renovate/38.51.1 package update #26993
Conversation
![octo-sts[bot]](https://avatars.githubusercontent.com/in/801323?s=60&v=4){kind=small}
octo-sts
bot
commented
Aug 23, 2024
octo-sts
bot
commented
Signed-off-by: wolfi-bot <[email protected]>
octo-sts
bot
added
request-version-update
Package renovate: Click to expand/collapsePackage renovate:
(
"""
# Generated by melange
pkgname = renovate
- pkgver = 38.48.0-r0
+ pkgver = 38.51.1-r0
arch = x86_64
- size = 241084545
+ size = 243439396
origin = renovate
pkgdesc = Automated dependency updates. Multi-platform and multi-language.
url =
- commit = 205eecbaa81e07d628a623f012f2bc9672fd57ac
- builddate = 1724356997
+ commit = a7e0b41f3d4dd49c9b5ef813af311cef4782538e
license = AGPL-3.0-only
depend = git
... // 4 identical lines
depend = so:libstdc++.so.6
# vendored = so:better_sqlite3.node=0
- datahash = 0b19d8f3ab870eb739bf31755aed7c9368c99bf95a6e33da290ef3e47157e13a
+ datahash = 6fe0d1c72e369784b2872c456966005cea769f9b908016d480cfbf294103c031
"""
)
Added: /usr/local/lib/node_modules/renovate/dist/modules/manager/bazel-module/parser/maven.d.ts bincapz found differences: Click to expand/collapsetime=2024-08-23T13:55:45.724Z level=ERROR source=github.com/chainguard-dev/bincapz/pkg/action/scan.go:222 msg="unable to process /tmp/wolfictl-apk-1110396399/renovate/usr/local/lib/node_modules/renovate/node_modules/tar-fs/test/fixtures/invalid.tar: extract to temp: failed to extract /tmp/wolfictl-apk-1110396399/renovate/usr/local/lib/node_modules/renovate/node_modules/tar-fs/test/fixtures/invalid.tar: failed to create directory for file: mkdir /tmp/invalid.tar1328286257/foo: not a directory" Deleted: renovate/var/lib/db/sbom/renovate-38.48.0-r0.spdx.json [
|
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| -MEDIUM | net/download | download files | downloadLocation |
| -LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/b51ccadbcd131ab8f9d57f4e58e8 |
Added: renovate/usr/local/lib/node_modules/renovate/node_modules/protobufjs/dist/light/protobuf.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | get system identification | process.versions |
| +MEDIUM | ref/path/relative | references and possibly executes relative path | ./compiled |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval("quire" |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | fs/file/read | reads files | fs.readFile |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/Sending_a https://developers.google.com/protocol-buffers/docs/proto3?hl=en protobufjs/protobuf.js#665 https://github.com/dcodeio/protobuf.js |
Added: renovate/usr/local/lib/node_modules/renovate/node_modules/protobufjs/dist/minimal/protobuf.min.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | get system identification | process.versions |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval("require")(t) |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/dcodeio/protobuf.js |
Added: renovate/usr/local/lib/node_modules/renovate/node_modules/protobufjs/dist/light/protobuf.min.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | get system identification | process.versions |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval("require")(t) |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | fs/file/read | reads files | fs.readFile |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/dcodeio/protobuf.js |
Added: renovate/var/lib/db/sbom/renovate-38.51.1-r0.spdx.json [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | net/download | download files | downloadLocation |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/b85ea9b728c30d17825b68a7bbbc |
Added: renovate/usr/local/lib/node_modules/renovate/node_modules/protobufjs/dist/protobuf.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | get system identification | process.versions |
| +MEDIUM | ref/path/relative | references and possibly executes relative path | ./compiled |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval("quire" |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | fs/file/read | reads files | fs.readFile |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/Sending_a https://developers.google.com/protocol-buffers/docs/proto3?hl=en protobufjs/protobuf.js#665 https://github.com/dcodeio/protobuf.js |
Added: renovate/usr/local/lib/node_modules/renovate/node_modules/protobufjs/dist/protobuf.min.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | get system identification | process.versions |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval("require")(t) |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | encoding/json/decode | Decodes JSON messages | JSON.parse |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | fs/file/read | reads files | fs.readFile |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/dcodeio/protobuf.js |
Added: renovate/usr/local/lib/node_modules/renovate/node_modules/protobufjs/dist/minimal/protobuf.js [⚠️ MEDIUM]
| RISK | KEY | DESCRIPTION | EVIDENCE |
|---|---|---|---|
| +MEDIUM | kernel/platform | get system identification | process.versions |
| +MEDIUM | ref/path/relative | references and possibly executes relative path | ./compiled |
| +MEDIUM | techniques/code_eval | evaluate code dynamically using eval() | eval("quire" |
| +LOW | encoding/base64 | Supports base64 encoded strings | base64 |
| +LOW | encoding/json/encode | encodes JSON | JSON.stringify |
| +LOW | ref/site/url | contains embedded HTTPS URLs | https://developers.google.com/protocol-buffers/docs/proto3?hl=en protobufjs/protobuf.js#665 https://github.com/dcodeio/protobuf.js |
Changed: /tmp/wolfictl-apk-2955451431/renovate/usr/local/lib/node_modules/renovate/node_modules/@smithy/core/dist-es/submodules/cbor/cbor-encode.js
Changed: /tmp/wolfictl-apk-2955451431/renovate/usr/local/lib/node_modules/renovate/node_modules/@smithy/core/dist-cjs/submodules/cbor/index.js
|
Open AI suggestions to solve the build error: |
|
superseded by #27039 |
