Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update dependency com.approvaltests:approvaltests to v23 - autoclosed #37

Closed

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 1, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
com.approvaltests:approvaltests (source) 22.3.3 -> 23.1.0 age adoption passing confidence

Release Notes

approvals/ApprovalTests.Java (com.approvaltests:approvaltests)

v23.1.0: ParseInput with 3 parameters

Compare Source

Added ParseInput with 3 parameters and allows arrays as last argument for ParseInput with 2 and 3 Parameters. To understand this you might want to have a look at the python documentation.

v23.0.1

Compare Source

Fixes

Fixed a bug where long header threw an exception

New

StringUtils.repeat(text, times);

v23.0.0: Minor bugs with InlineApprovals + changes to StringUtils.split

Compare Source

This is mainly fixes to InlineApprovals. But it does contain breaking changes for StringUtils.split().

Breaking changes

StringUtils.split(String, String) no longer trims by default. To maintain previous behavior, call StringUtils.split(String, String, true).
StringUtils.split() now takes a regex as the pattern instead of a simple string.

v22.4.0: ParseInputs

Compare Source

ParseInputs

You can now write tests like

@​Test
void testWithTypesTransformersAndBoth()
{
  var expected = """
      1 -> 1
      9 -> 1001
      """;
  ParseInput.from(expected)
    .withTypes(Integer.class)
    .verifyAll(Integer::toBinaryString);
}

Minor enhancements

  • Queryable.of(List) - this is an alias of Queryable.as for consistency with List.of
  • Approvals.verifyAll(List, Formatter) - already had this for arrays but not lists

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Copy link

github-actions bot commented Apr 1, 2024

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 5 0 0.04s
✅ BASH bash-exec 4 0 0.03s
✅ BASH shellcheck 4 0 0.03s
✅ BASH shfmt 4 0 0.02s
✅ DOCKERFILE hadolint 1 0 0.1s
✅ GROOVY npm-groovy-lint 2 0 13.84s
✅ JAVA checkstyle 38 0 16.07s
✅ JSON eslint-plugin-jsonc 13 0 2.31s
✅ JSON jsonlint 13 0 0.47s
✅ JSON npm-package-json-lint yes no 0.7s
✅ JSON prettier 13 0 0.95s
✅ JSON v8r 13 0 23.36s
✅ MARKDOWN markdownlint 2 0 0.49s
✅ REPOSITORY checkov yes no 15.92s
✅ REPOSITORY gitleaks yes no 0.27s
✅ REPOSITORY git_diff yes no 0.03s
✅ REPOSITORY grype yes no 13.47s
✅ REPOSITORY kics yes no 18.21s
✅ REPOSITORY secretlint yes no 1.2s
✅ REPOSITORY syft yes no 1.57s
✅ REPOSITORY trivy yes no 7.08s
✅ REPOSITORY trivy-sbom yes no 2.79s
✅ REPOSITORY trufflehog yes no 13.01s
✅ XML xmllint 11 0 0.01s
✅ YAML prettier 14 0 0.77s
✅ YAML v8r 14 0 16.4s
✅ YAML yamllint 14 0 0.46s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

MegaLinter is graciously provided by OX Security

@renovate renovate bot force-pushed the renovate/com.approvaltests-approvaltests-23.x branch from ca2126b to 4ba35d0 Compare April 15, 2024 20:08
Copy link

Target ghcr.io/miracum/obds-to-fhir:pr-37 (debian 11.8)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
libc6 CVE-2023-4806 MEDIUM 2.31-13+deb11u7
libc6 CVE-2023-4813 MEDIUM 2.31-13+deb11u7
libc6 CVE-2010-4756 LOW 2.31-13+deb11u7
libc6 CVE-2018-20796 LOW 2.31-13+deb11u7
libc6 CVE-2019-1010022 LOW 2.31-13+deb11u7
libc6 CVE-2019-1010023 LOW 2.31-13+deb11u7
libc6 CVE-2019-1010024 LOW 2.31-13+deb11u7
libc6 CVE-2019-1010025 LOW 2.31-13+deb11u7
libc6 CVE-2019-9192 LOW 2.31-13+deb11u7
libexpat1 CVE-2023-52425 HIGH 2.2.10-2+deb11u5
libexpat1 CVE-2013-0340 LOW 2.2.10-2+deb11u5
libexpat1 CVE-2023-52426 LOW 2.2.10-2+deb11u5
libexpat1 CVE-2024-28757 LOW 2.2.10-2+deb11u5
libfreetype6 CVE-2022-31782 LOW 2.10.4+dfsg-1+deb11u1
libgcc-s1 CVE-2023-4039 MEDIUM 10.2.1-6
libglib2.0-0 CVE-2023-29499 HIGH 2.66.8-1 2.66.8-1+deb11u1
libglib2.0-0 CVE-2023-32611 MEDIUM 2.66.8-1 2.66.8-1+deb11u1
libglib2.0-0 CVE-2023-32665 MEDIUM 2.66.8-1 2.66.8-1+deb11u1
libglib2.0-0 CVE-2012-0039 LOW 2.66.8-1
libharfbuzz0b CVE-2023-25193 HIGH 2.7.4-1
libharfbuzz0b CVE-2022-33068 MEDIUM 2.7.4-1
libjpeg62-turbo CVE-2021-46822 MEDIUM 1:2.0.6-4
libpcre3 CVE-2017-11164 LOW 2:8.39-13
libpcre3 CVE-2017-16231 LOW 2:8.39-13
libpcre3 CVE-2017-7245 LOW 2:8.39-13
libpcre3 CVE-2017-7246 LOW 2:8.39-13
libpcre3 CVE-2019-20838 LOW 2:8.39-13
libpng16-16 CVE-2019-6129 LOW 1.6.37-3
libpng16-16 CVE-2021-4214 LOW 1.6.37-3
libstdc++6 CVE-2023-4039 MEDIUM 10.2.1-6
libuuid1 CVE-2024-28085 HIGH 2.36.1-8+deb11u1 2.36.1-8+deb11u2
libuuid1 CVE-2022-0563 LOW 2.36.1-8+deb11u1
zlib1g CVE-2023-45853 CRITICAL 1:1.2.11.dfsg-2+deb11u2

No Misconfigurations found

Target Java

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
org.apache.tomcat.embed:tomcat-embed-core CVE-2024-24549 MEDIUM 10.1.18 8.5.99, 9.0.86, 10.1.19, 11.0.0-M17
org.apache.tomcat.embed:tomcat-embed-websocket CVE-2024-23672 MEDIUM 10.1.18 11.0.0-M17, 10.1.19, 9.0.86, 8.5.99
org.springframework:spring-web CVE-2024-22243 HIGH 6.1.3 6.1.4, 6.0.17, 5.3.32
org.springframework:spring-web CVE-2024-22259 HIGH 6.1.3 6.1.5, 6.0.18, 5.3.33

No Misconfigurations found

@renovate renovate bot changed the title fix(deps): update dependency com.approvaltests:approvaltests to v23 fix(deps): update dependency com.approvaltests:approvaltests to v23 - autoclosed May 6, 2024
@renovate renovate bot closed this May 6, 2024
@renovate renovate bot deleted the renovate/com.approvaltests-approvaltests-23.x branch May 6, 2024 19:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants