Skip to content

chore(deps): update dependency snyk to v1.1064.0 [security]#425

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-snyk-vulnerability
Open

chore(deps): update dependency snyk to v1.1064.0 [security]#425
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-snyk-vulnerability

Conversation

@renovate
Copy link

@renovate renovate bot commented Nov 20, 2022 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
snyk 1.946.0 → 1.1064.0 age confidence

GitHub Vulnerability Alerts

CVE-2022-40764

Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploitation could follow from the common practice of viewing untrusted files in the Visual Studio Code editor, for example. The original demonstration was with shell metacharacters in the vendor.json ignore field, affecting snyk-go-plugin before 1.19.1. This affects, for example, the Snyk TeamCity plugin (which does not update automatically) before 20220930.142957.

CVE-2022-22984

The package snyk before 1.1064.0; the package snyk-mvn-plugin before 2.31.3; the package snyk-gradle-plugin before 3.24.5; the package @​snyk/snyk-cocoapods-plugin before 2.5.3; the package snyk-sbt-plugin before 2.16.2; the package snyk-python-plugin before 1.24.2; the package snyk-docker-plugin before 5.6.5; the package @​snyk/snyk-hex-plugin before 1.1.6 are vulnerable to Command Injection due to an incomplete fix for CVE-2022-40764. A successful exploit allows attackers to run arbitrary commands on the host system where the Snyk CLI is installed by passing in crafted command line flags. In order to exploit this vulnerability, a user would have to execute the snyk test command on untrusted files. In most cases, an attacker positioned to control the command line arguments to the Snyk CLI would already be positioned to execute arbitrary commands. However, this could be abused in specific scenarios, such as continuous integration pipelines, where developers can control the arguments passed to the Snyk CLI to leverage this component as part of a wider attack against an integration/build pipeline. This issue has been addressed in the latest Snyk Docker images available at https://hub.docker.com/r/snyk/snyk as of 2022-11-29. Images downloaded and built prior to that date should be updated. The issue has also been addressed in the Snyk TeamCity CI/CD plugin as of version v20221130.093605.

CVE-2022-24441

The package snyk before 1.1064.0 is vulnerable to Code Injection when analyzing a project. An attacker who can convince a user to scan a malicious project can include commands in a build file such as build.gradle or gradle-wrapper.jar, which will be executed with the privileges of the application. This vulnerability may be triggered when running the the CLI tool directly, or when running a scan with one of the IDE plugins that invoke the Snyk CLI. Successful exploitation of this issue would likely require some level of social engineering - to coerce an untrusted project to be downloaded and analyzed via the Snyk CLI or opened in an IDE where a Snyk IDE plugin is installed and enabled. Additionally, if the IDE has a Trust feature then the target folder must be marked as ‘trusted’ in order to be vulnerable.

NOTE: This issue is independent of the one reported in CVE-2022-40764, and upgrading to a fixed version for this addresses that issue as well.

The affected IDE plugins and versions are:

  • VS Code - Affected: <=1.8.0, Fixed: 1.9.0
  • IntelliJ - Affected: <=2.4.47, Fixed: 2.4.48
  • Visual Studio - Affected: <=1.1.30, Fixed: 1.1.31
  • Eclipse - Affected: <=v20221115.132308, Fixed: All subsequent versions
  • Language Server - Affected: <=v20221109.114426, Fixed: All subsequent versions

Release Notes

snyk/snyk (snyk)

v1.1064.0

Compare Source

Bug Fixes
  • escape child process arguments (80d97a9)

v1.1063.0

Compare Source

Features
  • base64 default for sast analysis (369fe11)
  • support sev.threshold for unm.-deps (cc329fd)

v1.1062.0

Compare Source

Bug Fixes
  • use lenient config in gradle plugin (afc1ccb)

v1.1061.0

Compare Source

Features
  • upgrade snyk-iac-test to v0.37.0 (ef864be)

v1.1060.0

Compare Source

Bug Fixes
  • update snyk-docker-plugin (cc200eb)

v1.1059.0

Compare Source

Bug Fixes
  • bump snyk-gradle-plugin to 3.24.5 (a75faaf)

v1.1058.0

Compare Source

Features
  • Upgrade snyk-iac-test to v0.36.5 (71e8ba5)

v1.1057.0

Compare Source

v1.1056.0

Compare Source

Bug Fixes
  • improve go file path determination (f426bdb)

v1.1055.0

Compare Source

Bug Fixes
  • restore env proxy launching snyk-iac-test (fec034b)
  • support unmanaged for ide plugins (9746d20)

v1.1054.0

Compare Source

Bug Fixes
  • update snyk-docker-plugin (a638be2)

v1.1053.0

Compare Source

Bug Fixes
  • certificate issue for golang plugin (540b32c)

v1.1052.0

Compare Source

Features
  • improve errors for cloud context (0ddc517)

v1.1051.0

Compare Source

Bug Fixes

v1.1050.0

Compare Source

Bug Fixes
  • remove allow analytics check for share results (4bac957)

v1.1049.0

Compare Source

Features
  • Upgrade snyk-iac-test to v0.36.2 (d37581b)

v1.1048.0

Compare Source

Bug Fixes
  • in sbt plugin inspect: filter out configs that are not public (a1df508)

v1.1047.0

Compare Source

v1.1046.0

Compare Source

Bug Fixes

v1.1045.0

Compare Source

Bug Fixes
  • check of incorrect environment variable (1c863bb)
  • do not proxy traffic to sockets (a2cbec3)
Features
  • disable container app scan with feature flag (39fcaf2)

v1.1044.0

Compare Source

Bug Fixes
  • add innerError to CLI analytics as error-details (c6e92d9)
  • use body in 403 error innerError if body.stack is empty (2eb1a24)
Features
  • Upgrade snyk-iac-test to v0.36.1 (53dfb7a)

v1.1043.0

Compare Source

Bug Fixes
  • relax conditions for sbt plugin inspect (a201a61)

v1.1042.0

Compare Source

Bug Fixes
  • Errors from snyk-iac-test should not be swallowed (b02372d)
Features

v1.1041.0

Compare Source

Bug Fixes
  • reduce scala script output size (f3ea1ce)

v1.1040.0

Compare Source

Bug Fixes
  • Invoke snyk-iac-test asynchronously (1a5e734)

v1.1039.0

Compare Source

Features
  • new cloud context flag --snyk-cloud-environment (e5528cf)
  • Upgrade snyk-iac-test to v0.35.1 (73da9cb)

v1.1038.0

Compare Source

Features
  • add error code to iac json output (4d08086)

v1.1037.0

Compare Source

Bug Fixes
  • fixing typo to trigger a failed release (6f49a08)

v1.1036.0

Compare Source

What's Changed

Full Changelog: snyk/cli@v1.1035.0...v1.1036.0

v1.1035.0

Compare Source

Features
  • do not download bundle in cli (d339015)
  • IaC --report smoke testing (48f2e93)

v1.1034.0

Compare Source

Features
  • Upgrade snyk-iac-test to v0.33.5 (c318f06)

v1.1033.0

Compare Source

Features
  • Upgrade snyk-iac-test to v0.33.4 (ea931d1)

v1.1032.0

Compare Source

Features
  • Upgrade snyk-iac-test to v0.33.3 (f0ada01)

v1.1031.0

Compare Source

Bug Fixes
  • identify gradle projects by path not name (284c8aa)

v1.1030.0

Compare Source

Features
  • use in_progress in unmanaged resp. (84a1bb3)

v1.1029.0

Compare Source

v1.1028.0

Compare Source

v1.1027.0

Compare Source

Features
  • Upgrade snyk-iac-test to v0.33.1 (8f49d27)

v1.1026.0

Compare Source

Bug Fixes
  • remove reachability from plugins (cdebec7)

v1.1025.0

Compare Source

Features

v1.1024.0

Compare Source

v1.1023.0

Compare Source

Bug Fixes
  • Ignored issues count displays "undefined" (962df51)

v1.1022.0

Compare Source

Bug Fixes
  • do not check stderr output in IaC smoke tests (55cbba0)
Features
  • use short link to the Integrated IaC docs (8fd823d)

v1.1021.0

Compare Source

Bug Fixes
  • remove gradle matching config error (401c0f0)
Features
  • add flag to exclude app vulnerabilities (5d704e2)
  • print warning message on app-vulns enablement (9216c49)

v1.1020.0

Compare Source

v1.1019.0

Compare Source

Bug Fixes
Features
  • windows: renew code signing certificate (ff063f1)

v1.1018.0

Compare Source

Features
  • add an info message to the new iac test command (533db99)

v1.1017.0

Compare Source

Features
  • Update feature gating for new IaC Integrated experience (72bed38)

v1.1016.0

Compare Source

Bug Fixes
  • unmanaged scan unknown archives (5821ed4)

v1.1015.0

Compare Source

Features
  • refactor and add tests on gradle plugin (239d4ab)

v1.1014.0

Compare Source

Features
  • container support for deleted files (cc8edfb)

v1.1013.0

Compare Source

Features
  • new version to update url docs link (bd063e3)

v1.1012.0

Compare Source

Features
  • pass snykHttpClient to plugin.inspect (17b1273)

v1.1011.0

Compare Source

Bug Fixes
  • improve cpp-plugin performance on windows (b5f6770)

v1.1010.0

Compare Source

Bug Fixes
  • added check for existing key in loop (04c00bc)

v1.1009.0

Compare Source

v1.1008.0

Compare Source

v1.1007.0

Compare Source

Bug Fixes
  • upgrade go-httpauth to support basic auth (875f0e9)
Features
  • add unmanaged service test call ff (55b6fbb)

v1.1006.0

Compare Source

Features
  • show Cloud Issues URL when sharing results with snyk iac test (9e1f2d7)

v1.1005.0

Compare Source

Bug Fixes
  • iac test result undefined (c1e289d)
  • update snyk-docker-plugin to fix CGo binaries issue (4db2a46), closes #​456
Features
  • add support for an HTTP proxy when using snyk-iac-test (3f82971)

v1.1004.0

Compare Source

Features
  • share results with the Cloud API (17c7bac)

v1.1003.0

Compare Source

Bug Fixes
  • container python app scan performance issues (a8732a6)
Features
  • can override IaC experimental bundle (7da75f1)

v1.1002.0

Compare Source

Features
  • IaC context-suppressed issue count (bb18d47)

v1.1001.0

Compare Source

Features
  • pass the org public ID to snyk-iac-test (e70e43d)

v1.1000.0

Compare Source

Bug Fixes
  • container python app scan errors (91ce029)

v1.999.0

Compare Source

Features

v1.998.0

Compare Source

Features
  • cloud context for IaC tests (b9c1a10)
  • container python app scan (3609d7d)
  • create temp filepath for iac engine to write results (12d8e57)
  • custom message for IaC cloud context errors (b5833a2)

v1.997.0

Compare Source

Bug Fixes
  • For Gradle multi-module projects filter subprojects on unique path not name (db21498)

v1.996.0

Compare Source

Bug Fixes
  • bump golang plugin version (8893f81)
Features

v1.995.0

Compare Source

Bug Fixes
  • matching configurations error on gradle version catalog (20dcdae)

v1.994.0

Compare Source

Bug Fixes
Features
  • add custom severities to iac test config (9d86574)
  • add ignore count in the experimental version of iac test (d390ca2)
  • Added support for depth-detection (8cf1815)

v1.993.0

Compare Source

Features

v1.992.0

Compare Source

Bug Fixes
  • --target-name bug (3431f79)
  • Spacing for issue descriptions with custom rules (29b2fdb)

v1.991.0

Compare Source

Features
  • add report summary (d8e4ea8)
  • pass policy (.snyk) to iac-test via the config file. (6d3ad76)

v1.990.0

Compare Source

Bug Fixes
  • none custom policies severity issues should be filtered out before sending them to registry (4acacd2)

v1.989.0

Compare Source

Bug Fixes
  • downgrade snyk-go-plugin to 1.19.0 (4643026)
  • increase buffer size (8079fe3)
  • update golang plugin (a0e30d9)
  • upgrade-docker-registry-v2-client (275afb1)
Features
  • pass remote-repo-url arg to snyk-iac-test (18e8c87)

v1.988.0

Compare Source

Bug Fixes
  • return exit code 3 when no resources can be found (9d2e41f)
  • upgrade docker-registry-v2-client lib (374ba55)
Features
  • pass target-name arg to snyk-iac-test (4352122)
  • stop caching rules (71c866e)

v1.987.0

Compare Source

Bug Fixes
  • correct broken URLs for license issues (8a46931)
  • Ensured the test spinner stops (5d9d15f)
Features
  • remove reachability (5500e25)
  • scan maven aggregate projects (019bc45)
  • share cache path with IaC plugin (e254c0c)
  • update snyk-iac-test to 0.18.1 (379fe0c)

v1.986.0

Compare Source

Bug Fixes
  • wrong 2x count of iac issues with --report -multi-doc yaml (06da34e)

v1.985.0

Compare Source

Bug Fixes
  • Fixed incomplete CC path when missing resource attributes (6a4480c)
  • missing release in package version string (dcb40ab)
  • upgarde docker-registry-v2-client lib (5de3cb1)
Features
  • introduce —about flag to print attribution information (60eaec8)
  • pass projectTags arg to snyk-iac-test (ae70c1e)

v1.984.0

Compare Source

v1.983.0

Compare Source

Bug Fixes
Features
  • add project attributes support in --experimental (08791f8)
  • Implement AnyAuth Proxy Authentication support (467b621)

v1.982.0

Compare Source

Bug Fixes
  • upgrade docker plugin to improve stream parsing (a59d8e4)
Features
  • pass configuration to snyk-iac-test (6fb5992)
  • upgrade snyk iac test to 0.13.1 (ce7103e)

v1.981.0

Compare Source

Bug Fixes
  • Add missing IaC issue props in JSON output (da3a671)

v1.980.0

Compare Source

Features
  • improve maven debug logging (a0cdcfc)

v1.979.0

Compare Source

Bug Fixes
  • handle gradle strict lock mode (8905252)

v1.978.0

Compare Source

Features
  • add SARIF support (CFG-1993) (622c8f4)

v1.977.0

Compare Source

Bug Fixes
  • container app vulns json with experimental flag (332d87b)
Features
  • add deprecation message to test command (7f191b5)

v1.976.0

Compare Source

Features
  • improve comment handling for SBT scans (cf862b9)

v1.975.0

Compare Source

Features
  • add test summary section to the experimental output (b708086)

v1.974.0

Compare Source

Features
  • add 'target-name' flag support (6305c3d)

v1.973.0

Compare Source

Bug Fixes
  • vuln links using demunge (01154c9)
Features
  • add --remote-repo-url to "iac test" (2a12048)
  • update general vuln descriptions to point to pvdb (ad80d74)
  • update spotlight vuln descriptions (f536c9d)

v1.972.0

Compare Source

Bug Fixes
  • handle errors from /share-results (5871079)
Features
  • Add support for severity threshold (6833389)

v1.971.0

Compare Source

Features
  • snyk-iac-test error handling (3b3fa89)

v1.970.0

Compare Source

v1.969.0

Compare Source

Features
  • officially support Gradle 7 scanning (314dc96)

v1.968.0

Compare Source

Features
  • remove support for paths outside the current working directory (5ca35c1)

v1.967.0

Compare Source

Bug Fixes

v1.966.0

Compare Source

Bug Fixes
  • bump cloud-config-parser (38502ed)

v1.965.0

Compare Source

Bug Fixes
  • return paths for files that errrored (IaC) (d53afde)

v1.964.0

Compare Source

Features
  • add JSON support (4c636da)
  • bump snyk-iac-test version (0599c71)
  • improve Snyk API URL configuration (5a0bcbe)

v1.963.0

Compare Source

Bug Fixes

v1.962.0

Compare Source

Bug Fixes
  • typo in IaC v2 --report output (a22ab2e)
Features
  • container json response with app vulns (8aba337)

v1.961.0

Compare Source

Bug Fixes
  • move checkPaths() function out of main() (503d64c)

