search

miracum / fhir-pseudonymizer

A REST service to pseudonymize and anonymize FHIR® resources.
MIT License
15 stars 2 forks source link

chore(deps): update all non-major dependencies #168

Closed renovate[bot] closed 7 months ago

renovate[bot] commented 7 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
Duende.AccessTokenManagement 2.1.0 -> 2.1.1 age adoption passing confidence nuget patch
OpenTelemetry (source) 1.7.0 -> 1.8.0 age adoption passing confidence nuget minor
OpenTelemetry.Exporter.OpenTelemetryProtocol (source) 1.7.0 -> 1.8.0 age adoption passing confidence nuget minor
OpenTelemetry.Extensions.Hosting (source) 1.7.0 -> 1.8.0 age adoption passing confidence nuget minor
OpenTelemetry.Instrumentation.AspNetCore (source) 1.7.1 -> 1.8.0 age adoption passing confidence nuget minor
OpenTelemetry.Instrumentation.Http (source) 1.7.1 -> 1.8.0 age adoption passing confidence nuget minor
Verify.Xunit 23.6.0 -> 23.7.1 age adoption passing confidence nuget minor
docker.io/jaegertracing/all-in-one 1.55 -> 1.56 age adoption passing confidence minor

Release Notes

DuendeSoftware/Duende.AccessTokenManagement (Duende.AccessTokenManagement) ### [`v2.1.1`](https://togithub.com/DuendeSoftware/Duende.AccessTokenManagement/releases/tag/2.1.1) [Compare Source](https://togithub.com/DuendeSoftware/Duende.AccessTokenManagement/compare/2.1.0...2.1.1) This is a patch release that fixes a DPoP bug and updates our dependency on ASP.NET framework packages. #### What's Changed - update dependencies to latest patches by [@​brockallen](https://togithub.com/brockallen) in [https://github.com/DuendeSoftware/Duende.AccessTokenManagement/pull/78](https://togithub.com/DuendeSoftware/Duende.AccessTokenManagement/pull/78) Updated dependency on ASP.NET framework packages from version 8.0.0 to version 8.0.3. This updates our transitive dependency on the System.IdentityModel.Tokens.Jwt and Microsoft.IdentityModel.JsonWebTokens packages past versions that have a [known Denial of Service vulnerability](https://togithub.com/advisories/GHSA-8g9c-28fc-mcx2). - Fix handling of dpop nonce sent during token exchange by [@​josephdecock](https://togithub.com/josephdecock) in [https://github.com/DuendeSoftware/Duende.AccessTokenManagement/pull/79](https://togithub.com/DuendeSoftware/Duende.AccessTokenManagement/pull/79) Fixes a bug where DPoP nonces provided by authorization servers were not processed correctly. **Full Changelog**: https://github.com/DuendeSoftware/Duende.AccessTokenManagement/compare/2.1.0...2.1.1
VerifyTests/Verify (Verify.Xunit) ### [`v23.7.1`](https://togithub.com/VerifyTests/Verify/compare/23.7.0...23.7.1) [Compare Source](https://togithub.com/VerifyTests/Verify/compare/23.7.0...23.7.1) ### [`v23.7.0`](https://togithub.com/VerifyTests/Verify/compare/23.6.0...23.7.0) [Compare Source](https://togithub.com/VerifyTests/Verify/compare/23.6.0...23.7.0)

Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR has been generated by Mend Renovate. View repository job log here.

github-actions[bot] commented 7 months ago

Target ghcr.io/miracum/fhir-pseudonymizer:pr-168 (ubuntu 22.04)

Vulnerabilities (3)

Package ID Severity Installed Version Fixed Version
libc6 CVE-2016-20013 LOW 2.35-0ubuntu3.6
libgcc-s1 CVE-2022-27943 LOW 12.3.0-1ubuntu1~22.04
libstdc++6 CVE-2022-27943 LOW 12.3.0-1ubuntu1~22.04

No Misconfigurations found

github-actions[bot] commented 7 months ago

Code Coverage

Package Line Rate Branch Rate Health
FhirPseudonymizer 74% 65% ✔
FhirPseudonymizer.Tests 100% 100% ✔
Summary 81% (816 / 1008) 68% (93 / 136) ✔

Minimum allowed line rate is 50%

iter8 report


Experiment summary:
*******************

  Experiment completed: true
  No task failures: true
  Total number of tasks: 7
  Number of completed tasks: 7
  Number of completed loops: 1

Whether or not service level objectives (SLOs) are satisfied:
*************************************************************

  SLO Conditions                 | Satisfied
  --------------                 | ---------
  http/error-count <= 0          | true
  http/latency-mean (msec) <= 25 | true
  http/latency-p99 (msec) <= 85  | true

Latest observed values for metrics:
***********************************

  Metric                     | value
  -------                    | -----
  http/error-count           | 0.00
  http/error-rate            | 0.00
  http/latency-max (msec)    | 845.70
  http/latency-mean (msec)   | 14.01
  http/latency-min (msec)    | 2.29
  http/latency-p50 (msec)    | 6.49
  http/latency-p75 (msec)    | 8.88
  http/latency-p90 (msec)    | 54.54
  http/latency-p95 (msec)    | 67.15
  http/latency-p99 (msec)    | 77.45
  http/latency-p99.9 (msec)  | 79.93
  http/latency-stddev (msec) | 22.28
  http/request-count         | 25000.00
github-actions[bot] commented 7 months ago

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 5 0 0.14s
✅ BASH bash-exec 1 0 0.02s
✅ BASH shellcheck 1 0 0.05s
✅ BASH shfmt 1 0 0.03s
✅ CSHARP csharpier 95 0 5.24s
⚠️ CSHARP roslynator 3 3 32.51s
✅ DOCKERFILE hadolint 1 0 0.09s
✅ EDITORCONFIG editorconfig-checker 181 0 1.15s
✅ JSON eslint-plugin-jsonc 27 0 10.54s
✅ JSON jsonlint 27 0 0.33s
✅ JSON prettier 27 0 3.3s
✅ JSON v8r 27 0 9.01s
✅ MARKDOWN markdownlint 4 0 1.54s
✅ PROTOBUF protolint 4 0 7.9s
✅ REPOSITORY checkov yes no 15.15s
✅ REPOSITORY dustilock yes no 0.01s
✅ REPOSITORY gitleaks yes no 0.71s
✅ REPOSITORY git_diff yes no 0.13s
✅ REPOSITORY grype yes no 15.63s
✅ REPOSITORY kics yes no 24.13s
✅ REPOSITORY secretlint yes no 1.84s
✅ REPOSITORY syft yes no 0.48s
✅ REPOSITORY trivy yes no 7.76s
✅ REPOSITORY trivy-sbom yes no 5.06s
✅ REPOSITORY trufflehog yes no 12.33s
✅ XML xmllint 2 0 0.02s
✅ YAML prettier 29 0 3.71s
✅ YAML v8r 29 0 34.05s
✅ YAML yamllint 29 0 2.81s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

_MegaLinter is graciously provided by OX Security_

miracum-bot commented 7 months ago

:tada: This PR is included in version 2.21.9 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: