chore: max-params warning for src/sdk/sdk.ts #1728
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
tamirazrab
changed the title
cmwylie19
requested changes
Jan 27, 2025
There was a problem hiding this comment.
Code looks good but this is user facing breaking change
https://docs.pepr.dev/main/user-guide/sdk/#writeevent
We would need to deprecate before making this change. We will chat as a team and give you some feedback. Thanks for the PR
resolves defenseunicorns#1700 Signed-off-by: t.azrab <[email protected]>
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #1728 +/- ##
=======================================
Coverage 82.11% 82.12%
=======================================
Files 52 52
Lines 2214 2215 +1
Branches 459 469 +10
=======================================
+ Hits 1818 1819 +1
- Misses 367 394 +27
+ Partials 29 2 -27
|
tamirazrab
changed the title
|
As an update, we're still thinking about how we want to approach the underlying program structure that caused this warning. In general, we prefer to avoid resolving |
cmwylie19
approved these changes
Feb 7, 2025
samayer12
approved these changes
Feb 7, 2025
|
Looks like some commits are not signed. Can you sign them or open up a new PR with these changes? |
## Description We're refocusing on having Dependabot update image digests across the Pepr project so no need for this job anymore. ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [ ] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [ ] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed
…icorns#1682) ## Description Adds a watch failure template with strict criteria for reporting in order to get enough info to debug. This template is referenced in the UDS Core docs for debugging in this PR defenseunicorns/uds-core#1205 ## Related Issue Fixes # <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed --------- Signed-off-by: Case Wylie <[email protected]>
…eunicorns#1690) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.10.3 to 2.10.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/step-security/harden-runner/releases">step-security/harden-runner's releases</a>.</em></p> <blockquote> <h2>v2.10.4</h2> <h2>What's Changed</h2> <p>Fixed a potential Harden-Runner post step failure that could occur when printing agent service logs. The fix gracefully handles failures without failing the post step.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/step-security/harden-runner/compare/v2...v2.10.4">https://github.com/step-security/harden-runner/compare/v2...v2.10.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/step-security/harden-runner/commit/cb605e52c26070c328afc4562f0b4ada7618a84e"><code>cb605e5</code></a> Merge pull request <a href="https://redirect.github.com/step-security/harden-runner/issues/496">#496</a> from step-security/fix-enobufs</li> <li><a href="https://github.com/step-security/harden-runner/commit/61144dda3ba7a45a4e879e99c548ff785b492364"><code>61144dd</code></a> Update log statement</li> <li><a href="https://github.com/step-security/harden-runner/commit/b8be370ff4fa3a7b5d97afe5cbb1921a734fffcc"><code>b8be370</code></a> Add try catch block</li> <li><a href="https://github.com/step-security/harden-runner/commit/6f6fa07e47155133e69ca8a751aad4ff01a292b1"><code>6f6fa07</code></a> Fix ENOBUFS issue</li> <li><a href="https://github.com/step-security/harden-runner/commit/18f6947f131da60743dc12d2a22ff28c2b4ea87f"><code>18f6947</code></a> Merge pull request <a href="https://redirect.github.com/step-security/harden-runner/issues/495">#495</a> from AkhigbeEromo/Update-README</li> <li><a href="https://github.com/step-security/harden-runner/commit/81f844e74365cf557ddf3715c247f745a115a5b2"><code>81f844e</code></a> Edit docs</li> <li><a href="https://github.com/step-security/harden-runner/commit/4c766de2db7a0b0a47e5728947c16e113c64f377"><code>4c766de</code></a> Merge branch 'Update-README' of <a href="https://github.com/AkhigbeEromo/harden-runner">https://github.com/AkhigbeEromo/harden-runner</a>...</li> <li><a href="https://github.com/step-security/harden-runner/commit/c9c5f3273c74d0365949a3aa120e85977f51d1ef"><code>c9c5f32</code></a> Handle Ashish reviews</li> <li><a href="https://github.com/step-security/harden-runner/commit/2877824267faf8efc084b00de71c0fe737ff0a76"><code>2877824</code></a> Merge branch 'main' into Update-README</li> <li><a href="https://github.com/step-security/harden-runner/commit/be87de076dd7a9aa9a9220dc9488dea2f8775db0"><code>be87de0</code></a> Clean up</li> <li>Additional commits viewable in <a href="https://github.com/step-security/harden-runner/compare/c95a14d0e5bab51a9f56296a4eb0e416910cd350...cb605e52c26070c328afc4562f0b4ada7618a84e">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
## Description Provide documentation/education on why it is a best practice to always Validate any Mutations. ## Related Issue Fixes defenseunicorns#899 <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed --------- Signed-off-by: Case Wylie <[email protected]> Co-authored-by: Barrett <[email protected]> Co-authored-by: Sam Mayer <[email protected]>
## Description Add types to build.ts functions. ## Related Issue Relates to defenseunicorns#1649 ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed --------- Co-authored-by: Sam Mayer <[email protected]> Co-authored-by: Case Wylie <[email protected]>
## Description Soak interrupts test is not scaling down the Pepr deployment, this fixes that. ## Related Issue Fixes defenseunicorns#1701 <!-- or --> Relates to # ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed Signed-off-by: Case Wylie <[email protected]>
## Description The `soak.ci.yaml` uses pre-built manifests. When this [PR](defenseunicorns#1684) merged we went to a distroless image where `node` is not in the path on the image. We need to update the args on the deployments. [Job Failure](https://github.com/defenseunicorns/pepr/actions/runs/12840693540/job/35809678165) ## Related Issue Fixes # <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed Signed-off-by: Case Wylie <[email protected]>
…nseunicorns#1678) ## Description Controls which build arguments are used together and adds docs Lets hold off on this one to see if we can get the commits signed on PR defenseunicorns#1651 first. CC @tamirazrab ## Related Issue Fixes defenseunicorns#1662 <!-- or --> Relates to # ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed --------- Signed-off-by: Case Wylie <[email protected]> Co-authored-by: Barrett <[email protected]>
