google / osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev
https://google.github.io/osv-scanner/
Apache License 2.0
6.02k stars 337 forks source link

fix(deps): update osv-scanner minor #994

Closed renovate-bot closed 1 month ago

renovate-bot commented 1 month ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
github.com/BurntSushi/toml v1.3.2 -> v1.4.0 age adoption passing confidence require minor
github.com/charmbracelet/bubbletea v0.26.2 -> v0.26.3 age adoption passing confidence require patch
github.com/charmbracelet/lipgloss v0.10.0 -> v0.11.0 age adoption passing confidence require minor
golang.org/x/exp 9bf2ced -> 4c93da0 age adoption passing confidence require digest

Release Notes

BurntSushi/toml (github.com/BurntSushi/toml) ### [`v1.4.0`](https://togithub.com/BurntSushi/toml/releases/tag/v1.4.0) [Compare Source](https://togithub.com/BurntSushi/toml/compare/v1.3.2...v1.4.0) This version requires Go 1.18 - Add toml.Marshal() ([#​405](https://togithub.com/BurntSushi/toml/issues/405)) - Require 2-digit hour ([#​320](https://togithub.com/BurntSushi/toml/issues/320)) - Wrap UnmarshalTOML() and UnmarshalText() return values in ParseError for position information ([#​398](https://togithub.com/BurntSushi/toml/issues/398)) - Fix inline tables with dotted keys inside inline arrays (e.g. `k=[{a.b=1}]`) ([#​400](https://togithub.com/BurntSushi/toml/issues/400))
charmbracelet/bubbletea (github.com/charmbracelet/bubbletea) ### [`v0.26.3`](https://togithub.com/charmbracelet/bubbletea/releases/tag/v0.26.3) [Compare Source](https://togithub.com/charmbracelet/bubbletea/compare/v0.26.2...v0.26.3) This is a patch release that prevents `tea.WindowSizeMsg`s from being fired during altscreen changes on Windows. This was due to the fact that Windows emits a `window-size-event` on altscreen changes even if the size hand’t changed. Now, we cache the window-size and compare before sending the message to the `Model`. #### What's Changed - Prevent multiple window-size-events from firing on Windows by [@​aymanbagabas](https://togithub.com/aymanbagabas) in [https://github.com/charmbracelet/bubbletea/pull/1021](https://togithub.com/charmbracelet/bubbletea/pull/1021) - refactor: use x/term and x/ansi for renderer sequences by [@​aymanbagabas](https://togithub.com/aymanbagabas) in [https://github.com/charmbracelet/bubbletea/pull/962](https://togithub.com/charmbracelet/bubbletea/pull/962) **Full Changelog**: https://github.com/charmbracelet/bubbletea/compare/v0.26.2...v0.26.3 *** The Charm logo Thoughts? Questions? We love hearing from you. Feel free to reach out on [Twitter](https://twitter.com/charmcli), [The Fediverse](https://mastodon.social/@​charmcli), or [Discord](https://charm.sh/chat).
charmbracelet/lipgloss (github.com/charmbracelet/lipgloss) ### [`v0.11.0`](https://togithub.com/charmbracelet/lipgloss/releases/tag/v0.11.0) [Compare Source](https://togithub.com/charmbracelet/lipgloss/compare/v0.10.0...v0.11.0) ### Immutable Styles and Raw Speed, Baby So! The big news in this release is: - `Style` methods will now *always* return new styles - `Style` and ANSI operations under the hood are faster There are also a handful of great lil' bug fixes. Read on for more. #### Immutable Styles Every `Style` method now returns a completely new style with its own underlying data structure no matter what. This means working with Styles is a lot easier. No more need for `Copy()`! ```go // Before s := lipgloss.NewStyle().Bold(true) newStyle := s.Copy() // After s := lipgloss.NewStyle().Bold(true) newStyle := s // this is a true copy ``` Okay, but why are styles easier to work with now? Consider this: ```go // Before baseStyle := lipgloss.NewStyle().Background(lipgloss.Color("59")) styleAtRuntime := baseStyle.Copy().Width(m.Width) // After baseStyle := lipgloss.NewStyle().Padding(1, 2) styleAtRuntime := baseStyle.Width(m.Width) ``` It might seem small, but eliminating the risk of mutations in persistent styles in an enormous usability improvement. ##### How to upgrade There's nothing to do, however `Style.Copy()` is now deprecated and only returns itself, so you can just remove `Style.Copy()` calls. If you need to *just* copy a style without any changes to it you can simply `b := a`. #### Faster ANSI Sometimes watch companies brag about their "in-house" watch movement. Well, now we're bragging