google / osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev
https://google.github.io/osv-scanner/
Apache License 2.0
6.27k stars 363 forks source link

fix(deps): update osv-scanner minor #1402

Closed renovate-bot closed 1 week ago

renovate-bot commented 1 week ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
deps.dev/api/v3 v3.0.0-20241010035105-b3ba03369df1 -> v3.0.0-20241114233204-66e2aed8456e age adoption passing confidence require patch
deps.dev/util/maven b3ba033 -> 66e2aed age adoption passing confidence require digest
deps.dev/util/resolve b3ba033 -> 66e2aed age adoption passing confidence require digest
deps.dev/util/semver b3ba033 -> 66e2aed age adoption passing confidence require digest
github.com/charmbracelet/bubbletea v1.2.0 -> v1.2.2 age adoption passing confidence require patch
github.com/jedib0t/go-pretty/v6 v6.6.1 -> v6.6.2 age adoption passing confidence require patch
golang.org/x/exp f66d83c -> 2d47ceb age adoption passing confidence require digest
golang.org/x/mod v0.21.0 -> v0.22.0 age adoption passing confidence require minor
golang.org/x/net v0.30.0 -> v0.31.0 age adoption passing confidence require minor
golang.org/x/sync v0.8.0 -> v0.9.0 age adoption passing confidence require minor
golang.org/x/term v0.25.0 -> v0.26.0 age adoption passing confidence require minor
google.golang.org/grpc v1.67.1 -> v1.68.0 age adoption passing confidence require minor
google.golang.org/protobuf v1.35.1 -> v1.35.2 age adoption passing confidence require patch

Release Notes

charmbracelet/bubbletea (github.com/charmbracelet/bubbletea) ### [`v1.2.2`](https://redirect.github.com/charmbracelet/bubbletea/releases/tag/v1.2.2) [Compare Source](https://redirect.github.com/charmbracelet/bubbletea/compare/v1.2.1...v1.2.2) Hi! This release fixes some bugs found the fast new renderer introduced in [v1.2.0](https://redirect.github.com/charmbracelet/bubbletea/releases/tag/v1.2.0). Happy rendering! #### Fixed - Incorrect line skipping in renderer flush by [@​semihbkgr](https://redirect.github.com/semihbkgr) in [https://github.com/charmbracelet/bubbletea/pull/1233](https://redirect.github.com/charmbracelet/bubbletea/pull/1233) - Erase the rest of the line when it's shorter than the width by [@​aymanbagabas](https://redirect.github.com/aymanbagabas) in [https://github.com/charmbracelet/bubbletea/pull/1227](https://redirect.github.com/charmbracelet/bubbletea/pull/1227) #### New Contributors - [@​semihbkgr](https://redirect.github.com/semihbkgr) made their first contribution in [https://github.com/charmbracelet/bubbletea/pull/1233](https://redirect.github.com/charmbracelet/bubbletea/pull/1233) **Full Changelog**: https://github.com/charmbracelet/bubbletea/compare/v1.2.0...v1.2.2 *** The Charm logo Thoughts? Questions? We love hearing from you. Feel free to reach out on [Twitter](https://twitter.com/charmcli), [The Fediverse](https://mastodon.technology/@​charm), or on [Discord](https://charm.sh/chat). ### [`v1.2.1`](https://redirect.github.com/charmbracelet/bubbletea/compare/v1.2.0...v1.2.1) [Compare Source](https://redirect.github.com/charmbracelet/bubbletea/compare/v1.2.0...v1.2.1)
jedib0t/go-pretty (github.com/jedib0t/go-pretty/v6) ### [`v6.6.2`](https://redirect.github.com/jedib0t/go-pretty/releases/tag/v6.6.2) [Compare Source](https://redirect.github.com/jedib0t/go-pretty/compare/v6.6.1...v6.6.2) #### What's Changed - table: defaults for row/header/footer align/valign; fixes [#​340](https://redirect.github.com/jedib0t/go-pretty/issues/340) by [@​jedib0t](https://redirect.github.com/jedib0t) in [https://github.com/jedib0t/go-pretty/pull/341](https://redirect.github.com/jedib0t/go-pretty/pull/341) **Full Changelog**: https://github.com/jedib0t/go-pretty/compare/v6.6.1...v6.6.2
grpc/grpc-go (google.golang.org/grpc) ### [`v1.68.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.68.0): Release 1.68.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.67.1...v1.68.0) ### Behavior Changes - stats/opentelemetry/csm: Get mesh_id local label from "CSM_MESH_ID" environment variable, rather than parsing from bootstrap file ([#​7740](https://redirect.github.com/grpc/grpc-go/issues/7740)) - orca (experimental): if using an ORCA listener, it must now be registered only on a READY SubConn, and the listener will automatically be stopped when the connection is lost. ([#​7663](https://redirect.github.com/grpc/grpc-go/issues/7663)) - client: `ClientConn.Close()` now closes transports simultaneously and waits for transports to be closed before returning. ([#​7666](https://redirect.github.com/grpc/grpc-go/issues/7666)) - credentials: TLS credentials created via `NewTLS` that use `tls.Config.GetConfigForClient` will now have CipherSuites, supported TLS versions and ALPN configured automatically. These were previously only set for configs not using the `GetConfigForClient` option. ([#​7709](https://redirect.github.com/grpc/grpc-go/issues/7709)) ### Bug Fixes - transport: prevent deadlock in client transport shutdown when writing the GOAWAY frame hangs. ([#​7662](https://redirect.github.com/grpc/grpc-go/issues/7662)) - mem: reuse buffers more accurately by using slice capacity instead of length ([#​7702](https://redirect.github.com/grpc/grpc-go/issues/7702)) - Special Thanks: [@​PapaCharlie](https://redirect.github.com/PapaCharlie) - status: Fix regression caused by [#​6919](https://redirect.github.com/grpc/grpc-go/issues/6919) in status.Details() causing it to return a wrapped type when getting proto messages generated with protoc-gen-go < v1. ([#​7724](https://redirect.github.com/grpc/grpc-go/issues/7724)) ### Dependencies - Bump minimum supported Go version to `go1.22.7`. ([#​7624](https://redirect.github.com/grpc/grpc-go/issues/7624))
protocolbuffers/protobuf-go (google.golang.org/protobuf) ### [`v1.35.2`](https://redirect.github.com/protocolbuffers/protobuf-go/releases/tag/v1.35.2) [Compare Source](https://redirect.github.com/protocolbuffers/protobuf-go/compare/v1.35.1...v1.35.2) **Full Changelog**: https://github.com/protocolbuffers/protobuf-go/compare/v1.35.1...v1.35.2 Maintenance: [CL/623115](https://go-review.googlesource.com/c/protobuf/+/623115): proto: refactor equal_test from explicit table to use makeMessages() [CL/623116](https://go-review.googlesource.com/c/protobuf/+/623116): encoding/prototext: use testmessages_test.go approach, too [CL/623117](https://go-review.googlesource.com/c/protobuf/+/623117): internal/testprotos/test: add nested message field with \[lazy=true] [CL/624415](https://go-review.googlesource.com/c/protobuf/+/624415): proto: switch messageset_test to use makeMessages() injection point [CL/624416](https://go-review.googlesource.com/c/protobuf/+/624416): internal/impl: fix TestMarshalMessageSetLazyRace (was a no-op!) User-visible changes: [CL/618395](https://go-review.googlesource.com/c/protobuf/+/618395): encoding/protojson: allow missing value for Any of type Empty [CL/618979](https://go-review.googlesource.com/c/protobuf/+/618979): all: implement strip_enum_prefix editions feature [CL/622575](https://go-review.googlesource.com/c/protobuf/+/622575): testing/protocmp: document behavior when combining Ignore and Sort

Configuration

📅 Schedule: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR was generated by Mend Renovate. View the repository job log.

forking-renovate[bot] commented 1 week ago

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

Details:

Package Change
github.com/charmbracelet/x/term v0.2.0 -> v0.2.1
golang.org/x/crypto v0.28.0 -> v0.29.0
golang.org/x/sys v0.26.0 -> v0.27.0
golang.org/x/text v0.19.0 -> v0.20.0
golang.org/x/tools v0.26.0 -> v0.27.0
codecov-commenter commented 1 week ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 68.94%. Comparing base (cbfdd7f) to head (f498a5c).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #1402 +/- ## ======================================= Coverage 68.94% 68.94% ======================================= Files 185 185 Lines 17934 17934 ======================================= Hits 12365 12365 Misses 4904 4904 Partials 665 665 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


🚨 Try these New Features: