Skip to content

Bump snyk from 1.730.0 to 1.951.0#169

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/snyk-1.951.0
Closed

Bump snyk from 1.730.0 to 1.951.0#169
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/snyk-1.951.0

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jun 16, 2022

Bumps snyk from 1.730.0 to 1.951.0.

Release notes

Sourced from snyk's releases.

v1.951.0

1.951.0 (2022-06-15)

Features

  • remove report command from snyk iac (9cd5813)

v1.950.0

1.950.0 (2022-06-13)

Features

  • prune across Gradle dep-graph (44f75ff)

v1.949.0

1.949.0 (2022-06-13)

Bug Fixes

  • include the custom rules warning if feature flag is not enabled (44e892b)

v1.948.0

1.948.0 (2022-06-09)

Features

  • upgrade to snyk-docker-plugin@4.38.0 (5b66290)

v1.947.0

1.947.0 (2022-06-07)

Bug Fixes

  • IaC issue info when impact or description are missing (e785a64)
  • remove warning message from iac --report (b1aee5d)

Features

  • improve error message for iac describe (c58b5af)

v1.946.0

1.946.0 (2022-06-02)

v1.945.0

... (truncated)

Commits
  • 0850ce4 Merge pull request #3322 from snyk/chore/fix-acceptance-tests
  • 357afe9 Merge pull request #3319 from snyk/chore/cli-alert-manual
  • e99e649 chore: fix tests
  • dd7b94c Merge pull request #3311 from snyk/feat/remove-report-command-iac
  • 65707f2 chore(ci): allow running cli-alert check manually
  • b701bff Merge pull request #3304 from snyk/chore/locate-upe-bin-cfg-1846
  • 5f60f03 Merge pull request #3318 from snyk/feat/prune-across-dep-graph
  • 02eab93 chore: Locate UPE Binary
  • 9d317de test: fix gradle test fixture
  • 44f75ff feat: prune across Gradle dep-graph
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [snyk](https://github.com/snyk/snyk) from 1.730.0 to 1.951.0.
- [Release notes](https://github.com/snyk/snyk/releases)
- [Commits](snyk/cli@v1.730.0...v1.951.0)

---
updated-dependencies:
- dependency-name: snyk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 16, 2022
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jun 17, 2022

Superseded by #170.

@dependabot dependabot bot closed this Jun 17, 2022
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/snyk-1.951.0 branch June 17, 2022 10:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants