Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade bancos-brasileiros from 6.0.77 to 6.0.82 #566

Merged
merged 1 commit into from
Oct 15, 2024

Conversation

guibranco
Copy link
Owner

@guibranco guibranco commented Oct 15, 2024

User description

Snyk has created this PR to upgrade bancos-brasileiros from 6.0.77 to 6.0.82.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 5 versions ahead of your current version.
  • The recommended version was released 22 days ago, on 2024-09-22.
Release notes
Package name: bancos-brasileiros
  • 6.0.82 - 2024-09-22

    Release of Bancos Brasileiros - v6.0.82

    • Updated 1 bank
      • 594 - ASA SOCIEDADE DE CR?DITO DIRETO S.A. - 48.703.388/0001-13
        • LongName (STR): EMBRACRED S/A SOCIEDADE DE CR?DITO DIRETO -> ASA SOCIEDADE DE CR?DITO DIRETO S.A.
        • ShortName (STR): EMBRACRED S/A SCD -> ASA SOCIEDADE DE CR?DITO DIRETO S.A.
  • 6.0.81 - 2024-09-22

    Release of Bancos Brasileiros - v6.0.81

    • Updated 1 bank
      • 594 - ASA SOCIEDADE DE CR?DITO DIRETO S.A. - 48.703.388/0001-13
        • LongName (STR): EMBRACRED S/A SOCIEDADE DE CR?DITO DIRETO -> ASA SOCIEDADE DE CR?DITO DIRETO S.A.
        • ShortName (STR): EMBRACRED S/A SCD -> ASA SOCIEDADE DE CR?DITO DIRETO S.A.
  • 6.0.80 - 2024-09-19

    Release of Bancos Brasileiros - v6.0.80

    • Updated 1 bank
      • 594 - ASA SOCIEDADE DE CR?DITO DIRETO S.A. - 48.703.388/0001-13
        • LongName (STR): EMBRACRED S/A SOCIEDADE DE CR?DITO DIRETO -> ASA SOCIEDADE DE CR?DITO DIRETO S.A.
        • ShortName (STR): EMBRACRED S/A SCD -> ASA SOCIEDADE DE CR?DITO DIRETO S.A.
  • 6.0.79 - 2024-09-18

    Release of Bancos Brasileiros - v6.0.79

    • Added 1 bank
      • 646 - DM SA CFI - 91.669.747/0001-92
  • 6.0.78 - 2024-09-17

    Release of Bancos Brasileiros - v6.0.78

    • Updated 1 bank
      • 482 - SBCASH SCD - 42.259.084/0001-22
        • Pcr (PCR): Null -> True
        • Pcrp (PCR): Null -> True
  • 6.0.77 - 2024-09-15

    Release of Bancos Brasileiros - v6.0.77

    • Updated 1 bank
      • 597 - ISSUER IP LTDA. - 34.747.388/0001-00
        • PixType (SPI): IDRT -> DRCT
        • DatePixStarted (SPI): 2024-05-17 09:47:12 -> 2024-09-05 10:10:00
from bancos-brasileiros GitHub release notes
Commit messages
Package name: bancos-brasileiros

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs


Description

  • Upgraded bancos-brasileiros from version 6.0.77 to 6.0.82 to keep dependencies up-to-date.
  • This upgrade helps in fixing existing vulnerabilities and identifying new ones quickly.
  • The new version was released on 2024-09-22.

Changes walkthrough 📝

Relevant files
Dependencies
package-lock.json
Update bancos-brasileiros version in package-lock.json     

examples/emberjs/package-lock.json

  • Updated bancos-brasileiros version from 6.0.77 to 6.0.82.
  • Changed integrity hash to match the new version.
  • +7/-7     
    package.json
    Update bancos-brasileiros version in package.json               

    examples/emberjs/package.json

    • Updated bancos-brasileiros version from 6.0.77 to 6.0.82.
    +1/-1     

    💡 Penify usage:
    Comment /help on the PR to get a list of all available Penify tools and their descriptions

    @gstraccini gstraccini bot added the ☑️ auto-merge Automatic merging of pull requests (gstraccini-bot) label Oct 15, 2024
    @github-actions github-actions bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Oct 15, 2024
    @penify-dev penify-dev bot added the enhancement A enhancement to the project label Oct 15, 2024
    Copy link
    Contributor

    Summary

    Status Count
    🔍 Total 462
    ✅ Successful 358
    ⏳ Timeouts 0
    🔀 Redirected 0
    👻 Excluded 102
    ❓ Unknown 0
    🚫 Errors 2

    Errors per input

    Errors in ./data/bancos.md

    Errors in ./CHANGELOG.md

    Copy link
    Contributor

    penify-dev bot commented Oct 15, 2024

    PR Review 🔍

    ⏱️ Estimated effort to review [1-5]

    1, because this PR consists solely of a version upgrade for a dependency, which is straightforward and requires minimal review.

    🧪 Relevant tests

    No

    ⚡ Possible issues

    No

    🔒 Security concerns

    No

    Copy link

    New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

    Package New capabilities Transitives Size Publisher
    npm/[email protected] None 0 314 kB guibranco

    🚮 Removed packages: npm/[email protected]

    View full report↗︎

    Copy link
    Contributor

    Infisical secrets check: ✅ No secrets leaked!

    💻 Scan logs
    2:33AM INF scanning for exposed secrets...
    2:33AM INF 993 commits scanned.
    2:33AM INF scan completed in 2.61s
    2:33AM INF no leaks found
    

    Copy link
    Contributor

    penify-dev bot commented Oct 15, 2024

    PR Code Suggestions ✨

    CategorySuggestion                                                                                                                                    Score
    Security
    Confirm the integrity hash for the new package version

    Verify that the integrity hash for the new version of bancos-brasileiros is correct and
    matches the expected value to ensure package authenticity.

    examples/emberjs/package-lock.json [4885]

    -"integrity": "sha512-a1WSsmDBoVWkFhDax2bRQorjgcCTc7ch9c9Hewm4tzT+f4nVBcvgW6HJ3QVbm/UKOVXdjDvq5eCNw4V9d2DgxA=="
    +"integrity": "sha512-a1WSsmDBoVWkFhDax2bRQorjgcCTc7ch9c9Hewm4tzT+f4nVBcvgW6HJ3QVbm/UKOVXdjDvq5eCNw4V9d2DgxA==" // Verify integrity
     
    Suggestion importance[1-10]: 8

    Why: This suggestion addresses a crucial aspect of package security, ensuring that the integrity hash is verified for authenticity, which is important for maintaining security in dependencies.

    8
    Testing
    Execute tests to validate the upgrade of the package

    Consider running tests after upgrading bancos-brasileiros to ensure that the new version
    does not introduce any breaking changes.

    examples/emberjs/package.json [70]

    -"bancos-brasileiros": "^6.0.82"
    +"bancos-brasileiros": "^6.0.82" // Run tests after upgrade
     
    Suggestion importance[1-10]: 7

    Why: Running tests after an upgrade is a good practice to catch potential issues, but the suggestion lacks specific details on how to implement this.

    7
    Compatibility
    Check for compatibility with other dependencies

    Ensure that the new version of bancos-brasileiros is compatible with other dependencies in
    your project to avoid potential conflicts.

    examples/emberjs/package-lock.json [12]

    -"bancos-brasileiros": "^6.0.82"
    +"bancos-brasileiros": "^6.0.82" // Ensure compatibility
     
    Suggestion importance[1-10]: 6

    Why: While ensuring compatibility is important, the suggestion does not provide actionable code changes and is more of a general recommendation.

    6
    Documentation
    Check the changelog for important updates and migration steps

    Review the changelog or release notes for bancos-brasileiros version 6.0.82 to understand
    the changes made and any migration steps required.

    examples/emberjs/package-lock.json [4883]

    -"version": "6.0.82"
    +"version": "6.0.82" // Review changelog for changes
     
    Suggestion importance[1-10]: 5

    Why: While reviewing changelogs is a good practice, this suggestion is more of a general guideline and does not directly impact the code itself.

    5

    Copy link

    sonarcloud bot commented Oct 15, 2024

    @guibranco guibranco merged commit 171895a into main Oct 15, 2024
    47 checks passed
    @guibranco guibranco deleted the snyk-upgrade-dcb87c8ffd6fe5da765852b514052078 branch October 15, 2024 09:11
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Labels
    ☑️ auto-merge Automatic merging of pull requests (gstraccini-bot) enhancement A enhancement to the project Review effort [1-5]: 1 size/S Denotes a PR that changes 10-29 lines, ignoring generated files.
    Projects
    None yet
    Development

    Successfully merging this pull request may close these issues.

    2 participants