about our in-house-amazing [`x/ansi`](https://togithub.com/charmbracelet/x/tree/main/ansi) library by our own [@​aymanbagabas](https://togithub.com/aymanbagabas). It's a fine-tuned, low-level way to manage ANSI sequencing and, because we're pretty nerdy, we’re *super* excited about it. *** #### What's Changed ##### New! - always return copies of styles by [@​aymanbagabas](https://togithub.com/aymanbagabas) in [https://github.com/charmbracelet/lipgloss/pull/276](https://togithub.com/charmbracelet/lipgloss/pull/276) ##### Changed - switch to term/ansi for text manipulation by [@​aymanbagabas](https://togithub.com/aymanbagabas) in [https://github.com/charmbracelet/lipgloss/pull/268](https://togithub.com/charmbracelet/lipgloss/pull/268) - replace stripansi with ansi.Strip in table by [@​aymanbagabas](https://togithub.com/aymanbagabas) in [https://github.com/charmbracelet/lipgloss/pull/271](https://togithub.com/charmbracelet/lipgloss/pull/271) - test for different GOOS & GOARCH by [@​aymanbagabas](https://togithub.com/aymanbagabas) in [https://github.com/charmbracelet/lipgloss/pull/292](https://togithub.com/charmbracelet/lipgloss/pull/292) ##### Fixed - fix combining both conditional and unconditional wrapping by [@​aymanbagabas](https://togithub.com/aymanbagabas) in [https://github.com/charmbracelet/lipgloss/pull/275](https://togithub.com/charmbracelet/lipgloss/pull/275) - fix UnderlineSpaces and StrikethroughSpaces by [@​Taz03](https://togithub.com/Taz03) in [https://github.com/charmbracelet/lipgloss/pull/299](https://togithub.com/charmbracelet/lipgloss/pull/299) - always render horizontal border edges when enabled by [@​UnseenBook](https://togithub.com/UnseenBook) in [https://github.com/charmbracelet/lipgloss/pull/211](https://togithub.com/charmbracelet/lipgloss/pull/211) - fix possible nil panic by [@​maaslalani](https://togithub.com/maaslalani) in [https://github.com/charmbracelet/lipgloss/pull/245](https://togithub.com/charmbracelet/lipgloss/pull/245) - fix transform operating on ANSI sequences by [@​meowgorithm](https://togithub.com/meowgorithm) in [https://github.com/charmbracelet/lipgloss/pull/274](https://togithub.com/charmbracelet/lipgloss/pull/274) - change propkeys from int to int64 by [@​hugoleodev](https://togithub.com/hugoleodev) in [https://github.com/charmbracelet/lipgloss/pull/291](https://togithub.com/charmbracelet/lipgloss/pull/291) #### New Contributors - [@​benwaffle](https://togithub.com/benwaffle) made their first contribution in [https://github.com/charmbracelet/lipgloss/pull/247](https://togithub.com/charmbracelet/lipgloss/pull/247) - [@​UnseenBook](https://togithub.com/UnseenBook) made their first contribution in [https://github.com/charmbracelet/lipgloss/pull/211](https://togithub.com/charmbracelet/lipgloss/pull/211) - [@​hugoleodev](https://togithub.com/hugoleodev) made their first contribution in [https://github.com/charmbracelet/lipgloss/pull/291](https://togithub.com/charmbracelet/lipgloss/pull/291) - [@​Taz03](https://togithub.com/Taz03) made their first contribution in [https://github.com/charmbracelet/lipgloss/pull/299](https://togithub.com/charmbracelet/lipgloss/pull/299) **Full Changelog**: https://github.com/charmbracelet/lipgloss/compare/v0.10.0...v0.11.0 *** The Charm logo Thoughts? Questions? We love hearing from you. Feel free to reach out on [Twitter](https://twitter.com/charmcli), [The Fediverse](https://mastodon.technology/@​charm), or [Discord](https://charm.sh/discord).

Configuration

📅 Schedule: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR has been generated by Mend Renovate. View repository job log here.

codecov-commenter commented 1 month ago

Codecov Report

Attention: Patch coverage is 0% with 1 lines in your changes are missing coverage. Please review.

Project coverage is 64.47%. Comparing base (fc58bed) to head (8ce1a31). Report is 1 commits behind head on main.

Files Patch % Lines
cmd/osv-scanner/fix/state-relock-result.go 0.00% 1 Missing :warning:
Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #994 +/- ## ========================================== - Coverage 64.48% 64.47% -0.01% ========================================== Files 148 148 Lines 12088 12088 ========================================== - Hits 7795 7794 -1 - Misses 3842 3843 +1 Partials 451 451 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.