dancefinder/dancefinder-app
5
0
Fork 0
Code Issues 1 Pull Requests 3 Actions Packages Projects Releases Activity

Build(deps): bump snyk from 1.806.0 to 1.809.0 #185

Closed
argoyle wants to merge 0 commits from dependabot-npm_and_yarn-snyk-1.809.0 into master
pull from: dependabot-npm_and_yarn-snyk-1.809.0
merge into: :master
Conversation 1 Commits - Files Changed -
argoyle commented 2021-12-26 19:56:27 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

Bumps snyk from 1.806.0 to 1.809.0.

Release notes

Sourced from snyk's releases.

v1.809.0

1.809.0 (2021-12-23)

Features

  • Adding support for private JARs (f456216)

v1.808.0

1.808.0 (2021-12-23)

Bug Fixes

  • remove false positive results from log4shell (42ef2b8)

v1.807.0

1.807.0 (2021-12-23)

Features

  • add analysisContext to sast tests (21ed58d)
Commits
  • 6bec415 Merge pull request #2500 from snyk/feat/support-private-jars
  • f456216 feat: Adding support for private JARs
  • 628d157 Merge pull request #2483 from snyk/fix/log4shell-remove-false-positive
  • 42ef2b8 fix: remove false positive results from log4shell
  • ba7eebc Merge pull request #2490 from snyk/refactor/filter-iac-directory-files
  • 2f6f9dc Merge pull request #2498 from snyk/feat/sast-analysis-ctx
  • 21ed58d feat: add analysisContext to sast tests
  • 4e4c4c7 Merge pull request #2487 from snyk/chore/update-help-links
  • feb75d1 Merge pull request #2489 from snyk/smoke/fix-docker-bundle-setup
  • b93e81f refactor: Load IaC files flow
  • Additional commits viewable in compare view

Dependabot commands
You can trigger Dependabot actions by commenting on this MR
  • $dependabot rebase will rebase this MR
  • $dependabot recreate will recreate this MR rewriting all the manual changes and resolving conflicts
Bumps [snyk](https://github.com/snyk/snyk) from 1.806.0 to 1.809.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/snyk/snyk/releases">snyk's releases</a>.</em></p> <blockquote> <h2>v1.809.0</h2> <h1><a href="https://github.com/snyk/snyk/compare/v1.808.0...v1.809.0">1.809.0</a> (2021-12-23)</h1> <h3>Features</h3> <ul> <li>Adding support for private JARs (<a href="https://github.com/snyk/snyk/commit/f456216457e49641b8ae3513e624ab95d7d6aad4">f456216</a>)</li> </ul> <h2>v1.808.0</h2> <h1><a href="https://github.com/snyk/snyk/compare/v1.807.0...v1.808.0">1.808.0</a> (2021-12-23)</h1> <h3>Bug Fixes</h3> <ul> <li>remove false positive results from log4shell (<a href="https://github.com/snyk/snyk/commit/42ef2b8daddd8a95175fddee506b45ae9a2d5d5b">42ef2b8</a>)</li> </ul> <h2>v1.807.0</h2> <h1><a href="https://github.com/snyk/snyk/compare/v1.806.0...v1.807.0">1.807.0</a> (2021-12-23)</h1> <h3>Features</h3> <ul> <li>add analysisContext to sast tests (<a href="https://github.com/snyk/snyk/commit/21ed58d3bc6019c603208c460a92060d6b4c535d">21ed58d</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/snyk/snyk/commit/6bec4153a9a3a2461b112288cb69cf2a1cb10a13"><code>6bec415</code></a> Merge pull request <a href="https://github.com/snyk/snyk/issues/2500">#2500</a> from snyk/feat/support-private-jars</li> <li><a href="https://github.com/snyk/snyk/commit/f456216457e49641b8ae3513e624ab95d7d6aad4"><code>f456216</code></a> feat: Adding support for private JARs</li> <li><a href="https://github.com/snyk/snyk/commit/628d15798867db5ca7f9604825ecdf99a34c2b46"><code>628d157</code></a> Merge pull request <a href="https://github.com/snyk/snyk/issues/2483">#2483</a> from snyk/fix/log4shell-remove-false-positive</li> <li><a href="https://github.com/snyk/snyk/commit/42ef2b8daddd8a95175fddee506b45ae9a2d5d5b"><code>42ef2b8</code></a> fix: remove false positive results from log4shell</li> <li><a href="https://github.com/snyk/snyk/commit/ba7eebce1509f208944f44af43f39704f3b4dd0c"><code>ba7eebc</code></a> Merge pull request <a href="https://github.com/snyk/snyk/issues/2490">#2490</a> from snyk/refactor/filter-iac-directory-files</li> <li><a href="https://github.com/snyk/snyk/commit/2f6f9dc368344997092bacfc23c99c01da604787"><code>2f6f9dc</code></a> Merge pull request <a href="https://github.com/snyk/snyk/issues/2498">#2498</a> from snyk/feat/sast-analysis-ctx</li> <li><a href="https://github.com/snyk/snyk/commit/21ed58d3bc6019c603208c460a92060d6b4c535d"><code>21ed58d</code></a> feat: add analysisContext to sast tests</li> <li><a href="https://github.com/snyk/snyk/commit/4e4c4c7a1d834bacca5de1270ac2e537f1f60856"><code>4e4c4c7</code></a> Merge pull request <a href="https://github.com/snyk/snyk/issues/2487">#2487</a> from snyk/chore/update-help-links</li> <li><a href="https://github.com/snyk/snyk/commit/feb75d15348ec0a9c159823eeb012ba74385b72c"><code>feb75d1</code></a> Merge pull request <a href="https://github.com/snyk/snyk/issues/2489">#2489</a> from snyk/smoke/fix-docker-bundle-setup</li> <li><a href="https://github.com/snyk/snyk/commit/b93e81fb2e40002d9e93c5908cc1adb6d899e573"><code>b93e81f</code></a> refactor: Load IaC files flow</li> <li>Additional commits viewable in <a href="https://github.com/snyk/snyk/compare/v1.806.0...v1.809.0">compare view</a></li> </ul> </details> <br /> --- <details> <summary>Dependabot commands</summary> <br /> You can trigger Dependabot actions by commenting on this MR - `$dependabot rebase` will rebase this MR - `$dependabot recreate` will recreate this MR rewriting all the manual changes and resolving conflicts </details>
argoyle (Migrated from gitlab.com) closed this pull request 2021-12-26 19:57:06 +00:00
argoyle commented 2021-12-26 19:57:07 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

Dependabot won't notify anymore about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

Dependabot won't notify anymore about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file.

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
dependencies
Pull requests that update a dependency file
 docker
javascript
security
Pull requests that address a security vulnerability
 severity:critical
severity:high
severity:low
severity:moderate
No labels dependencies javascript
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
argoyle (Joakim Olsson) buildtools (Buildtools) kubernetes (Kubernetes) releaser (Unbound Releaser) renovate (Renovate Bot)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dancefinder/dancefinder-app#185