Skip to content

bugfix(deps): bump annotate-snippets to 0.12.2 - #1136

Merged
woodruffw merged 7 commits into
mainfrom
ww/bump-annotate-snippets
Sep 4, 2025
Merged

woodruffw merged 7 commits into
mainfrom
ww/bump-annotate-snippets

Conversation

@woodruffw

@woodruffw woodruffw commented Sep 4, 2025 •

Copy link
Copy Markdown
Member

Signed-off-by: William Woodruff william@yossarian.net

Fixes #1065.

Signed-off-by: William Woodruff <william@yossarian.net>
Signed-off-by: William Woodruff <william@yossarian.net>
@woodruffw woodruffw added the dependencies Pull requests that update a dependency file label Sep 4, 2025
@woodruffw woodruffw added the refactor Refactoring tasks label Sep 4, 2025
@kusari-inspector

kusari-inspector Bot commented Sep 4, 2025 •

Copy link
Copy Markdown

Kusari Inspector

Kusari Analysis Results:

Proceed with these changes

✅ No Flagged Issues Detected
All values appear to be within acceptable risk parameters.

Combined security analysis confirms this is a safe dependency update. The annotate-snippets package update (0.11.5 to 0.12.2) demonstrates excellent maintenance practices with no security vulnerabilities. Code analysis detected 2 'secrets' that were confirmed as false positives - they are GitHub URLs in test data comments used for proper attribution, not actual sensitive credentials. Zero actual security issues were found across dependencies, code, or workflows. The update maintains strong security posture with permissive licensing and current version alignment.


Expand to see all dependency changes, security advisories, scorecard checks, etc.

Package Dependency Analysis

Package: annotate-snippets@0.12.2

Dependencies:

Direct:
- anstyle@1.0.10
- unicode-width@0.2.0

Package: zizmor@1.12.1

Dependencies:

Direct:
- annotate-snippets@0.12.2

Dependency Graph

graph TD
Loading

Dependency Changes Introduced

Status Package Change Version Latest Version Advisories License
✅ Safe annotate-snippets updated 0.11.5 → 0.12.2 0.12.2 None Apache-2.0 OR MIT (permissive)

Scorecard Checks

Files where issues may be found

Dependency Files:

  • Cargo.lock

@kusari-inspector rerun - Trigger a re-analysis of this PR
@kusari-inspector feedback [your message] - Send feedback to our AI and team
See Kusari's documentation for setup and configuration.
Commit: 7a1510a, performed at: 2025-09-04T02:35:40Z

Found this helpful? Give it a 👍 or 👎 reaction!

Signed-off-by: William Woodruff <william@yossarian.net>
@github-actions

github-actions Bot commented Sep 4, 2025 •

Copy link
Copy Markdown
Contributor

🐰 Bencher Report

Branchww/bump-annotate-snippets
Testbedubuntu-latest
Click to view all benchmark results
BenchmarkLatencyBenchmark Result
milliseconds (ms)
(Result Δ%)
Lower Boundary
milliseconds (ms)
(Limit %)
Upper Boundary
milliseconds (ms)
(Limit %)
zizmor::grafana-9f212d11d0ac📈 view plot
🚷 view threshold
375.61 ms
(-0.12%)Baseline: 376.05 ms
338.44 ms
(90.11%)
413.65 ms
(90.80%)
🐰 View full continuous benchmarking report in Bencher

Signed-off-by: William Woodruff <william@yossarian.net>
@kusari-inspector

Copy link
Copy Markdown

Kusari PR Analysis rerun based on - 778fc69 performed at: 2025-09-04T02:08:25Z - link to updated analysis

Signed-off-by: William Woodruff <william@yossarian.net>
@kusari-inspector

Copy link
Copy Markdown

Kusari PR Analysis rerun based on - e7b444d performed at: 2025-09-04T02:25:38Z - link to updated analysis

Signed-off-by: William Woodruff <william@yossarian.net>
@woodruffw woodruffw added the bugfix Fixes a known bug label Sep 4, 2025
@woodruffw woodruffw changed the title deps: bump annotate-snippets to 0.12.2 bugfix(deps): bump annotate-snippets to 0.12.2 Sep 4, 2025
@kusari-inspector

Copy link
Copy Markdown

Kusari PR Analysis rerun based on - e45cb94 performed at: 2025-09-04T02:36:15Z - link to updated analysis

Signed-off-by: William Woodruff <william@yossarian.net>
@woodruffw woodruffw mentioned this pull request Sep 4, 2025
2 tasks done
@kusari-inspector

Copy link
Copy Markdown

Kusari PR Analysis rerun based on - 7a1510a performed at: 2025-09-04T02:37:40Z - link to updated analysis

@woodruffw woodruffw self-assigned this Sep 4, 2025
@woodruffw
woodruffw marked this pull request as ready for review September 4, 2025 02:41
@woodruffw
woodruffw merged commit 8b5a358 into main Sep 4, 2025
9 checks passed
@woodruffw
woodruffw deleted the ww/bump-annotate-snippets branch September 4, 2025 02:41

This branch was previously deployed

1 inactive deployment
bencher — 7a1510a4 Deployed Sep 4, 2025 by woodruffw via Continuous Benchmarking PRs with Bencher #167
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bugfix Fixes a known bug dependencies Pull requests that update a dependency file refactor Refactoring tasks

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[BUG]: Crash report

1 participant