05e1271376
test: use expect().resolves instead of awaiting inside expect ( #45672 )
...
Enables the vitest/prefer-expect-resolves oxlint rule and applies its
autofix across the spec suite.
2026-09-04 10:40:46 +00:00
41da033756
refactor: remove escapeRegExp and replace with RegExp.escape ( #45322 )
2026-08-18 06:24:47 +00:00
a31f9cf0f9
refactor(schemas): prefer Nullish schema utils instead of z.nullish() ( #44565 )
...
* ci(linter): add renovate/prefer-zod-nullish rule
Add a custom oxlint rule that flags zod chains calling .optional() and
.nullable() adjacently (in either order) and suggests .nullish(), which
is equivalent (both accept undefined | null in zod v4).
Fix all 26 pre-existing violations across 6 schema files.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
* ci(linter): prefer schema-utils Nullish over zod .nullish()
Rename prefer-zod-nullish to prefer-nullish-util and extend it to flag
.nullish() itself, including the standalone forms z.nullish(x) and
z.optional(z.nullable(x)). Migrate all call sites to Nullish() and
DeepNullish() from schema-utils, which normalize null to undefined in
parsed output. Schemas with more than one nullish position are wrapped
in DeepNullish(); nullish object properties with nullish members use
Nullish(DeepNullish(...)) to keep the optional property type marker.
Spec files are exempt (result.spec.ts intentionally tests
null-preserving parses). Spec assertions expecting null in parsed
output were updated to undefined. Note: docker manifests with an
explicit "mediaType": null are now accepted and treated like an absent
mediaType instead of failing the discriminated union.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com >
---------
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-14 10:15:55 +00:00
0793274b86
refactor: prefer templates rather than + in test files ( #43441 )
...
refactor: prefer templates rather than `+`
2026-05-19 09:52:28 +00:00
8776389291
feat(vulnerability): Add vulnerability alerts to deps-edn + lein ( #42945 )
...
* feat(vulnerability): Add vulnerability alerts to deps-end + lein
deps-edn and lein both essentially use maven upstream for several
packages. Some packages come from clojars directly but others are
typical java packages. If there is an OSV alert for a maven package
however, it will not propagate to the deps-edn or lein dependency update
from renovate. This tries to adjust that so that clojure can derive
dependency alerts from maven as well so that those dependencies are
treated the same way.
* chore: Code review feedback
* chore: Make ecosystem to datasource one to many
Technically datasource to ecosystem was already many to one in a way, as
maven appeared in the values twice. Once for clojure and once for maven
itself. This changes it so that the ecosystem to datasource is the same
way and looking up by ecosystem you will get multiple datasources
(should match the map above the modified code).
Then to make this work, instead of keying off of datasource for
vulnerabilities we key off of ecosystem so that all of the datasources
that are part of that ecosystem inherit the vulnerabilities for the same
dependency.
* chore: Tweaking to try to force CI/CD retry
2026-05-04 08:08:17 +00:00
be2eacd8d2
feat(vulnerability): improve GitHub advisory PR body notes with summary, GHSA ID and references ( #42670 )
...
feat(vulnerability): improve GitHub advisory PR body notes with summary and GHSA ID
2026-04-17 15:33:56 +00:00
593a2b16c0
fix(vulnerability): remove matchFileNames restriction from GitHub vulnerability alerts ( #42636 )
2026-04-15 07:08:34 +00:00
1e906e8e33
feat(vulnerability): add severity and CVSS details to GitHub Dependabot alerts ( #42568 )
2026-04-14 18:05:08 +00:00
3a80eda1e1
test: refactor GitHub vulnerability alert detection tests ( #41567 )
2026-03-02 06:04:16 +00:00
3eb6f5a31b
feat(vulnerabilities): add support for github-actions vulnerability alerts ( #40175 )
...
* feat(vulnerabilities): add support for github-actions vulnerability alerts
* fix failed merge from main
* now for real
* review comments
* remove no longer needed assertion
2026-02-26 08:11:14 +00:00
f52ed03963
fix(vulnerability): handle alerts with null or missing firstPatchedVersion ( #41338 )
2026-02-24 21:57:40 +00:00
9d857c1f68
refactor(lint): Organize imports with biome ( #40966 )
2026-02-06 13:40:01 +00:00
930cf6633c
refactor: Rewrite imports with .ts extensions ( #40700 )
...
fix: Additional vi.mock path corrections and prettier formatting
2026-01-26 22:48:17 +00:00
b4ed9e65d9
chore(deps): update dependency @vitest/eslint-plugin to v1.3.23 (main) ( #38702 )
...
* chore(deps): update dependency @vitest/eslint-plugin to v1.3.23
| datasource | package | from | to |
| ---------- | --------------------- | ------ | ------ |
| npm | @vitest/eslint-plugin | 1.3.16 | 1.3.23 |
* remove now unnecessary exceptions
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: secustor <sebastian@poxhofer.at >
2025-10-31 07:50:48 +00:00
1280fe4dc7
chore(deps): update dependency @vitest/eslint-plugin to v1.3.16 (main) ( #38502 )
...
* chore(deps): update dependency @vitest/eslint-plugin to v1.3.16
| datasource | package | from | to |
| ---------- | --------------------- | ------ | ------ |
| npm | @vitest/eslint-plugin | 1.3.13 | 1.3.16 |
* fix linting errors
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: secustor <sebastian@poxhofer.at >
2025-10-13 09:24:15 +00:00
19c115c813
test: cleanup ( #34785 )
2025-03-13 17:52:09 +00:00
b775d83830
fix(vulnerability-alerts): fix handling of first_patched_version: null ( #31447 )
2024-09-17 16:34:15 +00:00
fbdb8c2478
fix(vulnerabilities): do not force exact patch version for NuGet datasource ( #31127 )
2024-08-31 12:53:22 +00:00
3681b2a945
chore: eslint to enforce for typed imports ( #30844 )
2024-08-19 13:15:27 +00:00
2e78a7117d
fix!: normalize Python depName in every manager ( #27733 )
2024-07-25 15:28:16 +02:00
5ed97aa738
refactor(vulnerability-alerts): move to REST API ( #27378 )
2024-07-25 15:28:16 +02:00
b05f389c63
feat(npm)!: drop transitiveRemediation option ( #27985 )
...
This option only worked for npm <7, which is now EOL.
BREAKING CHANGE: Transitive remediation for npm <7 is no longer supported.
2024-07-25 15:28:16 +02:00
99cc62fa3c
fix(vulnerabilities): do not force exact patch version in GitHub alerts ( #29700 )
2024-06-16 13:32:13 +00:00
32c96360d1
fix(vulnerabilities): strip equals for nuget in Github alerts ( #29693 )
2024-06-16 05:14:31 +00:00
dfbb054aeb
fix(worker/repository): add normalized match for pip alertPackageRules ( #28214 )
2024-04-18 16:26:04 +00:00
f19a2e9219
test(vulnerability-alerts): separate tests for readability ( #27389 )
2024-02-18 10:58:47 +00:00
b69416ce17
refactor(prettier): Force trailing commas ( #25631 )
2023-11-07 15:50:29 +00:00
84a97a62fa
test(perf): improve test speed ( #24323 )
2023-09-08 11:40:04 +00:00
36e2b328bb
chore: update types reference
2023-08-15 11:31:15 +02:00
e3d5f7df92
feat!: merge matchPaths and matchFiles into matchFileNames ( #22406 )
...
Closes #22395
BREAKING CHANGE: matchPaths and matchFiles are now combined into matchFileNames, supporting exact match and glob-only
2023-07-04 19:21:52 +02:00
932012fa20
refactor(test): fix getConfig imports ( #22819 )
2023-06-16 17:57:34 +00:00
c79b209032
refactor(platform): optional getVulnerabilityAlerts ( #21449 )
2023-04-12 15:12:15 +00:00
352c9db904
test: add new wrapper for partial ( #20618 )
2023-02-25 06:46:32 +00:00
e651fd34a5
feat(github-actions): support vulnerability alerts ( #18735 )
2022-11-03 15:42:42 +00:00
5fb5dab455
feat(go): support github vulnerability alerts ( #18730 )
2022-11-03 10:19:11 +00:00
4c52a27d83
test: modernize code ( #17470 )
...
Co-authored-by: Jamie Magee <jamie.magee@gmail.com >
2022-08-30 06:14:57 +00:00
e5c6f38d75
refactor: enable strict checks ( #16168 )
...
* refactor: enable strict checks
* chore: revert changes
* chore: fix tsconfig
2022-06-21 13:00:21 +02:00
03b0d2a24e
refactor(lib/workers): fix null-check for tests ( #16163 )
...
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2022-06-21 09:39:30 +00:00
64f5bd5f03
test: enforce lint style rules ( #15085 )
2022-04-12 14:49:49 +00:00
3b7e9a17cb
refactor: set importsNotUsedAsValues to error ( #14052 )
2022-02-07 06:37:17 +00:00
6224af558d
test(workers): Refactor snapshot tests ( #12542 )
2021-11-07 15:34:42 +00:00
5f4b9f9a3a
test: Fix test descriptions and enforce it via new linting rule ( #11285 )
2021-08-18 05:46:56 +00:00
1392955a04
refactor: Identify tests relying on single snapshots ( #11150 )
...
Co-authored-by: Jamie Magee <jamie.magee@gmail.com >
2021-08-07 23:43:34 +00:00
4eb4a5cd20
fix: ignore yargs-parser false positive ( #9841 )
2021-05-04 10:23:03 +02:00
ce51f05cef
feat(test): Detect test utils callers and simplify helpers ( #9707 )
2021-04-26 16:15:03 +02:00
72d97ec2f4
refactor(workers): Enforce getName usage ( #9525 )
2021-04-13 10:25:51 +00:00
98d55394e6
feat: transitiveRemediation ( #8883 )
...
* save remediations
* enhance and export NpmResponse
* sort branch lists
* transitive remediation init
* update-lockfile not bump
* version not value
* remediate package.json
* isVulnerabilityAlert
* simplify config
* fix circular
* update snapshots
* add config and docs
* TODO
* flatten tests
* remediation -> update
* lots of renames
* improve readability
* refactor
* remove fetch
* more tests
* reduce fiixtures sizes
* more tests
* fix parent null
* remove exec
* explicit false
* fix
* Apply suggestions from code review
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
* use type-fest PackageJson
* more tests
* coverage
* Update lib/workers/branch/get-updated.ts
Co-authored-by: Michael Kriese <michael.kriese@visualon.de >
2021-03-01 07:59:57 +00:00
2c9a172834
feat: per-file vulnerability alerts ( #8770 )
2021-02-20 06:00:44 +00:00
fa9031f5e9
feat(internal): expand disabled error messages
...
Splits REPOSITORY_DISABLED into multiple
2021-02-11 13:32:29 +01:00
00c56d8bde
chore: fix types ( #5904 )
...
* chore: fix types
* fix more types
* chore: mote fixes
* fix frmat
* chore: fix tests
* chore: fix type
* chore: cleanup
* chore: cleanup
Co-authored-by: Rhys Arkins <rhys@arkins.net >
2020-05-07 10:23:45 +02:00
Sebastian Poxhofer