Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

test(deps): bump dotenv from 16.4.5 to 16.4.7 in the npm group #659

Merged
merged 1 commit into from
Dec 9, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 9, 2024

Bumps the npm group with 1 update: dotenv.

Updates dotenv from 16.4.5 to 16.4.7

Changelog

Sourced from dotenv's changelog.

16.4.7 (2024-12-03)

Changed

  • Ignore .tap folder when publishing. (oops, sorry about that everyone. - @​motdotla) #848

16.4.6 (2024-12-02)

Changed

  • Clean up stale dev dependencies #847
  • Various README updates clarifying usage and alternative solutions using dotenvx
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm group with 1 update: [dotenv](https://github.com/motdotla/dotenv).


Updates `dotenv` from 16.4.5 to 16.4.7
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v16.4.5...v16.4.7)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner December 9, 2024 08:24
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 9, 2024
Copy link

sonarqubecloud bot commented Dec 9, 2024

Copy link
Contributor

github-actions bot commented Dec 9, 2024

Compressed layer size comparison

Comparing ghcr.io/philips-software/amp-devcontainer-rust:latest to ghcr.io/philips-software/amp-devcontainer-rust@sha256:8018026eec3c0c0673194e53c265bd3ba5db8502437eaa67fb6886f377485991

OS/Platform Previous Size Current Size Delta
linux/amd64 458.77M 458.77M -654.00 (-0.00%)
linux/arm64 598.30M 598.30M 1.14K (+0.00%)

Copy link
Contributor

github-actions bot commented Dec 9, 2024

Compressed layer size comparison

Comparing ghcr.io/philips-software/amp-devcontainer-cpp:latest to ghcr.io/philips-software/amp-devcontainer-cpp@sha256:5107ec0a3a0c0ed1ccd9630fc0979fbe57e8c255b47622f25cd25b7362ba870e

OS/Platform Previous Size Current Size Delta
linux/amd64 650.47M 650.47M 0.00 (+0.00%)
linux/arm64 643.19M 643.19M 0.00 (+0.00%)

Copy link
Contributor

github-actions bot commented Dec 9, 2024

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 16 0 0.07s
✅ DOCKERFILE hadolint 2 0 0.42s
✅ GHERKIN gherkin-lint 2 0 0.84s
✅ JSON npm-package-json-lint yes no 0.35s
✅ JSON prettier 15 1 0 0.49s
✅ JSON v8r 14 0 13.06s
✅ MARKDOWN markdownlint 8 0 0 0.8s
✅ MARKDOWN markdown-table-formatter 8 0 0 0.23s
✅ REPOSITORY checkov yes no 15.96s
✅ REPOSITORY gitleaks yes no 0.24s
✅ REPOSITORY git_diff yes no 0.01s
✅ REPOSITORY grype yes no 9.27s
✅ REPOSITORY secretlint yes no 0.97s
✅ REPOSITORY syft yes no 1.15s
✅ REPOSITORY trivy yes no 5.34s
✅ REPOSITORY trivy-sbom yes no 0.09s
✅ REPOSITORY trufflehog yes no 4.19s
✅ SPELL lychee 57 0 21.4s
✅ YAML prettier 21 0 0 0.66s
✅ YAML v8r 21 0 12.16s
✅ YAML yamllint 21 0 0.51s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

MegaLinter is graciously provided by OX Security

Copy link
Contributor

github-actions bot commented Dec 9, 2024

Test Results

 2 files  ±0   2 suites  ±0   1m 22s ⏱️ -3s
29 tests ±0  29 ✅ ±0  0 💤 ±0  0 ❌ ±0 
31 runs  ±0  31 ✅ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit 9544f8a. ± Comparison against base commit 1574384.

@rjaegers rjaegers added this pull request to the merge queue Dec 9, 2024
Merged via the queue into main with commit a8caf55 Dec 9, 2024
21 checks passed
@rjaegers rjaegers deleted the dependabot/npm_and_yarn/npm-3491a00809 branch December 9, 2024 08:46
Copy link
Contributor

github-actions bot commented Dec 9, 2024

Pull Request Report (#659)

Static measures

Description Value
Number of added lines 5
Number of deleted lines 5
Number of changed files 2
Number of commits 1
Number of reviews 1
Number of comments (w/o review comments) 5
Number of reviews that contains a comment to resolve 0
Number of reviews that requested a change from the author 0
Number of reviews that approved the Pull Request 1
Get the total number of participants of a Pull Request 4

Time related measures

Description Value
PR lead time (from creation to close of PR) 22.2 Min
Time that was spend on the branch before the PR was created 2 Sec
Time that was spend on the branch before the PR was merged 22.2 Min
Time to merge after last review 4 Min

Status check related measures

Description Value
Total runtime for last status check run (Workflow for PR) 18.8 Min
Total time spend in last status check run on PR 7 Min

Copy link
Contributor

🎉 Hooray! The changes in this pull request went live with the release of v5.5.2 🎉

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant