Update only security vulnerability / OSV #23243
Unanswered
HudsonLSchumaker
asked this question in
Request Help
Replies: 1 comment 10 replies
|
Hi there, Get your issue fixed faster by creating a minimal reproduction. This means a repository dedicated to reproducing this issue with the minimal dependencies and config possible. Before we start working on your issue we need to know exactly what's causing the current behavior. A minimal reproduction helps us with this. To get started, please read our guide on creating a minimal reproduction. We may close the issue if you, or someone else, haven't created a minimal reproduction within two weeks. If you need more time, or are stuck, please ask for help or more time in a comment. Good luck, The Renovate team |
10 replies
|
added the log of the execution too |
|
updated the title |
|
i think so 🤷♂️ |
|
Hi all, any news about it ? |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
How are you running Renovate?
Self-hosted
If you're self-hosting Renovate, tell us what version of Renovate you run.
36.3.0
If you're self-hosting Renovate, select which platform you are using.
Bitbucket Cloud (bitbucket.org)
Was this something which used to work for you, and then stopped?
I never saw this working
Wanted end result.
Hello,
using this configuration on a test repo
{ "$schema": "https://docs.renovatebot.com/renovate-schema.json", "extends": [ "config:base"], "packageRules": [ { "enabled": false, "matchManagers": ["npm"], "matchPackagePatterns": ["*"] } ], "vulnerabilityAlerts": { "enabled": true }, "osvVulnerabilityAlerts": true }to only create PRs for vulnerabilities and this is the package.json file:
{ "name": "XXXXXX", "version": "2.0.3", "description": "XXXXXXX", "main": "index.js", "scripts": { "test": "echo \"Error: no test specified\" && exit 1", "bump": "npm version --no-git-tag-version" }, "author": "X", "license": "UNLICENSED", "dependencies": { "newrelic": "^10.2.1" } }this new relic dependency has the GHSA-c2qf-rxjj-qqgw vulnerability
I don't know if is there something wrong in the renovate.json5 file above, the renovate is creating a PR just for update the node version from 14 to 20.
thanks in advance
What you tried so far.
change the config flags,
run more than one time
Relevant debug logs
Logs
All reactions