Skip to content

Conversation

@dependabot-preview
Copy link
Contributor

Bumps snyk from 1.305.1 to 1.653.0.

Release notes

Sourced from snyk's releases.

v1.653.0

1.653.0 (2021-07-02)

Bug Fixes

  • update of new version of snyk python plugin (57bc7a8)

v1.652.0

1.652.0 (2021-06-30)

Features

  • send snyk fix specific analytics (5411c8e)

v1.651.0

1.651.0 (2021-06-30)

Features

  • track, check and enforce test limit for snyk code in cli (9f562cb)

v1.650.0

1.650.0 (2021-06-28)

Features

  • send back meta on fixed, failed & total issues (f857d9a)

v1.649.0

1.649.0 (2021-06-28)

Features

  • release @​snyk/fix with improved output (8768c2e)

v1.648.0

1.648.0 (2021-06-28)

Bug Fixes

  • absolute path provided (09d5388)
  • absolute path provided (1d0f1c2)
  • always use forward slash for URIs (e2ac082)
  • fix SARIF locations in edge cases (1928489)

... (truncated)

Commits
  • 4f67fbe Merge pull request #2068 from snyk/fix/update-new-version-snyk-python-plugin
  • 57bc7a8 fix: update of new version of snyk python plugin
  • 3bcd5f6 Merge pull request #2053 from snyk/test/add-github-action-test
  • 0b6ed39 test: validate github action locally for iac
  • 9d27296 Merge pull request #2065 from snyk/feat/snyk-fix-analytics
  • 546ed79 test: ensure analytics called for all snyk fix props
  • 6fa4826 Merge pull request #2019 from snyk/feat/limit-sast-test-usage
  • cc1835c refactor: fix api token import.
  • 9cb1bc1 test: properly check for rejects or hasAssertions
  • 829237d refactor: fix sast api response types
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Bumps [snyk](https://github.com/snyk/snyk) from 1.305.1 to 1.653.0.
- [Release notes](https://github.com/snyk/snyk/releases)
- [Changelog](https://github.com/snyk/snyk/blob/master/.releaserc)
- [Commits](snyk/cli@v1.305.1...v1.653.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label Jul 5, 2021
@dependabot-preview
Copy link
Contributor Author

Superseded by #777.

@dependabot-preview dependabot-preview bot deleted the dependabot/npm_and_yarn/snyk-1.653.0 branch July 7, 2021 05:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant