#3237 PR open: Bump redhat-plumbers-in-action/differential-shellcheck from 5.1.2 to 5.3.0¶
Labels: dependencies
dependabot opened issue at 2024-06-01 11:11:¶
Bumps redhat-plumbers-in-action/differential-shellcheck from 5.1.2 to 5.3.0.
Release notes
Sourced from redhat-plumbers-in-action/differential-shellcheck's releases.
v5.3.0
What's Changed
New
- Update to csdiff 3.3.0 :feet: (#408)
@jamacku- Add support for different display engines (
csgrep,sarif-fmt) :rocket: (#406)@jamackuMaintenance
Other changes
Full Changelog: https://github.com/redhat-plumbers-in-action/differential-shellcheck/compare/v5.2.0...v5.3.0
v5.2.0
What's Changed
New
- Provide
htmloutput with detected defects :globe_with_meridians: (#400)@jamacku- Embed code context into SARIF output :feet: (#399)
@jamacku- Update csdiff to
3.2.2:rocket: (#395)@jamacku- Allow specifying WORK_DIR for intermediate files (#393)
@mpoberezhniyDocumentation
Automation and CI changes
- Add labeler to replace Mergify :label: (#403)
@jamacku- Remove mergify it caused more problems than it solved :no_good_man: (#402)
@jamackuDependency Updates
- build(deps): bump redhat-plumbers-in-action/advanced-issue-labeler from 3.1.0 to 3.2.0 (#398)
@dependabotFull Changelog: https://github.com/redhat-plumbers-in-action/differential-shellcheck/compare/v5.1.2...v5.2.0
Changelog
Sourced from redhat-plumbers-in-action/differential-shellcheck's changelog.
Changelog
Next release
v5.3.0
- Add support for different display engines (
csgrep,sarif-fmt)- Update
csutils(csdiff) to 3.3.0
csdiff: match findings by line content without spaces if availablecsgrep --hash-v1: matchcsdiff/v1fingerprint prefixsarif: initial implementation ofcsdiff/v1fingerprintssarif: add descriptions for ShellCheck rulesv5.2.0
- Provide
htmloutput with detected defects- Allow specifying
WORK_DIRfor intermediate files- Update
csutils(csdiff) to 3.2.2
- propagate the imp flag as level in the SARIF format
- propagate
endLine/endColumnin the JSON and SARIF formatsv5.1.2
- Fix curl Argument list too long by using a payload.json file - by
@mpoberezhniy- Container images now based on Fedora 40
- Update
csutils(csdiff) to 3.2.1v5.1.0
- Improve shell script detection based on emacs file mode header
v5.0.2
- Container images now based on Fedora 39
- Update
csutils(csdiff) to 3.1.0v5.0.0
- Added defect statistics based on severity levels. They are available in the console output and in the job Summary page.
- New option
scan-directory. Allows to specify directories that will be scanned. By default Differential ShellCheck scans the whole repository.- Show more context for ShellCheck defects and fixes in console output. The defect is now shown in the context of the surrounding code.
- Fix autodetection of shell scripts in DEBUG mode
- Fix detection of changed files that might cause failure on paths with special characters.
- Fix count of scanned files in job Summary when running on push event.
- Drop support for
shell-scriptsinput- Drop support for
ignored-codesinput- Update
csutils(csdiff) to 3.0.4v4.2.2
... (truncated)
Commits
60c9f2bv5.3.0c6f8c3eupdate CHANGELOGed794datest: fixis_github_actions()test4510914doc: update CHANGELOGaba7ca1feat: update to csdiff 3.3.01c1e617doc: update image resolutioncb3a8c3test:generate_SARIF()c8739cbtest:is_github_actions()fea9835test: use function to check if scripts run in unit tests environment5665c85feat: add support for different display engines- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
[Export of Github issue for rear/rear.]