socket-security[bot]
commented
1 year ago New dependency changes detected. Learn more about Socket for GitHub ↗︎
👍 No new dependency issues detected in pull request
Bot Commands
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all
Pull request alert summary
| Issue | Status |
|---|---|
| Install scripts | ✅ 0 issues |
| Native code | ✅ 0 issues |
| Bin script shell injection | ✅ 0 issues |
| Unresolved require | ✅ 0 issues |
| Invalid package.json | ✅ 0 issues |
| HTTP dependency | ✅ 0 issues |
| Git dependency | ✅ 0 issues |
| Potential typo squat | ✅ 0 issues |
| Known Malware | ✅ 0 issues |
| Telemetry | ✅ 0 issues |
| Protestware/Troll package | ✅ 0 issues |
📊 Modified Dependency Overview:
| ⬆️ Updated Package | Version Diff | Added Capability Access | +/- Transitive Count |
Publisher |
|---|---|---|---|---|
| @snyk/protect@1.1140.0 | 1.1133.0...1.1140.0 | None | +0/-0 |
snyk-admin |
This PR contains the following updates:
1.1133.0->1.1140.0Release Notes
snyk/snyk
### [`v1.1140.0`](https://togithub.com/snyk/cli/releases/tag/v1.1140.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1139.0...v1.1140.0) ##### Bug Fixes - parse mvn output with unresolved properties ([9c4e843](https://togithub.com/snyk/snyk/commit/9c4e8432b86d9c20d6f9878a82540a7f41404883)) ### [`v1.1139.0`](https://togithub.com/snyk/cli/releases/tag/v1.1139.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1138.0...v1.1139.0) ##### Bug Fixes - upgrade nuget plugin - enable large dotnet core prjects ([#4513](https://togithub.com/snyk/snyk/issues/4513)) ([5508ee0](https://togithub.com/snyk/snyk/commit/5508ee030f49fb873f76449c6d2158b3c8250b2d)) ### [`v1.1138.0`](https://togithub.com/snyk/cli/releases/tag/v1.1138.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1137.0...v1.1138.0) ##### Bug Fixes - send additional report options to analyzeFolders ([f9eaf43](https://togithub.com/snyk/snyk/commit/f9eaf43913d29b17ccd18a4bf6f4df08aa274c93)) ### [`v1.1137.0`](https://togithub.com/snyk/cli/releases/tag/v1.1137.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1136.0...v1.1137.0) ##### Bug Fixes - bump nodejs parser to 1.48.3 ([937dcee](https://togithub.com/snyk/snyk/commit/937dcee2ffa3c733a12cf9d13de884eef585db90)) ### [`v1.1136.0`](https://togithub.com/snyk/snyk/compare/v1.1135.0...v1.1136.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1135.0...v1.1136.0) ### [`v1.1135.0`](https://togithub.com/snyk/cli/releases/tag/v1.1135.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1134.0...v1.1135.0) ##### Bug Fixes - custom rules json output missing `resolve` field ([b40799e](https://togithub.com/snyk/snyk/commit/b40799e7729023335d75de3b8161c70d264875e0)) ### [`v1.1134.0`](https://togithub.com/snyk/snyk/compare/v1.1133.0...v1.1134.0) [Compare Source](https://togithub.com/snyk/snyk/compare/v1.1133.0...v1.1134.0)Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.