Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update devdependencies (non-major) #879

Merged
merged 2 commits into from
Sep 5, 2024
Merged

chore(deps): update devdependencies (non-major) #879

merged 2 commits into from
Sep 5, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Aug 31, 2024 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@myrotvorets/buffer-stream 1.4.0 -> 1.4.1 age adoption passing confidence
@myrotvorets/eslint-config-myrotvorets-ts 2.27.3 -> 2.27.4 age adoption passing confidence
@types/node (source) 22.5.2 -> 22.5.4 age adoption passing confidence
@xmldom/xmldom ^0.8.10 -> ^0.9.0 age adoption passing confidence

Release Notes

myrotvorets/buffer-stream (@​myrotvorets/buffer-stream)

v1.4.1

Compare Source

What's Changed

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added dependencies Pull requests that update a dependency file dev-dependencies labels Aug 31, 2024
@renovate renovate bot enabled auto-merge (rebase) August 31, 2024 23:45
@renovate renovate bot force-pushed the renovate/dev-deps branch from f021980 to 41af157 Compare September 1, 2024 02:30
@github-actions GitHub Actions
Copy link

github-actions bot commented Sep 1, 2024 •
edited
Loading

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@myrotvorets/buffer-stream 1.4.1 🟢 6.8
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/22 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 4dependency not pinned by hash detected -- score normalized to 4
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Fuzzing⚠️ 0project is not fuzzed
Security-Policy⚠️ 0security policy file not detected
SAST🟢 10SAST tool is run on all commits
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@myrotvorets/eslint-config-myrotvorets-ts 2.27.4 🟢 6.8
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/20 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Fuzzing⚠️ 0project is not fuzzed
Security-Policy⚠️ 0security policy file not detected
SAST🟢 10SAST tool is run on all commits
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@types/node 22.5.4 🟢 7
Details
CheckScoreReason
Code-Review🟢 9Found 28/30 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/@xmldom/xmldom 0.9.1 🟢 8
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
CI-Tests🟢 1028 out of 28 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices🟢 5badge detected: Passing
Code-Review⚠️ 2Found 3/11 approved changesets -- score normalized to 2
Contributors🟢 10project has 18 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
SAST🟢 9SAST tool detected but not run on all commits
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@xmldom/xmldom ^0.9.0 🟢 8
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
CI-Tests🟢 1028 out of 28 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices🟢 5badge detected: Passing
Code-Review⚠️ 2Found 3/11 approved changesets -- score normalized to 2
Contributors🟢 10project has 18 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 7dependency not pinned by hash detected -- score normalized to 7
SAST🟢 9SAST tool detected but not run on all commits
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 100 existing vulnerabilities detected

Scanned Manifest Files

package-lock.json
  • @myrotvorets/buffer-stream@1.4.1
  • @myrotvorets/eslint-config-myrotvorets-ts@2.27.4
  • @types/node@22.5.4
  • @xmldom/xmldom@0.9.1
  • @myrotvorets/buffer-stream@1.4.0
  • @myrotvorets/eslint-config-myrotvorets-ts@2.27.3
  • @types/node@22.5.2
  • @xmldom/xmldom@0.8.10
package.json
  • @xmldom/xmldom@^0.9.0
  • @xmldom/xmldom@^0.8.10

@renovate renovate bot force-pushed the renovate/dev-deps branch 5 times, most recently from b5d184f to acca487 Compare September 1, 2024 12:53
@renovate renovate bot changed the title chore(deps): update dependency @xmldom/xmldom to ^0.9.0 chore(deps): update devdependencies (non-major) Sep 1, 2024
@renovate renovate bot force-pushed the renovate/dev-deps branch from acca487 to d24ace1 Compare September 2, 2024 03:40
@renovate renovate bot changed the title chore(deps): update devdependencies (non-major) chore(deps): update dependency @xmldom/xmldom to ^0.9.0 Sep 2, 2024
@renovate renovate bot force-pushed the renovate/dev-deps branch 3 times, most recently from 98ed73d to b072fae Compare September 3, 2024 01:52
@renovate renovate bot changed the title chore(deps): update dependency @xmldom/xmldom to ^0.9.0 chore(deps): update devdependencies (non-major) Sep 3, 2024
@renovate renovate bot force-pushed the renovate/dev-deps branch 4 times, most recently from 8d2849e to cd51d41 Compare September 5, 2024 04:41
@renovate renovate bot force-pushed the renovate/dev-deps branch from cd51d41 to 4753d3a Compare September 5, 2024 07:20
@sjinks sjinks disabled auto-merge September 5, 2024 07:20
@sjinks sjinks merged commit 89c3465 into master Sep 5, 2024
8 checks passed
@sjinks sjinks deleted the renovate/dev-deps branch September 5, 2024 07:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file dev-dependencies
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@sjinks