Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade @snyk/protect from 1.1291.1 to 1.1292.0 #305

Merged
merged 1 commit into from
Jul 29, 2024

Conversation

TeeVeeEss
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade @snyk/protect from 1.1291.1 to 1.1292.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released on 22 days ago.

Release notes
Package name: @snyk/protect
  • 1.1292.0 - 2024-06-26

    1.1292.0 (2024-06-26)

    The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

    News

    This Snyk CLI release delivers an assortment of bug fixes and improvements.

    • We've added support for pnpm, giving you more flexibility in your project setup.
    • You can now scan npm/yarn projects even without lockfiles, ensuring comprehensive vulnerability detection regardless of your dependency management approach.
    • We're committed to strengthening security. This release includes redaction of additional sensitive data in debug logs, minimizing potential risks.

    Complete changelog

    Features

    • test: Added pnpm support under 'enablePnpmCli' feature flag (#5181) (46769cc)
    • test: Support scan of npm/yarn projects without lockfiles (e2d77a9)
    • monitor: Set target-reference in the monitor request (51ed8f5)
    • code: Centrally check if code test is enabled (#5239) (e5a00e2)
    • sbom: Improve depgraph for Maven projects (fbb33d7)
    • sbom: Use RFC 3339 for all timestamps in sbom test result (#5204) (91bf191)
    • language-server: Add --all-projects flag scans by default IDE-318 (fdcf30e)
    • language-server: Enable incremental scanning IDE-275 (d198685)
    • language-server: Add support for IDE themes (c1c4d08)
    • language-server: Consistent styling across intellij and vscode (#5282) (9aa6f76)
    • logging: Redact additional types of sensitive data from debug logs (#5254) (056cdab)

    Bug Fixes

    • auth: Autodetect IDE usage and fallback to API token based authentication (#5241) (4c795e0)
    • iac: Upgrade iac custom rules to address Vulnerabilities IAC-2944 (453db24)
    • language-server: Caching problem when no vulnerabilities in the IDE (#5223) (89c9491)
    • language-server: Remove incorrect /v1 path (#5214) (cf16470)
    • dependencies: Update dependencies to reduce vulnerabilities (#5131) (4c7cb3c)
    • sbom: sbom test output padding (e3b7cac)
    • sbom: Fix container purl generation for apt and rpm (#5207) (fa9d512)
    • sbom: Retain error code during SBOM generation (#5202) (5e98aaa)
    • test: support cyclic dependencies in maven with dverbose (#5208) (fb24c02)
    • test: Add tool version and informationUri to sarif output (#5203) (b899fd3)
    • test: fixing several .NET bugs (#5217) (c27d767)
    • test: fixing a bug causing .NET beta scanning to fail on older versions of .NET (#5228) (5fdecf7)
    • test: .NET runtime resolution testing now supports projects targeting .NET Standard frameworks (#5169) (44d0861)
    • test: fix issues of type 'Cannot find module ...' in snyk-docker-plugin (#5301) (88efd54)
    • monitor: fix project name when using assets-project-name flag (#5077) (57dc718)
  • 1.1291.1 - 2024-05-27

    1.1291.1 (2024-05-27)

    The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

    Bug Fixes

    • dependencies: Upgrade go-getter to v1.7.4 to fix vulnerabilities (#5252)
from @snyk/protect GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @snyk/protect from 1.1291.1 to 1.1292.0.

See this package in npm:
@snyk/protect

See this project in Snyk:
https://app.snyk.io/org/teeveeess/project/c1bc30d9-148f-4edd-8245-e5bbaf2e46e9?utm_source=github&utm_medium=referral&page=upgrade-pr
@TeeVeeEss TeeVeeEss merged commit 2bf84c4 into develop Jul 29, 2024
3 checks passed
@TeeVeeEss TeeVeeEss deleted the snyk-upgrade-af7bae6a14b7727420d967a309b812f9 branch July 29, 2024 11:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants