search

miracum / ahd2fhir

A REST service for mapping text analysis results from Averbis Health Discovery to FHIR resources.
Apache License 2.0
8 stars 0 forks source link

chore(deps): update dependency tenacity to v9 #191

Closed renovate[bot] closed 1 month ago

renovate[bot] commented 2 months ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
tenacity ==8.3.0 -> ==9.0.0 age adoption passing confidence

Release Notes

jd/tenacity (tenacity) ### [`v9.0.0`](https://redirect.github.com/jd/tenacity/releases/tag/9.0.0): tenacity 9.0.0 [Compare Source](https://redirect.github.com/jd/tenacity/compare/8.5.0...9.0.0) #### What's Changed - Respects `min` argument for `wait_random_exponential` by [@​yxtay](https://redirect.github.com/yxtay) in [https://github.com/jd/tenacity/pull/425](https://redirect.github.com/jd/tenacity/pull/425) - Bump major version to warn API breakage on statistics attribute **Full Changelog**: https://github.com/jd/tenacity/compare/8.5.0...9.0.0 ### [`v8.5.0`](https://redirect.github.com/jd/tenacity/releases/tag/8.5.0) [Compare Source](https://redirect.github.com/jd/tenacity/compare/8.4.2...8.5.0) #### What's Changed - fix: Restore contents of retry attribute for wrapped functions by [@​hasier](https://redirect.github.com/hasier) in [https://github.com/jd/tenacity/pull/484](https://redirect.github.com/jd/tenacity/pull/484) **Full Changelog**: https://github.com/jd/tenacity/compare/8.4.2...8.5.0 ### [`v8.4.2`](https://redirect.github.com/jd/tenacity/releases/tag/8.4.2): tenacity 8.4.2 [Compare Source](https://redirect.github.com/jd/tenacity/compare/8.4.1...8.4.2) #### What's Changed - fix: Avoid overwriting local contexts with retry decorator by [@​hasier](https://redirect.github.com/hasier) in [https://github.com/jd/tenacity/pull/479](https://redirect.github.com/jd/tenacity/pull/479) **Full Changelog**: https://github.com/jd/tenacity/compare/8.4.1...8.4.2 ### [`v8.4.1`](https://redirect.github.com/jd/tenacity/releases/tag/8.4.1): tenacity 8.4.1 [Compare Source](https://redirect.github.com/jd/tenacity/compare/8.4.0...8.4.1) #### What's Changed - Include `tenacity.asyncio` subpackage in release dist by [@​cdce8p](https://redirect.github.com/cdce8p) in [https://github.com/jd/tenacity/pull/474](https://redirect.github.com/jd/tenacity/pull/474) **Full Changelog**: https://github.com/jd/tenacity/compare/8.4.0...8.4.1 ### [`v8.4.0`](https://redirect.github.com/jd/tenacity/releases/tag/8.4.0): tenacity 8.4.0 [Compare Source](https://redirect.github.com/jd/tenacity/compare/8.3.0...8.4.0) #### What's Changed - Add async strategies by [@​hasier](https://redirect.github.com/hasier) in [https://github.com/jd/tenacity/pull/451](https://redirect.github.com/jd/tenacity/pull/451) - Support Trio out-of-the-box by [@​jakkdl](https://redirect.github.com/jakkdl) in [https://github.com/jd/tenacity/pull/463](https://redirect.github.com/jd/tenacity/pull/463) **Full Changelog**: https://github.com/jd/tenacity/compare/8.3.0...8.4.0

Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

This PR was generated by Mend Renovate. View the repository job log.

github-actions[bot] commented 2 months ago

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 5 0 0.03s
✅ BASH bash-exec 2 0 0.04s
✅ BASH shellcheck 2 0 0.03s
✅ BASH shfmt 2 0 0.02s
✅ DOCKERFILE hadolint 2 0 0.21s
✅ JSON jsonlint 16 0 0.37s
✅ JSON npm-package-json-lint yes no 0.66s
✅ JSON prettier 16 0 1.84s
✅ MARKDOWN markdownlint 3 0 0.5s
✅ PYTHON bandit 31 0 1.5s
✅ PYTHON black 31 0 3.27s
✅ PYTHON flake8 31 0 1.91s
✅ PYTHON isort 31 0 0.5s
✅ PYTHON mypy 31 0 10.48s
✅ PYTHON pyright 31 0 9.23s
✅ PYTHON ruff 31 0 0.04s
✅ REPOSITORY checkov yes no 16.65s
✅ REPOSITORY gitleaks yes no 0.1s
✅ REPOSITORY git_diff yes no 0.03s
✅ REPOSITORY grype yes no 15.64s
✅ REPOSITORY kics yes no 31.19s
✅ REPOSITORY secretlint yes no 0.95s
✅ REPOSITORY syft yes no 0.54s
✅ REPOSITORY trivy yes no 10.0s
✅ REPOSITORY trivy-sbom yes no 3.48s
✅ REPOSITORY trufflehog yes no 5.0s
✅ YAML prettier 15 0 0.98s
✅ YAML yamllint 15 0 0.53s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

_MegaLinter is graciously provided by OX Security_

github-actions[bot] commented 1 month ago

Trivy image scan report

ghcr.io/miracum/ahd2fhir:pr-191 (debian 12.6)

24 known vulnerabilities found (CRITICAL: 7 HIGH: 4 MEDIUM: 9 LOW: 4)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
libexpat1 CVE-2024-45490 CRITICAL 2.5.0-1 2.5.0-1+deb12u1
libexpat1 CVE-2024-45491 CRITICAL 2.5.0-1 2.5.0-1+deb12u1
libexpat1 CVE-2024-45492 CRITICAL 2.5.0-1 2.5.0-1+deb12u1
libgssapi-krb5-2 CVE-2024-37371 CRITICAL 1.20.1-2+deb12u1 1.20.1-2+deb12u2
libgssapi-krb5-2 CVE-2024-37370 HIGH 1.20.1-2+deb12u1 1.20.1-2+deb12u2
libk5crypto3 CVE-2024-37371 CRITICAL 1.20.1-2+deb12u1 1.20.1-2+deb12u2
libk5crypto3 CVE-2024-37370 HIGH 1.20.1-2+deb12u1 1.20.1-2+deb12u2
libkrb5-3 CVE-2024-37371 CRITICAL 1.20.1-2+deb12u1 1.20.1-2+deb12u2
libkrb5-3 CVE-2024-37370 HIGH 1.20.1-2+deb12u1 1.20.1-2+deb12u2
libkrb5support0 CVE-2024-37371 CRITICAL 1.20.1-2+deb12u1 1.20.1-2+deb12u2
libkrb5support0 CVE-2024-37370 HIGH 1.20.1-2+deb12u1 1.20.1-2+deb12u2
libpython3.11-minimal CVE-2024-0397 MEDIUM 3.11.2-6+deb12u2 3.11.2-6+deb12u3
libpython3.11-minimal CVE-2024-8088 MEDIUM 3.11.2-6+deb12u2 3.11.2-6+deb12u3
libpython3.11-minimal CVE-2024-4032 LOW 3.11.2-6+deb12u2 3.11.2-6+deb12u3
libpython3.11-stdlib CVE-2024-0397 MEDIUM 3.11.2-6+deb12u2 3.11.2-6+deb12u3
libpython3.11-stdlib CVE-2024-8088 MEDIUM 3.11.2-6+deb12u2 3.11.2-6+deb12u3
libpython3.11-stdlib CVE-2024-4032 LOW 3.11.2-6+deb12u2 3.11.2-6+deb12u3
libssl3 CVE-2024-4603 MEDIUM 3.0.13-1~deb12u1 3.0.14-1~deb12u1
libssl3 CVE-2024-4741 MEDIUM 3.0.13-1~deb12u1 3.0.14-1~deb12u1
libssl3 CVE-2024-6119 MEDIUM 3.0.13-1~deb12u1 3.0.14-1~deb12u2
libssl3 CVE-2024-2511 LOW 3.0.13-1~deb12u1 3.0.14-1~deb12u1
python3.11-minimal CVE-2024-0397 MEDIUM 3.11.2-6+deb12u2 3.11.2-6+deb12u3
python3.11-minimal CVE-2024-8088 MEDIUM 3.11.2-6+deb12u2 3.11.2-6+deb12u3
python3.11-minimal CVE-2024-4032 LOW 3.11.2-6+deb12u2 3.11.2-6+deb12u3

No Misconfigurations found

Python

1 known vulnerabilities found (CRITICAL: 0 HIGH: 1 MEDIUM: 0 LOW: 0)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
setuptools CVE-2024-6345 HIGH 65.5.1 70.0.0

No Misconfigurations found

miracum-bot commented 1 month ago

:tada: This PR is included in version 4.0.1 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: