Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update stable #294

Merged
merged 1 commit into from
May 29, 2024
Merged

chore(deps): update stable #294

merged 1 commit into from
May 29, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 29, 2024

Mend Renovate

This PR contains the following updates:

Package Update Change
anchore/grype minor 0.77.4 -> 0.78.0
anchore/syft minor 1.4.1 -> 1.5.0
awscli patch 2.15.54 -> 2.15.59
dagger/dagger patch 0.11.4 -> 0.11.5
defenseunicorns/zarf minor 0.33.2 -> 0.34.0
ghcr.io/defenseunicorns/build-harness/build-harness patch 2.0.21 -> 2.0.22
golangci-lint minor 1.58.2 -> 1.59.0
helm patch 3.15.0 -> 3.15.1
https://github.com/bridgecrewio/checkov.git patch 3.2.98 -> 3.2.112

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

anchore/grype (anchore/grype)

v0.78.0

Compare Source

Added Features
Bug Fixes
Additional Changes

(Full Changelog)

anchore/syft (anchore/syft)

v1.5.0

Compare Source

Added Features
Bug Fixes
Additional Changes

(Full Changelog)

aws/aws-cli (awscli)

v2.15.59

Compare Source

v2.15.58

Compare Source

v2.15.57

Compare Source

v2.15.56

Compare Source

v2.15.55

Compare Source

dagger/dagger (dagger/dagger)

v0.11.5

Compare Source

Added
Changed
Fixed
What to do next?
defenseunicorns/zarf (defenseunicorns/zarf)

v0.34.0

Compare Source

What's Changed

Full Changelog: zarf-dev/zarf@v0.33.2...v0.34.0

defenseunicorns/build-harness (ghcr.io/defenseunicorns/build-harness/build-harness)

v2.0.22

Compare Source

Miscellaneous Chores
golangci/golangci-lint (golangci-lint)

v1.59.0

Compare Source

  1. Enhancements
    • Add SARIF output format
    • Allow the analysis of generated files (issues.exclude-generated: disable)
  2. Updated linters
    • errcheck: fix deprecation warning
    • go-critic: from 0.11.3 to 0.11.4
    • gosec: from 2.20.0 to 5f0084e (fix G601 and G113 performance issues)
    • sloglint: from 0.6.0 to 0.7.0 (new option forbidden-keys)
    • testifylint: from 1.2.0 to 1.3.0 (new checker negative-positive and new option go-require.ignore-http-handlers)
  3. Misc.
    • ️️⚠️ Deprecate github-action output format
    • ️️⚠️ Deprecate issues.exclude-generated-strict option (replaced by issues.exclude-generated: strict)
    • ️️⚠️ Add warning about disabled and deprecated linters (level 2)
helm/helm (helm)

v3.15.1: Helm v3.15.1

Compare Source

Helm v3.15.1 is a patch release. The Helm application source is the same as 3.15.0. The 3.15.0 builds stated the wrong version when running helm version. Instead of the release number it had the release candidate version which pointed to the same revision of the source.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.15.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.15.2 is the next patch release and will be on June 12, 2024.
  • 3.16.0 is the next feature release and will be on September 11, 2024.

Changelog

  • Fixing build issue where wrong version is used e211f2a (Matt Farina)
bridgecrewio/checkov (https://github.com/bridgecrewio/checkov.git)

v3.2.112

Compare Source

v3.2.111

Compare Source

v3.2.110

Compare Source

v3.2.109

Compare Source

v3.2.108

Compare Source

Bug Fix

  • sast: don't scan hidden files - #​6349

v3.2.107

Compare Source

Bug Fix

  • terraform: Handle registry modules with a version in CKF_TF_2 - #​6354

v3.2.106

Compare Source

Feature

  • arm: Ensure Databricks Workspace data plane to control plane co… - #​6319
  • general: TF and ARM - Ensure that Databricks Workspaces enable… - #​6313
  • secrets: Bump detect-secrets - #​6346

v3.2.105

Compare Source

Feature

  • arm: add AppServiceJavaVersion - #​6258
  • arm: add CKV_AZURE_145 to check that the function app uses the latest version of TLS encryption - #​6323
  • arm: add CKV_AZURE_218 to ensure that Application Gateway defines secure protocols for in transit communicationApp gw defines secure protocols - #​6320
  • arm: add CKV_AZURE_54 to ensure Enforce a minimal Tls version for the server - #​6270
  • arm: add CKV_AZURE_71 to Ensure that Managed identity provider is enabled for web apps - #​6272
  • arm: add CKV_AZURE_72 to ensure that remote debugging is not enabled for app services - #​6281
  • arm: AzureDefenderOStorage - #​6269
  • arm: MySQLPublicAccessDisabled-Azure MySQL: Restrict Public Access - #​6263
  • arm: StorageSyncPublicAccessDisabled - #​6331
  • secrets: eliminate false positives in entropy keyword combinator detector - #​6327

Bug Fix

  • ansible: fix ansible resource id in local graph - #​6344
  • secrets: fix entropy type - #​6347

v3.2.104

Compare Source

v3.2.103

Compare Source

v3.2.102

Compare Source

v3.2.101

Compare Source

v3.2.100

Compare Source

Feature

  • sast: TS-legacy-checks - #​6311
  • secrets: entropy limit as env variable - #​6332

v3.2.99

Compare Source


Configuration

📅 Schedule: Branch creation - "after 9am and before 5pm every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added the renovate This PR was created by RenovateBot label May 29, 2024
@renovate renovate bot enabled auto-merge May 29, 2024 15:28
@renovate renovate bot added this pull request to the merge queue May 29, 2024
Merged via the queue into main with commit 99da23f May 29, 2024
6 checks passed
@renovate renovate bot deleted the renovate/stable branch May 29, 2024 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
renovate This PR was created by RenovateBot
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants