google / osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev
https://google.github.io/osv-scanner/
Apache License 2.0
6.26k stars 362 forks source link

fix(deps): update osv-scanner minor #1174

Closed renovate-bot closed 3 months ago

renovate-bot commented 3 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
deps.dev/api/v3 v3.0.0-20240730004939-e80e6658c33b -> v3.0.0-20240807013505-16da96fe8b66 age adoption passing confidence require patch
deps.dev/util/maven e80e665 -> 16da96f age adoption passing confidence require digest
deps.dev/util/resolve e80e665 -> 16da96f age adoption passing confidence require digest
deps.dev/util/semver e80e665 -> 16da96f age adoption passing confidence require digest
github.com/charmbracelet/glamour v0.7.0 -> v0.8.0 age adoption passing confidence require minor
github.com/google/go-containerregistry v0.20.1 -> v0.20.2 age adoption passing confidence require patch
github.com/ianlancetaylor/demangle bd984b5 -> 81f5be9 age adoption passing confidence require digest
github.com/urfave/cli/v2 v2.27.3 -> v2.27.4 age adoption passing confidence require patch
golang.org/x/exp 8a7402a -> 0cdaa3a age adoption passing confidence require digest
golang.org/x/term v0.22.0 -> v0.23.0 age adoption passing confidence require minor

Release Notes

charmbracelet/glamour (github.com/charmbracelet/glamour) ### [`v0.8.0`](https://togithub.com/charmbracelet/glamour/releases/tag/v0.8.0) [Compare Source](https://togithub.com/charmbracelet/glamour/compare/v0.7.0...v0.8.0) ### Fixing (almost) everything With a *ton* of rendering fixes, she's sparkling :sparkles: > It has that new car smell... #### So many fixes…one man [@​caarlos0](https://togithub.com/caarlos0) fixed a whopping 15 issues with PR [#​317](https://togithub.com/charmbracelet/glamour/issues/317) 🥇 - Fix URL links not rendering inside bold text [#​312](https://togithub.com/charmbracelet/glamour/issues/312) - Fix autolink element rendering [#​290](https://togithub.com/charmbracelet/glamour/issues/290) - Add support for backslash escapes [#​106](https://togithub.com/charmbracelet/glamour/issues/106) - Fix cases when backslash should not be shown [#​274](https://togithub.com/charmbracelet/glamour/issues/274) - Fix escape character rendering [#​311](https://togithub.com/charmbracelet/glamour/issues/311) - Fix newlines in definition lists [#​239](https://togithub.com/charmbracelet/glamour/issues/239) - Fix nested blockquotes rendering [#​313](https://togithub.com/charmbracelet/glamour/issues/313) - Fix block quote accidentally combining lines [#​237](https://togithub.com/charmbracelet/glamour/issues/237) - Fix document-level indent causing unintended wrapping after quoted lines [#​68](https://togithub.com/charmbracelet/glamour/issues/68) #### Better tables Tables now provide stable rendering of elements within the table including alignment, text styles, all that jazz. It now uses the [lipgloss table](https://pkg.go.dev/github.com/charmbracelet/lipgloss@v0.12.1/table), making it much more consistent across the board. - Render tables with Lip Gloss [#​262](https://togithub.com/charmbracelet/glamour/issues/262) - Refactor to replace `TableWriter` with Lip Gloss table [#​254](https://togithub.com/charmbracelet/glamour/issues/254) - Fix inline code within table [#​315](https://togithub.com/charmbracelet/glamour/issues/315) - Fix links in tables [#​316](https://togithub.com/charmbracelet/glamour/issues/316) - Provide consistent alignment of table elements [#​60](https://togithub.com/charmbracelet/glamour/issues/60) - Support alignment in tables [#​117](https://togithub.com/charmbracelet/glamour/issues/117) #### New! Tokyo Night > The markdown renderer’s equivalent of a mani-pedi :nail_care: Tokyo Night is now a built-in style for Glamour. This means you'll be able to use it in the next release of [Glow](https://togithub.com/charmbracelet/glow?tab=readme-ov-file#styles). ```bash glow -s "tokyo-night" ### OR export GLAMOUR_STYLE="tokyo-night" ``` Tokyo Night x Glamour Check out the [custom style example](https://togithub.com/charmbracelet/glamour/blob/master/examples/stdin-stdout-custom-styles/main.go#L30-L32) to learn how to support custom styles in your own Glamour apps. - feat: Add Tokyo Night theme by [@​basilioss](https://togithub.com/basilioss) in [https://github.com/charmbracelet/glamour/pull/229](https://togithub.com/charmbracelet/glamour/pull/229) #### No TTY? Glamour will now check if `stdout` is a tty and will strip styles when it is not. - Add auto NoTTY style by [@​wxh06](https://togithub.com/wxh06) and [@​caarlos0](https://togithub.com/caarlos0) in [https://github.com/charmbracelet/glamour/pull/268](https://togithub.com/charmbracelet/glamour/pull/268) #### Other Stuff - CI: scan for vulnerabilities and common errors by [@​caarlos0](https://togithub.com/caarlos0) in [https://github.com/charmbracelet/glamour/pull/310](https://togithub.com/charmbracelet/glamour/pull/310) - Use freeze for gallery images by [@​bashbunni](https://togithub.com/bashbunni) in [https://github.com/charmbracelet/glamour/pull/322](https://togithub.com/charmbracelet/glamour/pull/322) #### New Contributors - [@​bashbunni](https://togithub.com/bashbunni) made their first contribution in [https://github.com/charmbracelet/glamour/pull/322](https://togithub.com/charmbracelet/glamour/pull/322) **Full Changelog**: https://github.com/charmbracelet/glamour/compare/v0.7.0...v0.8.0 *** The Charm logo Thoughts? Questions? We love hearing from you. Feel free to reach out on [Twitter](https://twitter.com/charmcli), [The Fediverse](https://mastodon.social/@​charmcli), or [Discord](https://charm.sh/chat).
This discussion was created from the release v0.8.0.
google/go-containerregistry (github.com/google/go-containerregistry) ### [`v0.20.2`](https://togithub.com/google/go-containerregistry/releases/tag/v0.20.2) [Compare Source](https://togithub.com/google/go-containerregistry/compare/v0.20.1...v0.20.2) #### What's Changed - deps: bump docker dep by [@​imjasonh](https://togithub.com/imjasonh) in [https://github.com/google/go-containerregistry/pull/1991](https://togithub.com/google/go-containerregistry/pull/1991) **Full Changelog**: https://github.com/google/go-containerregistry/compare/v0.20.1...v0.20.2
urfave/cli (github.com/urfave/cli/v2) ### [`v2.27.4`](https://togithub.com/urfave/cli/releases/tag/v2.27.4) [Compare Source](https://togithub.com/urfave/cli/compare/v2.27.3...v2.27.4) #### What's Changed - Fix:(issue\_1962) Fix tests failing on 32 bit architectures by [@​dearchap](https://togithub.com/dearchap) in [https://github.com/urfave/cli/pull/1963](https://togithub.com/urfave/cli/pull/1963) **Full Changelog**: https://github.com/urfave/cli/compare/v2.27.3...v2.27.4

Configuration

📅 Schedule: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR was generated by Mend Renovate. View the repository job log.

forking-renovate[bot] commented 3 months ago

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

Details:

Package Change
github.com/alecthomas/chroma/v2 v2.8.0 -> v2.14.0
github.com/microcosm-cc/bluemonday v1.0.26 -> v1.0.27
github.com/muesli/termenv v0.15.2 -> v0.15.3-0.20240618155329-98d742f6907a
github.com/yuin/goldmark v1.7.0 -> v1.7.4
github.com/yuin/goldmark-emoji v1.0.2 -> v1.0.3
golang.org/x/crypto v0.25.0 -> v0.26.0
golang.org/x/net v0.27.0 -> v0.28.0
golang.org/x/sys v0.22.0 -> v0.23.0
golang.org/x/text v0.16.0 -> v0.17.0
golang.org/x/tools v0.23.0 -> v0.24.0
forking-renovate[bot] commented 3 months ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.