Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(deps): update dependencies to resolve dependabot security alerts #484

Merged
merged 5 commits into from
Jul 12, 2022
Merged

feat(deps): update dependencies to resolve dependabot security alerts #484

merged 5 commits into from
Jul 12, 2022

Conversation

purpleclay
Copy link
Contributor

closes #482

@mdelapenya mdelapenya self-assigned this Jul 12, 2022
@mdelapenya mdelapenya added the dependencies Dependencies or external services label Jul 12, 2022
@purpleclay
Copy link
Contributor Author

I have updated all of the dependencies based on the dependabot security alerts:

github.com/docker/distribution v2.7.1+incompatible => v2.8.1+incompatible
github.com/containerd/containerd v1.5.9 => v1.5.13

@codecov
Copy link

codecov bot commented Jul 12, 2022

Codecov Report

Merging #484 (73459d1) into main (5e23afe) will decrease coverage by 0.24%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main     #484      +/-   ##
==========================================
- Coverage   70.30%   70.05%   -0.25%     
==========================================
  Files          21       21              
  Lines        2014     2014              
==========================================
- Hits         1416     1411       -5     
- Misses        478      481       +3     
- Partials      120      122       +2     
Impacted Files Coverage Δ
docker.go 70.81% <0.00%> (-0.55%) ⬇️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 5e23afe...73459d1. Read the comment docs.

@purpleclay
Copy link
Contributor Author

purpleclay commented Jul 12, 2022

@mdelapenya Noticed that the code coverage has decreased by 0.24%. Not sure how this is related to the changes in this PR

@mdelapenya
Copy link
Member

@mdelapenya Noticed that the code coverage has decreased by 0.24%. Not sure how this is related to the changes in this PR

Me neither 🤷 Will merge this anyway. Thanks for your time addressing this security concerns!

@mdelapenya mdelapenya merged commit 19ebefb into testcontainers:main Jul 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Dependencies or external services
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Testcontainers fails DependencyReview GitHub action due to detected vulnerabilities
2 participants