/path-node-modules-fallback
  • 3362312 fix: Fallback to node_modules for initial wizard test

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.108.0

1.108.0 (2018-11-05)

Features

  • Bump lockfile parser version for perf update (c1aca6b)
Commits

The new version differs by 2 commits.

  • 22f52f5 Merge pull request #265 from snyk/feat/faster-lockfile-parsing
  • c1aca6b feat: Bump lockfile parser version for perf update

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.108.1

1.108.1 (2018-11-08)

Bug Fixes

  • show friendly message on monitor timeout (bdf1b79)
  • update snyk-docker-plugin to handle hosts with ports (03f50fb)
Commits

The new version differs by 7 commits.

  • 203f976 Merge pull request #269 from snyk/fix/update-docker-plugin-for-tags
  • 4dee604 Merge pull request #268 from snyk/fix/monitor-timeout
  • 03f50fb fix: update snyk-docker-plugin to handle hosts with ports
  • bdf1b79 fix: show friendly message on monitor timeout
  • c88bdce Merge pull request #267 from snyk/chore/modernize-run-test
  • 083172f chore: lib/snyk-test/run-test.{js -> ts}
  • a4da0c5 chore: async/await in lib/snyk-test/run-test.js

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.108.2

1.108.2 (2018-11-09)

Bug Fixes

  • bump snyk-gradle-plugin to fix version parsing edge-case (0aa181d)
Commits

The new version differs by 2 commits.

  • 47706aa Merge pull request #270 from snyk/fix/bump-gradle-for-parsing
  • 0aa181d fix: bump snyk-gradle-plugin to fix version parsing edge-case

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.108.3

1.108.3 (2018-11-18)

Bug Fixes

  • document the --policy-path option (827348e)
Commits

The new version differs by 4 commits.

  • bb3f3cd Merge pull request #273 from snyk/fix/document-policy-path
  • 827348e fix: document the --policy-path option
  • 612c9ee Merge pull request #271 from snyk/chore/bump-lockfile-parser
  • 3e4d7b6 chore: bump lockfile parser

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.109.0

1.109.0 (2018-11-19)

Features

  • send the base image to registry when running snyk monitor (cb78573)
Commits

The new version differs by 5 commits.

  • e014a67 Merge pull request #275 from snyk/feat/docker-monitor-sends-dockerfile
  • b2d4863 chore: extend ignore inside snyk policy file
  • cb78573 feat: send the base image to registry when running snyk monitor
  • 88ec98d Merge pull request #276 from snyk/chore/release-stage-only-for-master
  • 14c2868 chore: show travis release stage only for master

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.110.0

1.110.0 (2018-11-20)

Bug Fixes

Features

Commits

The new version differs by 3 commits.

  • 50fde18 Merge pull request #274 from snyk/feat/add-docker-suggestion
  • 580d9ae fix: CR fixes
  • 31ee873 feat: suggest using --docker

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.110.1

1.110.1 (2018-11-21)

Bug Fixes

  • Parse ARGs in Dockerfile FROM instructions (9291302)
Commits

The new version differs by 2 commits.

  • 7adcca0 Merge pull request #278 from snyk/fix/bump-snyk-docker-plugin
  • 9291302 fix: Parse ARGs in Dockerfile FROM instructions

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.110.2

1.110.2 (2018-11-22)

Bug Fixes

  • when package-lock.json file is present, snyk wizard included devDepepndencies in vulnerability count (df876c6)
Commits

The new version differs by commits.

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.111.0

1.111.0 (2018-11-28)

Features

  • test plugin dep-trees as graphs via new /test-dep-graph API (b23d9cc)
Commits

The new version differs by 2 commits.

  • 38f8ab4 Merge pull request #272 from snyk/feat/send-test-plugin-payload-as-graph
  • b23d9cc feat: test plugin dep-trees as graphs via new /test-dep-graph API

See the full diff

greenkeeper[bot] commented 5 years ago

Update to this version instead 🚀

Release Notes for v1.111.1

1.111.1 (2018-11-28)

Bug Fixes

  • update @snyk/dep-graph bugfix handling of versions with pipes (b2f8173)
Commits

The new version differs by 2 commits.

  • e95d8c2 Merge pull request #281 from snyk/fix/bump-dep-graph-pipes-bugfix
  • b2f8173 fix: update @snyk/dep-graph bugfix handling of versions with pipes

See the full diff