ci: scan vulns and common errors #310
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
aymanbagabas
approved these changes
Jul 9, 2024
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
another-rex
referenced
this pull request
in google/osv-scanner
Aug 12, 2024
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | Type | Update | |---|---|---|---|---|---|---|---| | [deps.dev/api/v3](https://togithub.com/google/deps.dev) | `v3.0.0-20240730004939-e80e6658c33b` -> `v3.0.0-20240807013505-16da96fe8b66` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [deps.dev/util/maven](https://togithub.com/google/deps.dev) | `e80e665` -> `16da96f` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [deps.dev/util/resolve](https://togithub.com/google/deps.dev) | `e80e665` -> `16da96f` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [deps.dev/util/semver](https://togithub.com/google/deps.dev) | `e80e665` -> `16da96f` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [github.com/charmbracelet/glamour](https://togithub.com/charmbracelet/glamour) | `v0.7.0` -> `v0.8.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [github.com/google/go-containerregistry](https://togithub.com/google/go-containerregistry) | `v0.20.1` -> `v0.20.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [github.com/ianlancetaylor/demangle](https://togithub.com/ianlancetaylor/demangle) | `bd984b5` -> `81f5be9` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [github.com/urfave/cli/v2](https://togithub.com/urfave/cli) | `v2.27.3` -> `v2.27.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | golang.org/x/exp | `8a7402a` -> `0cdaa3a` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | digest | | golang.org/x/term | `v0.22.0` -> `v0.23.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | --- ### Release Notes <details> <summary>charmbracelet/glamour (github.com/charmbracelet/glamour)</summary> ### [`v0.8.0`](https://togithub.com/charmbracelet/glamour/releases/tag/v0.8.0) [Compare Source](https://togithub.com/charmbracelet/glamour/compare/v0.7.0...v0.8.0) ### Fixing (almost) everything With a *ton* of rendering fixes, she's sparkling ✨ > It has that new car smell... #### So many fixes…one man [@​caarlos0](https://togithub.com/caarlos0) fixed a whopping 15 issues with PR [#​317](https://togithub.com/charmbracelet/glamour/issues/317) 🥇 - Fix URL links not rendering inside bold text [#​312](https://togithub.com/charmbracelet/glamour/issues/312) - Fix autolink element rendering [#​290](https://togithub.com/charmbracelet/glamour/issues/290) - Add support for backslash escapes [#​106](https://togithub.com/charmbracelet/glamour/issues/106) - Fix cases when backslash should not be shown [#​274](https://togithub.com/charmbracelet/glamour/issues/274) - Fix escape character rendering [#​311](https://togithub.com/charmbracelet/glamour/issues/311) - Fix newlines in definition lists [#​239](https://togithub.com/charmbracelet/glamour/issues/239) - Fix nested blockquotes rendering [#​313](https://togithub.com/charmbracelet/glamour/issues/313) - Fix block quote accidentally combining lines [#​237](https://togithub.com/charmbracelet/glamour/issues/237) - Fix document-level indent causing unintended wrapping after quoted lines [#​68](https://togithub.com/charmbracelet/glamour/issues/68) #### Better tables Tables now provide stable rendering of elements within the table including alignment, text styles, all that jazz. It now uses the [lipgloss table](https://pkg.go.dev/github.com/charmbracelet/lipgloss@v0.12.1/table), making it much more consistent across the board. - Render tables with Lip Gloss [#​262](https://togithub.com/charmbracelet/glamour/issues/262) - Refactor to replace `TableWriter` with Lip Gloss table [#​254](https://togithub.com/charmbracelet/glamour/issues/254) - Fix inline code within table [#​315](https://togithub.com/charmbracelet/glamour/issues/315) - Fix links in tables [#​316](https://togithub.com/charmbracelet/glamour/issues/316) - Provide consistent alignment of table elements [#​60](https://togithub.com/charmbracelet/glamour/issues/60) - Support alignment in tables [#​117](https://togithub.com/charmbracelet/glamour/issues/117) #### New! Tokyo Night > The markdown renderer’s equivalent of a mani-pedi 💅 Tokyo Night is now a built-in style for Glamour. This means you'll be able to use it in the next release of [Glow](https://togithub.com/charmbracelet/glow?tab=readme-ov-file#styles). ```bash glow -s "tokyo-night" ### OR export GLAMOUR_STYLE="tokyo-night" ``` <img alt="Tokyo Night x Glamour" src="https://github.com/charmbracelet/glamour/blob/master/styles/gallery/tokyo-night.png" width="600"> Check out the [custom style example](https://togithub.com/charmbracelet/glamour/blob/master/examples/stdin-stdout-custom-styles/main.go#L30-L32) to learn how to support custom styles in your own Glamour apps. - feat: Add Tokyo Night theme by [@​basilioss](https://togithub.com/basilioss) in [https://github.com/charmbracelet/glamour/pull/229](https://togithub.com/charmbracelet/glamour/pull/229) #### No TTY? Glamour will now check if `stdout` is a tty and will strip styles when it is not. - Add auto NoTTY style by [@​wxh06](https://togithub.com/wxh06) and [@​caarlos0](https://togithub.com/caarlos0) in [https://github.com/charmbracelet/glamour/pull/268](https://togithub.com/charmbracelet/glamour/pull/268) #### Other Stuff - CI: scan for vulnerabilities and common errors by [@​caarlos0](https://togithub.com/caarlos0) in [https://github.com/charmbracelet/glamour/pull/310](https://togithub.com/charmbracelet/glamour/pull/310) - Use freeze for gallery images by [@​bashbunni](https://togithub.com/bashbunni) in [https://github.com/charmbracelet/glamour/pull/322](https://togithub.com/charmbracelet/glamour/pull/322) #### New Contributors - [@​bashbunni](https://togithub.com/bashbunni) made their first contribution in [https://github.com/charmbracelet/glamour/pull/322](https://togithub.com/charmbracelet/glamour/pull/322) **Full Changelog**: charmbracelet/glamour@v0.7.0...v0.8.0 *** <a href="https://charm.sh/"><img alt="The Charm logo" src="https://stuff.charm.sh/charm-badge.jpg" width="400"></a> Thoughts? Questions? We love hearing from you. Feel free to reach out on [Twitter](https://twitter.com/charmcli), [The Fediverse](https://mastodon.social/@​charmcli), or [Discord](https://charm.sh/chat). <hr /><em>This discussion was created from the release <a href='https://github.com/charmbracelet/glamour/releases/tag/v0.8.0'>v0.8.0</a>.</em> </details> <details> <summary>google/go-containerregistry (github.com/google/go-containerregistry)</summary> ### [`v0.20.2`](https://togithub.com/google/go-containerregistry/releases/tag/v0.20.2) [Compare Source](https://togithub.com/google/go-containerregistry/compare/v0.20.1...v0.20.2) #### What's Changed - deps: bump docker dep by [@​imjasonh](https://togithub.com/imjasonh) in [https://github.com/google/go-containerregistry/pull/1991](https://togithub.com/google/go-containerregistry/pull/1991) **Full Changelog**: google/go-containerregistry@v0.20.1...v0.20.2 </details> <details> <summary>urfave/cli (github.com/urfave/cli/v2)</summary> ### [`v2.27.4`](https://togithub.com/urfave/cli/releases/tag/v2.27.4) [Compare Source](https://togithub.com/urfave/cli/compare/v2.27.3...v2.27.4) #### What's Changed - Fix:(issue\_1962) Fix tests failing on 32 bit architectures by [@​dearchap](https://togithub.com/dearchap) in [https://github.com/urfave/cli/pull/1963](https://togithub.com/urfave/cli/pull/1963) **Full Changelog**: urfave/cli@v2.27.3...v2.27.4 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View the [repository job log](https://developer.mend.io/github/google/osv-scanner). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yMC4xIiwidXBkYXRlZEluVmVyIjoiMzguMjAuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> Co-authored-by: Xueqin Cui <72771658+cuixq@users.noreply.github.com>
](https://renovatebot.com){kind=link}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
closes #200