Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump slug and sonarqube-scanner #68

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 19, 2022

Bumps slug and sonarqube-scanner. These dependencies needed to be updated together.
Removes slug
Updates sonarqube-scanner from 0.1.0 to 2.8.1

Release notes

Sourced from sonarqube-scanner's releases.

Update dependencies to remove potential security threats.

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/20?closed=1

Upgrade scanner version to 4.5

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/18?closed=1

Upgrade scanner version, and update name of the scanner

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/17?closed=1

Upgrade deps & scanner version, add customization features

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/16?closed=1

Update version of embedded SonarScanner CLI

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/15?closed=1

Fix regression on project key for scoped modules.

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/14?closed=1

Fix issue with wrong exit code.

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/13?closed=1

Update the SonarScanner to its latest version.

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/12?closed=1

The project key becomes a mandatory setting

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/11?closed=1

Fix dead link to download the Scanner CLI files.

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/10?closed=1

Fix dependency issue (slug)

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/9?closed=1

Various improvements

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/6?closed=1

Add support for download sonar-scanner from a mirror

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/8?closed=1

Fix executable name and add documentation

For more details: https://github.com/bellingard/sonar-scanner-npm/milestone/7?closed=1

Provide CLI to trigger an analysis

With this version, it is now possible to install the scanner globally to run analyses on the command line:

npm install -g sonarqube-scanner
cd my-project/
sonar-scanner

... (truncated)

Commits
  • 6091c7d Prepare release 2.8.1
  • 20a1220 Merge pull request #127 from DarthRevanXX/feature/fixVulnerabilities
  • 7c088fd fix vulnerabilities
  • 2385e62 Prepare release 2.8.0
  • 1ca39af Merge pull request #110 from stefannikolei/patch-1
  • cc32120 Update sonar-scanner-executable.js
  • 204208e Prepare release 2.7.0
  • 5ff300d Replace "SonarQube Scanner" labels by "SonarScanner" #100
  • e2ad2bc Don't need the SonarCloud Travis Add-on
  • e911be3 Scanner provides its own identity #97
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [slug](https://github.com/Trott/slug) and [sonarqube-scanner](https://github.com/bellingard/sonar-scanner-npm). These dependencies needed to be updated together.

Removes `slug`

Updates `sonarqube-scanner` from 0.1.0 to 2.8.1
- [Release notes](https://github.com/bellingard/sonar-scanner-npm/releases)
- [Commits](bellingard/sonar-scanner-npm@0.1.0...2.8.1)

---
updated-dependencies:
- dependency-name: slug
  dependency-type: indirect
- dependency-name: sonarqube-scanner
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 19, 2022
@dependabot dependabot bot changed the base branch from master to develop September 19, 2022 20:50
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 19, 2022

Looks like these dependencies are no longer a dependency, so this is no longer needed.

@dependabot dependabot bot closed this Sep 19, 2022
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/slug-and-sonarqube-scanner--removed branch September 19, 2022 20:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants