Closed dependabot[bot] closed 2 months ago
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.
:white_check_mark: lmangani
:x: dependabot[bot]
You have signed the CLA already but the status is still pending? Let us recheck it.
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
Package | New capabilities | Transitives | Size | Publisher |
---|---|---|---|---|
npm/protobufjs@7.2.6 | filesystem, network | +11 |
4.54 MB | google-wombot |
🚮 Removed packages: npm/protobufjs@7.2.5
this is a known issue of "protobufjs": "7.2.6" . The update wasn't planned as far as there's no need to. We can plan it for the next week.
@dependabot rebase
Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!
If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate
.
Workflow telemetry for commit 1e5b6d1e83282896d949eabd750929faa9154647 You can access workflow job details here
gantt
title Run k6 on qryn:latest
dateFormat x
axisFormat %H:%M:%S
Set up job : milestone, 1711998351000, 1711998354000
Initialize containers : 1711998354000, 1711998379000
Checkout : 1711998379000, 1711998380000
Run actions/setup-go@v4 : 1711998380000, 1711998380000
Download k6 for Prometheus : 1711998380000, 1711998382000
Download k6 for Prometheus : 1711998382000, 1711998383000
Collect Workflow Telemetry : 1711998383000, 1711998383000
Wait for Loki API : 1711998383000, 1711998383000
Run k6 loki test : 1711998383000, 1711998446000
Run mv summary.txt loki_summary.txt : 1711998446000, 1711998446000
Wait for Prom API : 1711998446000, 1711998446000
Run k6 prometheus test : 1711998446000, 1711998509000
Run mv summary.txt prom_summary.txt : 1711998509000, 1711998509000
Wait for Tempo API : 1711998509000, 1711998509000
Run actions/upload-artifact@v3 : 1711998581000, 1711998582000
Summary Report : 1711998582000, 1711998582000
Read | Write | |
---|---|---|
Network I/O | ||
Disk I/O |
gantt
title Run k6 on qryn:latest
dateFormat x
axisFormat %H:%M:%S
@dependabot rebase please
Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!
If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate
.
@dependabot recreate
Superseded by #488.
Bumps the npm_and_yarn group with 3 updates in the / directory: protobufjs, follow-redirects and undici.
Updates
protobufjs
from 7.2.5 to 7.2.6Release notes
Sourced from protobufjs's releases.
Changelog
Sourced from protobufjs's changelog.
Commits
2f846fe
chore: release master (#1962)af3ff83
fix: report missing import properly in loadSync (#1960)Updates
follow-redirects
from 1.15.5 to 1.15.6Commits
35a517c
Release version 1.15.6 of the npm package.c4f847f
Drop Proxy-Authorization across hosts.8526b4a
Use GitHub for disclosure.Updates
undici
from 5.26.3 to 5.28.3Release notes
Sourced from undici's releases.
... (truncated)
Commits
e71cb4c
Bumped v5.28.320c65b8
Fix tests for Node.js v20.11.0 (#2618)8ec52cd
Fix tests for Node.js v21 (#2609)d3aa574
Merge pull request from GHSA-3787-6prv-h9w39a14e5f
Bumped v5.28.2fcdfe87
build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 (#2302)169c157
build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 (#2389)9788177
build(deps): bump step-security/harden-runner from 2.5.0 to 2.6.0 (#2392)1f6d159
build(deps): bump actions/setup-node from 3.8.1 to 4.0.0 (#2395)a393a86
build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.1 (#2396)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show