Skip to content

Conversation

@khanhtc1202
Copy link
Member

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade dotenv from 8.2.0 to 8.6.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 5 versions ahead of your current version.

  • The recommended version was released on 3 years ago.


Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@codecov
Copy link

codecov bot commented Jul 13, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 22.73%. Comparing base (7c7020e) to head (f3a7572).
Report is 676 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #5037      +/-   ##
==========================================
+ Coverage   22.41%   22.73%   +0.32%     
==========================================
  Files         522      410     -112     
  Lines       56915    43514   -13401     
==========================================
- Hits        12760     9895    -2865     
+ Misses      43129    32841   -10288     
+ Partials     1026      778     -248     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copy link
Member

@t-kikuc t-kikuc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

process.env.PIPECD_VERSION is displayed correctly as below:

image

And I successfully connected with my API server with .env file.
cf. https://github.com/pipe-cd/pipecd/tree/master/web#development

Snyk has created this PR to upgrade dotenv from 8.2.0 to 8.6.0.

See this package in yarn:
dotenv

See this project in Snyk:
https://app.snyk.io/org/pipecd/project/f41c5767-b506-4f59-beb9-ef662258eb9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Signed-off-by: t-kikuc <[email protected]>
@t-kikuc t-kikuc force-pushed the snyk-upgrade-89f79a88c3d666e89a02d39f7beb6ddc branch from 9be9c17 to f3a7572 Compare July 25, 2024 00:21
@t-kikuc t-kikuc enabled auto-merge (squash) July 25, 2024 03:24
Copy link
Member

@ffjlabo ffjlabo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

@t-kikuc t-kikuc merged commit b0e40d5 into master Jul 25, 2024
@t-kikuc t-kikuc deleted the snyk-upgrade-89f79a88c3d666e89a02d39f7beb6ddc branch July 25, 2024 07:32
@github-actions github-actions bot mentioned this pull request Jul 29, 2024
ffjlabo pushed a commit that referenced this pull request Jul 29, 2024
Snyk has created this PR to upgrade dotenv from 8.2.0 to 8.6.0.

See this package in yarn:
dotenv

See this project in Snyk:
https://app.snyk.io/org/pipecd/project/f41c5767-b506-4f59-beb9-ef662258eb9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Signed-off-by: t-kikuc <[email protected]>
Co-authored-by: snyk-bot <[email protected]>
Signed-off-by: Yoshiki Fujikane <[email protected]>
t-kikuc added a commit that referenced this pull request Jul 29, 2024
)

* fix: upgrade dotenv from 8.2.0 to 8.6.0 (#5037)

Snyk has created this PR to upgrade dotenv from 8.2.0 to 8.6.0.

See this package in yarn:
dotenv

See this project in Snyk:
https://app.snyk.io/org/pipecd/project/f41c5767-b506-4f59-beb9-ef662258eb9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Signed-off-by: t-kikuc <[email protected]>
Co-authored-by: snyk-bot <[email protected]>
Signed-off-by: Yoshiki Fujikane <[email protected]>

* fix: upgrade @types/yup from 0.29.11 to 0.29.14 (#5038)

Snyk has created this PR to upgrade @types/yup from 0.29.11 to 0.29.14.

See this package in yarn:
@types/yup

See this project in Snyk:
https://app.snyk.io/org/pipecd/project/f41c5767-b506-4f59-beb9-ef662258eb9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Signed-off-by: t-kikuc <[email protected]>
Co-authored-by: snyk-bot <[email protected]>
Signed-off-by: Yoshiki Fujikane <[email protected]>

* fix: upgrade react-draggable from 4.4.3 to 4.4.6 (#5039)

Snyk has created this PR to upgrade react-draggable from 4.4.3 to 4.4.6.

See this package in yarn:
react-draggable

See this project in Snyk:
https://app.snyk.io/org/pipecd/project/f41c5767-b506-4f59-beb9-ef662258eb9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Signed-off-by: t-kikuc <[email protected]>
Co-authored-by: snyk-bot <[email protected]>
Signed-off-by: Yoshiki Fujikane <[email protected]>

* fix: upgrade clsx from 1.1.1 to 1.2.1 (#5040)

Snyk has created this PR to upgrade clsx from 1.1.1 to 1.2.1.

See this package in yarn:
clsx

See this project in Snyk:
https://app.snyk.io/org/pipecd/project/f41c5767-b506-4f59-beb9-ef662258eb9a?utm_source=github&utm_medium=referral&page=upgrade-pr

Signed-off-by: t-kikuc <[email protected]>
Co-authored-by: snyk-bot <[email protected]>
Signed-off-by: Yoshiki Fujikane <[email protected]>

* add EphemeralStorage to RegisterTaskDefinition() (#5063)

Signed-off-by: t-kikuc <[email protected]>
Signed-off-by: Yoshiki Fujikane <[email protected]>

* Remove platform provider migration ops task (#5065)

Signed-off-by: khanhtc1202 <[email protected]>
Signed-off-by: Yoshiki Fujikane <[email protected]>

* Remove unused dependencies: @date-io/dayjs, @material-ui/pickers (#5070)

* yarn remove @date-io/dayjs

Signed-off-by: t-kikuc <[email protected]>

* yarn remove @material-ui/pickers

Signed-off-by: t-kikuc <[email protected]>

---------

Signed-off-by: t-kikuc <[email protected]>
Signed-off-by: Yoshiki Fujikane <[email protected]>

* Fix type for grpcWeb.Error to grpcweb.RpcError (#5072)

Signed-off-by: Yoshiki Fujikane <[email protected]>

* Release/init v0.48.3 (#5090)

Signed-off-by: t-kikuc <[email protected]>
Signed-off-by: Yoshiki Fujikane <[email protected]>

---------

Signed-off-by: t-kikuc <[email protected]>
Signed-off-by: Yoshiki Fujikane <[email protected]>
Signed-off-by: khanhtc1202 <[email protected]>
Co-authored-by: Khanh Tran <[email protected]>
Co-authored-by: snyk-bot <[email protected]>
Co-authored-by: Tetsuya Kikuchi <[email protected]>
This was referenced Aug 13, 2024
@github-actions github-actions bot mentioned this pull request Aug 26, 2024
This was referenced Sep 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants