finos / git-proxy

Deploy custom push protections and policies on top of Git
https://git-proxy.finos.org
Apache License 2.0
110 stars 72 forks source link

fix(deps): update dependency nodemailer to v6.9.14 #625

Closed renovate[bot] closed 3 months ago

renovate[bot] commented 3 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
nodemailer (source) 6.9.13 -> 6.9.14 age adoption passing confidence

Release Notes

nodemailer/nodemailer (nodemailer) ### [`v6.9.14`](https://togithub.com/nodemailer/nodemailer/blob/HEAD/CHANGELOG.md#6914-2024-06-19) [Compare Source](https://togithub.com/nodemailer/nodemailer/compare/v6.9.13...v6.9.14) ##### Bug Fixes - **api:** Added support for Ethereal authentication ([56b2205](https://togithub.com/nodemailer/nodemailer/commit/56b22052a98de9e363f6c4d26d1512925349c3f3)) - **services.json:** Add Email Services Provider Feishu Mail (CN) ([#​1648](https://togithub.com/nodemailer/nodemailer/issues/1648)) ([e9e9ecc](https://togithub.com/nodemailer/nodemailer/commit/e9e9ecc99b352948a912868c7912b280a05178c6)) - **services.json:** update Mailtrap host and port in well known ([#​1652](https://togithub.com/nodemailer/nodemailer/issues/1652)) ([fc2c9ea](https://togithub.com/nodemailer/nodemailer/commit/fc2c9ea0b4c4f4e514143d2a138c9a23095fc827)) - **well-known-services:** Add Loopia in well known services ([#​1655](https://togithub.com/nodemailer/nodemailer/issues/1655)) ([21a28a1](https://togithub.com/nodemailer/nodemailer/commit/21a28a18fc9fdf8e0e86ddd846e54641395b2cb6))

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

github-actions[bot] commented 3 months ago

Dependency Review

The following issues were found:

See the Details below.

License Issues

package-lock.json

PackageVersionLicenseIssue Type
nodemailer6.9.14NullUnknown License
Allowed Licenses: MIT, Apache-2.0, BSD-3-Clause, ISC, BSD-2-Clause, Unlicense, CC0-1.0, 0BSD, X11, MPL-2.0, MPL-1.0, MPL-1.1, MPL-2.0
Excluded from license check: pkg:npm/caniuse-lite

OpenSSF Scorecard

PackageVersionScoreDetails
npm/nodemailer 6.9.14 :green_circle: 5.1
Details
CheckScoreReason
Code-Review:warning: 2Found 5/22 approved changesets -- score normalized to 2
Maintained:green_circle: 64 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 6
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 9license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Binary-Artifacts:green_circle: 10no binaries found in the repo
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy:warning: 0security policy file not detected
Pinned-Dependencies:warning: 2dependency not pinned by hash detected -- score normalized to 2
Fuzzing:warning: 0project is not fuzzed
Packaging:green_circle: 10packaging workflow detected
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
npm/nodemailer 6.9.13 :green_circle: 5.1
Details
CheckScoreReason
Code-Review:warning: 2Found 5/22 approved changesets -- score normalized to 2
Maintained:green_circle: 64 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 6
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 9license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Binary-Artifacts:green_circle: 10no binaries found in the repo
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy:warning: 0security policy file not detected
Pinned-Dependencies:warning: 2dependency not pinned by hash detected -- score normalized to 2
Fuzzing:warning: 0project is not fuzzed
Packaging:green_circle: 10packaging workflow detected
Vulnerabilities:green_circle: 100 existing vulnerabilities detected

Scanned Manifest Files

package-lock.json
  • nodemailer@6.9.14
  • nodemailer@6.9.13
netlify[bot] commented 3 months ago

Deploy Preview for endearing-brigadeiros-63f9d0 ready!

Name Link
Latest commit ac1101352f2a349fcbc5cd69c5c7632f76d23996
Latest deploy log https://app.netlify.com/sites/endearing-brigadeiros-63f9d0/deploys/66730f3e9ac5900008ed8adf
Deploy Preview https://deploy-preview-625--endearing-brigadeiros-63f9d0.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

codecov[bot] commented 3 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Please upload report for BASE (main@8079f1d). Learn more about missing BASE report.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #625 +/- ## ======================================= Coverage ? 57.39% ======================================= Files ? 46 Lines ? 1582 Branches ? 0 ======================================= Hits ? 908 Misses ? 674 Partials ? 0 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.