green-code-initiative / creedengo-python

Reduce the environmental footprint of your Python software programs
https://green-code-initiative.org/
GNU General Public License v3.0
7 stars 9 forks source link

Bump sonarpython.version from 4.6.0.12071 to 4.23.0.17664 #38

Open dependabot[bot] opened 3 weeks ago

dependabot[bot] commented 3 weeks ago

Bumps sonarpython.version from 4.6.0.12071 to 4.23.0.17664. Updates org.sonarsource.python:sonar-python-plugin from 4.6.0.12071 to 4.23.0.17664

Release notes

Sourced from org.sonarsource.python:sonar-python-plugin's releases.

SonarPython 4.23.0.17664

Release notes - SonarPython - 4.23

Bug

SONARPY-1572 Fix parse error for challenging unicode characters

SONARPY-1573 Fix parse error of unparenthesized walrus in set literals and comprehension

SONARPY-1727 S5905: Make sure the quick fix removes trailing commas

SONARPY-1792 Cannot parse a file with binary characters that is valid in the Python interpreter

SONARPY-2068 Tabulations (\t) should be handled correctly as an escape character

SONARPY-2081 Array index in hex form should be handled correctly

SONARPY-2120 Ensure coverage report sensor fails gracefully when reports can't be read

SONARPY-2196 Fix off-by-one errors in the highlighting/issue location in Jupyter Notebooks

Documentation

SONARPY-2005 S1721 : Update rule for in (...)

SONARPY-2015 Fix S5654 RSPEC broken link

SONARPY-2016 Make rule examples for S6738 and S6711 module-level

SONARPY-2195 S2068: Update title to "Hard-coded passwords are security-sensitive"

False Negative

SONARPY-2153 S6978: Fix False Negative related to resolving `torch.nn.Module`

New Feature

SONARPY-1995 Support Jupyter Delimiter in Jupyter Notebooks lexing

SONARPY-2132 Support Union types in SymbolsModuleTypeProvider#getReturnTypeFromSymbol

Sub-task

SONARPY-2168 FunctionDescriptorToPythonTypeConverter should set STUB type origin

False Positive

SONARPY-633 FP on rule S5719 when abc.abstractstaticmethod is used

SONARPY-862 S117 (LocalVariableAndParameterNameConventionCheck) shouldn't raise on type aliases

... (truncated)

Commits
  • 2aebe38 Update rules metadata (#2069)
  • cbef8fd SONARPY-2193: Update sonarlint-core.version to v10 (major) (#2068)
  • 83dbc83 SONARPY-862 S117 (LocalVariableAndParameterNameConventionCheck) shouldn't rai...
  • c0e14aa SONARPY-2198: Update mockito monorepo to v5 (major) (#2063)
  • c655375 SONARPY-2196 fix off-by-one error (#2061)
  • 4656dbc SONARPY-2197: Update protobuf.version to v4 (major) (#2062)
  • d30802b SONARPY-2184: S125: Fix FP when analyzing databricks notebook (#2060)
  • 4ca8e09 Update all non-major dependencies (#2051)
  • d903f9f NO-JIRA Fix Quality Gate (#2059)
  • 3690cb2 SONARPY-2068: Tabulations (\t) should be handled correctly as an escape chara...
  • Additional commits viewable in compare view


Updates org.sonarsource.python:python-checks-testkit from 4.6.0.12071 to 4.23.0.17664

Release notes

Sourced from org.sonarsource.python:python-checks-testkit's releases.

SonarPython 4.23.0.17664

Release notes - SonarPython - 4.23

Bug

SONARPY-1572 Fix parse error for challenging unicode characters

SONARPY-1573 Fix parse error of unparenthesized walrus in set literals and comprehension

SONARPY-1727 S5905: Make sure the quick fix removes trailing commas

SONARPY-1792 Cannot parse a file with binary characters that is valid in the Python interpreter

SONARPY-2068 Tabulations (\t) should be handled correctly as an escape character

SONARPY-2081 Array index in hex form should be handled correctly

SONARPY-2120 Ensure coverage report sensor fails gracefully when reports can't be read

SONARPY-2196 Fix off-by-one errors in the highlighting/issue location in Jupyter Notebooks

Documentation

SONARPY-2005 S1721 : Update rule for in (...)

SONARPY-2015 Fix S5654 RSPEC broken link

SONARPY-2016 Make rule examples for S6738 and S6711 module-level

SONARPY-2195 S2068: Update title to "Hard-coded passwords are security-sensitive"

False Negative

SONARPY-2153 S6978: Fix False Negative related to resolving `torch.nn.Module`

New Feature

SONARPY-1995 Support Jupyter Delimiter in Jupyter Notebooks lexing

SONARPY-2132 Support Union types in SymbolsModuleTypeProvider#getReturnTypeFromSymbol

Sub-task

SONARPY-2168 FunctionDescriptorToPythonTypeConverter should set STUB type origin

False Positive

SONARPY-633 FP on rule S5719 when abc.abstractstaticmethod is used

SONARPY-862 S117 (LocalVariableAndParameterNameConventionCheck) shouldn't raise on type aliases

... (truncated)

Commits
  • 2aebe38 Update rules metadata (#2069)
  • cbef8fd SONARPY-2193: Update sonarlint-core.version to v10 (major) (#2068)
  • 83dbc83 SONARPY-862 S117 (LocalVariableAndParameterNameConventionCheck) shouldn't rai...
  • c0e14aa SONARPY-2198: Update mockito monorepo to v5 (major) (#2063)
  • c655375 SONARPY-2196 fix off-by-one error (#2061)
  • 4656dbc SONARPY-2197: Update protobuf.version to v4 (major) (#2062)
  • d30802b SONARPY-2184: S125: Fix FP when analyzing databricks notebook (#2060)
  • 4ca8e09 Update all non-major dependencies (#2051)
  • d903f9f NO-JIRA Fix Quality Gate (#2059)
  • 3690cb2 SONARPY-2068: Tabulations (\t) should be handled correctly as an escape chara...
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)