v4.11.0 #2793

J12934 announced in Releases

J12934
Dec 4, 2024
Maintainer

What's Changed

🚓 Security Scanner

Upgraded nuclei from v3.3.5 to v3.3.6 @secureCodeBoxBot ([SCB-Bot] Upgraded nuclei from v3.3.5 to v3.3.6 #2778)
Upgraded trivy from 0.57.0 to 0.58.0 @secureCodeBoxBot ([SCB-Bot] Upgraded trivy from 0.57.0 to 0.57.1 #2765, [SCB-Bot] Upgraded trivy from 0.57.1 to 0.58.0 #2791)
Upgraded trivy-sbom from 0.57.0 to 0.58.0 @secureCodeBoxBot ([SCB-Bot] Upgraded trivy-sbom from 0.57.0 to 0.57.1 #2764, [SCB-Bot] Upgraded trivy-sbom from 0.57.1 to 0.58.0 #2790)

🐛 Bug Fixes

Handle 'Packages' attribute in Trivy parser by @BorisShek in #2689 Handle 'Packages' attribute in Trivy parser #2727
Fix Duplicate Env Vars Added To Hook Kubernetes Job by @J12934 in Fix Duplicate Env Vars Added To Hook Kubernetes Job #2779

📚 Documentation

Adapt 'location' attribute in Trivy parser to match a URL format by @BorisShek in https://github.com/secureCodeBox/
#2324 Adapt 'location' attribute in Trivy parser to match a URL format #2725

🔧 Maintenance

Replace release drafter config with build in github config by @J12934 in Replace release drafter config with build in github config #2792
Added workflow that adds bot PRs directly into To Review column by @Reet00 in Added workflow that adds bot PRs directly into To Review column #2758

📌 Dependencies

Minor dependency updates (16 pull requests). Click to expand.

Bump cross-spawn from 7.0.3 to 7.0.6 in /auto-discovery/kubernetes/pull-secret-extractor/integration-test by @dependabot in Bump cross-spawn from 7.0.3 to 7.0.6 in /auto-discovery/kubernetes/pull-secret-extractor/integration-test #2763
Bump jsonpath-plus from 10.0.1 to 10.2.0 in the npm-security-updates group across 1 directory by @dependabot in Bump jsonpath-plus from 10.0.1 to 10.2.0 in the npm-security-updates group across 1 directory #2762
Temporary Ignore Broken Defect Dojo Client Lib by @Weltraumschaf in Temporary Ignore Broken Defect Dojo Client Lib #2746
Bump jsonpath-plus from 10.0.6 to 10.2.0 in /auto-discovery/kubernetes/pull-secret-extractor/integration-test by @dependabot in Bump jsonpath-plus from 10.0.6 to 10.2.0 in /auto-discovery/kubernetes/pull-secret-extractor/integration-test #2767
Bump @types/node from 22.8.7 to 22.9.0 in the npm-version-updates group by @dependabot in Bump @types/node from 22.8.7 to 22.9.0 in the npm-version-updates group #2751
Bump the npm-version-updates group in /documentation with 18 updates by @dependabot in Bump the npm-version-updates group in /documentation with 18 updates #2771
Bump the npm-version-updates group across 7 directories with 12 updates by @dependabot in Bump the npm-version-updates group across 7 directories with 12 updates #2772
Bump cross-spawn from 7.0.3 to 7.0.6 in the npm-security-updates group by @dependabot in Bump cross-spawn from 7.0.3 to 7.0.6 in the npm-security-updates group #2768
Bump the gradle-version-updates group across 1 directory with 10 updates by @dependabot in Bump the gradle-version-updates group across 1 directory with 10 updates #2770
Bump cross-spawn from 7.0.3 to 7.0.6 in /documentation in the npm-security-updates group by @dependabot in Bump cross-spawn from 7.0.3 to 7.0.6 in /documentation in the npm-security-updates group #2775
Bump the npm-security-updates group across 2 directories with 2 updates by @dependabot in Bump the npm-security-updates group across 2 directories with 2 updates #2777
Bump cross-spawn from 7.0.3 to 7.0.6 in /hooks by @dependabot in Bump cross-spawn from 7.0.3 to 7.0.6 in /hooks #2774
Bump the npm-version-updates group across 7 directories with 3 updates by @dependabot in Bump the npm-version-updates group across 7 directories with 3 updates #2781
Bump the npm-version-updates group in /documentation with 8 updates by @dependabot in Bump the npm-version-updates group in /documentation with 8 updates #2780
Bump @types/node from 22.9.3 to 22.10.1 in /documentation in the npm-version-updates group by @dependabot in Bump @types/node from 22.9.3 to 22.10.1 in /documentation in the npm-version-updates group #2782
Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 5 updates by @dependabot in Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 5 updates #2783
Bump the npm-version-updates group across 7 directories with 3 updates by @dependabot in Bump the npm-version-updates group across 7 directories with 3 updates #2784

Full Changelog: v4.10.0...v4.11.0

This discussion was created from the release v4.11.0.

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment