search

finos / git-proxy

Deploy custom push protections and policies on top of Git
https://git-proxy.finos.org
Apache License 2.0
110 stars 72 forks source link

chore(deps): update dependency nyc to v17 #601

Closed renovate[bot] closed 3 months ago

renovate[bot] commented 3 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
nyc (source) ^15.1.0 -> ^17.0.0 age adoption passing confidence

Release Notes

istanbuljs/nyc (nyc) ### [`v17.0.0`](https://togithub.com/istanbuljs/nyc/blob/HEAD/CHANGELOG.md#1700-2024-04-19) [Compare Source](https://togithub.com/istanbuljs/nyc/compare/v15.1.0...nyc-v17.0.0) ##### ⚠ BREAKING CHANGES - minimum Node version now 18 ##### Bug Fixes - **deps:** address security alerts in deps ([#​1555](https://togithub.com/istanbuljs/nyc/issues/1555)) ([b6ed598](https://togithub.com/istanbuljs/nyc/commit/b6ed59832e1b190486cbf289f081122b384465e5)) ##### Build System - minimum Node version now 18 ([9ef340e](https://togithub.com/istanbuljs/nyc/commit/9ef340e07514b5e2d05f93a99fca17e5d60d65db))

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by Mend Renovate. View repository job log here.

github-actions[bot] commented 3 months ago

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/istanbul-lib-instrument 6.0.2 :green_circle: 4.8
Details
CheckScoreReason
Code-Review:green_circle: 6Found 12/20 approved changesets -- score normalized to 6
Maintained:warning: 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging:warning: -1packaging workflow not detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
License:warning: 0license file not detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Signed-Releases:warning: -1no releases found
Fuzzing:warning: 0project is not fuzzed
Security-Policy:green_circle: 10security policy file detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
npm/nyc 17.0.0 :green_circle: 5.7
Details
CheckScoreReason
Maintained:green_circle: 56 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Code-Review:green_circle: 5Found 14/27 approved changesets -- score normalized to 5
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Packaging:warning: -1packaging workflow not detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Pinned-Dependencies:green_circle: 3dependency not pinned by hash detected -- score normalized to 3
Binary-Artifacts:green_circle: 10no binaries found in the repo
Fuzzing:warning: 0project is not fuzzed
Security-Policy:green_circle: 10security policy file detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
npm/semver 7.6.2 :green_circle: 7.2
Details
CheckScoreReason
Maintained:green_circle: 1013 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Code-Review:green_circle: 10all changesets reviewed
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Security-Policy:green_circle: 10security policy file detected
Packaging:warning: -1packaging workflow not detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing:warning: 0project is not fuzzed
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Signed-Releases:warning: -1no releases found
SAST:green_circle: 9SAST tool detected but not run on all commits
npm/istanbul-lib-instrument 4.0.3 :green_circle: 4.8
Details
CheckScoreReason
Code-Review:green_circle: 6Found 12/20 approved changesets -- score normalized to 6
Maintained:warning: 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging:warning: -1packaging workflow not detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
License:warning: 0license file not detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Pinned-Dependencies:warning: 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
Signed-Releases:warning: -1no releases found
Fuzzing:warning: 0project is not fuzzed
Security-Policy:green_circle: 10security policy file detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
npm/nyc 15.1.0 :green_circle: 5.7
Details
CheckScoreReason
Maintained:green_circle: 56 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Code-Review:green_circle: 5Found 14/27 approved changesets -- score normalized to 5
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Packaging:warning: -1packaging workflow not detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Pinned-Dependencies:green_circle: 3dependency not pinned by hash detected -- score normalized to 3
Binary-Artifacts:green_circle: 10no binaries found in the repo
Fuzzing:warning: 0project is not fuzzed
Security-Policy:green_circle: 10security policy file detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
npm/nyc ^17.0.0 :green_circle: 5.7
Details
CheckScoreReason
Maintained:green_circle: 56 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Code-Review:green_circle: 5Found 14/27 approved changesets -- score normalized to 5
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Packaging:warning: -1packaging workflow not detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Pinned-Dependencies:green_circle: 3dependency not pinned by hash detected -- score normalized to 3
Binary-Artifacts:green_circle: 10no binaries found in the repo
Fuzzing:warning: 0project is not fuzzed
Security-Policy:green_circle: 10security policy file detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
npm/nyc ^15.1.0 :green_circle: 5.7
Details
CheckScoreReason
Maintained:green_circle: 56 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5
Code-Review:green_circle: 5Found 14/27 approved changesets -- score normalized to 5
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 10license file detected
Signed-Releases:warning: -1no releases found
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Packaging:warning: -1packaging workflow not detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Pinned-Dependencies:green_circle: 3dependency not pinned by hash detected -- score normalized to 3
Binary-Artifacts:green_circle: 10no binaries found in the repo
Fuzzing:warning: 0project is not fuzzed
Security-Policy:green_circle: 10security policy file detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities:green_circle: 100 existing vulnerabilities detected

Scanned Manifest Files

package-lock.json
  • istanbul-lib-instrument@6.0.2
  • nyc@17.0.0
  • semver@7.6.2
  • istanbul-lib-instrument@4.0.3
  • nyc@15.1.0
package.json
  • nyc@^17.0.0
  • nyc@^15.1.0
netlify[bot] commented 3 months ago

Deploy Preview for endearing-brigadeiros-63f9d0 canceled.

Name Link
Latest commit 5e8896e8ff2f6bb72d202c3de8b42e22061869a6
Latest deploy log https://app.netlify.com/sites/endearing-brigadeiros-63f9d0/deploys/6668124ac6bbc20008892eb3
codecov[bot] commented 3 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 57.39%. Comparing base (339e7d8) to head (5e8896e).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #601 +/- ## ======================================= Coverage 57.39% 57.39% ======================================= Files 46 46 Lines 1582 1582 ======================================= Hits 908 908 Misses 674 674 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.