Update dependency axe-core-rspec to '~> 4.8.2'

This MR contains the following updates:

Package	Update	Change
axe-core-rspec	patch	'~> 4.8.0' -> '~> 4.8.2'

MR created with the help of gitlab-org/frontend/renovate-gitlab-bot

---

Configuration

Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.

Renovate Comment

What are the next steps?

If you have been assigned as a reviewer to this Merge Request, please review this Merge Request with the same scrutiny as any community contribution:

1. Ensure that the dependencies updated meet our standards:

   • Security: Dependencies do not contain malicious code
   • Performance: Dependencies do not bloat the application code or prolong CI times unnecessarily
   • Stability: Pipelines are passing

2. Review the changes introduced by the version upgrade. Consider using https://my.diffend.io to compare the two versions in case the updated dependency is either a Ruby Gem or a Node.js package, for example to compare pg_query 2.1.0 and 2.1.4.

3. Check if bundle install works locally, in the context of GDK.

4. If tests are passing and you've reviewed the updated dependencies, execute pipelines in the context of the main project

   This MR is created from a fork, therefore not all jobs (e.g. Danger) might have been executed. Instead of hitting MWPS right away, you might want to wait until the pipeline you've just triggered finished.

   Note: This might not be available in projects, in that case merging right away is an option

5. Merge away!

Troubleshooting

We have assembled some FAQs to help reviewers of these kind of merge requests.

Improve this message – The JSON comment below is for automation purposes.

{"labels":["maintenance::dependency","type::maintenance","automation:bot-authored","backend","Engineering Productivity"],"assignees":["gitlab-dependency-update-bot"],"reviewers":["ddieulivol","godfat-gitlab","jennli","nao.hashizume","rymai","splattael"]}

mentioned in issue #365045

added Engineering Productivity automation:bot-authored backend maintenancedependency typemaintenance labels

requested review from @ddieulivol

assigned to @gitlab-dependency-update-bot

added 1 commit

• 7a6bbdff - Update dependency axe-core-rspec to '~> 4.8.2'

Compare with previous version

resolved all threads

approved this merge request

@gitlab-dependency-update-bot Looks good to me, thanks!

@ddieulivol, thanks for approving this merge request.

This is the first time the merge request has been approved. To ensure we don't only run predictive pipelines, and we don't break master, a new pipeline will be started shortly.

Please wait for the pipeline to start before resolving this discussion and set auto-merge for the new pipeline. See merging a merge request for more details.

added pipeline:mr-approved label

Dependency change review report

This automation is under testing, please leave your feedback in the issue.

Modified Dependency: axe-core-rspec (4.8.2) Location: Gemfile.lock Version diffs

Checks passed: 6/6

• ️ Latest version: 4.8.2 released on: 2024-02-16. URL: https://rubygems.org/gems/axe-core-rspec
• Latest version is in use.
• Total downloads: 6114646
• Reverse dependencies: 2
• Total number of releases: 128
• Latest version age (months): 0
• Source project in Github not archived.
• ️ Maintainer emails are private. Email domain check skipped.

Change in dependency identified, pinging @gitlab-com/gl-security/appsec for review. For review guidelines refer handbook page. Hi Appsec, please resolve this thread once review is completed.

	1 Warning
	This merge request does not refer to an existing milestone.

	1 Message
	CHANGELOG missing: If this merge request needs a changelog entry, add the Changelog trailer to the commit message you want to add to the changelog. If this merge request doesn't need a CHANGELOG entry, feel free to ignore this message.

Reviewer roulette

Category	Reviewer	Maintainer
backend	@dbiryukov (UTC+1)	@engwan (UTC+8)

Please check reviewer's status!

• Reviewer is available!
• Reviewer is unavailable!

Please refer to documentation page for guidance on how you can benefit from the Reviewer Roulette, or use the GitLab Review Workload Dashboard to find other available reviewers.

Rubygems

This merge request adds, or changes a Rubygems dependency. Please review the Gemfile guidelines.

If needed, you can retry the danger-review job that generated this comment.

Generated by Danger

E2E Test Result Summary

allure-report-publisher generated test report!

e2e-test-on-gdk: test report for 7a6bbdff

expand test summary

+------------------------------------------------------------------+
|                          suites summary                          |
+-------------+--------+--------+---------+-------+-------+--------+
|             | passed | failed | skipped | flaky | total | result |
+-------------+--------+--------+---------+-------+-------+--------+
| Plan        | 53     | 0      | 0       | 0     | 53    | ✅     |
| Create      | 60     | 0      | 9       | 0     | 69    | ✅     |
| Govern      | 66     | 0      | 0       | 1     | 66    | ✅     |
| Package     | 24     | 0      | 2       | 0     | 26    | ✅     |
| Verify      | 36     | 0      | 0       | 0     | 36    | ✅     |
| Analytics   | 2      | 0      | 0       | 0     | 2     | ✅     |
| Release     | 5      | 0      | 0       | 0     | 5     | ✅     |
| Monitor     | 7      | 0      | 0       | 0     | 7     | ✅     |
| Data Stores | 31     | 0      | 0       | 0     | 31    | ✅     |
| Manage      | 0      | 0      | 1       | 0     | 1     | ➖     |
+-------------+--------+--------+---------+-------+-------+--------+
| Total       | 284    | 0      | 12      | 1     | 296   | ✅     |
+-------------+--------+--------+---------+-------+-------+--------+

e2e-package-and-test: test report for 7a6bbdff

expand test summary

+---------------------------------------------------------------------+
|                           suites summary                            |
+----------------+--------+--------+---------+-------+-------+--------+
|                | passed | failed | skipped | flaky | total | result |
+----------------+--------+--------+---------+-------+-------+--------+
| Data Stores    | 119    | 0      | 28      | 1     | 147   | ✅     |
| Govern         | 272    | 0      | 19      | 0     | 291   | ✅     |
| Package        | 226    | 0      | 17      | 0     | 243   | ✅     |
| Plan           | 246    | 0      | 13      | 0     | 259   | ✅     |
| Verify         | 150    | 0      | 27      | 3     | 177   | ✅     |
| Create         | 568    | 0      | 73      | 18    | 641   | ✅     |
| Systems        | 8      | 0      | 0       | 0     | 8     | ✅     |
| Release        | 15     | 0      | 3       | 0     | 18    | ✅     |
| Manage         | 39     | 0      | 11      | 2     | 50    | ✅     |
| GitLab Metrics | 2      | 0      | 1       | 0     | 3     | ✅     |
| Fulfillment    | 8      | 0      | 75      | 4     | 83    | ✅     |
| Monitor        | 36     | 0      | 13      | 0     | 49    | ✅     |
| Analytics      | 7      | 0      | 0       | 0     | 7     | ✅     |
| Configure      | 1      | 0      | 9       | 0     | 10    | ✅     |
| Secure         | 6      | 0      | 3       | 0     | 9     | ✅     |
| Growth         | 0      | 0      | 6       | 0     | 6     | ➖     |
| ModelOps       | 0      | 0      | 3       | 0     | 3     | ➖     |
| Ai-powered     | 0      | 0      | 3       | 0     | 3     | ➖     |
+----------------+--------+--------+---------+-------+-------+--------+
| Total          | 1703   | 0      | 304     | 28    | 2007  | ✅     |
+----------------+--------+--------+---------+-------+-------+--------+

Merge request already approved.

Adding automation:bot-no-updates in order to prevent renovate from updating the MR.

If you want the MR to be updated again, please remove the label and check the "rebase checkbox" in the description.

added automation:bot-no-updates label

NON-BLOCKING: This MR has changed Gemfile.checksum. GitLab team members should review the following dependency SAST scans when they finish:

• axe-core-rspec-4.8.2-ruby-71e019e6

If there appear to be any true-positive vulnerabilities identified with CRITICAL or HIGH severity, if the report is misconfigured, or if you have questions, reply to this thread and mention @gitlab-com/gl-security/appsec.

Otherwise, this does not require an AppSec review.

Please also review the Gemfile development AppSec guidelines. Thank you for keeping GitLab secure!

Generated by depSASTer. Open an issue to provide feedback.

resolved all threads

unapproved this merge request