Amitla Vannikumar
b0f194feee
merge
2024-06-20 11:12:37 -07:00
dependabot[bot]
155b742e08
Bump github/codeql-action from 3.25.9 to 3.25.10 ( #1173 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.9 to 3.25.10.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](530d4feaa9...23acc5c183
)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-17 09:59:31 -07:00
dependabot[bot]
e21ed2268c
Bump codecov/codecov-action from 4.4.1 to 4.5.0 ( #1174 )
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 4.4.1 to 4.5.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](125fc84a9a...e28ff129e5
)
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-17 09:59:13 -07:00
Amitla Vannikumar
b6c29bdb1f
version
2024-06-14 15:50:38 -07:00
Amitla Vannikumar
3734bbef57
not experimental
2024-06-14 15:47:32 -07:00
Amitla Vannikumar
0daef66697
collection
2024-06-14 15:40:40 -07:00
Amitla Vannikumar
9eb408f32e
make go detector with replace the new go detector
2024-06-14 15:31:54 -07:00
Paul Dorsch
b635ce6a43
bump pip detector version ( #1175 )
2024-06-14 14:30:24 -07:00
Paul Dorsch
6c4ca4f842
Enable parallelism by detector ( #1171 )
...
* conflicts
* save
* resolving remaining conflicts
* change location of default max thread var
* add input validation
* reduce default parallelism
* Update default max threads
---------
Co-authored-by: Coby Allred <cobyallred@gmail.com>
2024-06-14 13:21:12 -07:00
Fernando Rojo
22a88b52af
Add python version conditional dependency check ( #973 )
...
* Add python version conditional dependency check
* add sys_platform condition, and some tests
* add comments / string comparison
---------
Co-authored-by: Coby Allred <cobyallred@gmail.com>
Co-authored-by: Paul Dorsch <pauldorsch@microsoft.com>
2024-06-14 13:10:26 -07:00
Paul Dorsch
e626211624
Add CancellationToken support to CD processes ( #1167 )
...
* add cancellation tokens to pip report
* update timeouts for experimental runs
* fix tests
* simplify logic
* update registration
* remove out/err timeout
* fix ci build
* swallow certain invalid operation exceptions from killing processes
* add pip command test
* pr feedback
2024-06-13 18:08:42 -07:00
dependabot[bot]
44a30a94b7
Bump actions/checkout from 4.1.6 to 4.1.7 ( #1170 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.6 to 4.1.7.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](a5ac7e51b4...692973e3d9
)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-12 16:48:27 -07:00
dependabot[bot]
6a36c33b9c
Bump github/codeql-action from 3.25.8 to 3.25.9 ( #1169 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.8 to 3.25.9.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](2e230e8fe0...530d4feaa9
)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-12 16:29:56 -07:00
Paul Dorsch
e8c72a1b00
Add env var that allows customers to skip pip report ( #1166 )
...
* add env var to skip pip report
* fixed log messages
2024-06-10 16:17:44 -07:00
renovate[bot]
5e496e383d
chore(deps): update mstest monorepo to v3.4.3 ( #1160 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-07 08:56:33 -07:00
Greg Villicana
2b5b6573c9
Sanitize another Docker telemetry event ( #1164 )
2024-06-06 21:02:09 -07:00
Greg Villicana
341b036de7
Sanitize Docker environment vars in logs ( #1163 )
2024-06-06 17:50:14 -07:00
renovate[bot]
e1b4ada2a8
chore(deps): update dependency system.reactive to v6.0.1 ( #1136 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-06 15:45:21 -07:00
renovate[bot]
67fdc4ba25
chore(deps): update dependency serilog to v4 ( #1161 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-06 15:43:49 -07:00
Coby Allred
967d63af3d
Update renovate.json configuration ( #1157 )
...
Update renovate.json configuration to limit open branches and add weekly lock file maintenance.
2024-06-06 13:40:13 -07:00
Coby Allred
3145e53fbd
Update Gradle parsing to reduce calls to IsDevDependencyByLockfile ( #1156 )
2024-06-06 13:39:12 -07:00
renovate[bot]
72abdcc33d
chore(deps): update dependency yamldotnet to v15 ( #982 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-06 12:57:33 -07:00
renovate[bot]
dd8f6d73c6
chore(deps): update nuget monorepo to v6.10.0 ( #1138 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-06 12:55:31 -07:00
renovate[bot]
f3167067a2
chore(deps): update dependency minver to v5 ( #1140 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-06-06 12:55:00 -07:00
dependabot[bot]
b7ead0cb0d
Bump github/codeql-action from 3.25.6 to 3.25.8 ( #1153 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.6 to 3.25.8.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](9fdb3e4972...2e230e8fe0
)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-06 12:53:20 -07:00
Greg Villicana
07a2e84f94
Simple sanitization in strings used in CLI before logging ( #1155 )
2024-06-05 18:10:19 -07:00
Paul Dorsch
dec038ae37
fix the requested_extras parsing for pip report ( #1154 )
2024-06-05 12:42:53 -04:00
Coby Allred
9f1e5a9083
Update NormalizePath to be more robust ( #1152 )
2024-06-04 22:10:30 +00:00
Paul Dorsch
b3e3c9de59
Pauldorsch/remove pip report throw ( #1151 )
...
* remove throw for pip report so all pip files will be scanned
* fix tests
2024-06-04 15:03:27 -07:00
Paul Dorsch
393db4724c
Merged pnpm6 experiment into pnpm detector ( #1145 )
...
* merged pnpm6 into pnpm detector
* bump version and make the factory method private
* name of type
* improved logging
* added telemetry record for pnpm, and other minor updates to methods for conciseness
* standardize the invalid version telemetry object
* removed invalid version file
2024-06-03 13:02:49 -04:00
Coby Allred
9c3b0d55a4
Increase Python cache window ( #1144 )
...
* Increase Python cache window
* Update pip.md
* Update IPyPiClient.cs
2024-05-31 17:54:09 +00:00
Coby Allred
fb58fbe3db
Add CodeQL debug ( #1142 )
2024-05-29 08:58:04 -07:00
renovate[bot]
7841ed7ebd
chore(deps): update mstest monorepo to v3.4.0 ( #1119 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-23 10:23:01 -07:00
renovate[bot]
4a329b434f
chore(deps): update dependency microsoft.net.test.sdk to v17.10.0 ( #1137 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-23 10:14:45 -07:00
renovate[bot]
dcac58d323
chore(deps): update dotnet monorepo ( #958 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-23 10:10:47 -07:00
renovate[bot]
343c425057
chore(deps): update codecov/codecov-action action to v4.4.1 ( #1133 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-23 10:01:48 -07:00
dependabot[bot]
9cb1784c8f
--- ( #1126 )
...
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-23 09:51:07 -07:00
renovate[bot]
6e68243983
chore(deps): update actions/checkout action to v4.1.6 ( #1132 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-23 09:41:05 -07:00
renovate[bot]
3b5dac6d33
chore(deps): update dependency morelinq to v4.2.0 ( #1084 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-23 16:30:57 +00:00
renovate[bot]
81c00b847d
chore(deps): update dependency newtonsoft.json.schema to v3.0.16 ( #1117 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-23 17:15:14 +01:00
Coby Allred
3947eee67a
Small updates to PipReport detector ( #1131 )
...
Co-authored-by: Coby Allred <coallred@microsoft.com>
2024-05-23 09:13:54 -07:00
Coby Allred
e9a146ca76
Add Pip installation report experimental detector ( #1129 )
...
* Add PipReport experimental detector
* Don't use primary constructor
* Fix CI break
* Address PR comments
* Update src/Microsoft.ComponentDetection.Detectors/pip/PipReportUtilities.cs
Co-authored-by: Jamie Magee <jamagee@microsoft.com>
* Update src/Microsoft.ComponentDetection.Detectors/pip/PipReportComponentDetector.cs
Co-authored-by: Jamie Magee <jamagee@microsoft.com>
* Log cmd failure
---------
Co-authored-by: Coby Allred <coallred@microsoft.com>
Co-authored-by: Jamie Magee <jamagee@microsoft.com>
2024-05-22 18:43:13 -07:00
Fernando Rojo
5894c27af3
Update RustCli Parsing to process pkgId, and introduce manual override ( #1106 )
...
* Update RustCli Parsing to process pkgId, and allow manual override to fallback with DisableRustCliScan
* add tests
* Update detector version
* Update cli detector to use manifest packages instead of manually parsing
2024-05-16 14:15:54 -07:00
renovate[bot]
04776cc59b
chore(deps): update dependency polly to v8.4.0 ( #1118 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-16 09:11:35 -07:00
renovate[bot]
d8dfec74ac
chore(deps): update dependency coverlet.msbuild to v6.0.2 ( #1036 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-15 14:14:17 -07:00
dependabot[bot]
850ea5490a
build(deps): bump github/codeql-action from 3.25.3 to 3.25.5 ( #1104 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.3 to 3.25.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](d39d31e687...b7cec75265
)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-15 14:13:51 -07:00
dependabot[bot]
a03ea433e4
build(deps): bump actions/checkout from 4.1.4 to 4.1.5 ( #1099 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.4 to 4.1.5.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](0ad4b8fada...44c2b7a8a4
)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-15 14:05:32 -07:00
dependabot[bot]
e5b9b04bb7
build(deps): bump codecov/codecov-action from 4.3.1 to 4.4.0 ( #1107 )
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 4.3.1 to 4.4.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](5ecb98a3c6...6d798873df
)
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-15 13:50:46 -07:00
Coby Allred
95c12a8b4e
Add pnpm v6 support as an experimental detector ( #1110 )
...
* Add pnpm v6 support
* PR comments
---------
Co-authored-by: Coby Allred <coallred@microsoft.com>
2024-05-15 12:57:49 -07:00
dependabot[bot]
d7118c4b52
build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 ( #1103 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.3.1 to 2.3.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](0864cf1902...dc50aa9510
)
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-13 16:22:15 -07:00