Skip to content

[Snyk] Upgrade bancos-brasileiros from 6.2.115 to 6.2.136 #886

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
guibranco wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade bancos-brasileiros from 6.2.115 to 6.2.136 #886

guibranco wants to merge 1 commit into from

Conversation

@guibranco
Copy link
Owner

@guibranco guibranco commented Feb 7, 2026 •
edited by penify-dev bot
Loading

User description

snyk-top-banner

Snyk has created this PR to upgrade bancos-brasileiros from 6.2.115 to 6.2.136.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 8 versions ahead of your current version.

  • The recommended version was released 22 days ago.

Release notes
Package name: bancos-brasileiros
  • 6.2.136 - 2026-01-16

    Release of Bancos Brasileiros - v6.2.136

    • Updated 1 bank
      • 373 - UP.P SEP S.A. - 35.977.097/0001-71
        • Products (CTC): Capital de Giro, Outros Cr,ditos, Pessoal, Troca de Modalidade, Veiculos -> Consignado, Pessoal
  • 6.2.135 - 2026-01-15

    Release of Bancos Brasileiros - v6.2.135

    • Added 1 bank
      • 788 - PROTOTYPE IP S.A. - 35.713.491/0001-00
    • Updated 1 bank
      • 373 - UP.P SEP S.A. - 35.977.097/0001-71
        • Products (CTC): Capital de Giro, Outros Cr,ditos, Pessoal, Troca de Modalidade, Veiculos -> Consignado, Pessoal
  • 6.2.134 - 2026-01-14

    Release of Bancos Brasileiros - v6.2.134

    • Updated 2 banks
      • 373 - UP.P SEP S.A. - 35.977.097/0001-71
        • Products (CTC): Capital de Giro, Outros Cr,ditos, Pessoal, Troca de Modalidade, Veiculos -> Consignado, Pessoal
      • 668 - VIA CAPITAL SCD S/A - 48.632.754/0001-90
        • Products (CTC): Null -> Cr,dito Consignado, Troca de Modalidade
  • 6.2.133 - 2026-01-14

    Release of Bancos Brasileiros - v6.2.133

    • Updated 2 banks
      • 373 - UP.P SEP S.A. - 35.977.097/0001-71
        • Products (CTC): Capital de Giro, Outros Cr,ditos, Pessoal, Troca de Modalidade, Veiculos -> Consignado, Pessoal
      • 668 - VIA CAPITAL SCD S/A - 48.632.754/0001-90
        • Products (CTC): Null -> Cr,dito Consignado, Troca de Modalidade
  • 6.2.132 - 2026-01-14

    Release of Bancos Brasileiros - v6.2.132

    • Updated 2 banks
      • 373 - UP.P SEP S.A. - 35.977.097/0001-71
        • Products (CTC): Capital de Giro, Outros Cr,ditos, Pessoal, Troca de Modalidade, Veiculos -> Consignado, Pessoal
      • 771 - WX IP LTDA. - 57.824.223/0001-90
        • PixType (SPI): Null -> DRCT
        • DatePixStarted (SPI): Null -> 2026-01-20 10:00:00
  • 6.2.131 - 2026-01-13

    Release of Bancos Brasileiros - v6.2.131

    • Updated 2 banks
      • 373 - UP.P SEP S.A. - 35.977.097/0001-71
        • Products (CTC): Capital de Giro, Outros Cr,ditos, Pessoal, Troca de Modalidade, Veiculos -> Consignado, Pessoal
      • 771 - WX IP LTDA. - 57.824.223/0001-90
        • PixType (SPI): Null -> DRCT
        • DatePixStarted (SPI): Null -> 2026-01-20 10:00:00
  • 6.2.130 - 2026-01-13

    Release of Bancos Brasileiros - v6.2.130

    • Updated 2 banks
      • 373 - UP.P SEP S.A. - 35.977.097/0001-71
        • Products (CTC): Capital de Giro, Outros Cr,ditos, Pessoal, Troca de Modalidade, Veiculos -> Consignado, Pessoal
      • 771 - WX IP LTDA. - 57.824.223/0001-90
        • PixType (SPI): Null -> DRCT
        • DatePixStarted (SPI): Null -> 2026-01-20 10:00:00
  • 6.2.129 - 2026-01-12

    Release of Bancos Brasileiros - v6.2.129

    • Updated 1 bank
      • 373 - UP.P SEP S.A. - 35.977.097/0001-71
        • Products (CTC): Capital de Giro, Outros Cr,ditos, Pessoal, Troca de Modalidade, Veiculos -> Consignado, Pessoal
  • 6.2.115 - 2025-12-08
from bancos-brasileiros GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Description

  • Upgraded bancos-brasileiros dependency from version 6.2.115 to 6.2.136 to ensure the project uses the latest features and fixes.
  • This update includes changes in both package-lock.json and package.json files.
  • The new version was released recently, enhancing the stability and security of the project.

Changes walkthrough 📝

Relevant files
Dependencies
package-lock.json
Upgrade bancos-brasileiros Dependency in package-lock.json

examples/emberjs/package-lock.json

  • Upgraded bancos-brasileiros from version 6.2.115 to 6.2.136.
  • Updated the resolved URL and integrity hash for the new version.
    		•  +7/-7     
    package.json
    Update bancos-brasileiros Version in package.json               

    examples/emberjs/package.json

  • Changed bancos-brasileiros dependency version from ^6.2.115 to
    ^6.2.136.
    		•  +1/-1     

    💡 Penify usage:
    Comment /help on the PR to get a list of all available Penify tools and their descriptions

    @snyk-bot
    fix: upgrade bancos-brasileiros from 6.2.115 to 6.2.136
    1098e14 
    Snyk has created this PR to upgrade bancos-brasileiros from 6.2.115 to 6.2.136.

See this package in npm:
bancos-brasileiros

See this project in Snyk:
https://app.snyk.io/org/guibranco/project/337dc2ee-ac4c-4ec7-8f33-7fddb26040de?utm_source=github&utm_medium=referral&page=upgrade-pr
    @coderabbitai
    Copy link
    Contributor

    coderabbitai bot commented Feb 7, 2026

    Important

    Review skipped

    Ignore keyword(s) in the title.

    Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

    You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

    • 🔍 Trigger a full review
    ✨ Finishing touches
    🧪 Generate unit tests (beta)
    • Create PR with unit tests
    • Post copyable unit tests in a comment
    • Commit unit tests in branch snyk-upgrade-90979f4f6620eb7f4dc16c9c9b0919af

    Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

    ❤️ Share

    Comment @coderabbitai help to get the list of available commands and usage tips.

    @github-actions github-actions bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Feb 7, 2026
    @gstraccini gstraccini bot added the ☑️ auto-merge Automatic merging of pull requests (gstraccini-bot) label Feb 7, 2026
    @penify-dev penify-dev bot added the enhancement A enhancement to the project label Feb 7, 2026
    @socket-security
    Copy link

    socket-security bot commented Feb 7, 2026

    Review the following changes in direct dependencies. Learn more about Socket for GitHub.

    Diff Package Supply Chain
    Security    		 Vulnerability Quality Maintenance License
    Updatedbancos-brasileiros@​6.2.115 ⏵ 6.2.13684 +1100100 +198 +10

    View full report

    @penify-dev penify-dev bot added the Review effort [1-5]: 1 Minimal review effort required for this pull request (effort level: 1) label Feb 7, 2026
    @penify-dev
    Copy link
    Contributor

    penify-dev bot commented Feb 7, 2026

    PR Review 🔍

    ⏱️ Estimated effort to review [1-5]

    1, because this PR only involves a straightforward version upgrade of a dependency with no complex changes.

    🧪 Relevant tests

    No

    ⚡ Possible issues

    No

    🔒 Security concerns

    No

    @github-actions
    Copy link
    Contributor

    github-actions bot commented Feb 7, 2026

    Summary

    Status Count
    🔍 Total 455
    ✅ Successful 185
    ⏳ Timeouts 0
    🔀 Redirected 16
    👻 Excluded 253
    ❓ Unknown 0
    🚫 Errors 1
    ⛔ Unsupported 0

    Errors per input

    Errors in ./data/bancos.md

    Redirects per input

    Redirects in ./data/bancos.md

    @github-actions
    Copy link
    Contributor

    github-actions bot commented Feb 7, 2026

    Infisical secrets check: ✅ No secrets leaked!

    💻 Scan logs 
    2026-02-07T07:06:08Z INF scanning for exposed secrets...
7:06AM INF 1452 commits scanned.
2026-02-07T07:06:11Z INF scan completed in 3.36s
2026-02-07T07:06:11Z INF no leaks found

    @penify-dev
    Copy link
    Contributor

    penify-dev bot commented Feb 7, 2026

    PR Code Suggestions ✨

    CategorySuggestion                                                                                                                                    Score
    Security
    Confirm the integrity hash for the new package version

    Validate that the integrity hash for the new version of bancos-brasileiros is correct to
    ensure the package has not been tampered with.

    examples/emberjs/package-lock.json [4875]

    -"integrity": "sha512-k/9EwxpSi1GY96KWanrYeGw6K4BVMfuKq1fkrfAF4Y1ybdKaxuTjOdYgDbG1I6ofYKggGX9T7WD+vKMBVJ92gw==",
+"integrity": "sha512-k/9EwxpSi1GY96KWanrYeGw6K4BVMfuKq1fkrfAF4Y1ybdKaxuTjOdYgDbG1I6ofYKggGX9T7WD+vKMBVJ92gw==" // Validate integrity
    Suggestion importance[1-10]: 8

    Why: This suggestion addresses a security concern by ensuring the integrity of the package, which is crucial for maintaining application security.

    		8
    Compatibility
    Verify compatibility of the new version with existing dependencies

    Ensure that the new version of bancos-brasileiros is compatible with the rest of your
    dependencies to avoid potential conflicts.

    examples/emberjs/package-lock.json [12]

    -"bancos-brasileiros": "^6.2.136"
+"bancos-brasileiros": "^6.2.136" // Ensure compatibility
    Suggestion importance[1-10]: 7

    Why: While ensuring compatibility is important, the suggestion does not provide a direct code change and is more of a general recommendation.

    		7
    Best practice
    Review the changelog for breaking changes in the new version

    Consider checking the changelog of bancos-brasileiros for any breaking changes introduced
    in version 6.2.136.

    examples/emberjs/package-lock.json [4873]

    -"version": "6.2.136",
+"version": "6.2.136" // Check changelog for breaking changes
    Suggestion importance[1-10]: 7

    Why: This is a good practice to avoid issues, but like the previous suggestion, it lacks a direct code change and is more of a guideline.

    		7
    Testing
    Execute tests to verify application functionality post-upgrade

    After upgrading, run tests to ensure that the application behaves as expected with the new
    version of bancos-brasileiros.

    examples/emberjs/package.json [70]

    -"bancos-brasileiros": "^6.2.136"
+"bancos-brasileiros": "^6.2.136" // Run tests after upgrade
    Suggestion importance[1-10]: 6

    Why: Running tests is a good practice after an upgrade, but this suggestion is more about process than a specific code improvement.

    		6

    @sonarqubecloud
    Copy link

    sonarqubecloud bot commented Feb 7, 2026

    Quality Gate Passed Quality Gate passed

    Issues
    0 New issues
    0 Accepted issues

    Measures
    0 Security Hotspots
    0.0% Coverage on New Code
    0.0% Duplication on New Code

    See analysis details on SonarQube Cloud

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    @gstraccini gstraccini[bot] gstraccini[bot] approved these changes

    Assignees

    @guibranco guibranco

    Labels

    ☑️ auto-merge Automatic merging of pull requests (gstraccini-bot) enhancement A enhancement to the project Review effort [1-5]: 1 Minimal review effort required for this pull request (effort level: 1) size/S Denotes a PR that changes 10-29 lines, ignoring generated files.

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    2 participants

    @guibranco @snyk-bot