#3237 PR merged
: Bump redhat-plumbers-in-action/differential-shellcheck from 5.1.2 to 5.3.0¶
Labels: dependencies
dependabot opened issue at 2024-06-01 11:11:¶
Bumps redhat-plumbers-in-action/differential-shellcheck from 5.1.2 to 5.3.0.
Release notes
Sourced from redhat-plumbers-in-action/differential-shellcheck's releases.
v5.3.0
What's Changed
New
- Update to csdiff 3.3.0 :feet: (#408)
@jamacku
- Add support for different display engines (
csgrep
,sarif-fmt
) :rocket: (#406)@jamacku
Maintenance
Other changes
Full Changelog: https://github.com/redhat-plumbers-in-action/differential-shellcheck/compare/v5.2.0...v5.3.0
v5.2.0
What's Changed
New
- Provide
html
output with detected defects :globe_with_meridians: (#400)@jamacku
- Embed code context into SARIF output :feet: (#399)
@jamacku
- Update csdiff to
3.2.2
:rocket: (#395)@jamacku
- Allow specifying WORK_DIR for intermediate files (#393)
@mpoberezhniy
Documentation
Automation and CI changes
- Add labeler to replace Mergify :label: (#403)
@jamacku
- Remove mergify it caused more problems than it solved :no_good_man: (#402)
@jamacku
Dependency Updates
- build(deps): bump redhat-plumbers-in-action/advanced-issue-labeler from 3.1.0 to 3.2.0 (#398)
@dependabot
Full Changelog: https://github.com/redhat-plumbers-in-action/differential-shellcheck/compare/v5.1.2...v5.2.0
Changelog
Sourced from redhat-plumbers-in-action/differential-shellcheck's changelog.
Changelog
Next release
v5.3.0
- Add support for different display engines (
csgrep
,sarif-fmt
)- Update
csutils
(csdiff
) to 3.3.0
csdiff
: match findings by line content without spaces if availablecsgrep --hash-v1
: matchcsdiff/v1
fingerprint prefixsarif
: initial implementation ofcsdiff/v1
fingerprintssarif
: add descriptions for ShellCheck rulesv5.2.0
- Provide
html
output with detected defects- Allow specifying
WORK_DIR
for intermediate files- Update
csutils
(csdiff
) to 3.2.2
- propagate the imp flag as level in the SARIF format
- propagate
endLine
/endColumn
in the JSON and SARIF formatsv5.1.2
- Fix curl Argument list too long by using a payload.json file - by
@mpoberezhniy
- Container images now based on Fedora 40
- Update
csutils
(csdiff
) to 3.2.1v5.1.0
- Improve shell script detection based on emacs file mode header
v5.0.2
- Container images now based on Fedora 39
- Update
csutils
(csdiff
) to 3.1.0v5.0.0
- Added defect statistics based on severity levels. They are available in the console output and in the job Summary page.
- New option
scan-directory
. Allows to specify directories that will be scanned. By default Differential ShellCheck scans the whole repository.- Show more context for ShellCheck defects and fixes in console output. The defect is now shown in the context of the surrounding code.
- Fix autodetection of shell scripts in DEBUG mode
- Fix detection of changed files that might cause failure on paths with special characters.
- Fix count of scanned files in job Summary when running on push event.
- Drop support for
shell-scripts
input- Drop support for
ignored-codes
input- Update
csutils
(csdiff
) to 3.0.4v4.2.2
... (truncated)
Commits
60c9f2b
v5.3.0c6f8c3e
update CHANGELOGed794da
test: fixis_github_actions()
test4510914
doc: update CHANGELOGaba7ca1
feat: update to csdiff 3.3.01c1e617
doc: update image resolutioncb3a8c3
test:generate_SARIF()
c8739cb
test:is_github_actions()
fea9835
test: use function to check if scripts run in unit tests environment5665c85
feat: add support for different display engines- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
[Export of Github issue for rear/rear.]