Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 4, 2021

Bumps audit-ci from 3.2.0 to 4.0.0.

Release notes

Sourced from audit-ci's releases.

Support NPM 7

#175 - Add NPM 7 support

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

Bumps [audit-ci](https://github.com/IBM/audit-ci) from 3.2.0 to 4.0.0.
- [Release notes](https://github.com/IBM/audit-ci/releases)
- [Commits](IBM/audit-ci@v3.2.0...v4.0.0)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner May 4, 2021 11:03
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript labels May 4, 2021
@oxy
Copy link

oxy commented May 4, 2021

@jsjoeio you've been working on adding Trivy (and I asked this in the other PR) - does Trivy only supplement audit-ci or completely replace it - and do we need to keep it around?

@codecov
Copy link

codecov bot commented May 4, 2021

Codecov Report

Merging #3283 (f681c6d) into main (9fe459a) will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##             main    #3283   +/-   ##
=======================================
  Coverage   46.90%   46.90%           
=======================================
  Files          23       23           
  Lines        1196     1196           
  Branches      237      237           
=======================================
  Hits          561      561           
  Misses        451      451           
  Partials      184      184           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 9fe459a...f681c6d. Read the comment docs.

@oxy oxy enabled auto-merge (squash) May 4, 2021 15:04
@oxy oxy merged commit f8d8ad3 into main May 4, 2021
@oxy oxy deleted the dependabot/npm_and_yarn/audit-ci-4.0.0 branch May 4, 2021 15:04
@jsjoeio
Copy link
Contributor

jsjoeio commented May 4, 2021

does Trivy only supplement audit-ci or completely replace it - and do we need to keep it around?

When @jawnsy and I were talking, we said Trivy supplements audit-ci so we should keep it.

oxy pushed a commit that referenced this pull request May 5, 2021
Bumps [audit-ci](https://github.com/IBM/audit-ci) from 3.2.0 to 4.0.0.
- [Release notes](https://github.com/IBM/audit-ci/releases)
- [Commits](IBM/audit-ci@v3.2.0...v4.0.0)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants