chore(deps): bump conan from 2.14.0 to 2.15.0 in /.devcontainer by dependabot[bot] · Pull Request #765 · philips-software/amp-devcontainer

dependabot · 2025-04-07T09:12:47Z

Bumps conan from 2.14.0 to 2.15.0.

Release notes

2.15.0 (31-Mar-2025)

Feature: Improve error messages when dealing with incorrect JSON input file formats. (conan-io/conan#18037)

Feature: Added new --graph-context to conan list command. (conan-io/conan#18015). Docs: 📃

Feature: Add version-ranges patterns defined with [1.2.3.4.*] with the * at the end of the string. (conan-io/conan#18012). Docs: 📃

Feature: Added subsystem field in MesonToolchain if cross-compiling between Apple OSs. (conan-io/conan#17985)

Feature: Added new kwarg build_contextto is_apple_os helper function. (conan-io/conan#17985)

Feature: Integrate chmod feature in tools.files. (conan-io/conan#17800). Docs: 📃

Fix: Remove backup sources from unknown refs when calling conan cache clean. (conan-io/conan#18018)

Fix: Fix SBOM author field. (conan-io/conan#18014)

Fix: Avoid resolving the symlinks path by default if they match the library name. (conan-io/conan#17964)

Fix: Make some from conan.internal and from conans usages from CLI commands private, moving to ConanAPI. (conan-io/conan#17961)

Fix: Add warning for deprecated attribute in recipes. (conan-io/conan#17957). Docs: 📃

Fix: Improve relative paths in generators to be as short as possible. (conan-io/conan#17945)

Fix: _Component() has no package_type property. (conan-io/conan#17943)

Bugfix: Fix global.conf precedence over profiles [conf] and order change of per-package pattern confs. (conan-io/conan#18028)

Bugfix: Solve issue with update_policy=legacy and using lockfiles. (conan-io/conan#18009)

Bugfix: untargz() method was failing if directories had a more restrictive mode. (conan-io/conan#17998)

Bugfix: CppInfo.auto_deduce_location method gives more prio to exact match. (conan-io/conan#17975)

Bugfix: Avoid crash of --format=json serialization when custom generators inside tool-requires are referenced by class, not by name. (conan-io/conan#17954)

BugFix: Add correct info in metadata + prevent crash when no component is associated to root_node. (conan-io/conan#17925)

Commits

6c4a9fc Conan 2.15.0
3aa83ac Improve error messages when parsing JSON input files (#18037)
1f112d4 Improve tools.chmod method description with pynumdoc (#18038)
c0ef44d Fix runners after refactor on #17961 (#18040)
8c539cb Do not use pyenv
05c5eae Remove usage of pre build image on runners job
d7b631c Fix runners after refactor on #17961
562ffcc [tools] Add chmod in tools.files (#17800)
8e1f78f explore version range patterns (#18012)
1bb6189 [GH actions] Adding CMake 4.0 version to CI (#17927)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [conan](https://github.com/conan-io/conan) from 2.14.0 to 2.15.0. - [Release notes](https://github.com/conan-io/conan/releases) - [Commits](conan-io/conan@2.14.0...2.15.0) --- updated-dependencies: - dependency-name: conan dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2025-04-07T09:13:16Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

github-actions · 2025-04-07T09:13:56Z

Compressed layer size comparison

Comparing ghcr.io/philips-software/amp-devcontainer-rust:latest to ghcr.io/philips-software/amp-devcontainer-rust@sha256:ebcae63b22316dff11a68e23b06a84348aa37eb12f7dfeb3f6ec0e75711a89d8

OS/Platform	Previous Size	Current Size	Delta
linux/amd64	484.90M	485.16M	264.17K (+0.05%)
linux/arm64	623.75M	624.01M	270.21K (+0.04%)

github-actions · 2025-04-07T09:16:23Z

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	17		0	0	0.07s
✅ DOCKERFILE	hadolint	2		0	0	0.51s
✅ GHERKIN	gherkin-lint	2		0	0	0.83s
✅ JSON	npm-package-json-lint	yes		no	no	0.35s
✅ JSON	prettier	15	1	0	0	0.36s
✅ JSON	v8r	15		0	0	9.08s
✅ MARKDOWN	markdownlint	8	0	0	0	0.82s
✅ MARKDOWN	markdown-table-formatter	8	0	0	0	0.24s
✅ REPOSITORY	checkov	yes		no	no	14.82s
✅ REPOSITORY	gitleaks	yes		no	no	0.27s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	21.83s
✅ REPOSITORY	secretlint	yes		no	no	1.11s
✅ REPOSITORY	syft	yes		no	no	1.29s
✅ REPOSITORY	trivy	yes		no	no	5.15s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.08s
✅ REPOSITORY	trufflehog	yes		no	no	3.95s
✅ SPELL	lychee	59		0	0	21.28s
✅ YAML	prettier	22	0	0	0	0.65s
✅ YAML	v8r	22		0	0	5.74s
✅ YAML	yamllint	22		0	0	0.4s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

oxsecurity/megalinter/flavors/dotnet@v8.5.0 (62 linters)
oxsecurity/megalinter/flavors/dotnetweb@v8.5.0 (71 linters)

github-actions · 2025-04-07T09:19:46Z

Test Results

2 files ±0 2 suites ±0 1m 18s ⏱️ ±0s
29 tests ±0 29 ✅ ±0 0 💤 ±0 0 ❌ ±0
31 runs ±0 31 ✅ ±0 0 💤 ±0 0 ❌ ±0

Results for commit 28b5366. ± Comparison against base commit 8ffa3ef.

Copilot

Copilot wasn't able to review any files in this pull request.

Files not reviewed (2)

.devcontainer/cpp/requirements.in: Language not supported
.devcontainer/cpp/requirements.txt: Language not supported

github-actions · 2025-04-07T11:57:11Z

Compressed layer size comparison

Comparing ghcr.io/philips-software/amp-devcontainer-cpp:latest to ghcr.io/philips-software/amp-devcontainer-cpp@sha256:e7683a64ca993272fe8018b777438d74911b12d3a787fa2d9a57359523b8ebef

OS/Platform	Previous Size	Current Size	Delta
linux/amd64	701.55M	701.90M	361.78K (+0.05%)
linux/arm64	683.25M	683.59M	355.08K (+0.05%)

github-actions · 2025-04-08T19:50:08Z

Pull Request Report (#765)

Static measures

Description	Value
Number of added lines	3
Number of deleted lines	3
Number of changed files	2
Number of commits	1
Number of reviews	2
Number of comments (w/o review comments)	5
Number of reviews that contains a comment to resolve	1
Number of reviews that requested a change from the author	0
Number of reviews that approved the Pull Request	1
Get the total number of participants of a Pull Request	5

Time related measures

Description	Value
PR lead time (from creation to close of PR)	1.4 Days
Time that was spend on the branch before the PR was created	1 Sec
Time that was spend on the branch before the PR was merged	1.4 Days
Time to merge after last review	3.2 Hours

Status check related measures

Description	Value
Total runtime for last status check run (Workflow for PR)	3.1 Hours
Total time spend in last status check run on PR	2.8 Hours

github-actions · 2025-04-16T07:24:33Z

🎉 Hooray! The changes in this pull request went live with the release of v6.0.0 🎉

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 7, 2025

dependabot bot requested a review from a team as a code owner April 7, 2025 09:12

Ron (rjaegers) requested a review from Copilot April 7, 2025 11:10

Copilot AI reviewed Apr 7, 2025

View reviewed changes

Ron (rjaegers) enabled auto-merge April 8, 2025 16:37

Ron (rjaegers) approved these changes Apr 8, 2025

View reviewed changes

Ron (rjaegers) added this pull request to the merge queue Apr 8, 2025

github-merge-queue bot removed this pull request from the merge queue due to failed status checks Apr 8, 2025

Ron (rjaegers) added this pull request to the merge queue Apr 8, 2025

Merged via the queue into main with commit 398ae6b Apr 8, 2025
21 checks passed

Ron (rjaegers) deleted the dependabot/pip/dot-devcontainer/conan-2.15.0 branch April 8, 2025 19:49

philips-software-forest-releaser bot mentioned this pull request Apr 8, 2025

chore(main): release 6.0.0 #755

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

chore(deps): bump conan from 2.14.0 to 2.15.0 in /.devcontainer#765

chore(deps): bump conan from 2.14.0 to 2.15.0 in /.devcontainer#765
Ron (rjaegers) merged 1 commit intomainfrom
dependabot/pip/dot-devcontainer/conan-2.15.0

dependabot bot commented on behalf of github Apr 7, 2025

Uh oh!

sonarqubecloud bot commented Apr 7, 2025

Uh oh!

github-actions bot commented Apr 7, 2025

Uh oh!

github-actions bot commented Apr 7, 2025

Uh oh!

github-actions bot commented Apr 7, 2025

Uh oh!

Copilot AI left a comment

Uh oh!

github-actions bot commented Apr 7, 2025

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Apr 8, 2025

Uh oh!

github-actions bot commented Apr 16, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments

Conversation

dependabot bot commented on behalf of github Apr 7, 2025

2.15.0 (31-Mar-2025)

Uh oh!

sonarqubecloud bot commented Apr 7, 2025

Quality Gate passed

Uh oh!

github-actions bot commented Apr 7, 2025

Compressed layer size comparison

Uh oh!

github-actions bot commented Apr 7, 2025

🦙 MegaLinter status: ✅ SUCCESS

Uh oh!

github-actions bot commented Apr 7, 2025

Test Results

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Apr 7, 2025

Compressed layer size comparison

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Apr 8, 2025

Pull Request Report (#765)

Static measures

Time related measures

Status check related measures

Uh oh!

github-actions bot commented Apr 16, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant