Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 6, 2024

Bumps Serilog from 4.1.0 to 4.2.0.

Release notes

Sourced from Serilog's releases.

v4.2.0

What's Changed

New Contributors

Full Changelog: serilog/serilog@v4.1.0...v4.2.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Dec 6, 2024
@github-actions
Copy link

github-actions bot commented Dec 6, 2024

🔍 Vulnerabilities of bitcoin-web-api:latest

📦 Image Reference bitcoin-web-api:latest
digestsha256:fe16c11a05996a68fb52c833dc21c66a8bef8485d521f03831046eb9dd77c5d8
vulnerabilitiescritical: 0 high: 0 medium: 0 low: 0
size61 MB
packages345
📦 Base Image alpine:05a56cc5acbd9c9c5b7ba5ec88d866a0ddc76b586828f8288d29c57ccaa15a10
also known as
  • 3
  • 3.20
  • 3.20.3
  • latest
digestsha256:029a752048e32e843bd6defe3841186fb8d19a28dae8ec287f433bb9d6d1ad85
vulnerabilitiescritical: 0 high: 0 medium: 1 low: 0

@github-actions
Copy link

github-actions bot commented Dec 6, 2024

Recommended fixes for local bitcoin-web-api:latest

Base image is alpine:3

Name3.20.3
Digestsha256:029a752048e32e843bd6defe3841186fb8d19a28dae8ec287f433bb9d6d1ad85
Vulnerabilitiescritical: 0 high: 0 medium: 1 low: 0
Pushed3 months ago
Size3.6 MB
Packages17
OS3.20.3
The base image is also available under the supported tag(s): 3.20, 3.20.3, latest

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
3
Newer image for same tag
Also known as:
  • 3.21.0
  • 3.21
  • latest
Benefits:
  • Newer image for same tag
  • Minor OS version update
  • Tag is preferred tag
  • Tag was pushed more recently
  • Image has similar size
  • Tag is latest
  • Image introduces no new vulnerability but removes 1
  • 3 was pulled 251K times last month
Image details:
  • Size: 3.6 MB
  • OS: 3.21.0
1 day ago



Change base image

✅ There are no tag recommendations at this time.

@github-advanced-security
Copy link

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

@Tsingis
Copy link
Owner

Tsingis commented Dec 6, 2024

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/nuget/Serilog-4.2.0 branch from 7da99e8 to bf50b2c Compare December 6, 2024 20:58
@Tsingis
Copy link
Owner

Tsingis commented Dec 6, 2024

@dependabot rebase

Bumps [Serilog](https://github.com/serilog/serilog) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/serilog/serilog/releases)
- [Commits](serilog/serilog@v4.1.0...v4.2.0)

---
updated-dependencies:
- dependency-name: Serilog
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/nuget/Serilog-4.2.0 branch from bf50b2c to 9cb84c8 Compare December 6, 2024 21:01
@sonarqubecloud
Copy link

sonarqubecloud bot commented Dec 6, 2024

@Tsingis Tsingis merged commit 2169284 into master Dec 6, 2024
9 checks passed
@dependabot dependabot bot deleted the dependabot/nuget/Serilog-4.2.0 branch December 6, 2024 21:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants