[ci][skip-ci](deps): Bump github/codeql-action from 3.29.4 to 3.29.5 in the github-actions group#42
Conversation
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
🎉 Snyk checks have passed. No issues have been found so far.✅ security/snyk check is complete. No issues have been found. (View Details) |
Summary of Pull RequestTitle:[ci]skip-ci: Bump github/codeql-action from 3.29.4 to 3.29.5 in the github-actions group Purpose of the PR:This pull request updates the dependency Key Changes in v3.29.5:
Why This Update Matters:
|
Bundle ReportBundle size has no change ✅ |
Summary of Pull Request:This pull request, created by Dependabot, updates the GitHub Action Key Details:
|
dependabot
bot
force-pushed
the
dependabot/github_actions/github-actions-12d2e1d0cf
branch
from
bda98e1 to
43ed4ad
Compare
Summary of the Pull Request:Title:[ci]skip-ci: Bump github/codeql-action from 3.29.4 to 3.29.5 in the github-actions group Key Points:
|
Summary of the Pull RequestTitle: [ci]skip-ci: Bump github/codeql-action from 3.29.4 to 3.29.5 in the github-actions group Purpose: Key Changes in Version
|
Codecov Report✅ All modified and coverable lines are covered by tests. ❌ Your project status has failed because the head coverage (65.12%) is below the target coverage (90.00%). You can increase the head coverage or adjust the target coverage.
Flags with carried forward coverage won't be shown. Click here to find out more. @@ Coverage Diff @@
## main #42 +/- ##
=======================================
Coverage 59.82% 59.82%
=======================================
Files 162 162
Lines 11356 11356
Branches 1338 1338
=======================================
Hits 6794 6794
Misses 4479 4479
Partials 83 83
Continue to review full report in Codecov by Sentry.
|
Summary of the Pull Request:Title:
Key Details:
|
Bumps the github-actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action). Updates `github/codeql-action` from 3.29.4 to 3.29.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@4e828ff...51f7732) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.29.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/github_actions/github-actions-12d2e1d0cf
branch
from
43ed4ad to
1bb796d
Compare
|
This pull request updates the Summary of Changes:
Context:The CodeQL Action is responsible for performing code scanning and security analysis of your GitHub repository. The update aligns the action with the latest CodeQL improvements and ensures compatibility with the updated bundle. Dependabot Details:
|
|
Summary of GitHub Pull Request:Title:
Description:This pull request upgrades the Key Updates in v3.29.5:
Relevant Details:
|
🦙 MegaLinter status:
|
| Descriptor | Linter | Files | Fixed | Errors | Warnings | Elapsed time |
|---|---|---|---|---|---|---|
| ✅ ACTION | actionlint | 44 | 0 | 0 | 0.93s | |
| jscpd | yes | 117 | no | 13.1s | ||
| ✅ HTML | djlint | 1 | 0 | 0 | 0.95s | |
| ✅ HTML | htmlhint | 1 | 0 | 0 | 0.27s | |
| prettier | 14 | 14 | 0 | 3.62s | ||
| ✅ JSON | jsonlint | 21 | 0 | 0 | 3.4s | |
| ✅ JSON | npm-package-json-lint | yes | no | no | 0.57s | |
| prettier | 21 | 19 | 0 | 5.2s | ||
| v8r | 21 | 1 | 0 | 33.27s | ||
| ✅ MARKDOWN | markdownlint | 68 | 0 | 0 | 28.61s | |
| markdown-link-check | 68 | 6 | 0 | 494.36s | ||
| ✅ MARKDOWN | markdown-table-formatter | 63 | 0 | 0 | 14.53s | |
| powershell | 9 | 7 | 0 | 13.43s | ||
| ✅ POWERSHELL | powershell_formatter | 9 | 0 | 0 | 8.51s | |
| repolinter | yes | 3 | no | 1.46s | ||
| ✅ REPOSITORY | checkov | yes | no | no | 59.2s | |
| devskim | yes | 1 | 1 | 10.66s | ||
| ✅ REPOSITORY | dustilock | yes | no | no | 10.84s | |
| gitleaks | yes | 1 | 1 | 2.05s | ||
| ✅ REPOSITORY | git_diff | yes | no | no | 0.2s | |
| grype | yes | no | 7 | 51.74s | ||
| ✅ REPOSITORY | kics | yes | no | no | 6.69s | |
| secretlint | yes | 2 | no | 22.41s | ||
| ✅ REPOSITORY | syft | yes | no | no | 15.54s | |
| trivy | yes | 1 | 2 | 9.38s | ||
| ✅ REPOSITORY | trivy-sbom | yes | no | no | 4.79s | |
| ✅ REPOSITORY | trufflehog | yes | no | no | 12.64s | |
| cspell | 196 | 496 | 0 | 500.45s | ||
| lychee | 146 | 1 | 0 | 31.37s | ||
| ✅ XML | xmllint | 1 | 0 | 0 | 0.08s | |
| prettier | 55 | 55 | 0 | 15.36s | ||
| ✅ YAML | v8r | 55 | 0 | 0 | 107.35s | |
| ✅ YAML | yamllint | 55 | 0 | 0 | 9.22s |
See detailed report in MegaLinter reports
You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.
dependabot
bot
deleted the
dependabot/github_actions/github-actions-12d2e1d0cf
branch
1 participant
Bumps the github-actions group with 1 update: github/codeql-action.
Updates
github/codeql-actionfrom 3.29.4 to 3.29.5Release notes
Sourced from github/codeql-action's releases.
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
51f7732Merge pull request #2997 from github/update-v3.29.5-80a09d7b08e90243Update changelog for v3.29.580a09d7Merge pull request #2996 from github/dependabot/npm_and_yarn/npm-240ab9fad08388115Merge pull request #2994 from github/mergeback/changelog/v3.28.21401ecafMerge branch 'main' into mergeback/changelog/v3.28.21ab5c0c5Merge branch 'main' into dependabot/npm_and_yarn/npm-240ab9fad0cd264d4Merge pull request #2986 from github/update-bundle/codeql-bundle-v2.22.24599055Merge branch 'main' into update-bundle/codeql-bundle-v2.22.2fd7ad51Merge pull request #2971 from github/update-supported-enterprise-server-versionsac0c9bfMerge branch 'main' into update-supported-enterprise-server-versionsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions