Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump tartufo from 4.0.1 to 4.1.0 #4

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Apr 7, 2023

Bumps tartufo from 4.0.1 to 4.1.0.

Release notes

Sourced from tartufo's releases.

Version 4.1.0

Features:

  • godaddy/tartufo#473 - Introduces new flag --target-config/--no-target-config to enable or disable processing of the config file in the repository or folder being scanned
  • godaddy/tartufo#455 - Update documentation to fix incorrect wording
  • godaddy/tartufo#458 - Adds --exclude-regex-patterns to allow for regex-based exclusions
  • godaddy/tartufo#479 - Remove upward traversal logic for config discovery

Bug fixes:

  • godaddy/tartufo#482 - Code updates to process rule-patterns set up in the target's default config file i.e. tartufo.toml or pyproject.toml

  • godaddy/tartufo#467 - Multiple fixes to configuration file processing:

    • If multiple configuration files were specified, only the last was processed and no error or warning was generated. Now files are processed in order.
    • When multiple configuration files are specified, list-valued parameters are concatenated and single-valued parameters are overwritten by the last file that defines them.
    • Configuration files located in the target of a scan-folder operation were ignored; now they are located and processed in the same manner as for a scan-local-repo or scan-remote-repo operation.
Changelog

Sourced from tartufo's changelog.

v4.1.0 - April 3 2023

Features:

  • #473 - Introduces new flag --target-config/--no-target-config to enable or disable processing of the config file in the repository or folder being scanned
  • #455 - Update documentation to fix incorrect wording
  • #458 - Adds --exclude-regex-patterns to allow for regex-based exclusions
  • #479 - Remove upward traversal logic for config discovery

Bug fixes:

  • #482 - Code updates to process rule-patterns set up in the target's default config file i.e. tartufo.toml or pyproject.toml
  • #467 - Multiple fixes to configuration file processing:
    • If multiple configuration files were specified, only the last was processed and no error or warning was generated. Now files are processed in order.
    • When multiple configuration files are specified, list-valued parameters are concatenated and single-valued parameters are overwritten by the last file that defines them.
    • Configuration files located in the target of a scan-folder operation were ignored; now they are located and processed in the same manner as for a scan-local-repo or scan-remote-repo operation.
Commits
  • 5bee353 Release v4.1.0 (#485)
  • 345092b Processing rule-patterns from default configuration files (#482)
  • 746fc74 Setting up new flag --target-config/--no-target-config to skip use of config ...
  • d4e9948 fix(deps): update dependency tomlkit to v0.11.7 (#478)
  • 652175b chore(deps): update dependency black to v23.3.0 (#481)
  • 89bf041 chore(deps): update dependency tox to v4.4.8 (#477)
  • f0aaff4 add exclude-regex-patterns (#458)
  • 814d1b8 Remove upward traversal logic for config discovery (#479)
  • c02206e Bugfix: multiple configuration files not processed (#468)
  • 5eff8ff Collect dependency updates (#472)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [tartufo](https://github.com/godaddy/tartufo) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/godaddy/tartufo/releases)
- [Changelog](https://github.com/godaddy/tartufo/blob/main/CHANGELOG.md)
- [Commits](godaddy/tartufo@v4.0.1...v4.1.0)

---
updated-dependencies:
- dependency-name: tartufo
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 7, 2023
@Jelloeater Jelloeater self-requested a review as a code owner April 7, 2023 20:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants