chore(deps): update all non-major dependencies #126

renovate · 2023-02-04T16:15:16Z

This PR contains the following updates:

Package	Type	Update	Change
actionpack-page_caching		patch	`'1.2.0'` -> `'1.2.4'`
actions/checkout	action	minor	`v3.1.0` -> `v3.3.0`
actions/upload-artifact	action	patch	`v3.1.0` -> `v3.1.2`
coffee-rails		minor	`'~> 4.1.0'` -> `'~> 4.2.0'`
eslint-plugin-import	devDependencies	minor	`2.26.0` -> `2.27.5`
github/codeql-action	action	minor	`v2.1.27` -> `v2.2.1`
gradle (source)		minor	`7.4.1` -> `7.6`
ossf/scorecard-action	action	minor	`v2.0.6` -> `v2.1.2`
rails		minor	`'>= 5.0.0.beta1', '< 5.1'` -> `'>= 5.0.0.beta1', '< 5.2.9'`
terraform-linters/tflint-ruleset-aws	plugin	minor	`0.13.2` -> `0.21.2`
typescript (source)	devDependencies	patch	`4.9.3` -> `4.9.5`
io.gitlab.arturbosch.detekt	plugin	minor	`1.20.0-RC1` -> `1.22.0`
org.jetbrains.kotlin.jvm	plugin	minor	`1.5.31` -> `1.8.10`

Release Notes

actions/checkout

`v3.3.0`

Compare Source

What's Changed

Implement branch list using callbacks from exec function by @cory-miller in https://github.com/actions/checkout/pull/1045
Add in explicit reference to private checkout options by @vanZeben in https://github.com/actions/checkout/pull/1050
Fix comment typos (that got added in #770) by @lurch in https://github.com/actions/checkout/pull/1057

actions/upload-artifact

`v3.1.2`

Compare Source

Update all @actions/* NPM packages to their latest versions- #374
Update all dev dependencies to their most recent versions - #375

`v3.1.1`

Compare Source

Update actions/core package to latest version to remove set-output deprecation warning #351

import-js/eslint-plugin-import

`v2.27.5`

Compare Source

Fixed

[order]: Fix group ranks order when alphabetizing ([#2674], thanks [@Pearce-Ropion])

`v2.27.4`

Compare Source

Fixed

semver should be a prod dep ([#2668])

`v2.27.3`

Compare Source

Fixed

[no-empty-named-blocks]: rewrite rule to only check import declarations ([#2666])

`v2.27.2`

Compare Source

Fixed

[no-duplicates]: do not unconditionally require typescript ([#2665])

`v2.27.1`

Compare Source

Fixed

array.prototype.flatmap should be a prod dep ([#2664], thanks [@cristobal])

`v2.27.0`

Compare Source

Added

[newline-after-import]: add considerComments option ([#2399], thanks [@pri1311])
[no-cycle]: add allowUnsafeDynamicCyclicDependency option ([#2387], thanks [@GerkinDev])
[no-restricted-paths]: support arrays for from and target options ([#2466], thanks [@AdriAt360])
[no-anonymous-default-export]: add allowNew option ([#2505], thanks [@DamienCassou])
[order]: Add distinctGroup option ([#2395], thanks [@hyperupcall])
[no-extraneous-dependencies]: Add includeInternal option ([#2541], thanks [@bdwain])
[no-extraneous-dependencies]: Add includeTypes option ([#2543], thanks [@bdwain])
[order]: new alphabetize.orderImportKind option to sort imports with same path based on their kind (type, typeof) ([#2544], thanks [@stropho])
[consistent-type-specifier-style]: add rule ([#2473], thanks [@bradzacher])
Add [no-empty-named-blocks] rule ([#2568], thanks [@guilhermelimak])
[prefer-default-export]: add "target" option ([#2602], thanks [@azyzz228])
[no-absolute-path]: add fixer ([#2613], thanks [@adipascu])
[no-duplicates]: support inline type import with inlineTypeImport option ([#2475], thanks [@snewcomer])

Fixed

[order]: move nested imports closer to main import entry ([#2396], thanks [@pri1311])
[no-restricted-paths]: fix an error message ([#2466], thanks [@AdriAt360])
[no-restricted-paths]: use Minimatch.match instead of minimatch to comply with Windows Native paths ([#2466], thanks [@AdriAt360])
[order]: require with member expression could not be fixed if alphabetize.order was used ([#2490], thanks [@msvab])
[order]: leave more space in rankings for consecutive path groups ([#2506], thanks [@Pearce-Ropion])
[no-cycle]: add ExportNamedDeclaration statements to dependencies ([#2511], thanks [@BenoitZugmeyer])
[dynamic-import-chunkname]: prevent false report on a valid webpack magic comment ([#2330], thanks [@mhmadhamster])
[export]: do not error on TS export overloads ([#1590], thanks [@ljharb])
[no-unresolved], [extensions]: ignore type only exports ([#2436], thanks [@Lukas-Kullmann])
ExportMap: add missing param to function ([#2589], thanks [@Fdawgs])
[no-unused-modules]: checkPkgFieldObject filters boolean fields from checks ([#2598], thanks [@mpint])
[no-cycle]: accept Flow typeof imports, just like type ([#2608], thanks [@gnprice])
[no-import-module-exports]: avoid a false positive for import variables ([#2315], thanks [@BarryThePenguin])

Changed

[Tests] [named]: Run all TypeScript test ([#2427], thanks [@ProdigySim])
[readme] note use of typescript in readme import/extensions section ([#2440], thanks [@OutdatedVersion])
[Docs] [order]: use correct default value ([#2392], thanks [@hyperupcall])
[meta] replace git.io link in comments with the original URL ([#2444], thanks [@liby])
[Docs] remove global install in readme ([#2412], thanks [@aladdin-add])
[readme] clarify eslint-import-resolver-typescript usage ([#2503], thanks [@JounQin])
[Refactor] [no-cycle]: Add per-run caching of traversed paths ([#2419], thanks [@nokel81])
[Performance] ExportMap: add caching after parsing for an ambiguous module ([#2531], thanks [@stenin-nikita])
[Docs] [no-useless-path-segments]: fix paths ([#2424], thanks [@s-h-a-d-o-w])
[Tests] [no-cycle]: add passing test cases ([#2438], thanks [@georeith])
[Refactor] [no-extraneous-dependencies] improve performance using cache ([#2374], thanks [@meowtec])
[meta] CONTRIBUTING.md: mention inactive PRs ([#2546], thanks [@stropho])
[readme] make json for setting groups multiline ([#2570], thanks [@bertyhell])
[Tests] [no-restricted-paths]: Tests for import type statements ([#2459], thanks [@golergka])
[Tests] [no-restricted-paths]: fix one failing import type test case, submitted by [@golergka], thanks [@azyzz228]
[Docs] automate docs with eslint-doc-generator ([#2582], thanks [@bmish])
[readme] Increase clarity around typescript configuration ([#2588], thanks [@Nfinished])
[Docs] update eslint-doc-generator to v1.0.0 ([#2605], thanks [@bmish])
[Perf] [no-cycle], [no-internal-modules], [no-restricted-paths]: use anyOf instead of oneOf (thanks [@ljharb], [@remcohaszing])

github/codeql-action

`v2.2.1`

Compare Source

`v2.2.0`

Compare Source

`v2.1.39`

Compare Source

`v2.1.38`

Compare Source

`v2.1.37`

Compare Source

`v2.1.36`

Compare Source

`v2.1.35`

Compare Source

`v2.1.34`

Compare Source

`v2.1.33`

Compare Source

`v2.1.32`

Compare Source

`v2.1.31`

Compare Source

`v2.1.30`

Compare Source

`v2.1.29`

Compare Source

`v2.1.28`

Compare Source

gradle/gradle

`v7.5.1`: 7.5.1

This is a patch release for 7.5. We recommend using 7.5.1 instead of 7.5

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Michael Bailey,
Josh Kasten,
Marcono1234,
mataha,
Lieven Vaneeckhaute,
kiwi-oss,
Stefan Neuhaus,
George Thomas,
Anja Papatola,
Björn Kautler,
David Burström,
Vladimir Sitnikov,
Roland Weisleder,
Konstantin Gribov,
David Op de Beeck,
aSemy,
Rene Groeschke,
Jonathan Leitschuh,
Aurimas Liutikas,
Jamie Tanna,
Xin Wang,
Atsuto Yamashita,
Taeik Lim,
Peter Gafert,
Alex Landau,
Jerry Wiltse,
Tyler Burke,
Matthew Haughton,
Filip Daca,
Simão Gomes Viana,
Vaidotas Valuckas,
Edgars Jasmans,
Tomasz Godzik,
Jeff,
Lajos Veres

Upgrade instructions

Switch your build to use Gradle 7.5.1 by updating your wrapper:

./gradlew wrapper --gradle-version=7.5.1

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

`v7.4.2`: 7.4.2

This is a patch release for Gradle 7.4.

See the list of fixed issues: https://docs.gradle.org/7.4.2/release-notes.html

We recommend users upgrade to 7.4.2 instead of 7.4 or another patch release.

Upgrade Instructions

Switch your build to use Gradle 7.4.2 by updating your wrapper:

./gradlew wrapper --gradle-version=7.4.2

See the Gradle 7.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 7.4.2.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

ossf/scorecard-action

`v2.1.2`

Compare Source

What's Changed

Fixes

🌱 Bump scorecard dependency to v4.10.2 to remove a CODEOWNERS printf statement. by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1054

Full Changelog: ossf/scorecard-action@v2.1.1...v2.1.2

`v2.1.1`

Compare Source

Scorecard version

This release use Scorecard's v4.10.1

Full Changelog: ossf/scorecard-action@v2.1.0...v2.1.1

`v2.1.0`

Compare Source

What's Changed

Scorecard version

This release uses scorecard v4.10.0.

Improvements

Docker build workflow by @naveensrinivasan in https://github.com/ossf/scorecard-action/pull/981
Use root user in distroless to support GitHub Actions by @spencerschrock in https://github.com/ossf/scorecard-action/pull/994
Disable pull_request_target by @laurentsimon in https://github.com/ossf/scorecard-action/pull/1031

Documentation

Add PAT section explaining risks by @olivekl in https://github.com/ossf/scorecard-action/pull/1024
Make the badge text easier to copy by @rajbos in https://github.com/ossf/scorecard-action/pull/1026

New Contributors

@joycebrum made their first contribution in https://github.com/ossf/scorecard-action/pull/984
@rajbos made their first contribution in https://github.com/ossf/scorecard-action/pull/1026

Full Changelog: ossf/scorecard-action@v2.0.6...v2.1.0

terraform-linters/tflint-ruleset-aws

`v0.21.2`

Compare Source

Enhancements

#431 #442: Update AWS provider/module and generated content

Chores

#433 #441: Bump golang.org/x/net from 0.2.0 to 0.5.0
#434: Bump goreleaser/goreleaser-action from 3 to 4
#435: Pass GITHUB_TOKEN to e2e test workflow (@wata727)
#437: Bump github.com/terraform-linters/tflint-plugin-sdk from 0.14.0 to 0.15.0

`v0.21.1`

Compare Source

BugFixes

#430: elasticache_cluster_previous_type: fix panic on empty string (@bendrucker)

Chores

#407: autogenerated maintenance

`v0.21.0`

Compare Source

Enhancements

#403: autogenerated maintenance
#405 #406: Add assume role configuration to plugin config (@kaito3desuyo)

`v0.20.0`

Compare Source

Enhancements

#400: autogenerated maintenance

Chores

#399: Bump up GoReleaser version in release.yml (@wata727)
#401: Bump golang.org/x/net from 0.1.0 to 0.2.0

`v0.19.0`

Compare Source

Enhancements

#390: autogenerated maintenance

BugFixes

#397: Prefer credentials in "plugin" blocks over "provider" blocks (@wata727)

Chores

#394: Add signatures for keyless signing (@wata727)
#395: Bump github.com/hashicorp/hcl/v2 from 2.14.1 to 2.15.0
#398: Bump up GoReleaser version (@wata727)

`v0.18.0`

Compare Source

Breaking Changes

#367: remove hardcoded S3 region rule (@PatMyron)

Enhancements

#382: autogenerated maintenance
#388: Bump tflint-plugin-sdk to v0.14.0 (@wata727)

Chores

#387: Bump github.com/dave/dst from 0.27.0 to 0.27.2

`v0.17.1`

Compare Source

Enhancements

#373: autogenerated maintenance
#380: Update db instance type list with m6i and r6i (@milestruecar)

Chores

#374: Bump github.com/google/go-cmp from 0.5.8 to 0.5.9
#377: Bump github.com/terraform-linters/tflint-plugin-sdk from 0.12.0 to 0.13.0
#378: Bump github.com/hashicorp/hcl/v2 from 2.14.0 to 2.14.1

`v0.17.0`

Compare Source

The minimum supported version of TFLint has changed in this version. TFLint v0.40.0+ is required for this plugin to work.

Breaking Changes

#369: Bump tflint-plugin-sdk to v0.12.0 (@wata727)

Enhancements

#366: autogenerated maintenance

Chores

#365: Bump github.com/zclconf/go-cty from 1.10.0 to 1.11.0
#368: Bump github.com/hashicorp/hcl/v2 from 2.13.0 to 2.14.0
#371: build: Improve Go workflows (@wata727)

`v0.16.1`

Compare Source

Enhancements

363: autogenerated maintenance

`v0.16.0`

Compare Source

Enhancements

#358: autogenerated maintenance
- Removed aws_cloudwatch_metric_alarm_invalid_extended_statistic rule
#362: Lambda runtime deprecation updates (@PatMyron)

Chores

#359: go 1.19 (@PatMyron)

`v0.15.0`

Compare Source

Enhancements

#352: autogenerated maintenance
#355: Add aws_security_group_rule_invalid_protocol rule (@x-color)
#356: Add aws_security_group_invalid_protocol rule (@x-color)

Chores

#354: Bump github.com/hashicorp/hcl/v2 from 2.12.0 to 2.13.0

`v0.14.0`

Compare Source

Enhancements

#342: feat: support provider aliases in deep checking (@suzuki-shunsuke)
#343: autogenerated maintenance

Chores

#344: Bump github.com/terraform-linters/tflint-plugin-sdk from 0.10.1 to 0.11.0
#347: Bump goreleaser/goreleaser-action from 2 to 3
#351: Bump github.com/dave/dst from 0.26.2 to 0.27.0

`v0.13.4`

Compare Source

Enhancements

#336: autogenerated maintenance

Chores

#338: Bump github.com/hashicorp/hcl/v2 from 2.11.1 to 2.12.0
#339: Bump github.com/google/go-cmp from 0.5.7 to 0.5.8
#340: Replace logger from the standard logger (@wata727)
#341: Add E2E tests (@wata727)

`v0.13.3`

Compare Source

Enhancements

#324: autogenerated maintenance
#335: Lambda runtime deprecation updates (python3.6) (@PatMyron)

Chores

#328: chores: Remove snaker (@wata727)
#329: Fix rule template for rule generator (@wata727)
#330: Bump github.com/terraform-linters/tflint-plugin-sdk from 0.10.0 to 0.10.1
#333: style: format rules/api/rule.go.tmpl and run go generate ./... (@suzuki-shunsuke)
#334: Bump actions/setup-go from 2 to 3

Microsoft/TypeScript

`v4.9.5`: TypeScript 4.9.5

Compare Source

For release notes, check out the release announcement.

Downloads are available on:

Changes:

69e88ef Port ignore deprecations to 4.9 (#52419)
daf4e81 Port timestamp fix to 4.9 (#52426)

`v4.9.4`: TypeScript 4.9.4

Compare Source

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

fixed issues query for Typescript v4.9.4.

Downloads are available on:

Changes:

e286821 Bump version to 4.9.4 and LKG.
eb5419f Cherry-pick #51704 to release 4.9 (#51712)
b4d382b Cherry-pick changes for narrowing to tagged literal types.
e7a02f4 Port of #51626 and #51689 to release-4.9 (#51627)
1727912 Cherry-pick fix around visitEachChild to release-4.9. (#51544)

This list of changes was auto generated.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

renovate · 2023-02-04T16:15:18Z

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: linters/brakeman/test_data/Gemfile.lock

installing v2 tool ruby v3.2.0
linking tool ruby v3.2.0
ruby 3.2.0 (2022-12-25 revision a528908271) [x86_64-linux]
gem 3.4.1
RubyGems Environment:
  - RUBYGEMS VERSION: 3.4.1
  - RUBY VERSION: 3.2.0 (2022-12-25 patchlevel 0) [x86_64-linux]
  - INSTALLATION DIRECTORY: /tmp/renovate-cache/others/bundler
  - USER INSTALLATION DIRECTORY: /home/ubuntu/.local/share/gem/ruby/3.2.0
  - RUBY EXECUTABLE: /opt/buildpack/tools/ruby/3.2.0/bin/ruby
  - GIT EXECUTABLE: /usr/bin/git
  - EXECUTABLE DIRECTORY: /tmp/renovate-cache/others/bundler/bin
  - SPEC CACHE DIRECTORY: /home/ubuntu/.local/share/gem/specs
  - SYSTEM CONFIGURATION DIRECTORY: /usr/local/ruby/3.2.0/etc
  - RUBYGEMS PLATFORMS:
     - ruby
     - x86_64-linux
  - GEM PATHS:
     - /tmp/renovate-cache/others/bundler
     - /home/ubuntu/.local/share/gem/ruby/3.2.0
     - /opt/buildpack/tools/ruby/3.2.0/lib/ruby/gems/3.2.0
  - GEM CONFIGURATION:
     - :update_sources => true
     - :verbose => true
     - :backtrace => false
     - :bulk_threshold => 1000
     - "gem" => "--bindir /home/ubuntu/bin --no-document"
     - :benchmark => false
  - REMOTE SOURCES:
     - https://rubygems.org/
  - SHELL PATH:
     - /home/ubuntu/.cargo/bin
     - /home/ubuntu/.local/bin
     - /go/bin
     - /home/ubuntu/bin
     - /home/ubuntu/.cargo/bin
     - /home/ubuntu/.local/bin
     - /go/bin
     - /home/ubuntu/bin
     - /home/ubuntu/.cargo/bin
     - /home/ubuntu/.local/bin
     - /go/bin
     - /home/ubuntu/bin
     - /home/ubuntu/bin
     - /home/ubuntu/.cargo/bin
     - /home/ubuntu/.local/bin
     - /go/bin
     - /home/ubuntu/bin
     - /home/ubuntu/bin
     - /usr/local/sbin
     - /usr/local/bin
     - /usr/sbin
     - /usr/bin
     - /sbin
     - /bin
Installed v2 /usr/local/buildpack/tools/v2/ruby.sh in 6 seconds
skip cleanup, not a docker build: 661aed8cfaed
installing v2 tool bundler v1.11.2
linking tool bundler v1.11.2
Bundler version 1.11.2
Installed v2 /usr/local/buildpack/tools/v2/bundler.sh in 3 seconds
skip cleanup, not a docker build: 661aed8cfaed
ruby 3.2.0 (2022-12-25 revision a528908271) [x86_64-linux]
Unknown switches '--patch, --strict'

EliSchleifer

LGTM

renovate · 2023-02-04T16:39:01Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

EliSchleifer · 2023-02-04T16:45:11Z

Updated test results from brakeman because the updated packages made some issues resolved.

chore(deps): update all non-major dependencies

b782904

7c8c985

EliSchleifer self-requested a review February 4, 2023 16:38

EliSchleifer approved these changes Feb 4, 2023

View reviewed changes

EliSchleifer merged commit 662fae4 into main Feb 4, 2023

EliSchleifer deleted the renovate/all-minor-patch branch February 4, 2023 17:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies #126

chore(deps): update all non-major dependencies #126

Uh oh!

renovate bot commented Feb 4, 2023

Uh oh!

renovate bot commented Feb 4, 2023

Uh oh!

EliSchleifer left a comment

Uh oh!

renovate bot commented Feb 4, 2023

Uh oh!

EliSchleifer commented Feb 4, 2023

Uh oh!

Uh oh!

chore(deps): update all non-major dependencies #126

chore(deps): update all non-major dependencies #126

Uh oh!

Conversation

renovate bot commented Feb 4, 2023

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

Fixed

Fixed

Fixed

Fixed

Fixed

Added

Fixed

Changed

v7.5.1: 7.5.1

Upgrade instructions

Reporting Problems

v7.4.2: 7.4.2

Upgrade Instructions

Reporting Problems

What's Changed

Fixes

Scorecard version

What's Changed

Scorecard version

Improvements

Documentation

New Contributors

Enhancements

Chores

BugFixes

Chores

Enhancements

Enhancements

Chores

Enhancements

BugFixes

Chores

Breaking Changes

Enhancements

Chores

Enhancements

Chores

Breaking Changes

Enhancements

Chores

Enhancements

Enhancements

Chores

Enhancements

Chores

Enhancements

Chores

Enhancements

Chores

Enhancements

Chores

v4.9.5: TypeScript 4.9.5

Changes:

v4.9.4: TypeScript 4.9.4

Changes:

Configuration

Uh oh!

renovate bot commented Feb 4, 2023

⚠ Artifact update problem

File name: linters/brakeman/test_data/Gemfile.lock

Uh oh!

EliSchleifer left a comment

Choose a reason for hiding this comment

Uh oh!

renovate bot commented Feb 4, 2023

Edited/Blocked Notification

Uh oh!

EliSchleifer commented Feb 4, 2023

Uh oh!

Uh oh!

`v7.5.1`: 7.5.1

`v7.4.2`: 7.4.2

`v4.9.5`: TypeScript 4.9.5

`v4.9.4`: TypeScript 4.9.4