Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update all non-major dependencies #371

Merged
merged 1 commit into from
Nov 6, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 6, 2023

Mend Renovate

This PR contains the following updates:

Package Update Change Age Adoption Passing Confidence
FairwindsOps/polaris patch 8.5.1 -> 8.5.2 age adoption passing confidence
armosec/kubescape patch 3.0.0 -> 3.0.1 age adoption passing confidence
checkov patch ==3.0.14 -> ==3.0.21 age adoption passing confidence
helm/chart-testing minor 3.9.0 -> 3.10.1 age adoption passing confidence
kyverno/kyverno patch 1.10.3 -> 1.10.4 age adoption passing confidence
stackrox/kube-linter patch v0.6.4 -> v0.6.5 age adoption passing confidence

Release Notes

FairwindsOps/polaris (FairwindsOps/polaris)

v8.5.2

Compare Source

Changelog

You can verify the signature of the checksums.txt file using cosign.

cosign verify-blob checksums.txt --signature=checksums.txt.sig  --key https://artifacts.fairwinds.com/cosign.pub
armosec/kubescape (armosec/kubescape)

v3.0.1

Compare Source

Kubescape v3.0.1 Release Notes

What's Changed

Full Changelog: kubescape/kubescape@v3.0.0...v3.0.1


Kubescape v3.0 Release Notes

🚀 Enhancements

Restructured CLI Output

The command line output has been reorganized for better clarity and readability.

overview-v3

Independence from ARMO Platform

With this release, Kubescape no longer has any direct or indirect dependencies on the ARMO platform.


🌟 New Capabilities

1. Scan Images for Vulnerabilities

You can now use Kubescape to scan an image for potential vulnerabilities.

kubescape scan image nginx
2. Patch Images (Experimental)

In our experimental phase, Kubescape introduces the capability to patch an image, which can help in reducing the number of vulnerabilities.

kubescape patch image nginx

Read more about this capability here.

3. Trigger Scans with Kubescape-Operator

Kubescape now allows you to trigger a scan that will be executed by the Kubescape-Operator.

Configuration scanning:

kubescape operator scan configurations

Image vulnerabilities scanning:

kubescape operator scan vulnerabilities
bridgecrewio/checkov (checkov)

v3.0.21

Feature
  • terraform: Ensure App Service Environment is zone redundant - #​5662
  • terraform: Ensure that Standard Replication is enabled - #​5649
Bug Fix
  • sca: Setting only relevant cves for the extracted reachable functions with risk factor of ReachableFunction as True - #​5715
  • terraform: CKV_AWS_208 valid Amazon MQ versions - #​5653

v3.0.19

Feature
  • sca: adjusting the cli-output to support indicating of reachable functions - #​5713
  • terraform: Adding YAML based build time policies for corresponding PC runtime policies - #​5637
  • terraform: bigtable deletion protection [depends on #​5625] - #​5626
  • terraform: drop and deletion checks for spanner - #​5625
Bug Fix
  • sast: add cveid to reachability report - #​5708

v3.0.16

Feature
  • sca: Extending reachability post-runner in checkov and enriching cves with ReachableFunction data - #​5707

v3.0.15

Bug Fix
  • general: fix duplicate components in CycloneDX report - #​5705
helm/chart-testing (helm/chart-testing)

v3.10.1

Compare Source

What's Changed

Full Changelog: helm/chart-testing@v3.10.0...v3.10.1

v3.10.0

Compare Source

What's Changed

New Contributors

Full Changelog: helm/chart-testing@v3.9.0...v3.10.0

kyverno/kyverno (kyverno/kyverno)

v1.10.4

Compare Source

What's Changed

Full Changelog: kyverno/kyverno@v1.10.3...v1.10.4

stackrox/kube-linter (stackrox/kube-linter)

v0.6.5

Compare Source

Changes

✔️ New checks

🐛 Bug Fixes

⬆️ Dependencies

60 changes

Full Changelog: stackrox/kube-linter@v0.6.4...0.6.5


Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Copy link

github-actions bot commented Nov 6, 2023

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 4 0 0.09s
✅ BASH bash-exec 4 0 0.04s
✅ BASH shellcheck 4 0 0.15s
✅ BASH shfmt 4 0 0.02s
✅ DOCKERFILE hadolint 1 0 1.08s
✅ EDITORCONFIG editorconfig-checker 47 0 0.1s
✅ JSON eslint-plugin-jsonc 4 0 2.52s
✅ JSON jsonlint 4 0 0.29s
✅ JSON npm-package-json-lint yes no 0.76s
✅ JSON prettier 4 0 0.72s
✅ JSON v8r 4 0 5.59s
⚠️ MARKDOWN markdownlint 5 9 0.77s
✅ REPOSITORY checkov yes no 15.01s
✅ REPOSITORY devskim yes no 1.76s
✅ REPOSITORY gitleaks yes no 0.17s
✅ REPOSITORY git_diff yes no 0.01s
✅ REPOSITORY grype yes no 13.48s
✅ REPOSITORY kics yes no 47.67s
✅ REPOSITORY secretlint yes no 0.76s
✅ REPOSITORY syft yes no 0.34s
✅ REPOSITORY trivy yes no 10.12s
✅ REPOSITORY trivy-sbom yes no 2.59s
✅ REPOSITORY trufflehog yes no 4.02s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

MegaLinter is graciously provided by OX Security

@renovate renovate bot merged commit b2c20e4 into master Nov 6, 2023
8 checks passed
@renovate renovate bot deleted the renovate/all-minor-patch branch November 6, 2023 03:48
@chgl
Copy link
Owner

chgl commented Nov 6, 2023

🎉 This PR is included in version 2.2.17 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

@chgl chgl added the released label Nov 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant