green-code-initiative / creedengo-python

Reduce the environmental footprint of your Python software programs
https://green-code-initiative.org/
GNU General Public License v3.0
7 stars 9 forks source link

Bump sonarpython.version from 4.6.0.12071 to 4.22.0.16914 #36

Open dependabot[bot] opened 1 month ago

dependabot[bot] commented 1 month ago

Bumps sonarpython.version from 4.6.0.12071 to 4.22.0.16914. Updates org.sonarsource.python:sonar-python-plugin from 4.6.0.12071 to 4.22.0.16914

Release notes

Sourced from org.sonarsource.python:sonar-python-plugin's releases.

SonarPython 4.22.0.16914

Release notes - SonarPython - 4.22

Bug

SONARPY-2087 Formatted raw strings with double backslashes should be parsed correctly

SONARPY-2136 Remove microsoft_stub test

SONARPY-2147 Fix Message of Rule S6973

Documentation

SONARPY-2077 S2068: Update documentation to not recommend the customization

SONARPY-2078 S6418: Create RSPEC S6418 for Python (this rule already exists for Java)

False Negative

SONARPY-2151 S6982: Fix fn when import torch is used instead of the full import name torch.nn

SONARPY-2152 Lower entropy for S6418

New Feature

SONARPY-1513 Rule S6795: Generic type statement should not use TypeVars

SONARPY-1898 Rule S6978 : Subclasses of "torch.nn.Module" should call the initializer

SONARPY-1902 Rule S6979: "torch.tensor" should be used instead of "torch.autograd.Variable"

SONARPY-1907 Rule S6983 : The nb_workers parameter should be specified for torch.utils.data.DataLoader

SONARPY-1909 Rule S6984: Einops pattern should be valid

Sub-task

SONARPY-2150 Fix FP on S6982 when method is used on optimizers

Task

SONARPY-1337 Use sonar-plugin-api to fetch input file hashes

SONARPY-1588 Deprecate rule S4792

SONARPY-1899 Add relevant projects to Peach

SONARPY-2080 S6418: Move ShannonEntropy to analyzer commons

SONARPY-2083 Fix parsing error when encountering `#@​title` in a notebook cell

... (truncated)

Commits
  • 9e24dce Update rules metadata (#1988)
  • 93ffcfc SONARPY-2151 S6982: Fix fn when import torch is used instead of the full impo...
  • fb1a65c SONARPY-2152 Lower entropy threshold for S6418 (#1949)
  • 673eb19 NO-JIRA: Fix quality gate issue (#1985)
  • 312f89c SONARPY-2150: Fix FP on S6982 when method is used on optimizers (#1984)
  • fae4aa6 SONARPY-2148: Add pytorch and torchvision custom stubs
  • 0ea90aa NO-JIRA: Updated protobuf library version (#1983)
  • ac812bc SONARPY-2147 fix rule S6973 (#1981)
  • 4862874 SONARPY-2143 add check if spread args are present in torch.load (#1980)
  • c7097e5 SONARPY-1898: Subclasses of "torch.nn.Module" should call the initializer (#1...
  • Additional commits viewable in compare view


Updates org.sonarsource.python:python-checks-testkit from 4.6.0.12071 to 4.22.0.16914

Release notes

Sourced from org.sonarsource.python:python-checks-testkit's releases.

SonarPython 4.22.0.16914

Release notes - SonarPython - 4.22

Bug

SONARPY-2087 Formatted raw strings with double backslashes should be parsed correctly

SONARPY-2136 Remove microsoft_stub test

SONARPY-2147 Fix Message of Rule S6973

Documentation

SONARPY-2077 S2068: Update documentation to not recommend the customization

SONARPY-2078 S6418: Create RSPEC S6418 for Python (this rule already exists for Java)

False Negative

SONARPY-2151 S6982: Fix fn when import torch is used instead of the full import name torch.nn

SONARPY-2152 Lower entropy for S6418

New Feature

SONARPY-1513 Rule S6795: Generic type statement should not use TypeVars

SONARPY-1898 Rule S6978 : Subclasses of "torch.nn.Module" should call the initializer

SONARPY-1902 Rule S6979: "torch.tensor" should be used instead of "torch.autograd.Variable"

SONARPY-1907 Rule S6983 : The nb_workers parameter should be specified for torch.utils.data.DataLoader

SONARPY-1909 Rule S6984: Einops pattern should be valid

Sub-task

SONARPY-2150 Fix FP on S6982 when method is used on optimizers

Task

SONARPY-1337 Use sonar-plugin-api to fetch input file hashes

SONARPY-1588 Deprecate rule S4792

SONARPY-1899 Add relevant projects to Peach

SONARPY-2080 S6418: Move ShannonEntropy to analyzer commons

SONARPY-2083 Fix parsing error when encountering `#@​title` in a notebook cell

... (truncated)

Commits
  • 9e24dce Update rules metadata (#1988)
  • 93ffcfc SONARPY-2151 S6982: Fix fn when import torch is used instead of the full impo...
  • fb1a65c SONARPY-2152 Lower entropy threshold for S6418 (#1949)
  • 673eb19 NO-JIRA: Fix quality gate issue (#1985)
  • 312f89c SONARPY-2150: Fix FP on S6982 when method is used on optimizers (#1984)
  • fae4aa6 SONARPY-2148: Add pytorch and torchvision custom stubs
  • 0ea90aa NO-JIRA: Updated protobuf library version (#1983)
  • ac812bc SONARPY-2147 fix rule S6973 (#1981)
  • 4862874 SONARPY-2143 add check if spread args are present in torch.load (#1980)
  • c7097e5 SONARPY-1898: Subclasses of "torch.nn.Module" should call the initializer (#1...
  • Additional commits viewable in compare view


You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.