Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
fix(deps): lock file maintenance vulnfeeds (#2998)
This PR contains the following updates: | Package | Type | Update | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---|---|---| | | | lockFileMaintenance | All locks refreshed | | | | | | [cloud.google.com/go/logging](https://redirect.github.com/googleapis/google-cloud-go) | require | minor | `v1.12.0` -> `v1.13.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [pylint](https://redirect.github.com/pylint-dev/pylint) ([changelog](https://pylint.readthedocs.io/en/latest/whatsnew/3/)) | dev-dependencies | patch | `3.3.2` -> `3.3.3` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [cloud.google.com/go/secretmanager](https://redirect.github.com/googleapis/google-cloud-go) | require | patch | `v1.14.2` -> `v1.14.3` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [github.com/google/osv-scanner](https://redirect.github.com/google/osv-scanner) | require | patch | `v1.9.1` -> `v1.9.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | golang | stage | digest | `6c5c959` -> `94b4686` | | | | | | golang.org/x/exp | require | digest | `1829a12` -> `7588d65` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | 🔧 This Pull Request updates lock files to use the latest dependency versions. --- ### Release Notes <details> <summary>pylint-dev/pylint (pylint)</summary> ### [`v3.3.3`](https://redirect.github.com/pylint-dev/pylint/releases/tag/v3.3.3) [Compare Source](https://redirect.github.com/pylint-dev/pylint/compare/v3.3.2...v3.3.3) ## What's new in Pylint 3.3.3? Release date: 2024-12-23 ## False Positives Fixed - Fix false positives for `undefined-variable` for classes using Python 3.12 generic type syntax. Closes [#​9335](https://redirect.github.com/pylint-dev/pylint/issues/9335) - Fix a false positive for `use-implicit-booleaness-not-len`. No lint should be emitted for generators (`len` is not defined for generators). Refs [#​10100](https://redirect.github.com/pylint-dev/pylint/issues/10100) ## Other Bug Fixes - Fix `Unable to import 'collections.abc' (import-error)` on Python 3.13.1. Closes [#​10112](https://redirect.github.com/pylint-dev/pylint/issues/10112) </details> <details> <summary>google/osv-scanner (github.com/google/osv-scanner)</summary> ### [`v1.9.2`](https://redirect.github.com/google/osv-scanner/releases/tag/v1.9.2) [Compare Source](https://redirect.github.com/google/osv-scanner/compare/v1.9.1...v1.9.2) #### Changelog ##### Fixes: - [Bug #​1327](https://redirect.github.com/google/osv-scanner/pull/1327) Parsing crash on malformed pnpm lockfile. - [Bug #​1377](https://redirect.github.com/google/osv-scanner/pull/1377) Warn if a vulnerability is ignored multiple times in the same config. - [Bug #​1394](https://redirect.github.com/google/osv-scanner/pull/1394) Guided remediation: handle extraneous/missing packages in package-lock.json more leniently. - [Bug #​1443](https://redirect.github.com/google/osv-scanner/issues/1443) Go call analysis now works with Go version up to v1.23.4. - [Bug #​1436](https://redirect.github.com/google/osv-scanner/pull/1436) Only fetch Maven snapshots and releases when enabled. - [Bug #​1456](https://redirect.github.com/google/osv-scanner/pull/1456) Remove redundant calls from PreFetch. #### New Contributors - [@​ivmeta](https://redirect.github.com/ivmeta) made their first contribution in [https://github.com/google/osv-scanner/pull/1327](https://redirect.github.com/google/osv-scanner/pull/1327) - [@​janniclas](https://redirect.github.com/janniclas) made their first contribution in [https://github.com/google/osv-scanner/pull/1398](https://redirect.github.com/google/osv-scanner/pull/1398) **Full Changelog**: google/osv-scanner@v1.9.1...v1.9.2 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on wednesday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/google/osv.dev). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS42OS4zIiwidXBkYXRlZEluVmVyIjoiMzkuOTIuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
- Loading branch information
1 parent
8254045
commit 212b3a4