salesforcedx-vscode
salesforcedx-vscode copied to clipboard
chore(deps-dev): bump snyk from 1.977.0 to 1.991.0
Bumps snyk from 1.977.0 to 1.991.0.
Release notes
Sourced from snyk's releases.
v1.991.0
1.991.0 (2022-08-23)
Features
v1.990.0
1.990.0 (2022-08-22)
Bug Fixes
- none custom policies severity issues should be filtered out before sending them to registry (4acacd2)
v1.989.0
1.989.0 (2022-08-19)
Bug Fixes
- downgrade snyk-go-plugin to 1.19.0 (4643026)
- increase buffer size (8079fe3)
- update golang plugin (a0e30d9)
- upgrade-docker-registry-v2-client (275afb1)
Features
- pass remote-repo-url arg to snyk-iac-test (18e8c87)
v1.988.0
1.988.0 (2022-08-17)
Bug Fixes
- return exit code 3 when no resources can be found (9d2e41f)
- upgrade docker-registry-v2-client lib (374ba55)
Features
v1.987.0
1.987.0 (2022-08-15)
... (truncated)
Commits
42d4720
Merge pull request #3602 from snyk/feat/pass-ignores-to-snyk-iac-test-CFG-20886d3ad76
feat: pass policy (.snyk) to iac-test via the config file.08e9672
Merge pull request #3617 from snyk/chore/reenable_regression_testfa4e464
chore: re-enable test900ddd4
Merge pull request #3612 from snyk/feat/add-report-summary02f422a
Merge pull request #3601 from snyk/refactor/update-iac-typesf93b562
refactor: use IacTestFlags type instead of generic Optionsc3095cf
Merge pull request #3606 from snyk/fix/none-custom-policies-filteringd8e4ea8
feat: add report summary0a5a129
Merge pull request #3611 from snyk/fix/regression_tests- Additional commits viewable in compare view
You can trigger a rebase of this PR by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebase
will rebase this PR -
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it -
@dependabot merge
will merge this PR after your CI passes on it -
@dependabot squash and merge
will squash and merge this PR after your CI passes on it -
@dependabot cancel merge
will cancel a previously requested merge and block automerging -
@dependabot reopen
will reopen this PR if it is closed -
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
A newer version of snyk exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.