Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
build(deps): bump @snyk/protect from 1.1294.1 to 1.1294.3 (#11132)
Bumps [@snyk/protect](https://github.com/snyk/snyk) from 1.1294.1 to 1.1294.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/snyk/snyk/releases"><code>@snyk/protect</code>'s releases</a>.</em></p> <blockquote> <h2>v1.1294.3</h2> <h2><a href="https://github.com/snyk/snyk/compare/v1.1294.2...v1.1294.3">1.1294.3</a> (2024-12-12)</h2> <p>The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see <a href="https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli">this documentation</a></p> <h3>Bug Fixes</h3> <ul> <li><strong>security:</strong> update golang.org/x/crypto/ssh to fix a <a href="https://security.snyk.io/vuln/SNYK-GOLANG-GOLANGORGXCRYPTOSSH-8496611">critical vulnerability</a></li> </ul> <h2>v1.1294.2</h2> <h2><a href="https://github.com/snyk/snyk/compare/v1.1294.1...v1.1294.2">1.1294.2</a> (2024-11-26)</h2> <p>The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see <a href="https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli">this documentation</a></p> <h3>Bug Fixes</h3> <ul> <li><strong>container:</strong> ignore npm/yarn default cache directories</li> <li><strong>container:</strong> fix: avoid possible unhandled promise rejections</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/snyk/cli/commit/35ebf2b54194651b8ac4bde67360dbb859211e99"><code>35ebf2b</code></a> Merge pull request <a href="https://redirect.github.com/snyk/snyk/issues/5625">#5625</a> from snyk/release-candidate</li> <li><a href="https://github.com/snyk/cli/commit/bbe23bd328b06d4b14b698925961bbf1e11eed16"><code>bbe23bd</code></a> Merge pull request <a href="https://redirect.github.com/snyk/snyk/issues/5624">#5624</a> from snyk/hotfix/1.1294.3-x-crypto</li> <li><a href="https://github.com/snyk/cli/commit/ab1c7a33bc5e7a008b03ee2fbb5bc4431ec06828"><code>ab1c7a3</code></a> Merge branch 'release-candidate' into hotfix/1.1294.3-x-crypto</li> <li><a href="https://github.com/snyk/cli/commit/c5a3b23a56fdc7661f557d58dde2688ac4d31d67"><code>c5a3b23</code></a> fix: bump gaf+ls to upgrade xcrypto</li> <li><a href="https://github.com/snyk/cli/commit/486c3ffcaf833a2ecf3cce41858df9032e1cb212"><code>486c3ff</code></a> Merge pull request <a href="https://redirect.github.com/snyk/snyk/issues/5603">#5603</a> from snyk/release-rc-1.1294.2</li> <li><a href="https://github.com/snyk/cli/commit/ed805bede705a405ce67cd9ee1360bd7378180b7"><code>ed805be</code></a> fix: npm/yarn npm cache fix</li> <li><a href="https://github.com/snyk/cli/commit/58b85575b61ed782e43c4412d94d1c185c67a70f"><code>58b8557</code></a> Merge pull request <a href="https://redirect.github.com/snyk/snyk/issues/5600">#5600</a> from snyk/snyk/hotfix-v1.1294.1</li> <li><a href="https://github.com/snyk/cli/commit/697ad2535cbc28fd076217ff166a140fb738f12a"><code>697ad25</code></a> fix: npm/yarn npm cache fix</li> <li>See full diff in <a href="https://github.com/snyk/snyk/compare/v1.1294.1...v1.1294.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information