Bump credo from 0.10.2 to 1.7.3

[dependabot[bot]]

Bumps credo from 0.10.2 to 1.7.3.

Changelog

Sourced from credo's changelog.

1.7.3

• Credo.Check.Readability.AliasOrder now supports a :sort_method parameter
• Credo.Check.Readability.PredicateFunctionNames received fixes
• Credo.Check.Warning.MissedMetadataKeyInLoggerConfig received fixes

1.7.2

• Fix compatibility & compiler warnings with Elixir 1.16
• Fix a bottleneck in multicore performance
• Cache scope priorities
• CHANGELOG.md is now included in the package
• Credo.Check.Readability.NestedFunctionCalls no longer warns on function calls in interpolated strings
• Credo.Check.Readability.PredicateFunctionNames fixed false positives
• Credo.Check.Readability.RedundantBlankLines fixed a bug with double quotes multiline strings
• Credo.Check.Refactor.ModuleDependencies now takes modules for :excluded_namespaces parameter
• Credo.Check.Refactor.NegatedIsNil no longer leaks memory
• Credo.Check.Warning.Dbg now warns when part of a pipeline and called without parens
• Credo.Check.Warning.MissedMetadataKeyInLoggerConfig received various fixes and improvements

1.7.1

• Fix compatibility & compiler warnings with Elixir 1.15
• Improve docs
• Credo.Check.Readability.Specs works for parensless definitions

1.7.0

• Credo.Check.Readability.ModuleDoc works for Phoenix 1.7+ views
• Credo.Check.Readability.FunctionNames now ignores custom operators
• Credo.Check.Refactor.Apply now works in pipes
• Credo.Check.Consistency.ExceptionNames does no longer yield an issue if there is only one match
• Credo.Check.Readability.ModuleNames now supports an :ignore parameter
• Credo.Check.Design.AliasUsage now supports an :if_referenced parameter
• Credo.Check.Readability.FunctionNames now works for acronyms in predicate functions
• Credo.Check.Readability.NestedFunctionCalls now works for calls already in a pipeline and local function calls

Add SARIF support

Credo 1.7 provides a formatter that will output data in SARIF format, allowing direct GitHub support via the Security tab.

You can now use mix credo --format=sarif to output results in SARIF format.

Add IDs to checks

This was requested for SARIF support and has been added to provide a unique identifier for checks that is more technical than the check name.

Check authors can add IDs to their custom checks by using the :id option:

defmodule MyCheck do

... (truncated)

Commits

• 79807d2 Bump version to 1.7.3
• b2dedd6 Update CHANGELOG
• 484f24c Fix false positive in MissedMetadataKeyInLoggerConfig
• 16b47de Merge pull request #1103 from bradhanks/credo
• ab10d78 refactoring opp: [F] ↗ is more efficient than
• c30a1a5 Remove old TODO comments re: front-loading
• 491f8d5 Fix false positive on Credo.Check.Readability.PredicateFunctionNames
• bb43348 Merge branch 'kybishop-case-sensitive-alias-order'
• a1b6609 Clean up code changes
• f9ece54 Merge branch 'case-sensitive-alias-order' of github.com:kybishop/credo into k...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)