socket-security[bot]
commented
1 year ago Socket Security Pull Request Report
👍 No new dependency issues detected in pull request
Pull request report summary
| Issue | Status |
|---|---|
| Install scripts | ✅ 0 issues |
| Native code | ✅ 0 issues |
| Bin script shell injection | ✅ 0 issues |
| Unresolved require | ✅ 0 issues |
| Invalid package.json | ✅ 0 issues |
| HTTP dependency | ✅ 0 issues |
| Git dependency | ✅ 0 issues |
| Potential typo squat | ✅ 0 issues |
| Known Malware | ✅ 0 issues |
| Telemetry | ✅ 0 issues |
| Protestware/Troll package | ✅ 0 issues |
Bot Commands
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all
Powered by socket.dev
This PR contains the following updates:
1.1100.0->1.1122.0Release Notes
snyk/snyk
### [`v1.1122.0`](https://togithub.com/snyk/cli/releases/tag/v1.1122.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1121.0...v1.1122.0) ##### Bug Fixes - support new setuptools version ([1c740b4](https://togithub.com/snyk/snyk/commit/1c740b425392c40399dc2fbff01583ab2ae8b99e)) ### [`v1.1121.0`](https://togithub.com/snyk/snyk/compare/v1.1120.0...v1.1121.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1120.0...v1.1121.0) ### [`v1.1120.0`](https://togithub.com/snyk/cli/releases/tag/v1.1120.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1119.0...v1.1120.0) ##### Bug Fixes - persist version file ([ff39043](https://togithub.com/snyk/snyk/commit/ff39043d13c8d64b8918ee37ac4dc2bfc8f225a1)) ### [`v1.1119.0`](https://togithub.com/snyk/cli/releases/tag/v1.1119.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1118.0...v1.1119.0) ##### Bug Fixes - upgrade docker plugin to resolve OCI errors and go 1.20 support ([8cfea5d](https://togithub.com/snyk/snyk/commit/8cfea5dedccb09ca7a0a9b37656f317279faa584)) ### [`v1.1118.0`](https://togithub.com/snyk/cli/releases/tag/v1.1118.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1117.0...v1.1118.0) ##### Features - bump Snyk docker plugin to 6.0.0 ([ad884fe](https://togithub.com/snyk/snyk/commit/ad884fe4736d19173f87b4fe456f24caeb3ecb7a)) ### [`v1.1117.0`](https://togithub.com/snyk/cli/releases/tag/v1.1117.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1116.0...v1.1117.0) ##### Bug Fixes - update codeowners ([870462a](https://togithub.com/snyk/snyk/commit/870462a90f645c7c32391a003747be1b765c88f3)) ##### Features - add a new `snyk iac capture` command ([39b3652](https://togithub.com/snyk/snyk/commit/39b365255140134ce523297867e93d4ca971cbee)) ### [`v1.1116.0`](https://togithub.com/snyk/cli/releases/tag/v1.1116.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1115.0...v1.1116.0) ##### Bug Fixes - bump snyk-iac-test to v0.40.4 ([fd13369](https://togithub.com/snyk/snyk/commit/fd13369eecf09f82e468909bf0db6d809b8f054e)) ### [`v1.1115.0`](https://togithub.com/snyk/cli/releases/tag/v1.1115.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1114.0...v1.1115.0) ##### Features - Release of the Extensible CLI via npm ([e7e558c](https://togithub.com/snyk/snyk/commit/e7e558c734cdbabb266b6d3a061a41a8fa3c8bfc)) ### [`v1.1114.0`](https://togithub.com/snyk/cli/releases/tag/v1.1114.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1113.0...v1.1114.0) ##### Features - Revert the Release of the Extensible CLI via npm ([19f8721](https://togithub.com/snyk/snyk/commit/19f8721dacdaa57773815cd1cb59a808958668e9)) ### [`v1.1113.0`](https://togithub.com/snyk/cli/releases/tag/v1.1113.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1112.0...v1.1113.0) ##### Bug Fixes - move message from stdout to stderr ([2686818](https://togithub.com/snyk/snyk/commit/2686818dea831889851abeb2986f01618d4ed447)) ##### Features - add context flag to Snyk App create command ([a483033](https://togithub.com/snyk/snyk/commit/a483033700f2e9d48690325ac1c9c256021a9e56)) ### [`v1.1112.0`](https://togithub.com/snyk/cli/releases/tag/v1.1112.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1111.0...v1.1112.0) ##### Bug Fixes - org slugname lookup ([072b1e0](https://togithub.com/snyk/snyk/commit/072b1e0257982653fc825e5acfab9f0ec35e4801)) ##### Features - Release of the Extensible CLI via npm ([e951741](https://togithub.com/snyk/snyk/commit/e951741ed6c74a9488628f3f0220406da8f8a24f)) ### [`v1.1111.0`](https://togithub.com/snyk/cli/releases/tag/v1.1111.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1110.0...v1.1111.0) ##### Bug Fixes - custom rules remediation output ([e790dfb](https://togithub.com/snyk/snyk/commit/e790dfbd906964fc103d4153e051463ddef8fa98)) ### [`v1.1110.0`](https://togithub.com/snyk/cli/releases/tag/v1.1110.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1109.0...v1.1110.0) ##### Bug Fixes - add aws_vpc to iac test fixture ([a5ae9e2](https://togithub.com/snyk/snyk/commit/a5ae9e2f5ca6ce7f6ce344e5205bde0ee94482ed)) - use apt-get instead of sdkman ([8a7aa8f](https://togithub.com/snyk/snyk/commit/8a7aa8f121383e9e3674c4c3a03eb83b5075ca1e)) ##### Features - add experimental support for cloud custom rules ([213f609](https://togithub.com/snyk/snyk/commit/213f609200f6678f95040f1ab11ff9530ad834bf)) - upgrade snyk-iac-test to 0.40.3 ([45018f1](https://togithub.com/snyk/snyk/commit/45018f19f5e299055573908b5ad3a55ba04f78b4)) ### [`v1.1109.0`](https://togithub.com/snyk/cli/releases/tag/v1.1109.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1108.0...v1.1109.0) ##### Bug Fixes - remove additional debug parameter ([#4430](https://togithub.com/snyk/snyk/issues/4430)) ([b86af3f](https://togithub.com/snyk/snyk/commit/b86af3fcba37720073f9d733a71475d9766b7597)) ##### Features - add missing language representation ([#4427](https://togithub.com/snyk/snyk/issues/4427)) ([9ff88d2](https://togithub.com/snyk/snyk/commit/9ff88d219716cd6977285d55b2abf46b7923aedc)) ### [`v1.1108.0`](https://togithub.com/snyk/cli/releases/tag/v1.1108.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1107.0...v1.1108.0) ##### Bug Fixes - pass org to code-client ([d4659ed](https://togithub.com/snyk/snyk/commit/d4659ed97a2b1bf0a1612f5bbb0b5f92a0b4ed5b)) ### [`v1.1107.0`](https://togithub.com/snyk/cli/releases/tag/v1.1107.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1106.0...v1.1107.0) ##### Bug Fixes - correct Code analysis return type ([3b27517](https://togithub.com/snyk/snyk/commit/3b27517d27b0eb39e66d7278d9665d6137f34a5d)) ##### Features - add report upload to code test ([047d667](https://togithub.com/snyk/snyk/commit/047d6679bbe0ef64353edc53a421adf6567b6a9f)) ### [`v1.1106.0`](https://togithub.com/snyk/cli/releases/tag/v1.1106.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1105.0...v1.1106.0) ##### Bug Fixes - entitlement error should explain which entitlement ([c753b37](https://togithub.com/snyk/snyk/commit/c753b37d3a141b942412f3f0d495d2cc861d977d)) - smoke test matrix ([#4426](https://togithub.com/snyk/snyk/issues/4426)) ([edf268b](https://togithub.com/snyk/snyk/commit/edf268b76515e9460ddb1dc35ec0429ed9589bcf)) ##### Features - build command tree from workflow id \[HEAD-86] ([572ac3d](https://togithub.com/snyk/snyk/commit/572ac3df1acf6da544e8f706b28d7f491b219442)) ### [`v1.1105.0`](https://togithub.com/snyk/cli/releases/tag/v1.1105.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1104.0...v1.1105.0) ##### Bug Fixes - ./iac-data/ location ([106049c](https://togithub.com/snyk/snyk/commit/106049c60a52a92fa3ab61f00c73aaeb9b2cc3ed)) - remove checksum in homebrew cache ([94daab2](https://togithub.com/snyk/snyk/commit/94daab2eec1b2fb71feb5d0149fa35d7259ea429)) ### [`v1.1104.0`](https://togithub.com/snyk/cli/releases/tag/v1.1104.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1103.0...v1.1104.0) ##### Bug Fixes - add check if the s3 bucket contains the version already ([6e516f5](https://togithub.com/snyk/snyk/commit/6e516f585aea71c6f6b7dacfb1b4365cf5ae7ef0)) - missing sdkman java version ([a0cdea5](https://togithub.com/snyk/snyk/commit/a0cdea50dcc755d6c76f532439587ee959c0809e)) - pre-release validation ([5d02cbc](https://togithub.com/snyk/snyk/commit/5d02cbc3463e764634a603c10242591f27ab5097)) - usage of git tag instead of describe ([4320bbe](https://togithub.com/snyk/snyk/commit/4320bbe26779d3296866da5e9af71494ef9c092d)) ##### Features - parallel test-dep-graph requests ([e985a76](https://togithub.com/snyk/snyk/commit/e985a7666ed525d8bccc33bab2416c6716fef082)) - Revert the Release of the Extensible CLI via npm ([69298f6](https://togithub.com/snyk/snyk/commit/69298f6600823badc5394bddaaae7bee3c839a48)) ### [`v1.1103.0`](https://togithub.com/snyk/cli/releases/tag/v1.1103.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1102.0...v1.1103.0) ##### Features - allow gradle daemon usage on unix based systems ([3ad33ba](https://togithub.com/snyk/snyk/commit/3ad33ba264e0fad420078659ca193a184a3ee6f2)) ### [`v1.1102.0`](https://togithub.com/snyk/cli/releases/tag/v1.1102.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1101.0...v1.1102.0) ##### Features - unmanaged sbom support ([74bf74a](https://togithub.com/snyk/snyk/commit/74bf74aeec490c860ee95cbab6a07eca2dcae81d)) ### [`v1.1101.0`](https://togithub.com/snyk/cli/releases/tag/v1.1101.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1100.0...v1.1101.0) ##### Features - Release of the Extensible CLI via npm ([84446aa](https://togithub.com/snyk/snyk/commit/84446aac3993d652e9b7bec276c3a4405b030741))Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.