Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency coverlet.collector to v6 #119

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 1, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
coverlet.collector 3.2.0 -> 6.0.2 age adoption passing confidence

Release Notes

coverlet-coverage/coverlet (coverlet.collector)

v6.0.2

Fixed
  • Threshold-stat triggers error #​1634
  • Fixed coverlet collector 6.0.1 requires dotnet sdk 8 #​1625
  • Type initializer errors after updating from 6.0.0 to 6.0.1 #​1629
  • Exception when multiple exclude-by-attribute filters specified #​1624
Improvements
  • More concise options to specify multiple parameters in coverlet.console #​1624

Diff between 6.0.1 and 6.0.2

v6.0.1

Fixed
  • Uncovered lines in .NET 8 for inheriting records #​1555
  • Fix record constructors not covered when SkipAutoProps is true #​1561
  • Fix .NET 7 Method Group branch coverage issue #​1447
  • Fix ExcludeFromCodeCoverage does not exclude method in a partial class #​1548
  • Fix ExcludeFromCodeCoverage does not exclude F# task #​1547
  • Fix issues where ExcludeFromCodeCoverage ignored #​1431
  • Fix issues with ExcludeFromCodeCoverage attribute #​1484
  • Fix broken links in documentation #​1514
  • Fix problem with coverage for .net5 WPF application #​1221 by https://github.com/lg2de
  • Fix unable to instrument module for Microsoft.AspNetCore.Mvc.Razor #​1459 by https://github.com/lg2de
Improvements

Diff between 6.0.0 and 6.0.1

v6.0.0

Fixed
-Could not write lines to file CoverletSourceRootsMapping - in use by another processhttps://github.com/coverlet-coverage/coverlet/issues/11555
-Incorrect coverage for methods returning IAsyncEnumerable in generic classeshttps://github.com/coverlet-coverage/coverlet/issues/13833
-Wrong branch coverage for async methods .NET Standard 1.xhttps://github.com/coverlet-coverage/coverlet/issues/13766
-Empty path exception in visual basic projectshttps://github.com/coverlet-coverage/coverlet/issues/7755
-Align published nuget package version to github release versionhttps://github.com/coverlet-coverage/coverlet/issues/14133
-Sync nuget and github release versionshttps://github.com/coverlet-coverage/coverlet/issues/11222

Improvements
-Migration of the project to .NET 6.0https://github.com/coverlet-coverage/coverlet/pull/14733

Breaking changes
New parameter ExcludeAssembliesWithoutSources to control automatic assembly exclusion https://github.com/coverlet-coverage/coverlet/issues/1164. The parameter InstrumentModulesWithoutLocalSources has been removed. since it can be handled by setting ExcludeAssembliesWithoutSources to None.
The default heuristics for determining whether to instrument an assembly has been changed. In previous versions any missing source file was taken as a signal that it was a third-party project that shouldn't be instrumented, with exceptions for some common file name patterns for source generators. Now only assemblies where no source files at all can be found are excluded from instrumentation, and the code for detecting source generator files have been removed. To get back to the behaviour that at least one missing file is sufficient to exclude an assembly, set ExcludeAssembliesWithoutSources to MissingAny, or use assembly exclusion filters for more fine-grained control.

Diff between 3.2.0 and 6.0.0


Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

github-actions bot commented Oct 1, 2024

Trivy image scan report

ghcr.io/chgl/magnifhir:pr-119 (ubuntu 22.04)

11 known vulnerabilities found (CRITICAL: 0 HIGH: 0 MEDIUM: 7 LOW: 4)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
libc6 CVE-2024-2961 MEDIUM 2.35-0ubuntu3.6 2.35-0ubuntu3.7
libc6 CVE-2024-33599 MEDIUM 2.35-0ubuntu3.6 2.35-0ubuntu3.8
libc6 CVE-2024-33600 MEDIUM 2.35-0ubuntu3.6 2.35-0ubuntu3.8
libc6 CVE-2024-33601 MEDIUM 2.35-0ubuntu3.6 2.35-0ubuntu3.8
libc6 CVE-2024-33602 MEDIUM 2.35-0ubuntu3.6 2.35-0ubuntu3.8
libssl3 CVE-2022-40735 MEDIUM 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.16
libssl3 CVE-2024-6119 MEDIUM 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.18
libssl3 CVE-2024-2511 LOW 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.17
libssl3 CVE-2024-4603 LOW 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.17
libssl3 CVE-2024-4741 LOW 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.17
libssl3 CVE-2024-5535 LOW 3.0.2-0ubuntu1.15 3.0.2-0ubuntu1.17

No Misconfigurations found

opt/magnifhir/magniFHIR.deps.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.AspNetCore.App/7.0.19/Microsoft.AspNetCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.NETCore.App/7.0.19/Microsoft.NETCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

Copy link

github-actions bot commented Oct 1, 2024

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 4 0 0.02s
✅ BASH bash-exec 1 0 0.01s
✅ BASH shellcheck 1 0 0.06s
✅ BASH shfmt 1 0 0 0.11s
✅ CSHARP csharpier 7 3 0 1.73s
✅ CSHARP roslynator 2 0 0 54.73s
✅ DOCKERFILE hadolint 1 0 0.16s
✅ EDITORCONFIG editorconfig-checker 74 0 6.44s
✅ JSON jsonlint 18 0 0.58s
✅ JSON prettier 18 0 0 10.29s
✅ JSON v8r 18 0 10.76s
⚠️ MARKDOWN markdownlint 3 0 9 1.13s
✅ REPOSITORY checkov yes no 53.4s
✅ REPOSITORY dustilock yes no 0.02s
✅ REPOSITORY gitleaks yes no 0.59s
✅ REPOSITORY git_diff yes no 0.22s
✅ REPOSITORY grype yes no 13.9s
✅ REPOSITORY secretlint yes no 2.76s
✅ REPOSITORY syft yes no 0.34s
✅ REPOSITORY trivy yes no 12.7s
✅ REPOSITORY trivy-sbom yes no 11.86s
✅ REPOSITORY trufflehog yes no 16.18s
✅ XML xmllint 2 0 0 0.11s
✅ YAML prettier 11 0 0 0.94s
✅ YAML v8r 11 0 21.48s
✅ YAML yamllint 11 0 1.06s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

MegaLinter is graciously provided by OX Security

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants