Repository navigation
bugfix(deps): bump annotate-snippets to 0.12.2 - #1136
Conversation
Signed-off-by: William Woodruff <william@yossarian.net>
Signed-off-by: William Woodruff <william@yossarian.net>
Kusari Analysis Results:
Combined security analysis confirms this is a safe dependency update. The annotate-snippets package update (0.11.5 to 0.12.2) demonstrates excellent maintenance practices with no security vulnerabilities. Code analysis detected 2 'secrets' that were confirmed as false positives - they are GitHub URLs in test data comments used for proper attribution, not actual sensitive credentials. Zero actual security issues were found across dependencies, code, or workflows. The update maintains strong security posture with permissive licensing and current version alignment. Expand to see all dependency changes, security advisories, scorecard checks, etc.Package Dependency AnalysisPackage: annotate-snippets@0.12.2Dependencies:Direct: Package: zizmor@1.12.1Dependencies:Direct: Dependency Graphgraph TD
Dependency Changes Introduced
Scorecard ChecksFiles where issues may be foundDependency Files:
Found this helpful? Give it a 👍 or 👎 reaction! |
|
| Branch | ww/bump-annotate-snippets |
| Testbed | ubuntu-latest |
Click to view all benchmark results
| Benchmark | Latency | Benchmark Result milliseconds (ms) (Result Δ%) | Lower Boundary milliseconds (ms) (Limit %) | Upper Boundary milliseconds (ms) (Limit %) |
|---|---|---|---|---|
| zizmor::grafana-9f212d11d0ac | 📈 view plot 🚷 view threshold | 375.61 ms(-0.12%)Baseline: 376.05 ms | 338.44 ms (90.11%) | 413.65 ms (90.80%) |
Signed-off-by: William Woodruff <william@yossarian.net>
|
Kusari PR Analysis rerun based on - 778fc69 performed at: 2025-09-04T02:08:25Z - link to updated analysis |
|
Kusari PR Analysis rerun based on - e7b444d performed at: 2025-09-04T02:25:38Z - link to updated analysis |
Signed-off-by: William Woodruff <william@yossarian.net>
|
Kusari PR Analysis rerun based on - e45cb94 performed at: 2025-09-04T02:36:15Z - link to updated analysis |
Signed-off-by: William Woodruff <william@yossarian.net>
|
Kusari PR Analysis rerun based on - 7a1510a performed at: 2025-09-04T02:37:40Z - link to updated analysis |
Signed-off-by: William Woodruff william@yossarian.net
Fixes #1065.