Skip to content

Bump safety from 2.0.0 to 2.1.1#28

Merged
Czarified merged 1 commit intomasterfrom
dependabot/pip/safety-2.1.1
Jul 19, 2022
Merged

Bump safety from 2.0.0 to 2.1.1#28
Czarified merged 1 commit intomasterfrom
dependabot/pip/safety-2.1.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 19, 2022

Bumps safety from 2.0.0 to 2.1.1.

Changelog

Sourced from safety's changelog.

[2.1.1] - 2022-07-18

  • Fix crash when running on systems without git present (Thanks @​andyjones)

[2.1.0] - 2022-07-14

Summary:

  • Improved error messages & fixed issues with proxies
  • Fixed license command
  • Added the ability for scan outputs to be sent to pyup.io. This will only take effect if using an API key, the feature is enabled on your profile, and the --disable-audit-and-monitor is not set
  • Added the ability to have a Safety policy file set centrally on your pyup.io profile. This remote policy file will be used if there's no local policy file present, otherwise a warning will be issued.

Updated outputs:

  • Text & screen output: If a scan has been logged, this is now mentioned in the output.
  • JSON output: The JSON output now includes git metadata about the folder Safety was run in. It also includes a version field, and telemetry information that would be sent separately. There are no breaking changes in the output.

New inputs:

  • New command line flags
    • The --disable-audit-and-monitor flag can be set to disable sending a scan's result to pyup.io
    • The --project flag can be set to manually specify a project to associate these scans with. By default, it'll autodetect based on the current folder and git.
Commits
  • f4ed48f Release 2.1.1
  • 23c66f7 Merge pull request #398 from pyupio/develop
  • 00d4633 Merge pull request #397 from andyjones/develop
  • 2f0bbd5 git may not be installed
  • 2ef483f Release 2.1.0
  • c9b75ea Merge pull request #395 from pyupio/develop
  • fac16b6 Merge pull request #394 from cb22/develop
  • 9a83d60 --no-audit-and-monitor -> --disable-audit-and-monitor
  • 3282b48 No need to output raw value when validating the policy file
  • 2bb58b2 Safety POST for pyup.io
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [safety](https://github.com/pyupio/safety) from 2.0.0 to 2.1.1.
- [Release notes](https://github.com/pyupio/safety/releases)
- [Changelog](https://github.com/pyupio/safety/blob/2.1.1/CHANGELOG.md)
- [Commits](pyupio/safety@2.0.0...2.1.1)

---
updated-dependencies:
- dependency-name: safety
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 19, 2022
@Czarified Czarified merged commit 85e6eb2 into master Jul 19, 2022
@dependabot dependabot bot deleted the dependabot/pip/safety-2.1.1 branch July 19, 2022 12:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant