-
Notifications
You must be signed in to change notification settings - Fork 541
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Create codeql-analysis.yml #3784
Conversation
Bumps [node-uuid](https://github.com/broofa/node-uuid) from 1.4.0 to 1.4.8. - [Release notes](https://github.com/broofa/node-uuid/releases) - [Changelog](https://github.com/broofa/node-uuid/blob/master/HISTORY.md) - [Commits](https://github.com/broofa/node-uuid/commits) --- updated-dependencies: - dependency-name: node-uuid dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Snyk has created this PR to upgrade typescript from 4.3.2 to 4.7.4. See this package in npm: https://www.npmjs.com/package/typescript See this project in Snyk: https://app.snyk.io/org/jimimaku/project/00472e4c-118b-4f33-9f7c-c429ff5fdb2d?utm_source=github&utm_medium=referral&page=upgrade-pr
Snyk has created this PR to upgrade @octokit/rest from 18.5.4 to 18.12.0. See this package in npm: https://www.npmjs.com/package/@octokit/rest See this project in Snyk: https://app.snyk.io/org/jimimaku/project/00472e4c-118b-4f33-9f7c-c429ff5fdb2d?utm_source=github&utm_medium=referral&page=upgrade-pr
|
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN11-DPKG-2847942 - https://snyk.io/vuln/SNYK-DEBIAN11-GZIP-2444256 - https://snyk.io/vuln/SNYK-DEBIAN11-OPENSSL-2426309 - https://snyk.io/vuln/SNYK-DEBIAN11-OPENSSL-2807596 - https://snyk.io/vuln/SNYK-DEBIAN11-OPENSSL-2933518
[pull] master from snyk:master
Bumps [actionpack](https://github.com/rails/rails) from 4.2.5 to 4.2.11.3. - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.0.4/actionpack/CHANGELOG.md) - [Commits](rails/rails@v4.2.5...v4.2.11.3) --- updated-dependencies: - dependency-name: actionpack dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [loader-utils](https://github.com/webpack/loader-utils) from 1.4.0 to 1.4.2. - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v1.4.2/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.4.0...v1.4.2) --- updated-dependencies: - dependency-name: loader-utils dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…ptance/workspaces/large-mono-repo/npm-project-3/node-uuid-1.4.8 chore(deps): bump node-uuid from 1.4.0 to 1.4.8 in /test/acceptance/workspaces/large-mono-repo/npm-project-3
Bumps [node-uuid](https://github.com/broofa/node-uuid) from 1.4.0 to 1.4.8. - [Release notes](https://github.com/broofa/node-uuid/releases) - [Changelog](https://github.com/broofa/node-uuid/blob/master/HISTORY.md) - [Commits](https://github.com/broofa/node-uuid/commits) --- updated-dependencies: - dependency-name: node-uuid dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…tils-1.4.2 chore(deps): bump loader-utils from 1.4.0 to 1.4.2
…ce/workspaces/mono-repo-project-manifests-only/actionpack-4.2.11.3 chore(deps): bump actionpack from 4.2.5 to 4.2.11.3 in /test/acceptance/workspaces/mono-repo-project-manifests-only
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.8.5 to 1.13.9. - [Release notes](https://github.com/sparklemotion/nokogiri/releases) - [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md) - [Commits](sparklemotion/nokogiri@v1.8.5...v1.13.9) --- updated-dependencies: - dependency-name: nokogiri dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actionpack](https://github.com/rails/rails) from 4.2.5 to 7.0.4. - [Release notes](https://github.com/rails/rails/releases) - [Changelog](https://github.com/rails/rails/blob/v7.0.4/actionpack/CHANGELOG.md) - [Commits](rails/rails@v4.2.5...v7.0.4) --- updated-dependencies: - dependency-name: actionpack dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…ce/workspaces/mono-repo-project/actionpack-7.0.4 chore(deps): bump actionpack from 4.2.5 to 7.0.4 in /test/acceptance/workspaces/mono-repo-project
…ce/workspaces/ruby-app-thresholds/nokogiri-1.13.9 chore(deps): bump nokogiri from 1.8.5 to 1.13.9 in /test/acceptance/workspaces/ruby-app-thresholds
|
|
Bumps [yiisoft/yii](https://github.com/yiisoft/yii) from 1.1.14 to 1.1.27. - [Release notes](https://github.com/yiisoft/yii/releases) - [Changelog](https://github.com/yiisoft/yii/blob/master/CHANGELOG) - [Commits](yiisoft/yii@1.1.14...1.1.27) --- updated-dependencies: - dependency-name: yiisoft/yii dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…nce/workspaces/composer-app/yiisoft/yii-1.1.27 chore(deps): bump yiisoft/yii from 1.1.14 to 1.1.27 in /test/acceptance/workspaces/composer-app
…ptance/workspaces/large-mono-repo/npm-project-4/node-uuid-1.4.8 chore(deps): bump node-uuid from 1.4.0 to 1.4.8 in /test/acceptance/workspaces/large-mono-repo/npm-project-4
Bumps [twig/twig](https://github.com/twigphp/Twig) from 1.35.0 to 1.43.1. - [Release notes](https://github.com/twigphp/Twig/releases) - [Changelog](https://github.com/twigphp/Twig/blob/v1.43.1/CHANGELOG) - [Commits](twigphp/Twig@v1.35.0...v1.43.1) --- updated-dependencies: - dependency-name: twig/twig dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…bc005858da80 [Snyk] Upgrade typescript from 4.3.2 to 4.7.4
Bumps [node-uuid](https://github.com/broofa/node-uuid) from 1.4.0 to 1.4.8. - [Release notes](https://github.com/broofa/node-uuid/releases) - [Changelog](https://github.com/broofa/node-uuid/blob/master/HISTORY.md) - [Commits](https://github.com/broofa/node-uuid/commits) --- updated-dependencies: - dependency-name: node-uuid dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…ptance/workspaces/large-mono-repo/npm-project-5/node-uuid-1.4.8 chore(deps): bump node-uuid from 1.4.0 to 1.4.8 in /test/acceptance/workspaces/large-mono-repo/npm-project-5
Bumps [qs](https://github.com/ljharb/qs) from 0.0.6 to 6.0.4. - [Release notes](https://github.com/ljharb/qs/releases) - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](https://github.com/ljharb/qs/commits/v6.0.4) --- updated-dependencies: - dependency-name: qs dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…ptance/workspaces/large-mono-repo/npm-project-3/qs-6.0.4 chore(deps): bump qs from 0.0.6 to 6.0.4 in /test/acceptance/workspaces/large-mono-repo/npm-project-3
Bumps [node-uuid](https://github.com/broofa/node-uuid) from 1.4.0 to 1.4.8. - [Release notes](https://github.com/broofa/node-uuid/releases) - [Changelog](https://github.com/broofa/node-uuid/blob/master/HISTORY.md) - [Commits](https://github.com/broofa/node-uuid/commits) --- updated-dependencies: - dependency-name: node-uuid dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
…17d45c72df9a [Snyk] Upgrade @octokit/rest from 18.5.4 to 18.12.0
…eptance/workspaces/large-mono-repo/npm-project-19/node-uuid-1.4.8 chore(deps): bump node-uuid from 1.4.0 to 1.4.8 in /test/acceptance/workspaces/large-mono-repo/npm-project-19
…nce/workspaces/composer-app/twig/twig-1.43.1 chore(deps): bump twig/twig from 1.35.0 to 1.43.1 in /test/acceptance/workspaces/composer-app
|
🧹 Closing as stale. No activity in more than 1 year. |
What does this PR do?
Where should the reviewer start?
How should this be manually tested?
Any background context you want to provide?
What are the relevant tickets?
Screenshots
Additional questions