securego / gosec

Go security checker
https://securego.io
Apache License 2.0
7.71k stars 606 forks source link

chore(deps): update all dependencies #1176

Closed renovate[bot] closed 1 month ago

renovate[bot] commented 1 month ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
babel-standalone minor 7.24.10 -> 7.25.1 age adoption passing confidence
bulma (source) patch 1.0.1 -> 1.0.2 age adoption passing confidence
github.com/onsi/ginkgo/v2 require patch v2.19.0 -> v2.19.1 age adoption passing confidence
github.com/onsi/gomega require minor v1.33.1 -> v1.34.0 age adoption passing confidence

[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

babel/babel (babel-standalone) ### [`v7.25.1`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7251-2024-07-28) [Compare Source](https://togithub.com/babel/babel/compare/v7.25.0...v7.25.1) ##### :bug: Bug Fix - `babel-plugin-transform-function-name` - [#​16683](https://togithub.com/babel/babel/pull/16683) fix: `ensureFunctionName` may be undefined ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-plugin-transform-react-constant-elements` - [#​16582](https://togithub.com/babel/babel/pull/16582) fix plugin-transform-react-constant-elements transform JSXFrament but not add JSXExpressionContainer ([@​keiseiTi](https://togithub.com/keiseiTi)) - `babel-traverse` - [#​16587](https://togithub.com/babel/babel/pull/16587) fix: fixed issue16583 + test ([@​nerodesu017](https://togithub.com/nerodesu017)) ##### :house: Internal - [#​16663](https://togithub.com/babel/babel/pull/16663) Test eslint plugin against eslint 9 ([@​JLHwung](https://togithub.com/JLHwung)) ### [`v7.25.0`](https://togithub.com/babel/babel/blob/HEAD/CHANGELOG.md#v7250-2024-07-26) [Compare Source](https://togithub.com/babel/babel/compare/v7.24.10...v7.25.0) ##### :eyeglasses: Spec Compliance - `babel-helpers`, `babel-plugin-proposal-explicit-resource-management`, `babel-runtime-corejs3` - [#​16537](https://togithub.com/babel/babel/pull/16537) `await using` normative updates ([@​JLHwung](https://togithub.com/JLHwung)) - `babel-plugin-transform-typescript` - [#​16602](https://togithub.com/babel/babel/pull/16602) Ensure enum members syntactically determinable to be strings do not get reverse mappings ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) ##### :rocket: New Feature - `babel-helper-create-class-features-plugin`, `babel-helper-function-name`, `babel-helper-plugin-utils`, `babel-helper-wrap-function`, `babel-plugin-bugfix-safari-class-field-initializer-scope`, `babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression`, `babel-plugin-transform-classes`, `babel-plugin-transform-function-name`, `babel-preset-env`, `babel-traverse`, `babel-types` - [#​16658](https://togithub.com/babel/babel/pull/16658) Move `ensureFunctionName` to `NodePath.prototype` ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-hoist-variables`, `babel-helper-plugin-utils`, `babel-plugin-proposal-async-do-expressions`, `babel-plugin-transform-modules-systemjs`, `babel-traverse` - [#​16644](https://togithub.com/babel/babel/pull/16644) Move `hoistVariables` to `Scope.prototype` ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-create-class-features-plugin`, `babel-helper-module-transforms`, `babel-helper-plugin-utils`, `babel-helper-split-export-declaration`, `babel-plugin-transform-classes`, `babel-traverse`, `babel-types` - [#​16645](https://togithub.com/babel/babel/pull/16645) Move `splitExportDeclaration` to `NodePath.prototype` ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-create-class-features-plugin`, `babel-helper-environment-visitor`, `babel-helper-module-transforms`, `babel-helper-plugin-utils`, `babel-helper-remap-async-to-generator`, `babel-helper-replace-supers`, `babel-plugin-bugfix-firefox-class-in-computed-class-key`, `babel-plugin-bugfix-v8-static-class-fields-redefine-readonly`, `babel-plugin-transform-async-generator-functions`, `babel-plugin-transform-classes`, `babel-traverse` - [#​16649](https://togithub.com/babel/babel/pull/16649) Move `environment-visitor` helper into `@babel/traverse` ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-core`, `babel-parser` - [#​16480](https://togithub.com/babel/babel/pull/16480) Expose wether a module has TLA or not as `.extra.async` ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-compat-data`, `babel-plugin-bugfix-safari-class-field-initializer-scope`, `babel-preset-env` - [#​16569](https://togithub.com/babel/babel/pull/16569) Introduce `bugfix-safari-class-field-initializer-scope` ([@​davidtaylorhq](https://togithub.com/davidtaylorhq)) - `babel-plugin-transform-block-scoping`, `babel-traverse`, `babel-types` - [#​16551](https://togithub.com/babel/babel/pull/16551) Add `NodePath#getAssignmentIdentifiers` ([@​JLHwung](https://togithub.com/JLHwung)) - `babel-helper-import-to-platform-api`, `babel-plugin-proposal-json-modules` - [#​16579](https://togithub.com/babel/babel/pull/16579) Add `uncheckedRequire` option for JSON imports to CJS ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-transform-fixture-test-runner`, `babel-node` - [#​16642](https://togithub.com/babel/babel/pull/16642) Allow using custom config in `babel-node --eval` ([@​slatereax](https://togithub.com/slatereax)) - `babel-compat-data`, `babel-helper-create-regexp-features-plugin`, `babel-plugin-proposal-duplicate-named-capturing-groups-regex`, `babel-plugin-transform-duplicate-named-capturing-groups-regex`, `babel-preset-env`, `babel-standalone` - [#​16445](https://togithub.com/babel/babel/pull/16445) Add `duplicate-named-capturing-groups-regex` to `preset-env` ([@​JLHwung](https://togithub.com/JLHwung)) ##### :bug: Bug Fix - `babel-generator` - [#​16678](https://togithub.com/babel/babel/pull/16678) Print parens around as expressions on the LHS ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-template`, `babel-types` - [#​15286](https://togithub.com/babel/babel/pull/15286) fix: Props are lost when the template replaces the node ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) ##### :house: Internal - Other - [#​16674](https://togithub.com/babel/babel/pull/16674) bump gulp to 5 ([@​JLHwung](https://togithub.com/JLHwung)) - `babel-generator` - [#​16651](https://togithub.com/babel/babel/pull/16651) Simplify the printing logic for `(` before ambiguous tokens ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) - `babel-helper-function-name`, `babel-plugin-transform-arrow-functions`, `babel-plugin-transform-function-name`, `babel-preset-env`, `babel-traverse` - [#​16652](https://togithub.com/babel/babel/pull/16652) Simplify `helper-function-name` logic ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo)) ##### :running_woman: Performance - `babel-parser`, `babel-plugin-proposal-pipeline-operator` - [#​16461](https://togithub.com/babel/babel/pull/16461) Some minor parser performance improvements for ts ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) ##### :microscope: Output optimization - `babel-plugin-transform-classes` - [#​16670](https://togithub.com/babel/babel/pull/16670) Reduce redundant `assertThisInitialized` ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-helper-create-class-features-plugin`, `babel-helper-replace-supers`, `babel-helpers`, `babel-plugin-proposal-decorators`, `babel-plugin-transform-class-properties`, `babel-plugin-transform-classes`, `babel-plugin-transform-exponentiation-operator`, `babel-plugin-transform-object-super`, `babel-plugin-transform-private-methods`, `babel-runtime-corejs2`, `babel-runtime-corejs3`, `babel-runtime` - [#​16374](https://togithub.com/babel/babel/pull/16374) Improve `super.x` output ([@​liuxingbaoyu](https://togithub.com/liuxingbaoyu)) - `babel-plugin-transform-class-properties`, `babel-plugin-transform-classes` - [#​16656](https://togithub.com/babel/babel/pull/16656) Simplify output for anonymous classes with no methods ([@​nicolo-ribaudo](https://togithub.com/nicolo-ribaudo))
jgthms/bulma (bulma) ### [`v1.0.2`](https://togithub.com/jgthms/bulma/blob/HEAD/CHANGELOG.md#102) [Compare Source](https://togithub.com/jgthms/bulma/compare/1.0.1...1.0.2) ##### Improvements - Smart Grid `is-col-min` now goes up to `32` (Fixes [#​3829](https://togithub.com/jgthms/bulma/issues/3829)) - Remove need for `is-variable` modifier for Column gaps - You can have a list of radio buttons or checkboxes with the `radios` and `checkboxes` classes respectively - Add `is-max-tablet` modifier to the Container element - Add `currentColor` and `inherit` as possible values for the color and background helpers - The Section can now have a minimum height of `100vh` with the `is-fullheight` modifier - Add more SCSS variables: - `$input-border-style` - `$input-border-width` - `$label-spacing` - `$field-block-spacing` - Add more CSS variables: - `--bulma-input-border-style` - `--bulma-input-border-width` - `--bulma-label-color` - `--bulma-label-spacing` - `--bulma-label-weight` - `--bulma-help-size` - `--bulma-field-block-spacing` ##### Bug fixes - Fix [#​3824](https://togithub.com/jgthms/bulma/issues/3824): ability to override `$scheme-h`, `$scheme-s`, `$dark-l` and `$light-l` Sass variables - Fix [#​3830](https://togithub.com/jgthms/bulma/issues/3830): add remaining logical properties - Fix [#​3743](https://togithub.com/jgthms/bulma/issues/3743): make sure 12 columns system take up whole width - Fix [#​3799](https://togithub.com/jgthms/bulma/issues/3799): restore variable columns - Fix [#​3846](https://togithub.com/jgthms/bulma/issues/3846): restore `--bulma-column-gap` CSS variable - Fix [#​3775](https://togithub.com/jgthms/bulma/issues/3775): `has-background` helpers should only affect element it's applied to - Fix [#​3856](https://togithub.com/jgthms/bulma/issues/3856): Sass nested rule deprecation warning - Fix [#​3757](https://togithub.com/jgthms/bulma/issues/3757): restore use of `$navbar-burger-color`
onsi/ginkgo (github.com/onsi/ginkgo/v2) ### [`v2.19.1`](https://togithub.com/onsi/ginkgo/releases/tag/v2.19.1) [Compare Source](https://togithub.com/onsi/ginkgo/compare/v2.19.0...v2.19.1) #### 2.19.1 ##### Fixes - update supported platforms for race conditions \[[`63c8c30`](https://togithub.com/onsi/ginkgo/commit/63c8c30)] - \[build] Allow custom name for binaries. \[[`ff41e27`](https://togithub.com/onsi/ginkgo/commit/ff41e27)] ##### Maintenance - bump gomega \[[`76f4e0c`](https://togithub.com/onsi/ginkgo/commit/76f4e0c)] - Bump rexml from 3.2.6 to 3.2.8 in /docs ([#​1417](https://togithub.com/onsi/ginkgo/issues/1417)) \[[`b69c00d`](https://togithub.com/onsi/ginkgo/commit/b69c00d)] - Bump golang.org/x/sys from 0.20.0 to 0.21.0 ([#​1425](https://togithub.com/onsi/ginkgo/issues/1425)) \[[`f097741`](https://togithub.com/onsi/ginkgo/commit/f097741)]
onsi/gomega (github.com/onsi/gomega) ### [`v1.34.0`](https://togithub.com/onsi/gomega/releases/tag/v1.34.0) [Compare Source](https://togithub.com/onsi/gomega/compare/v1.33.1...v1.34.0) #### 1.34.0 ##### Features - Add RoundTripper method to ghttp.Server \[[`c549e0d`](https://togithub.com/onsi/gomega/commit/c549e0d)] ##### Fixes - fix incorrect handling of nil slices in HaveExactElements (fixes [#​771](https://togithub.com/onsi/gomega/issues/771)) \[[`878940c`](https://togithub.com/onsi/gomega/commit/878940c)] - issue\_765 - fixed bug in Hopcroft-Karp algorithm \[[`ebadb67`](https://togithub.com/onsi/gomega/commit/ebadb67)] ##### Maintenance - bump ginkgo \[[`8af2ece`](https://togithub.com/onsi/gomega/commit/8af2ece)] - Fix typo in docs \[[`123a071`](https://togithub.com/onsi/gomega/commit/123a071)] - Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3 ([#​756](https://togithub.com/onsi/gomega/issues/756)) \[[`0e69083`](https://togithub.com/onsi/gomega/commit/0e69083)] - Bump google.golang.org/protobuf from 1.33.0 to 1.34.1 ([#​755](https://togithub.com/onsi/gomega/issues/755)) \[[`2675796`](https://togithub.com/onsi/gomega/commit/2675796)] - Bump golang.org/x/net from 0.24.0 to 0.25.0 ([#​754](https://togithub.com/onsi/gomega/issues/754)) \[[`4160c0f`](https://togithub.com/onsi/gomega/commit/4160c0f)] - Bump github-pages from 230 to 231 in /docs ([#​748](https://togithub.com/onsi/gomega/issues/748)) \[[`892c303`](https://togithub.com/onsi/gomega/commit/892c303)]

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR was generated by Mend Renovate. View the repository job log.

renovate[bot] commented 1 month ago

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

Details:

Package Change
github.com/go-logr/logr v1.4.1 -> v1.4.2
codecov-commenter commented 1 month ago

:warning: Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 69.52%. Comparing base (6842444) to head (ec1b5e1).

:exclamation: Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #1176 +/- ## ======================================= Coverage 69.52% 69.52% ======================================= Files 71 71 Lines 3865 3865 ======================================= Hits 2687 2687 Misses 1061 1061 Partials 117 117 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.