Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update gcr.io/distroless/java21-debian12:nonroot docker digest to 68e1197 #135

Merged
merged 1 commit into from
Mar 25, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Mar 11, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change
gcr.io/distroless/java21-debian12 final digest 712c383 -> 68e1197

Configuration

πŸ“… Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

β™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

πŸ”• Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Copy link

github-actions bot commented Mar 11, 2024

πŸ¦™ MegaLinter status: βœ… SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
βœ… ACTION actionlint 4 0 0.04s
βœ… DOCKERFILE hadolint 2 0 0.11s
βœ… EDITORCONFIG editorconfig-checker 66 0 0.27s
βœ… GROOVY npm-groovy-lint 2 0 11.88s
βœ… JAVA checkstyle 18 0 9.09s
βœ… JSON eslint-plugin-jsonc 5 0 2.85s
βœ… JSON jsonlint 5 0 0.27s
βœ… JSON prettier 5 0 2.1s
βœ… JSON v8r 5 0 3.75s
βœ… MARKDOWN markdownlint 2 0 0.83s
βœ… PYTHON bandit 1 0 0.95s
βœ… PYTHON black 1 0 0.6s
βœ… PYTHON flake8 1 0 0.42s
βœ… PYTHON isort 1 0 0.27s
βœ… PYTHON mypy 1 0 7.38s
βœ… PYTHON ruff 1 0 0.03s
βœ… REPOSITORY checkov yes no 16.74s
βœ… REPOSITORY gitleaks yes no 0.79s
βœ… REPOSITORY git_diff yes no 0.02s
βœ… REPOSITORY grype yes no 13.48s
βœ… REPOSITORY kics yes no 6.93s
βœ… REPOSITORY secretlint yes no 1.18s
βœ… REPOSITORY syft yes no 1.82s
βœ… REPOSITORY trivy yes no 9.14s
βœ… REPOSITORY trivy-sbom yes no 4.58s
βœ… REPOSITORY trufflehog yes no 10.04s
βœ… SQL sql-lint 1 0 0.32s
βœ… XML xmllint 1 0 0.01s
βœ… YAML prettier 17 0 0.89s
βœ… YAML yamllint 17 0 0.46s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

@renovate renovate bot force-pushed the renovate/gcr.io-distroless-java21-debian12-nonroot branch from ad016de to d073867 Compare March 25, 2024 15:24
@renovate renovate bot force-pushed the renovate/gcr.io-distroless-java21-debian12-nonroot branch from d073867 to 8e8eba8 Compare March 25, 2024 15:24
Copy link

Target ghcr.io/miracum/fhir-gateway:pr-135 (debian 12.5)

Vulnerabilities (17)

Package ID Severity Installed Version Fixed Version
libc6 CVE-2010-4756 LOW 2.36-9+deb12u4
libc6 CVE-2018-20796 LOW 2.36-9+deb12u4
libc6 CVE-2019-1010022 LOW 2.36-9+deb12u4
libc6 CVE-2019-1010023 LOW 2.36-9+deb12u4
libc6 CVE-2019-1010024 LOW 2.36-9+deb12u4
libc6 CVE-2019-1010025 LOW 2.36-9+deb12u4
libc6 CVE-2019-9192 LOW 2.36-9+deb12u4
libexpat1 CVE-2023-52425 HIGH 2.5.0-1
libexpat1 CVE-2024-28757 HIGH 2.5.0-1
libexpat1 CVE-2023-52426 MEDIUM 2.5.0-1
libgcc-s1 CVE-2023-4039 MEDIUM 12.2.0-14
libgcc-s1 CVE-2022-27943 LOW 12.2.0-14
libpng16-16 CVE-2021-4214 LOW 1.6.39-2
libstdc++6 CVE-2023-4039 MEDIUM 12.2.0-14
libstdc++6 CVE-2022-27943 LOW 12.2.0-14
libuuid1 CVE-2022-0563 LOW 2.38.1-5+b1
zlib1g CVE-2023-45853 CRITICAL 1:1.2.13.dfsg-1

No Misconfigurations found

Target Java

Vulnerabilities (1)

Package ID Severity Installed Version Fixed Version
org.springframework:spring-web CVE-2024-22259 HIGH 6.1.4 6.1.5, 6.0.18, 5.3.33

No Misconfigurations found

@chgl chgl merged commit 3f2f231 into master Mar 25, 2024
13 checks passed
@chgl chgl deleted the renovate/gcr.io-distroless-java21-debian12-nonroot branch March 25, 2024 15:35
miracum-bot pushed a commit that referenced this pull request Apr 1, 2024
## [3.12.12](v3.12.11...v3.12.12) (2024-04-01)

### Miscellaneous Chores

* **deps:** update all non-major dependencies ([#137](#137)) ([a5da826](a5da826))
* **deps:** update all non-major dependencies ([#140](#140)) ([192cc47](192cc47))
* **deps:** update docker.io/bitnami/kafka:3.7.0 docker digest to c1e54c8 ([#138](#138)) ([dc35d0a](dc35d0a))
* **deps:** update docker.io/library/gradle:8.6.0-jdk21 docker digest to a337805 ([#134](#134)) ([fc461ce](fc461ce))
* **deps:** update docker.io/library/postgres:16.2 docker digest to 6b841c8 ([#139](#139)) ([c20f312](c20f312))
* **deps:** update gcr.io/distroless/java21-debian12:nonroot docker digest to 68e1197 ([#135](#135)) ([3f2f231](3f2f231))
* **deps:** update ghcr.io/miracum/fhir-pseudonymizer docker tag to v2.21.7 ([#132](#132)) ([9758677](9758677))
* **deps:** update github-actions ([#136](#136)) ([40fa5fd](40fa5fd))
* **deps:** update miracum/.github action to v1.6.3 ([#141](#141)) ([9abfead](9abfead))
@miracum-bot
Copy link

πŸŽ‰ This PR is included in version 3.12.12 πŸŽ‰

The release is available on GitHub release

Your semantic-release bot πŸ“¦πŸš€

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants