Closed dependabot[bot] closed 2 months ago
✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.
⚠️: No snapshots were found for the head SHA 1928f17463f0c0e3940b742fa95f4d2ff2841d18.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.
Package | Version | Score | Details | ||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
pip/bandit | 1.7.9 | :green_circle: 6.1 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
pip/mkdocs-material | 9.5.26 | :green_circle: 5.2 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
pip/pylint | 3.2.3 | :green_circle: 7.2 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
pip/pytest | 8.2.2 | :green_circle: 6.3 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
pip/semgrep | 1.75.0 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
pip/bandit | 1.7.8 | :green_circle: 6.1 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
pip/mkdocs-material | 9.5.25 | :green_circle: 5.2 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
pip/pylint | 3.2.2 | :green_circle: 7.2 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
pip/pytest | 8.2.1 | :green_circle: 6.3 | Details
| ||||||||||||||||||||||||||||||||||||||||||||||||
pip/semgrep | 1.74.0 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
pip/semgrep | 1.75.0 | Unknown | Unknown | ||||||||||||||||||||||||||||||||||||||||||||||||
pip/semgrep | 1.74.0 | Unknown | Unknown |
Coverage Report
File Stmts Miss Cover Missing semgr8s __main__.py 18 18 0% 5–32
app.py 81 4 95% 117, 177–178, 209
k8s_api.py 22 2 91% 43–44
updater.py 29 2 93% 49–50
TOTAL 202 26 87%
Tests | Skipped | Failures | Errors | Time |
---|---|---|---|---|
18 | 0 :zzz: | 0 :x: | 0 :fire: | 2.171s :stopwatch: |
Superseded by #284.
Bumps the pip-packages group with 5 updates:
1.74.0
1.75.0
9.5.25
9.5.26
1.7.8
1.7.9
3.2.2
3.2.3
8.2.1
8.2.2
Updates
semgrep
from 1.74.0 to 1.75.0Release notes
Sourced from semgrep's releases.
... (truncated)
Changelog
Sourced from semgrep's changelog.
... (truncated)
Commits
2e0ca3f
chore: Bump version to 1.75.0d10868a
build-semgrep-pro: restore using the OSS from the PR (semgrep/semgrep-proprie...0bd7ad4
semgrep/semgrep-proprietary#1
b9fb140
fix: Fall back when unable to infer type from svalue (semgrep/semgrep-proprie...788cab2
feat: add new rule option for stricter attributes matching (semgrep/semgrep-p...a18fbf1
semgrep/semgrep-proprietary#1621
5f49461
semgrep/semgrep-proprietary#1592
92200a5
build-semgrep-pro: restore using the OSS from the PRc3f5e89
semgrep/semgrep-proprietary#1624
b64bfae
Revert some of austin change, remove notty from semgrep.opam (semgrep/semgrep...Updates
mkdocs-material
from 9.5.25 to 9.5.26Release notes
Sourced from mkdocs-material's releases.
Changelog
Sourced from mkdocs-material's changelog.
... (truncated)
Commits
f887197
Updated changelog0d5a08c
Prepare 9.5.26 release1cc45d5
Fixed active tab stolen on scroll with linked content tabsb5b7e9d
Updated dependenciesc182598
Added distribution files49ebb9b
Improved accessibility of search partial (#7233)5bd843b
Updated dependencies0fc36a1
Added support for local author avatars2412a1b
Documentation (#7221)6c3f846
Updated custom stylesUpdates
bandit
from 1.7.8 to 1.7.9Release notes
Sourced from bandit's releases.
Commits
691f465
Supportconfigfile
in.bandit
file (#1052)f1a397e
Bump docker/build-push-action from 5.3.0 to 5.4.0 (#1144)049eba0
Guard against empty call argument list (#1146)ad56c78
[pre-commit.ci] pre-commit autoupdate (#1145)2dd4cb5
[pre-commit.ci] pre-commit autoupdate (#1143)313cae7
Bump docker/login-action from 3.1.0 to 3.2.0 (#1142)3fa1e25
Ensure sarif extra is included as part of doc build (#1139)8b659fb
Add a sponsor section to README (#1137)30cada5
[pre-commit.ci] pre-commit autoupdate (#1135)dbb4161
Updates banner logo so it renders well in dark mode (#1134)Updates
pylint
from 3.2.2 to 3.2.3Commits
918d216
Bump pylint to 3.2.3, update changelog8aba7d1
Fix false positive inuse-yield-from
when usingyield
return (#9700) (#9701)192727b
[multiple-statements] Make pylint compatible with black's 2024 style (#9697) ...7e5e4f9
Fix a false positive forredefined-outer-name
(#9678) (#9695)Updates
pytest
from 8.2.1 to 8.2.2Release notes
Sourced from pytest's releases.
Commits
329d371
Prepare release version 8.2.2214d098
Merge pull request #12414 from bluetech/backport-12409153a436
[8.2.x] fixtures: fix catastrophic performance problem inreorder_items
b41d5a5
Merge pull request #12412 from pytest-dev/backport-12408-to-8.2.x9bb73d7
[8.2.x] cacheprovider: fix "Directory not empty" crash from cache directory c...4569a01
[8.2.x] doc: Update trainings/events (#12402)1d103e5
[8.2.x] Clarify pytest_ignore_collect docs (#12386)240a252
[8.2.x] Add html_baseurl to sphinx conf.py (#12372)a5ee3c4
Merge pull request #12370 from pytest-dev/backport-12368-to-8.2.xf7358ae
[8.2.x] unittest: fix class instances no longer released on test teardown sin...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show