Thomas Neil James Shadwell

Please document how to make the linter fixable

3

### Initial checklist - [X] I read the [support docs](https://mdxjs.com/community/support/) - [X] I read the [contributing guide](https://mdxjs.com/community/contribute/) - [X] I agree to follow the [code of conduct](https://github.com/mdx-js/.github/blob/HEAD/code-of-conduct.md) - [X] I...

Unable to correctly resolve google/protobuf/struct.proto

3

google/protobuf/struct.proto seems to be on the Well Known list, but it doesn't seem to be generating `go_proto_library` or `go_library correctly`: ``` compilepkg: missing strict dependencies: /private/var/tmp/_bazel_tshadwell/15310e5df52295849af33b570a7d9e6c/sandbox/darwin-sandbox/286/execroot/monorepo/bazel-out/darwin_arm64-fastbuild/bin/project/cultist/proto/cultist_go_proto_/github.com/zemnmez/monorepo/project/cultist/proto/cultist.pb.go: import of "github.com/golang/protobuf/ptypes/struct" No...

This library defaults to using SHA1 with PBKDF2, which is a very insecure hash function. I strongly suggest updating the default scheme. See related vulnerabilities: https://github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf https://github.com/entronad/crypto-es/security/advisories/GHSA-mpj8-q39x-wq5h

[Bug]: tar generates incorrect mtree for aspect_rules_js runfiles

1

### What happened? I tried to make a tar of a `js_binary` from `aspect_rules_js`. It failed because the `node_modules` deps seem to have some incorrectly set filetypes in their mtree....

Welcome to [Renovate](https://togithub.com/renovatebot/renovate)! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin. 🚦 To activate Renovate, merge this Pull Request. To disable...

Can't build [email protected] under MODULE.bazel

8

Hi there, thanks for all your hard work on this. I've been trying to move to using MODULE.bazel for everything I can and I've made a best-effort at moving `rules_rust`....

auto-update confuses dependabot

5

Hey there :) this is a really awesome action! only issue is that dependabot stops rebasing its PRs if they have any non-dependabot commits. Is it possible to make this...

rules_python is declared as a dev dependency but is an actual dependency

1

I tried to use the SBOM rule: ``` thomas@DESKTOP-B82ERE8:~/monorepo$ bazel build //project/zemn.me/public:sbom.txt INFO: Invocation ID: 82643534-c719-4c97-8df4-8bd7a9caabd6 INFO: Streaming build results to: https://app.buildbuddy.io/invocation/82643534-c719-4c97-8df4-8bd7a9caabd6 ERROR: error loading package '@@rules_license~//tools': Unable to find...

Hey there! I'm improving rust support in my IDE. Though clippy runs great with clippy lint, I'd like VSCode to be able to invoke the same clippy binary the tests...