socket-security[bot]
commented
1 year ago New dependency changes detected. Learn more about Socket for GitHub ↗︎
👍 No new dependency issues detected in pull request
Bot Commands
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all
Pull request alert summary
| Issue | Status |
|---|---|
| Install scripts | ✅ 0 issues |
| Native code | ✅ 0 issues |
| Bin script shell injection | ✅ 0 issues |
| Unresolved require | ✅ 0 issues |
| Invalid package.json | ✅ 0 issues |
| HTTP dependency | ✅ 0 issues |
| Git dependency | ✅ 0 issues |
| Potential typo squat | ✅ 0 issues |
| Known Malware | ✅ 0 issues |
| Telemetry | ✅ 0 issues |
| Protestware/Troll package | ✅ 0 issues |
📊 Modified Dependency Overview:
🚮 Removed packages: @snyk/protect@1.1123.0
This PR contains the following updates:
1.1123.0->1.1133.0Release Notes
snyk/snyk
### [`v1.1133.0`](https://togithub.com/snyk/cli/releases/tag/v1.1133.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1132.0...v1.1133.0) ##### Features - upgrade snyk/cli-extension-sbom ([f83aa64](https://togithub.com/snyk/snyk/commit/f83aa6490bc40956bd6779ea66a87ead9a76d377)) ### [`v1.1132.0`](https://togithub.com/snyk/cli/releases/tag/v1.1132.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1131.0...v1.1132.0) ##### Bug Fixes - Help behaviour for Extensions ([5d1b4cf](https://togithub.com/snyk/snyk/commit/5d1b4cff9850ad458ff127451c402db2f7dac106)) ### [`v1.1131.0`](https://togithub.com/snyk/cli/releases/tag/v1.1131.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1130.0...v1.1131.0) ##### Features - add `IAC_RULES_CLIENT_URL` to override the URL of the rules client in snyk-iac-test ([d9721f2](https://togithub.com/snyk/snyk/commit/d9721f2fa3575b2f0bd414038e661effc8836e73)) - update snyk-go-plugin 1.19.5 ([76f26c8](https://togithub.com/snyk/snyk/commit/76f26c8d9fcc56abea42ae2801ff8b6a10cb8314)) ### [`v1.1130.0`](https://togithub.com/snyk/snyk/compare/v1.1129.0...v1.1130.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1129.0...v1.1130.0) ### [`v1.1129.0`](https://togithub.com/snyk/cli/releases/tag/v1.1129.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1128.0...v1.1129.0) ##### Bug Fixes - bump nodejs parser to 1.48.2 ([ec343cb](https://togithub.com/snyk/snyk/commit/ec343cbdaeed3265c6809f8a47d0152c5a1df816)) ### [`v1.1128.0`](https://togithub.com/snyk/cli/releases/tag/v1.1128.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1127.0...v1.1128.0) ##### Bug Fixes - bump nodejs parser to 1.48.1 ([4cfae29](https://togithub.com/snyk/snyk/commit/4cfae295bb4490be7300c1615fd66ce026e096d2)) ##### Features - add user-agent header to HTTP requests ([#4488](https://togithub.com/snyk/snyk/issues/4488)) ([abaaa77](https://togithub.com/snyk/snyk/commit/abaaa778c6dc8c993a0f8a6dedeb2a349d911a06)) ### [`v1.1127.0`](https://togithub.com/snyk/cli/releases/tag/v1.1127.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1126.0...v1.1127.0) ##### Features - add debug info for failed send test payload request ([770c7c3](https://togithub.com/snyk/snyk/commit/770c7c3c172c01723aad2b812da9c27bdb358ca1)) ### [`v1.1126.0`](https://togithub.com/snyk/snyk/compare/v1.1125.0...v1.1126.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1125.0...v1.1126.0) ### [`v1.1125.0`](https://togithub.com/snyk/cli/releases/tag/v1.1125.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1124.0...v1.1125.0) ##### Bug Fixes - update gradle plugin ([a386933](https://togithub.com/snyk/snyk/commit/a386933ba2126c8e56f8b954aceb832cad3fda10)) ### [`v1.1124.0`](https://togithub.com/snyk/cli/releases/tag/v1.1124.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1123.0...v1.1124.0) ##### Bug Fixes - checksum comparison failed \[HEAD-202] ([#4476](https://togithub.com/snyk/snyk/issues/4476)) ([d3f72b2](https://togithub.com/snyk/snyk/commit/d3f72b2435f1dd6048081dfa9fb3f22409d9bbd0)) - revert to using console.error for debug messages ([#4478](https://togithub.com/snyk/snyk/issues/4478)) ([f28ceb1](https://togithub.com/snyk/snyk/commit/f28ceb1d7f47166d35fb55d15b4627d66b36da84)) ##### Features - npm lock v2 and v3 support ([3c48d2e](https://togithub.com/snyk/snyk/commit/3c48d2ea80b5f5c35f8d6a34a4931e2b8d8d6916)) - npm workspaces support ([921d41b](https://togithub.com/snyk/snyk/commit/921d41b6be1ef02814c5b1eb5d6e354f2395f968))Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.