Skip to content

Commit

Permalink
refactor(deps): Security upgrade @cheqd/sdk from 3.7.4 to 3.7.8 [Snyk] (
Browse files Browse the repository at this point in the history
#267)

* fix: package.json & package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AXIOS-6032459
- https://snyk.io/vuln/SNYK-JS-AXIOS-6124857
- https://snyk.io/vuln/SNYK-JS-AXIOS-6144788

* workflow updates

* npm run format

* npm run format

* Update .prettierignore

* Update deps

---------

Co-authored-by: snyk-bot <snyk-bot@snyk.io>
  • Loading branch information
ankurdotb and snyk-bot committed Feb 20, 2024
1 parent a9011b8 commit d4b2559
Show file tree
Hide file tree
Showing 9 changed files with 10,164 additions and 10,152 deletions.
58 changes: 31 additions & 27 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,54 +4,58 @@

version: 2
updates:

# Maintain dependencies for GitHub Actions
- package-ecosystem: "github-actions"
target-branch: "develop"
directory: "/"
- package-ecosystem: 'github-actions'
target-branch: 'develop'
directory: '/'
schedule:
interval: "weekly"
interval: 'weekly'
ignore:
- dependency-name: "*"
update-types:
- version-update:semver-patch

# Maintain dependencies for NPM
- package-ecosystem: "npm"
target-branch: "develop"
directory: "/"
- package-ecosystem: 'npm'
target-branch: 'develop'
directory: '/'
schedule:
interval: "weekly"
interval: 'weekly'
ignore:
- dependency-name: "*"
update-types:
- version-update:semver-patch

# Maintain dependencies for Docker
- package-ecosystem: "docker"
target-branch: "develop"
directory: "/"
- package-ecosystem: 'docker'
target-branch: 'develop'
directory: '/'
schedule:
interval: "weekly"
interval: 'weekly'

# Maintain dependencies for Golang
- package-ecosystem: "gomod"
target-branch: "develop"
directory: "/"
- package-ecosystem: 'gomod'
target-branch: 'develop'
directory: '/'
schedule:
interval: "weekly"
interval: 'weekly'

# Maintain dependencies for Terraform
- package-ecosystem: "terraform"
directory: "/"
- package-ecosystem: 'terraform'
directory: '/'
schedule:
interval: "weekly"
interval: 'weekly'

# Maintain dependencies for Python
- package-ecosystem: "pip"
directory: "/"
- package-ecosystem: 'pip'
directory: '/'
schedule:
interval: "weekly"
interval: 'weekly'

# Maintain dependencies for Kotlin
- package-ecosystem: "gradle"
target-branch: "develop"
directory: "/"
- package-ecosystem: 'gradle'
target-branch: 'develop'
directory: '/'
schedule:
interval: "weekly"
interval: 'weekly'

2 changes: 1 addition & 1 deletion .github/workflows/build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ jobs:

- uses: actions/setup-node@v4
with:
node-version: 18
node-version: 20
cache: 'npm'

- name: "Clean install dependencies"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@ jobs:

- uses: actions/setup-node@v4
with:
node-version: 18
node-version: 20
cache: 'npm'

- name: "Obtain Github App token"
Expand Down
12 changes: 10 additions & 2 deletions .prettierignore
Original file line number Diff line number Diff line change
@@ -1,11 +1,19 @@
# Ignore folders
.DS_Store
.github
node_modules
/dist
dist
playwright
playwright-report

# Ignore files for PNPM, NPM and YARN
# Ignore files
pnpm-lock.yaml
package-lock.json
yarn.lock
*.md
*.yaml
*.yml
**/tsconfig.json

# Ignore generated files
src/static/swagger.json
2 changes: 1 addition & 1 deletion .releaserc.json
Original file line number Diff line number Diff line change
Expand Up @@ -56,4 +56,4 @@
],
"@semantic-release/github"
]
}
}

0 comments on commit d4b2559

Please sign in to comment.