v1.960.0

Compare Source

Bug Fixes
  • fix parser error in tfplan parser (1976175)

v1.959.0

Compare Source

Bug Fixes
Features

v1.958.0

Compare Source

Bug Fixes
  • bump driftctl (dae3c8e)
  • reduce default snyk-gradle-plugin logging (6e26bdc)

v1.957.0

Compare Source

Bug Fixes
  • wrong dependencyCount in support of snyk-to-html (1065dd9)

v1.956.0

Compare Source

Bug Fixes
  • support HTTP(S) proxies in iac-test (3ac3ad0)

v1.955.0

Compare Source

Bug Fixes
  • also add HTTP_PROXY environment variable (78d0602)
Features
  • add support for requirements.txt files with BOM encoding (d31974f)
  • support for unmanaged snyk-to-html (83b4f6a)

v1.954.0

Compare Source

Features
  • add additinal arguments ability for go projects (7c915d4)

v1.953.0

Compare Source

Features
  • remove gradle-accept-legacy-config-roles flag (b4164e8)

v1.952.0

Compare Source

Bug Fixes

v1.951.0

Compare Source

Features
  • remove report command from snyk iac (9cd5813)

v1.950.0

Compare Source

Features
  • prune across Gradle dep-graph (44f75ff)

v1.949.0

Compare Source

Bug Fixes
  • include the custom rules warning if feature flag is not enabled (44e892b)

v1.948.0

Compare Source

Features
  • upgrade to snyk-docker-plugin@​4.38.0 (5b66290)

v1.947.0

Compare Source

Bug Fixes
  • IaC issue info when impact or description are missing (e785a64)
  • remove warning message from iac --report (b1aee5d)
Features
  • improve error message for iac describe (c58b5af)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Author

renovate bot commented Nov 20, 2022 •
edited
Loading

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: @react-pdf/renderer@2.1.2
npm ERR! Found: react@18.1.0
npm ERR! node_modules/react
npm ERR!   peer react@">=16.0.0" from @ant-design/icons@4.7.0
npm ERR!   node_modules/@ant-design/icons
npm ERR!     @ant-design/icons@"^4.0.0" from antd@4.0.1
npm ERR!     node_modules/antd
npm ERR!       antd@"^4.0.0" from the root project
npm ERR!   peer react@">=16.9.0" from rc-util@5.22.3
npm ERR!   node_modules/@ant-design/icons/node_modules/rc-util
npm ERR!     rc-util@"^5.9.4" from @ant-design/icons@4.7.0
npm ERR!     node_modules/@ant-design/icons
npm ERR!       @ant-design/icons@"^4.0.0" from antd@4.0.1
npm ERR!       node_modules/antd
npm ERR!         antd@"^4.0.0" from the root project
npm ERR!   17 more (antd, rc-align, rc-drawer, rc-dropdown, rc-field-form, ...)
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer react@"^16.8.6 || ^17.0.0" from @react-pdf/renderer@2.1.2
npm ERR! node_modules/@react-pdf/renderer
npm ERR!   @react-pdf/renderer@"^2.1.2" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: react@17.0.2
npm ERR! node_modules/react
npm ERR!   peer react@"^16.8.6 || ^17.0.0" from @react-pdf/renderer@2.1.2
npm ERR!   node_modules/@react-pdf/renderer
npm ERR!     @react-pdf/renderer@"^2.1.2" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! 
npm ERR! For a full report see:
npm ERR! /tmp/renovate/cache/others/npm/_logs/2024-04-25T08_05_34_936Z-eresolve-report.txt

npm ERR! A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2024-04-25T08_05_34_936Z-debug-0.log

@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from ec36ba5 to 958121f Compare March 16, 2023 06:57
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 958121f to bbb5da6 Compare March 24, 2023 17:58
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from bbb5da6 to ed56878 Compare May 28, 2023 10:32
@renovate renovate bot changed the title fix(deps): update dependency snyk to v1.996.0 [security] fix(deps): update dependency snyk to v1.1064.0 [security] May 28, 2023
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from ed56878 to 758fb5e Compare June 4, 2023 14:19
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch 2 times, most recently from d7a0281 to 1771024 Compare June 18, 2023 06:21
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 1771024 to 6707d0f Compare June 29, 2023 08:08
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch 2 times, most recently from 5003acb to 9353a27 Compare July 9, 2023 11:50
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch 2 times, most recently from 6fe31af to 061482e Compare July 19, 2023 11:13
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch 2 times, most recently from 10a3f25 to eecde8a Compare August 1, 2023 15:29
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from eecde8a to fa242d9 Compare August 9, 2023 14:50
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch 2 times, most recently from 3ce8617 to 427cc8a Compare August 27, 2023 08:17
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch 2 times, most recently from 51be271 to 8cbc54d Compare September 26, 2023 13:55
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 8cbc54d to c294960 Compare September 28, 2023 13:31
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch 2 times, most recently from af1092f to fd9939a Compare October 15, 2023 09:43
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from fd9939a to cb79120 Compare October 23, 2023 13:38
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from cb79120 to 93fce0c Compare November 6, 2023 06:54
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 93fce0c to 277eb16 Compare November 16, 2023 12:40
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch 2 times, most recently from a966067 to beed77d Compare December 3, 2023 09:25
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from beed77d to 7668814 Compare January 8, 2024 18:33
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 7668814 to 7323560 Compare January 28, 2024 12:30
@renovate renovate bot changed the title fix(deps): update dependency snyk to v1.1064.0 [security] - autoclosed fix(deps): update dependency snyk to v1.1064.0 [security] Dec 8, 2024
@renovate renovate bot reopened this Dec 8, 2024
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch 2 times, most recently from 1a8c184 to 142072d Compare December 9, 2024 01:07
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 142072d to 2229c65 Compare January 23, 2025 17:48
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 2229c65 to 40f34cf Compare January 30, 2025 19:23
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 40f34cf to 4cceaf1 Compare February 9, 2025 13:34
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 4cceaf1 to eb82c21 Compare March 3, 2025 15:29
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from eb82c21 to 29fe2e7 Compare March 13, 2025 16:41
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 29fe2e7 to 2965c05 Compare April 1, 2025 12:05
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 2965c05 to 07a4567 Compare April 24, 2025 06:15
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 07a4567 to 554ff09 Compare May 19, 2025 20:02
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 554ff09 to 5c76b6a Compare June 22, 2025 12:37
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 5c76b6a to abb6f13 Compare July 2, 2025 15:32
@qlty-cloud-legacy
Copy link

qlty-cloud-legacy bot commented Jul 2, 2025

Code Climate has analyzed commit abb6f13 and detected 0 issues on this pull request.

View more on Code Climate.

@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from abb6f13 to 96f75ad Compare August 10, 2025 12:33
@renovate renovate bot changed the title fix(deps): update dependency snyk to v1.1064.0 [security] fix(deps): update dependency snyk to v1.1297.3 [security] Aug 13, 2025
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 96f75ad to a415fbd Compare August 19, 2025 12:49
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from a415fbd to 2231805 Compare September 25, 2025 16:59
@renovate renovate bot changed the title fix(deps): update dependency snyk to v1.1297.3 [security] chore(deps): update dependency snyk to v1.1297.3 [security] Sep 25, 2025
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 2231805 to b82ee5a Compare October 16, 2025 01:04
@renovate renovate bot changed the title chore(deps): update dependency snyk to v1.1297.3 [security] chore(deps): update dependency snyk to v1.1064.0 [security] Oct 16, 2025
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from b82ee5a to 63d6a4f Compare October 21, 2025 15:46
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 63d6a4f to a198dbe Compare November 10, 2025 20:58
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from a198dbe to 2076d4b Compare December 3, 2025 14:48
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from 2076d4b to d646cf8 Compare December 31, 2025 15:09
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch 2 times, most recently from c691bf8 to cb2cbb8 Compare January 23, 2026 18:28
@renovate renovate bot force-pushed the renovate/npm-snyk-vulnerability branch from cb2cbb8 to cac94f6 Compare February 12, 2026 16:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants