Bump github.com/stacklok/frizbee from 0.1.4 to 0.1.6 #75
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
dependencies
Minder Vulnerability Report ✅Minder analyzed this PR and found it does not add any new vulnerable dependencies.
|
![stacklok-cloud-staging[bot]](https://avatars.githubusercontent.com/u/110237746?s=60&v=4){kind=small}
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: github.com/stacklok/frizbee
Trusty Score: 0
Alternatives
| Package | Score | Description |
|---|---|---|
| github.com/gobwas/ws | 0 |
Bumps [github.com/stacklok/frizbee](https://github.com/stacklok/frizbee) from 0.1.4 to 0.1.6. - [Release notes](https://github.com/stacklok/frizbee/releases) - [Changelog](https://github.com/stacklok/frizbee/blob/main/.goreleaser.yaml) - [Commits](stacklok/frizbee@v0.1.4...v0.1.6) --- updated-dependencies: - dependency-name: github.com/stacklok/frizbee dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/go_modules/github.com/stacklok/frizbee-0.1.6
branch
from
84b43d2 to
a8b58eb
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: github.com/stacklok/frizbee
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 5.6 |
| Repository activity | 3.9 |
| User activity | 7.3 |
| Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 26 |
| Number of git tags or releases | 24 |
| Versions matched to tags or releases | 20 |
Alternatives
| Package | Score | Description |
|---|---|---|
| github.com/gorilla/websocket | 0 | |
| github.com/gobwas/ws | 0 |
|
We should merge #80 first and then rebase atop that. |
Bumps github.com/stacklok/frizbee from 0.1.4 to 0.1.6.
Release notes
Sourced from github.com/stacklok/frizbee's releases.
Commits
0e94ccaTemporarily disable publishing to winget (#222)1889f92Bump github.com/moby/buildkit from 0.18.1 to 0.18.2 (#220)9b0b4acBump golang.org/x/sync from 0.9.0 to 0.10.0 (#219)4def39fBump github.com/deckarep/golang-set/v2 from 2.6.0 to 2.7.0 (#218)991489aBump github.com/moby/buildkit from 0.18.0 to 0.18.1 (#217)99e3bfeBump github.com/moby/buildkit from 0.17.2 to 0.18.0 (#216)c2591d3Bump github.com/moby/buildkit from 0.17.1 to 0.17.2 (#214)cbfdf72Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#215)fbef552Resolve commit ref correctly. (#212)c2a623aBump trivy action and add mirrors. (#213)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)