…ns#1703) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.1 to 3.28.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v3.28.2</h2> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>3.28.2 - 21 Jan 2025</h2> <p>No user facing changes.</p> <p>See the full <a href="https://github.com/github/codeql-action/blob/v3.28.2/CHANGELOG.md">CHANGELOG.md</a> for more information.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>3.28.2 - 21 Jan 2025</h2> <p>No user facing changes.</p> <h2>3.28.1 - 10 Jan 2025</h2> <ul> <li>CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see <a href="https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/">this changelog post</a>. <a href="https://redirect.github.com/github/codeql-action/pull/2677">#2677</a></li> <li>Update default CodeQL bundle version to 2.20.1. <a href="https://redirect.github.com/github/codeql-action/pull/2678">#2678</a></li> </ul> <h2>3.28.0 - 20 Dec 2024</h2> <ul> <li>Bump the minimum CodeQL bundle version to 2.15.5. <a href="https://redirect.github.com/github/codeql-action/pull/2655">#2655</a></li> <li>Don't fail in the unusual case that a file is on the search path. <a href="https://redirect.github.com/github/codeql-action/pull/2660">#2660</a>.</li> </ul> <h2>3.27.9 - 12 Dec 2024</h2> <p>No user facing changes.</p> <h2>3.27.8 - 12 Dec 2024</h2> <ul> <li>Fixed an issue where streaming the download and extraction of the CodeQL bundle did not respect proxy settings. <a href="https://redirect.github.com/github/codeql-action/pull/2624">#2624</a></li> </ul> <h2>3.27.7 - 10 Dec 2024</h2> <ul> <li>We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. <a href="https://redirect.github.com/github/codeql-action/pull/2631">#2631</a></li> <li>Update default CodeQL bundle version to 2.20.0. <a href="https://redirect.github.com/github/codeql-action/pull/2636">#2636</a></li> </ul> <h2>3.27.6 - 03 Dec 2024</h2> <ul> <li>Update default CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/2626">#2626</a></li> </ul> <h2>3.27.5 - 19 Nov 2024</h2> <p>No user facing changes.</p> <h2>3.27.4 - 14 Nov 2024</h2> <p>No user facing changes.</p> <h2>3.27.3 - 12 Nov 2024</h2> <p>No user facing changes.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/d68b2d4edb4189fd2a5366ac14e72027bd4b37dd"><code>d68b2d4</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2708">#2708</a> from github/update-v3.28.2-d90e07f32</li> <li><a href="https://github.com/github/codeql-action/commit/ea237964450673c10ad7b678a6aab37176b787a3"><code>ea23796</code></a> Update changelog for v3.28.2</li> <li><a href="https://github.com/github/codeql-action/commit/d90e07f32eb48924444e8069d5f1fbaaad678989"><code>d90e07f</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2703">#2703</a> from github/dependabot/npm_and_yarn/npm-cd3f77644b</li> <li><a href="https://github.com/github/codeql-action/commit/7b7562b1766199469ed7f907ce332bdd498e8a28"><code>7b7562b</code></a> Update checked-in dependencies</li> <li><a href="https://github.com/github/codeql-action/commit/c16863838b8cb3c55d7f56d546070ebaa43615e5"><code>c168638</code></a> build(deps): bump the npm group with 3 updates</li> <li><a href="https://github.com/github/codeql-action/commit/0f1559aeaf806072ddd427d1b11e1c956e4851a0"><code>0f1559a</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2699">#2699</a> from github/cklin/diff-informed-file-fallback</li> <li><a href="https://github.com/github/codeql-action/commit/2d608a3097df825010b85ce95b428eacc500fbf0"><code>2d608a3</code></a> Merge branch 'main' into cklin/diff-informed-file-fallback</li> <li><a href="https://github.com/github/codeql-action/commit/94f08f339edaf905c30a3c0cb4d3dc88f8f1028c"><code>94f08f3</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2698">#2698</a> from github/cklin/diff-informed-status-report</li> <li><a href="https://github.com/github/codeql-action/commit/071996fbe2aafc9c8cce73ed09679656c8ba6cb7"><code>071996f</code></a> getDiffRanges: better fallback for absent patch</li> <li><a href="https://github.com/github/codeql-action/commit/5889cfd4994efea544ff3bc9f368822ecb589693"><code>5889cfd</code></a> Add analysis_is_diff_informed to status report</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/b6a472f63d85b9c78a3ac5e89422239fc15e9b3c...d68b2d4edb4189fd2a5366ac14e72027bd4b37dd">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…efenseunicorns#1704) Bumps distroless/nodejs22-debian12 from `06298f8` to `5e248b9`. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
## Description In support of defenseunicorns#1661, this PR fixes issues with test setup for integration tests. End to End Test: <!-- if applicable --> (See [Pepr Excellent Examples](https://github.com/defenseunicorns/pepr-excellent-examples)) ## Related Issue Relates to defenseunicorns#1661 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed --------- Co-authored-by: Barrett <[email protected]>
…s group (defenseunicorns#1710) Bumps the development-dependencies group with 1 update: [undici](https://github.com/nodejs/undici). Updates `undici` from 7.2.3 to 7.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nodejs/undici/releases">undici's releases</a>.</em></p> <blockquote> <h2>v7.3.0</h2> <h2>What's Changed</h2> <ul> <li>fix: sqlite null ref by <a href="https://github.com/ronag"><code>@ronag</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4016">nodejs/undici#4016</a></li> <li>fix: sqlite remove unnecessary parameter by <a href="https://github.com/ronag"><code>@ronag</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4017">nodejs/undici#4017</a></li> <li>feat: sqlite add set and minor cleanup by <a href="https://github.com/ronag"><code>@ronag</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4018">nodejs/undici#4018</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/nodejs/undici/compare/v7.2.3...v7.3.0">https://github.com/nodejs/undici/compare/v7.2.3...v7.3.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodejs/undici/commit/ee02abe641e8aec8f609752dc135feadb2a8bf30"><code>ee02abe</code></a> Bumped v7.3.0 (<a href="https://redirect.github.com/nodejs/undici/issues/4021">#4021</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/fe21269033eec441a46f95d6cd16b4236edb2b4c"><code>fe21269</code></a> feat: sqlite add set and minor cleanup (<a href="https://redirect.github.com/nodejs/undici/issues/4018">#4018</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/a364e7c03849c1dc308e5f031031aa92bfdae324"><code>a364e7c</code></a> fix: sqlite remove unnecessary parameter (<a href="https://redirect.github.com/nodejs/undici/issues/4017">#4017</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/d76f5cf2fba0f7f4160395e5c29eace40a7e5934"><code>d76f5cf</code></a> fix: sqlite null ref (<a href="https://redirect.github.com/nodejs/undici/issues/4016">#4016</a>)</li> <li>See full diff in <a href="https://github.com/nodejs/undici/compare/v7.2.3...v7.3.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ns#1712) Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.1.2 to 5.2.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/codecov/codecov-action/releases">codecov/codecov-action's releases</a>.</em></p> <blockquote> <h2>v5.2.0</h2> <h2>What's Changed</h2> <ul> <li>fix: remove erroneous linebreak in readme by <a href="https://github.com/Vampire"><code>@Vampire</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1734">codecov/codecov-action#1734</a></li> <li>feat: add disable-telem feature by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1739">codecov/codecov-action#1739</a></li> <li>chore(deps): bump wrapper to 0.0.32 by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1740">codecov/codecov-action#1740</a></li> <li>build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1743">codecov/codecov-action#1743</a></li> <li>build(deps): bump github/codeql-action from 3.27.9 to 3.28.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1742">codecov/codecov-action#1742</a></li> <li>use correct audience when requesting oidc token by <a href="https://github.com/juho9000"><code>@juho9000</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1744">codecov/codecov-action#1744</a></li> <li>Th/add commands by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1745">codecov/codecov-action#1745</a></li> <li>Fix typo in README by <a href="https://github.com/tserg"><code>@tserg</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1747">codecov/codecov-action#1747</a></li> <li>chore(release): bump to 5.2.0 by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1748">codecov/codecov-action#1748</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Vampire"><code>@Vampire</code></a> made their first contribution in <a href="https://redirect.github.com/codecov/codecov-action/pull/1734">codecov/codecov-action#1734</a></li> <li><a href="https://github.com/juho9000"><code>@juho9000</code></a> made their first contribution in <a href="https://redirect.github.com/codecov/codecov-action/pull/1744">codecov/codecov-action#1744</a></li> <li><a href="https://github.com/tserg"><code>@tserg</code></a> made their first contribution in <a href="https://redirect.github.com/codecov/codecov-action/pull/1747">codecov/codecov-action#1747</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov-action/compare/v5.1.2...v5.2.0">https://github.com/codecov/codecov-action/compare/v5.1.2...v5.2.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md">codecov/codecov-action's changelog</a>.</em></p> <blockquote> <h2>v5.2.0</h2> <h3>What's Changed</h3> <ul> <li>Fix typo in README by <a href="https://github.com/tserg"><code>@tserg</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1747">codecov/codecov-action#1747</a></li> <li>Th/add commands by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1745">codecov/codecov-action#1745</a></li> <li>use correct audience when requesting oidc token by <a href="https://github.com/juho9000"><code>@juho9000</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1744">codecov/codecov-action#1744</a></li> <li>build(deps): bump github/codeql-action from 3.27.9 to 3.28.1 by <code>@app/dependabot</code> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1742">codecov/codecov-action#1742</a></li> <li>build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0 by <code>@app/dependabot</code> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1743">codecov/codecov-action#1743</a></li> <li>chore(deps): bump wrapper to 0.0.32 by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1740">codecov/codecov-action#1740</a></li> <li>feat: add disable-telem feature by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1739">codecov/codecov-action#1739</a></li> <li>fix: remove erroneous linebreak in readme by <a href="https://github.com/Vampire"><code>@Vampire</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1734">codecov/codecov-action#1734</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov-action/compare/v5.1.2..v5.2.0">https://github.com/codecov/codecov-action/compare/v5.1.2..v5.2.0</a></p> <h2>v5.1.2</h2> <h3>What's Changed</h3> <ul> <li>fix: update statment by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1726">codecov/codecov-action#1726</a></li> <li>fix: update action script by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1725">codecov/codecov-action#1725</a></li> <li>fix: prevent oidc on tokenless due to permissioning by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1724">codecov/codecov-action#1724</a></li> <li>chore(release): wrapper-0.0.31 by <code>@app/codecov-releaser-app</code> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1723">codecov/codecov-action#1723</a></li> <li>Put quotes around <code>${{ inputs.token }}</code> in <code>action.yml</code> by <a href="https://github.com/jwodder"><code>@jwodder</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1721">codecov/codecov-action#1721</a></li> <li>build(deps): bump github/codeql-action from 3.27.6 to 3.27.9 by <code>@app/dependabot</code> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1722">codecov/codecov-action#1722</a></li> <li>Remove mistake from options table by <a href="https://github.com/Acconut"><code>@Acconut</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1718">codecov/codecov-action#1718</a></li> <li>build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 by <code>@app/dependabot</code> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1717">codecov/codecov-action#1717</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov-action/compare/v5.1.1..v5.1.2">https://github.com/codecov/codecov-action/compare/v5.1.1..v5.1.2</a></p> <h2>v5.1.1</h2> <h3>What's Changed</h3> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov-action/compare/v5.1.0..v5.1.1">https://github.com/codecov/codecov-action/compare/v5.1.0..v5.1.1</a></p> <h2>v5.1.0</h2> <h3>What's Changed</h3> <ul> <li>fix: hide unnecessary error on shasum by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1692">codecov/codecov-action#1692</a></li> <li>build(deps): bump github/codeql-action from 3.27.4 to 3.27.5 by <code>@app/dependabot</code> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1701">codecov/codecov-action#1701</a></li> <li>chore(release): wrapper-0.0.29 by <code>@app/codecov-releaser-app</code> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1713">codecov/codecov-action#1713</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/codecov/codecov-action/compare/v5.0.7..v5.1.0">https://github.com/codecov/codecov-action/compare/v5.0.7..v5.1.0</a></p> <h2>v5.0.7</h2> <h3>What's Changed</h3> <ul> <li>fix: use HEAD_REPO by <a href="https://github.com/thomasrockhu-codecov"><code>@thomasrockhu-codecov</code></a> in <a href="https://redirect.github.com/codecov/codecov-action/pull/1690">codecov/codecov-action#1690</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/codecov/codecov-action/commit/5a605bd92782ce0810fa3b8acc235c921b497052"><code>5a605bd</code></a> chore(release): bump to 5.2.0 (<a href="https://redirect.github.com/codecov/codecov-action/issues/1748">#1748</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/5825942583afb2414b3c7097ffae795c7cb4c042"><code>5825942</code></a> Fix typo in README (<a href="https://redirect.github.com/codecov/codecov-action/issues/1747">#1747</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/b1a63834ce744b09ffd721206f6874b967bd8a07"><code>b1a6383</code></a> Th/add commands (<a href="https://redirect.github.com/codecov/codecov-action/issues/1745">#1745</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/6c5b693a58b15cefda3a7403bf51de71c223ef00"><code>6c5b693</code></a> use correct audience when requesting oidc token (<a href="https://redirect.github.com/codecov/codecov-action/issues/1744">#1744</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/ad45165bd4a83d2b1f3765391b25169a62face76"><code>ad45165</code></a> build(deps): bump github/codeql-action from 3.27.9 to 3.28.1 (<a href="https://redirect.github.com/codecov/codecov-action/issues/1742">#1742</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/79ee03789caf775088b189734174ec173bc60c02"><code>79ee037</code></a> build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0 (<a href="https://redirect.github.com/codecov/codecov-action/issues/1743">#1743</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/25fe46e17d692bac1908f2f457f98d2c936d894d"><code>25fe46e</code></a> chore(deps): bump wrapper to 0.0.32 (<a href="https://redirect.github.com/codecov/codecov-action/issues/1740">#1740</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/54a0566d1caf986dcc042eb71da69c0e69d26987"><code>54a0566</code></a> feat: add disable-telem feature (<a href="https://redirect.github.com/codecov/codecov-action/issues/1739">#1739</a>)</li> <li><a href="https://github.com/codecov/codecov-action/commit/adfacf2d276b158264c48ff298490fbdf13e4fb6"><code>adfacf2</code></a> fix: remove erroneous linebreak in readme (<a href="https://redirect.github.com/codecov/codecov-action/issues/1734">#1734</a>)</li> <li>See full diff in <a href="https://github.com/codecov/codecov-action/compare/1e68e06f1dbfde0e4cefc87efeba9e4643565303...5a605bd92782ce0810fa3b8acc235c921b497052">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
## Description This PR builds off defenseunicorns#1732 to address defenseunicorns#1713 ## Related Issue Fixes defenseunicorns#1713 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed --------- Co-authored-by: Case Wylie <[email protected]>
…icorns#1735) ## Description Resolve max-params warning for src/lib/telemetry/metrics.ts ... End to End Test: <!-- if applicable --> (See [Pepr Excellent Examples](https://github.com/defenseunicorns/pepr-excellent-examples)) ## Related Issue Fixes defenseunicorns#1699 ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed --------- Co-authored-by: Case Wylie <[email protected]> Co-authored-by: Sam Mayer <[email protected]>
## Description Added coverage to webhooks to ensure correctness of webhook rules, config and values. ## Related Issue Fixes defenseunicorns#1656 <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed Signed-off-by: Case Wylie <[email protected]> Co-authored-by: Sam Mayer <[email protected]>
## Description Add shellcheck to project, - couldn't make it to fix sh files automatically. ... End to End Test: <!-- if applicable --> (See [Pepr Excellent Examples](https://github.com/defenseunicorns/pepr-excellent-examples)) ## Related Issue Fixes defenseunicorns#1706 <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [x] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed --------- Signed-off-by: t.azrab <[email protected]> Co-authored-by: Sam Mayer <[email protected]> Co-authored-by: Case Wylie <[email protected]>
## Description Citing the `README` in a preso I am giving tomorrow and I noticed some partial issues that may be said in a way that is more clear. ## Related Issue Fixes # <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed --------- Signed-off-by: Case Wylie <[email protected]> Co-authored-by: Sam Mayer <[email protected]>
…#1747) ## Description Resolve `max-params` warning in `src/lib/controller/index.ts` ... End to End Test: <!-- if applicable --> (See [Pepr Excellent Examples](https://github.com/defenseunicorns/pepr-excellent-examples)) ## Related Issue Fixes defenseunicorns#1698 ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed Co-authored-by: Case Wylie <[email protected]>
…seunicorns#1749) ## Description By overriding glob, we were able to remove inflight, both were deprecated. This seems to still work as expected passing all tests. _Before_ ```plaintext [email protected] /Users/cmwylie19/pepr ├─┬ [email protected] │ └─┬ [email protected] │ └─┬ [email protected] │ └─┬ [email protected] │ └── [email protected] deduped ├─┬ [email protected] │ └─┬ @jest/[email protected] │ ├─┬ @jest/[email protected] │ │ └── [email protected] │ ├─┬ [email protected] │ │ └── [email protected] deduped │ └─┬ [email protected] │ └── [email protected] deduped ├─┬ [email protected] invalid: "3.3.8" from the root project │ └─┬ @kubernetes/[email protected] │ └─┬ [email protected] │ └─┬ [email protected] │ └─┬ [email protected] │ └── [email protected] ├─┬ [email protected] │ └─┬ @sigstore/[email protected] │ └─┬ [email protected] │ └─┬ [email protected] │ └── [email protected] └─┬ [email protected] └─┬ @jest/[email protected] └─┬ [email protected] └─┬ [email protected] └── [email protected] deduped ``` After ```plaintext > npm dedup removed 20 packages, changed 4 packages, and audited 810 packages in 5s 113 packages are looking for funding run `npm fund` for details found 0 vulnerabilities ┌─[cmwylie19@C2WY6FCQVX] - [~/not-pepr/pepr] - [2025-01-30 01:52:06] └─[0] <git:(test_glob_override afe2d26) > npm ls glob [email protected] /Users/cmwylie19/not-pepr/pepr ├─┬ [email protected] │ └─┬ [email protected] │ └─┬ [email protected] │ └─┬ [email protected] │ └── [email protected] deduped ├─┬ [email protected] │ └─┬ @jest/[email protected] │ ├─┬ @jest/[email protected] │ │ └── [email protected] overridden │ ├─┬ [email protected] │ │ └── [email protected] deduped │ └─┬ [email protected] │ └── [email protected] deduped ├─┬ [email protected] │ └─┬ @kubernetes/[email protected] │ └─┬ [email protected] │ └─┬ [email protected] │ └─┬ [email protected] │ └── [email protected] deduped ├─┬ [email protected] │ └─┬ @sigstore/[email protected] │ └─┬ [email protected] │ └─┬ [email protected] │ └── [email protected] deduped └─┬ [email protected] └─┬ @jest/[email protected] └─┬ [email protected] └─┬ [email protected] └── [email protected] deduped > npm ls inflight [email protected] /Users/cmwylie19/not-pepr/pepr └── (empty) ``` ## Related Issue Fixes defenseunicorns#1665 Fixes defenseunicorns#1668 <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [ ] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed Signed-off-by: Case Wylie <[email protected]> Co-authored-by: Sam Mayer <[email protected]>
…unicorns#1751) Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.88.3 to 3.88.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's releases</a>.</em></p> <blockquote> <h2>v3.88.4</h2> <h2>What's Changed</h2> <ul> <li>Update postman metadata by <a href="https://github.com/casey-tran"><code>@casey-tran</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/3852">trufflesecurity/trufflehog#3852</a></li> <li>Support exclude regexes, excludewords, and entropy filters for custom detectors by <a href="https://github.com/zricethezav"><code>@zricethezav</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/3860">trufflesecurity/trufflehog#3860</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.88.3...v3.88.4">https://github.com/trufflesecurity/trufflehog/compare/v3.88.3...v3.88.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/853e1e8d249fd1e29d0fcc7280d29b03df3d643d"><code>853e1e8</code></a> Support exclude regexes, excludewords, and entropy filters for custom detecto...</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/9ecaf075c5e7bb593e23634557b869ade366cf08"><code>9ecaf07</code></a> Update postman metadata (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/3852">#3852</a>)</li> <li>See full diff in <a href="https://github.com/trufflesecurity/trufflehog/compare/b6b00bbe5460109a21287b6612bd68a86bf060c2...853e1e8d249fd1e29d0fcc7280d29b03df3d643d">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…eunicorns#1755) Bumps the development-dependencies group with 2 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [shellcheck](https://github.com/gunar/shellcheck). Updates `@types/node` from 22.12.0 to 22.13.0 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> Updates `shellcheck` from 3.0.0 to 3.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gunar/shellcheck/releases">shellcheck's releases</a>.</em></p> <blockquote> <h2>v3.1.0</h2> <ul> <li>no changes</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/gunar/shellcheck/blob/main/CHANGELOG.md">shellcheck's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/gunar/shellcheck/releases/tag/v3.1.0">v3.1.0</a> - 2025-01-31</h2> <h3>Added</h3> <ul> <li>Configure binary path via environment variable <code>SHELLCHECKJS_BIN</code></li> </ul> <h3>Removed</h3> <ul> <li><code>binDir</code> configuration option. Configuration <code>bin</code> now contains the complete path to the ShellCheck executable binary (including both binary directory and binary name)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gunar/shellcheck/commit/e42457bed525063851c7a7f2f5173c8460e504e3"><code>e42457b</code></a> Merge pull request <a href="https://redirect.github.com/gunar/shellcheck/issues/135">#135</a> from carlocorradini/bin</li> <li><a href="https://github.com/gunar/shellcheck/commit/310be6dc6133a45ada5e383d82f7c2c1383b5038"><code>310be6d</code></a> feat: configure shellcheck binary via env variable</li> <li>See full diff in <a href="https://github.com/gunar/shellcheck/compare/v3.0.0...v3.1.0">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | @types/node | [>= 20.a, < 21] | </details> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
## Description Regularly-scheduled update of dependencies. End to End Test: <!-- if applicable --> (See [Pepr Excellent Examples](https://github.com/defenseunicorns/pepr-excellent-examples)) ## Related Issue Fixes defenseunicorns#1756 ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [ ] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [ ] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed
…eunicorns#1760) Bumps the development-dependencies group with 2 updates: [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) and [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional). Updates `@commitlint/cli` from 19.6.1 to 19.7.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/conventional-changelog/commitlint/releases"><code>@commitlint/cli</code>'s releases</a>.</em></p> <blockquote> <h2>v19.7.1</h2> <h2><a href="https://github.com/conventional-changelog/commitlint/compare/v19.7.0...v19.7.1">19.7.1</a> (2025-02-02)</h2> <h3>Bug Fixes</h3> <ul> <li>fix(config-nx-scopes): fix for projects without explicit targets by <a href="https://github.com/gperdomor"><code>@gperdomor</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4261">conventional-changelog/commitlint#4261</a></li> <li>fix(is-ignored): introduce security validation for custom ignore functions by <a href="https://github.com/edodusi"><code>@edodusi</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4258">conventional-changelog/commitlint#4258</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/edodusi"><code>@edodusi</code></a> made their first contribution in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4258">conventional-changelog/commitlint#4258</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/conventional-changelog/commitlint/compare/v19.7.0...v19.7.1">https://github.com/conventional-changelog/commitlint/compare/v19.7.0...v19.7.1</a></p> <h2>v19.7.0</h2> <h1><a href="https://github.com/conventional-changelog/commitlint/compare/v19.6.1...v19.7.0">19.7.0</a> (2025-01-04)</h1> <h3>Features</h3> <ul> <li>feat: support lerna 7 and 8 by <a href="https://github.com/benquarmby"><code>@benquarmby</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4221">conventional-changelog/commitlint#4221</a></li> </ul> <p>#Chore</p> <ul> <li>docs: use ` to escape dollar signs in Windows by <a href="https://github.com/wy-luke"><code>@wy-luke</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4213">conventional-changelog/commitlint#4213</a></li> <li>chore: Update README.md by <a href="https://github.com/JaviRamosLab"><code>@JaviRamosLab</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4223">conventional-changelog/commitlint#4223</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/wy-luke"><code>@wy-luke</code></a> made their first contribution in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4213">conventional-changelog/commitlint#4213</a></li> <li><a href="https://github.com/JaviRamosLab"><code>@JaviRamosLab</code></a> made their first contribution in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4223">conventional-changelog/commitlint#4223</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/conventional-changelog/commitlint/compare/v19.6.1...v19.7.0">https://github.com/conventional-changelog/commitlint/compare/v19.6.1...v19.7.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md"><code>@commitlint/cli</code>'s changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/conventional-changelog/commitlint/compare/v19.7.0...v19.7.1">19.7.1</a> (2025-02-02)</h2> <p><strong>Note:</strong> Version bump only for package <code>@commitlint/cli</code></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/conventional-changelog/commitlint/commit/b0e851c73ccd6c71f4f0f16af370e566c773f43c"><code>b0e851c</code></a> v19.7.1</li> <li>See full diff in <a href="https://github.com/conventional-changelog/commitlint/commits/v19.7.1/@commitlint/cli">compare view</a></li> </ul> </details> <br /> Updates `@commitlint/config-conventional` from 19.6.0 to 19.7.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/conventional-changelog/commitlint/releases"><code>@commitlint/config-conventional</code>'s releases</a>.</em></p> <blockquote> <h2>v19.7.1</h2> <h2><a href="https://github.com/conventional-changelog/commitlint/compare/v19.7.0...v19.7.1">19.7.1</a> (2025-02-02)</h2> <h3>Bug Fixes</h3> <ul> <li>fix(config-nx-scopes): fix for projects without explicit targets by <a href="https://github.com/gperdomor"><code>@gperdomor</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4261">conventional-changelog/commitlint#4261</a></li> <li>fix(is-ignored): introduce security validation for custom ignore functions by <a href="https://github.com/edodusi"><code>@edodusi</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4258">conventional-changelog/commitlint#4258</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/edodusi"><code>@edodusi</code></a> made their first contribution in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4258">conventional-changelog/commitlint#4258</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/conventional-changelog/commitlint/compare/v19.7.0...v19.7.1">https://github.com/conventional-changelog/commitlint/compare/v19.7.0...v19.7.1</a></p> <h2>v19.7.0</h2> <h1><a href="https://github.com/conventional-changelog/commitlint/compare/v19.6.1...v19.7.0">19.7.0</a> (2025-01-04)</h1> <h3>Features</h3> <ul> <li>feat: support lerna 7 and 8 by <a href="https://github.com/benquarmby"><code>@benquarmby</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4221">conventional-changelog/commitlint#4221</a></li> </ul> <p>#Chore</p> <ul> <li>docs: use ` to escape dollar signs in Windows by <a href="https://github.com/wy-luke"><code>@wy-luke</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4213">conventional-changelog/commitlint#4213</a></li> <li>chore: Update README.md by <a href="https://github.com/JaviRamosLab"><code>@JaviRamosLab</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4223">conventional-changelog/commitlint#4223</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/wy-luke"><code>@wy-luke</code></a> made their first contribution in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4213">conventional-changelog/commitlint#4213</a></li> <li><a href="https://github.com/JaviRamosLab"><code>@JaviRamosLab</code></a> made their first contribution in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4223">conventional-changelog/commitlint#4223</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/conventional-changelog/commitlint/compare/v19.6.1...v19.7.0">https://github.com/conventional-changelog/commitlint/compare/v19.6.1...v19.7.0</a></p> <h2>v19.6.1</h2> <h2><a href="https://github.com/conventional-changelog/commitlint/compare/v19.6.0...v19.6.1">19.6.1</a> (2024-12-15)</h2> <h3>Bug Fixes</h3> <ul> <li>build: fix install git in container by <a href="https://github.com/jeohist"><code>@jeohist</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4197">conventional-changelog/commitlint#4197</a></li> <li>fix: force bump for container usage by <a href="https://github.com/escapedcat"><code>@escapedcat</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4200">conventional-changelog/commitlint#4200</a></li> </ul> <h2>Chore & docs</h2> <ul> <li>docs: add setup guide for deno by <a href="https://github.com/typed-sigterm"><code>@typed-sigterm</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4199">conventional-changelog/commitlint#4199</a></li> <li>docs: use GH base sha to lint PR commits by <a href="https://github.com/robjweiss"><code>@robjweiss</code></a> in <a href="https://redirect.github.com/conventional-changelog/commitlint/pull/4198">conventional-changelog/commitlint#4198</a></li> </ul> <h2>New Contributors</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md"><code>@commitlint/config-conventional</code>'s changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/conventional-changelog/commitlint/compare/v19.7.0...v19.7.1">19.7.1</a> (2025-02-02)</h2> <p><strong>Note:</strong> Version bump only for package <code>@commitlint/config-conventional</code></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/conventional-changelog/commitlint/commit/b0e851c73ccd6c71f4f0f16af370e566c773f43c"><code>b0e851c</code></a> v19.7.1</li> <li>See full diff in <a href="https://github.com/conventional-changelog/commitlint/commits/v19.7.1/@commitlint/config-conventional">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
## Description Update the script that the release workflow uses to update `package.json` version before pushing to NPM ## Related Issue Fixes # <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed Signed-off-by: Case Wylie <[email protected]>
## Description While working on defenseunicorns#1759 I encountered some issues with journey tests that relied on [pepr-upgrade-test](https://github.com/defenseunicorns/pepr-upgrade-test). This PR dynamically builds & recognizes the relevant test artifacts before running an upgrade test. As a result, pepr-upgrade-test can be archived. End to End Test: <!-- if applicable --> (See [Pepr Excellent Examples](https://github.com/defenseunicorns/pepr-excellent-examples)) ## Related Issue Hotfix Relates to defenseunicorns#1759 ## Type of change - [x] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [ ] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed --------- Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Co-authored-by: Case Wylie <[email protected]>
## Description The assets class does not have unit tests. The purpose of this PR is to add coverage to ensure the class is working as expected. Due to the use of dependency injection we are loosely helper functions with the method and functions on the assets class that rely on members of the assets class. Due to that, the intent of this PR is to ensure those injected functions are being with the correct members of the assets class and to hedge against accidentally change by ensuring certain functions are called a certain number of times. ## Related Issue Fixes defenseunicorns#1655 <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed --------- Signed-off-by: Case Wylie <[email protected]> Co-authored-by: Sam Mayer <[email protected]>
…defenseunicorns#1762) ## Description `build --version` command is not being used, we need to deprecate it before the release so that we can remove it next release. ## Related Issue Fixes defenseunicorns#1724 <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed Signed-off-by: Case Wylie <[email protected]> Co-authored-by: Sam Mayer <[email protected]>
## Description This PR resolves circular dependencies in the project. ## Related Issue Fixes defenseunicorns#1631, defenseunicorns#1630, defenseunicorns#1629, defenseunicorns#1625, defenseunicorns#1624, defenseunicorns#1623. <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed
…pendencies group (defenseunicorns#1769) Bumps the development-dependencies group with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node). Updates `@types/node` from 22.13.0 to 22.13.1 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> <details> <summary>Most Recent Ignore Conditions Applied to This Pull Request</summary> | Dependency Name | Ignore Conditions | | --- | --- | | @types/node | [>= 20.a, < 21] | </details> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…unicorns#1773) Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 3.88.4 to 3.88.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's releases</a>.</em></p> <blockquote> <h2>v3.88.5</h2> <h2>What's Changed</h2> <ul> <li>Enable Auth0 by <a href="https://github.com/zricethezav"><code>@zricethezav</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/3857">trufflesecurity/trufflehog#3857</a></li> <li>Create detector for Azure refresh tokens by <a href="https://github.com/rgmz"><code>@rgmz</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/2978">trufflesecurity/trufflehog#2978</a></li> <li>fix base on initial commits by <a href="https://github.com/bobidle"><code>@bobidle</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/3586">trufflesecurity/trufflehog#3586</a></li> <li>[Feat] PrivateKey Analyzer by <a href="https://github.com/abmussani"><code>@abmussani</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/3854">trufflesecurity/trufflehog#3854</a></li> <li>[SCAN-165] Use Err Reporting by <a href="https://github.com/0x1"><code>@0x1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/3862">trufflesecurity/trufflehog#3862</a></li> <li>Use smaller array to count commits in the GHA action by <a href="https://github.com/sryabkov"><code>@sryabkov</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/3864">trufflesecurity/trufflehog#3864</a></li> <li>Compress release with UPX by <a href="https://github.com/dustin-decker"><code>@dustin-decker</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/3456">trufflesecurity/trufflehog#3456</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/sryabkov"><code>@sryabkov</code></a> made their first contribution in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/3864">trufflesecurity/trufflehog#3864</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.88.4...v3.88.5">https://github.com/trufflesecurity/trufflehog/compare/v3.88.4...v3.88.5</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/f19d6e5d2bef8a8ceca2b7d77ec447fc304f8078"><code>f19d6e5</code></a> Compress release with UPX (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/3456">#3456</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/e68e67137c7dc0b2e769c1e011ad5515a17cecb2"><code>e68e671</code></a> Use smaller array to count commits in the GHA action (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/3864">#3864</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/3ee9c2f1af6365e0db6dc036826196bae21d34e7"><code>3ee9c2f</code></a> [SCAN-165] Use Err Reporting (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/3862">#3862</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/69b6d018d5513da17d3430d83a2616a00260514c"><code>69b6d01</code></a> [Feat] PrivateKey Analyzer (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/3854">#3854</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/f11c9279ede9fa84838bf0ec0cc1a5be3f8fc9e4"><code>f11c927</code></a> fix base on initial commits (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/3586">#3586</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/1f3395757d984b2589ada215e4f97a75a722cc4c"><code>1f33957</code></a> feat(detectors): create azure refresh token (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/2978">#2978</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/6d3ba1f7653822c0f8ac9a9af56daaa2cd8bbcad"><code>6d3ba1f</code></a> Enable Auth0 (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/3857">#3857</a>)</li> <li>See full diff in <a href="https://github.com/trufflesecurity/trufflehog/compare/853e1e8d249fd1e29d0fcc7280d29b03df3d643d...f19d6e5d2bef8a8ceca2b7d77ec447fc304f8078">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…icorns#1775) Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.8.0 to 3.9.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/setup-buildx-action/releases">docker/setup-buildx-action's releases</a>.</em></p> <blockquote> <h2>v3.9.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.48.0 to 0.54.0 in <a href="https://redirect.github.com/docker/setup-buildx-action/pull/402">docker/setup-buildx-action#402</a> <a href="https://redirect.github.com/docker/setup-buildx-action/pull/404">docker/setup-buildx-action#404</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.8.0...v3.9.0">https://github.com/docker/setup-buildx-action/compare/v3.8.0...v3.9.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/setup-buildx-action/commit/f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca"><code>f7ce87c</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/404">#404</a> from docker/dependabot/npm_and_yarn/docker/actions-to...</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/aa1e2a0b496d6cd3474071c7b0ab0eea5948de3a"><code>aa1e2a0</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/673e00877621ac201ca3084ec053b85e9b65063e"><code>673e008</code></a> build(deps): bump <code>@docker/actions-toolkit</code> from 0.53.0 to 0.54.0</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/ba31df4664624f17e1b1ef1c9c85ed1ca9463a6d"><code>ba31df4</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/402">#402</a> from docker/dependabot/npm_and_yarn/docker/actions-to...</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/5475af18ec6f58d53e9452495e8db373e6dcb469"><code>5475af1</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/acacad903e45f670c1e2d4638f4ee5f24b03e6b6"><code>acacad9</code></a> build(deps): bump <code>@docker/actions-toolkit</code> from 0.48.0 to 0.53.0</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/6a25f988bdfa969e96a38fc9f843ea31e0b5df27"><code>6a25f98</code></a> Merge pull request <a href="https://redirect.github.com/docker/setup-buildx-action/issues/396">#396</a> from crazy-max/bake-v6</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/ca1af179f5dc207dc723446d832eb3f77d3912dc"><code>ca1af17</code></a> update bake-action to v6</li> <li>See full diff in <a href="https://github.com/docker/setup-buildx-action/compare/6524bf65af31da8d45b59e8c27de4bd072b392f5...f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
## Description CVE-2025-0395 flagged in our upstream container images an causes CI to fail. While we wait on a fix, we've opted to ignore this finding so that CI pipelines are unblocked. We'll remove this suppression within 60 days (see defenseunicorns#1778). End to End Test: <!-- if applicable --> (See [Pepr Excellent Examples](https://github.com/defenseunicorns/pepr-excellent-examples)) ## Related Issue hotfix ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed
## Description Reduce max-statements in watch-processor around watch. This PR depends on a KFC release ## Related Issue Fixes defenseunicorns#1697 <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed --------- Signed-off-by: Case Wylie <[email protected]> Co-authored-by: Sam Mayer <[email protected]>
… 2 updates (defenseunicorns#1771) Bumps the production-dependencies group with 2 updates in the / directory: [kubernetes-fluent-client](https://github.com/defenseunicorns/kubernetes-fluent-client) and [sigstore](https://github.com/sigstore/sigstore-js). Updates `kubernetes-fluent-client` from 3.3.8 to 3.4.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/defenseunicorns/kubernetes-fluent-client/releases">kubernetes-fluent-client's releases</a>.</em></p> <blockquote> <h2>v3.4.0</h2> <h1><a href="https://github.com/defenseunicorns/kubernetes-fluent-client/compare/v3.3.8...v3.4.0">3.4.0</a> (2025-02-05)</h1> <h3>Features</h3> <ul> <li>expose watcher class types (<a href="https://redirect.github.com/defenseunicorns/kubernetes-fluent-client/issues/555">#555</a>) (<a href="https://github.com/defenseunicorns/kubernetes-fluent-client/commit/90638e28de443422e79ae6ce84d42cdd0bcfcdfb">90638e2</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/defenseunicorns/kubernetes-fluent-client/commit/90638e28de443422e79ae6ce84d42cdd0bcfcdfb"><code>90638e2</code></a> feat: expose watcher class types (<a href="https://redirect.github.com/defenseunicorns/kubernetes-fluent-client/issues/555">#555</a>)</li> <li><a href="https://github.com/defenseunicorns/kubernetes-fluent-client/commit/517c3651d813b5b8edd1ec5f6e41048238f9b0d9"><code>517c365</code></a> chore(deps-dev): bump the development-dependencies group with 2 updates (<a href="https://redirect.github.com/defenseunicorns/kubernetes-fluent-client/issues/554">#554</a>)</li> <li><a href="https://github.com/defenseunicorns/kubernetes-fluent-client/commit/c7b11d0fc62f95dec5d67929e6390617eaa1e2f6"><code>c7b11d0</code></a> chore(deps-dev): bump the development-dependencies group with 2 updates (<a href="https://redirect.github.com/defenseunicorns/kubernetes-fluent-client/issues/552">#552</a>)</li> <li><a href="https://github.com/defenseunicorns/kubernetes-fluent-client/commit/efd691f52860b2dc304ba3b1a8d1dc77968cd16d"><code>efd691f</code></a> chore(deps): bump github/codeql-action from 3.28.6 to 3.28.8 (<a href="https://redirect.github.com/defenseunicorns/kubernetes-fluent-client/issues/551">#551</a>)</li> <li><a href="https://github.com/defenseunicorns/kubernetes-fluent-client/commit/3d817ef3495b8c8980a58ff3b4dc56de11a8cab0"><code>3d817ef</code></a> chore: remove nock (<a href="https://redirect.github.com/defenseunicorns/kubernetes-fluent-client/issues/550">#550</a>)</li> <li><a href="https://github.com/defenseunicorns/kubernetes-fluent-client/commit/d075dbc058e2cd09833a2e2403ea3bee480ba958"><code>d075dbc</code></a> chore(deps-dev): bump the development-dependencies group across 1 directory w...</li> <li><a href="https://github.com/defenseunicorns/kubernetes-fluent-client/commit/a94d147bfddbe3a0b6e800ccdf0c2b8d9dd70f70"><code>a94d147</code></a> chore(deps): bump github/codeql-action from 3.28.5 to 3.28.6 (<a href="https://redirect.github.com/defenseunicorns/kubernetes-fluent-client/issues/549">#549</a>)</li> <li><a href="https://github.com/defenseunicorns/kubernetes-fluent-client/commit/a5a908c2a150946d9a928314243b4496ed5cf091"><code>a5a908c</code></a> chore(deps): bump github/codeql-action from 3.28.4 to 3.28.5 (<a href="https://redirect.github.com/defenseunicorns/kubernetes-fluent-client/issues/546">#546</a>)</li> <li><a href="https://github.com/defenseunicorns/kubernetes-fluent-client/commit/b03aa5b987621e60fd034cd9d137d27eeb827f11"><code>b03aa5b</code></a> chore(deps): bump actions/setup-node from 4.1.0 to 4.2.0 (<a href="https://redirect.github.com/defenseunicorns/kubernetes-fluent-client/issues/547">#547</a>)</li> <li><a href="https://github.com/defenseunicorns/kubernetes-fluent-client/commit/1a81746f30156e793665179c981672cc775a7a84"><code>1a81746</code></a> chore(deps-dev): bump lint-staged from 15.4.1 to 15.4.2 in the development-de...</li> <li>Additional commits viewable in <a href="https://github.com/defenseunicorns/kubernetes-fluent-client/compare/v3.3.8...v3.4.0">compare view</a></li> </ul> </details> <br /> Updates `sigstore` from 3.0.0 to 3.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sigstore/sigstore-js/releases">sigstore's releases</a>.</em></p> <blockquote> <h2>[email protected]</h2> <h3>Minor Changes</h3> <ul> <li>74cc6c5: Bump <code>@sigstore/protobuf-specs</code> from 0.3.2 to 0.4.0</li> </ul> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [c9abfaa]</li> <li>Updated dependencies [74cc6c5] <ul> <li><code>@sigstore/tuf</code><a href="https://github.com/3"><code>@3</code></a>.1.0</li> <li><code>@sigstore/bundle</code><a href="https://github.com/3"><code>@3</code></a>.1.0</li> <li><code>@sigstore/verify</code><a href="https://github.com/2"><code>@2</code></a>.1.0</li> <li><code>@sigstore/sign</code><a href="https://github.com/3"><code>@3</code></a>.1.0</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sigstore/sigstore-js/commit/06cd267cbdc2eeaa04294995622db9f6ad2fa7cf"><code>06cd267</code></a> Version Packages (<a href="https://redirect.github.com/sigstore/sigstore-js/issues/1361">#1361</a>)</li> <li><a href="https://github.com/sigstore/sigstore-js/commit/a045bb6ad6675fd65140ab2a18fb2e77466f6792"><code>a045bb6</code></a> bump express from 4.21.1. to 4.21.2 (<a href="https://redirect.github.com/sigstore/sigstore-js/issues/1367">#1367</a>)</li> <li><a href="https://github.com/sigstore/sigstore-js/commit/74cc6c5df062771ef7f892e2189b1407715647d1"><code>74cc6c5</code></a> Bump <code>@sigstore/protobuf-specs</code> from 0.3.2 to 0.4.0 (<a href="https://redirect.github.com/sigstore/sigstore-js/issues/1365">#1365</a>)</li> <li><a href="https://github.com/sigstore/sigstore-js/commit/58777aff1040e61abbf6196d3c929647f271a76c"><code>58777af</code></a> Bump the dev-deps group with 3 updates (<a href="https://redirect.github.com/sigstore/sigstore-js/issues/1364">#1364</a>)</li> <li><a href="https://github.com/sigstore/sigstore-js/commit/1ddcf9b3d5227d1dac2cb6c645058ab12cc27404"><code>1ddcf9b</code></a> Bump github/codeql-action from 3.28.5 to 3.28.8 in the minor-patch group (<a href="https://redirect.github.com/sigstore/sigstore-js/issues/1366">#1366</a>)</li> <li><a href="https://github.com/sigstore/sigstore-js/commit/c9abfaaa20c4efbca1495bedb66075ee12c41914"><code>c9abfaa</code></a> Update TUF seed files (<a href="https://redirect.github.com/sigstore/sigstore-js/issues/1356">#1356</a>)</li> <li><a href="https://github.com/sigstore/sigstore-js/commit/26d40e270dfea37ee8f07934fde98a7343c91204"><code>26d40e2</code></a> Bump the dev-deps group with 5 updates (<a href="https://redirect.github.com/sigstore/sigstore-js/issues/1359">#1359</a>)</li> <li><a href="https://github.com/sigstore/sigstore-js/commit/71d3b4f97714b32955cfde3243504a5fe0a51117"><code>71d3b4f</code></a> Bump the minor-patch group with 3 updates (<a href="https://redirect.github.com/sigstore/sigstore-js/issues/1357">#1357</a>)</li> <li><a href="https://github.com/sigstore/sigstore-js/commit/c36ace7b8fc706e3349cf838304afc2a65380143"><code>c36ace7</code></a> Bump the dev-deps group with 2 updates (<a href="https://redirect.github.com/sigstore/sigstore-js/issues/1354">#1354</a>)</li> <li><a href="https://github.com/sigstore/sigstore-js/commit/3d15de370217720b8363469fc65ab66ca7713622"><code>3d15de3</code></a> Bump the dev-deps group across 1 directory with 6 updates (<a href="https://redirect.github.com/sigstore/sigstore-js/issues/1352">#1352</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sigstore/sigstore-js/compare/[email protected]@3.1.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> --------- Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Case Wylie <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Case Wylie <[email protected]>
## Description Promotes linter rule from a warning to an error. End to End Test: <!-- if applicable --> (See [Pepr Excellent Examples](https://github.com/defenseunicorns/pepr-excellent-examples)) ## Related Issue Fixes defenseunicorns#1780 ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed Co-authored-by: Case Wylie <[email protected]>
Signed-off-by: Case Wylie <[email protected]>
…corns#1763) ## Description Resolve max-statements warning in src/lib/processors/watch-processor.test.ts ... End to End Test: <!-- if applicable --> (See [Pepr Excellent Examples](https://github.com/defenseunicorns/pepr-excellent-examples)) ## Related Issue Fixes defenseunicorns#1696 ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [ ] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed --------- Co-authored-by: Sam Mayer <[email protected]> Co-authored-by: Case Wylie <[email protected]>
auto-merge was automatically disabled
February 10, 2025 12:33
Head branch was pushed to by a user without write access
tamirazrab
force-pushed
the
1700-resolve-max-param-sdk
branch
from
d77ff1a to
d91797a
Compare
|
I messed up rebase, closing in favour of new PR #1787 |
github-merge-queue bot
pushed a commit
that referenced
this pull request
Feb 10, 2025
## Description There is currently only one maxParams error, should we go ahead and enforce this with an error and then get this #1728 ready to merge with deprecation warnings? ## Related Issue Fixes # <!-- or --> Relates to # ## Type of change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Other (security config, docs update, etc) ## Checklist before merging - [x] Unit, [Journey](https://github.com/defenseunicorns/pepr/tree/main/journey), [E2E Tests](https://github.com/defenseunicorns/pepr-excellent-examples), [docs](https://github.com/defenseunicorns/pepr/tree/main/docs), [adr](https://github.com/defenseunicorns/pepr/tree/main/adr) added or updated as needed - [x] [Contributor Guide Steps](https://docs.pepr.dev/main/contribute/#submitting-a-pull-request) followed Signed-off-by: Case Wylie <[email protected]> Co-authored-by: Sam Mayer <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Resolve
max-paramswarning forsrc/sdk/sdk.ts...
End to End Test:
(See Pepr Excellent Examples)
Related Issue
Relates to #1700
Type of change
Checklist before merging