Skip to content

chore(deps): update dependency hoppr to v1.9.5 signed-off-by: bot, renovate <hopprexternalrenovate.dl-eo@groups.lmco.com> - autoclosed

This MR contains the following updates:

Package Type Update Change
hoppr (source) dependencies minor 1.8.1 -> 1.9.5

Release Notes

hoppr/hoppr (hoppr)

v1.9.5

Compare Source

Bug Fixes
  • add logic to append protocol to repository url qualifier (c613fa7)
  • add purl version check if specified in purl (4bbac6e)
  • change warning test to check file system type (520b2ac)
  • git collector problems given no version (b9c0748)
  • load credentials before manifest (dcf3636)
  • manual refactor of sourcery review issue (ca233f0)
  • Provide warning in log if dnf error might be due to running in vagrant (c93762a)
  • remove extra print statement (9a675a3)

v1.9.4

Compare Source

Bug Fixes
  • missing default param, reexport models (dedc711)

v1.9.3

Compare Source

Bug Fixes
  • accessing missing attribute (ce5979a)
  • add docker collector handle oci spec (df23cdd)
  • add OCI tag handling and update unittests (2f6248d)
  • apt debug options (a5e67ab)
  • check if running with --debug/--verbose (81a8592)
  • completed counter, add progress spinner (fac9a51)
  • conflicting model config on subclass (da6933a)
  • dnf --verbose output (da7b899)
  • fast-forward and linting (4dbed90)
  • fast-forward and linting (8c96892)
  • git expected-tar-toc (9b7fcd4)
  • incorrect manifest url type (7073929)
  • incorrect manifest url type (80feff0)
  • interspersed args/options with hopctl bundle (ceac03d)
  • layout improvements (b6881c9)
  • linting issues (7ed96a9)
  • linting issues with test file (57c9ebc)
  • log message interpolation (fcc13fa)
  • log message order (4e42fab)
  • maven collector --no-strict now works if no settings file has been specified (4b0a366)
  • Modify messages to be more accurate between docker and oci packages (323e0ce)
  • more linting issues (8ac20fd)
  • more linting issues (0598f2d)
  • poetry problems (c179dad)
  • poetry problems (33f659a)
  • processor unit tests (7c00e2e)
  • removing unnecessary comment (a7a0032)
  • removing unnecessary comment (c603dca)
  • set output panel ratio back to previous (f8f387b)
  • testing issues (d2c28d0)
  • type check error (74a399b)
  • undo reverted http scheme prepending (16ccaf8)
  • update apt component versions (d6fe134)
  • update apt component versions (8c9f2b5)
  • update hoppr-cyclonedx-models to v0.5.3 (d5a520a)
  • user specified repos overriding system repos (d777129)

v1.9.2

Compare Source

Bug Fixes
  • variable overwritten with None (795899c)

v1.9.1

Compare Source

Bug Fixes
  • allow git depth to be specified as an integer (4eb2b0a)
  • bundle output file naming (81e9055)
  • check if previous delivery is a tar file (c8c2080)
  • enable more collectoin type options for pypi collector (2e5c3dc)
  • honor --previous-delivery CLI option (2e13c85)
  • lint and unit test error (4fa827e)
  • remove securesystemslib from pegged versions (7ec96d7)
  • report plugin version numbers in log and run_data (e903367)
  • set previous_delivery attribute of context (8543165)
  • write metadata files with relative paths (39d1d1c)
Reverts
  • bundle output file naming (4dd77f8)

v1.9.0

Compare Source

Features
  • add Golang collector (8df80ec)
  • initial cargo collector plugin (be315b6)
Bug Fixes
  • (wip) fail on 404 and add nuget collector unit tests (3c0af0b)
  • hopctl unit test regex match (562dfb5)
  • add test_dir back to cargo regression test (f134dab)
  • add test_dir back to cargo regression test (2390c07)
  • add test_dir back to nuget regression test (3455394)
  • add test_dir back to nuget regression test (93deea6)
  • add files for nuget regression test (94a66de)
  • add missing comma in nuget-bom file (59c923c)
  • add missing sn on nuget regression test bom (43c63b9)
  • add nuget external reference for regression test (9e0dba2)
  • add nuget Integration Test (4b9bad7)
  • add proxies to get request (d2cd19c)
  • add support for uppercase no_proxy (0934e5a)
  • add test id 10 to integration-test.yml (b08410e)
  • add the nuget collector to test_transfer and refactor a bit (01b9031)
  • add unique ID callback for LicenseChoice model (6c0cc91)
  • add unit test for _repo_proxy (557215e)
  • add validation function to Plugin class (024aa1b)
  • add validator for serialNumber (4e4a3bb)
  • adding test file (feab605)
  • adding to proper branch (af09c61)
  • always generate bom-ref (7b7ee02)
  • assign id to CollectNugetPlugin fixture (19df90e)
  • change hardcoded regression test dirs to be found automatically (bade163)
  • consolidated SBOM population logic (a2ad142)
  • convert parsed externalReferences (9e4459b)
  • correct bom path in cargo expected-tar-toc (e638341)
  • Correct docker plugin bug in next (612fb24)
  • correct tests (042c006)
  • decode unicode escapes for matching (7d384c2)
  • deepcopy from get_package_url (0cedb1c)
  • don't add subfolder if missing purl namespace (c1df91a)
  • edit message to show folder name instead of path (86e0eff)
  • enable nuget regression test (0c80ca3)
  • enable nuget regression test in regression_test_plugin (30c83fc)
  • ensure unique SBOM serial numbers (3095ae4)
  • expected tar toc paths (32d2e1c)
  • extend ExternalReference and Property models (d1b53db)
  • fail if no plugins loaded and coverage required (ab745e0)
  • fix cargo collector integration test files (f09f11e)
  • fix cargo collector integration test files (fbf0a44)
  • fix component import in cargo plugin test (89edb70)
  • fix import in cargo collector (0f145cb)
  • fix linter warnings (f10ffd7)
  • fix linter warnings (1e3e4ad)
  • fix regression caused by missing parameter (5779557)
  • fix regression in golang transfer file (df930c2)
  • fix test folder path on sys.path (2e847e0)
  • fix url path join and refactor a bit (69eed23)
  • flatten logic (d5dfb67)
  • get consolidated_sbom from manifest object (5907b9e)
  • handle RefType custom root type (344f55b)
  • handle NO_PROXY and refactor a bit (8da8253)
  • hoppr logo pixelated on MacOS Terminal.app (62ea149)
  • ignore some linting warnings (47f82ac)
  • instance attributes treated as class attributes (cacc97c)
  • lint README and fix broken tutorial link (8472ea4)
  • lookup unique components by bom-ref (4009bc3)
  • make _repo_proxy reusable (6e2ce26)
  • make nuget-bom sn match expected-bom externalReferences comment (62a8f5c)
  • Merge dev into next (18a0ae2)
  • merge into self directly (43e48cc)
  • model name typo (150d343)
  • npm-collector: add npm collector and tests (c09b4a4)
  • nuget transfer file, restore unit test (887089d)
  • platform-specific consolidated_sbom issue (47517a3)
  • refactor regression test paths (e40871d)
  • refactor the _repo_proxy tests (1dcb119)
  • remove "v" from version number (6af6888)
  • remove duplicate call to main.bundle (1649373)
  • remove duplicate call to main.bundle (3ac08cf)
  • remove duplicate code linting warnings (b797d0d)
  • remove incorrect linter warnings (c3a00c6)
  • remove test_dir str conversion and refactor a bit (1aaaaef)
  • remove unnecessary comments, arguments and warnings (137b0f0)
  • rename function (41696a6)
  • reorder expected-tar-toc contents (1462677)
  • replace unnecessary local with function call (8e17e66)
  • resolve in-toto verification error (bb350a7)
  • revert README - fixed in target branch (7606ac8)
  • separate some logical groupings (1606a5a)
  • set bom_ref in __init__ (d19b9e5)
  • small refactor on no_proxy_domains (ba7535d)
  • standardizing (4e62761)
  • standardizing (6e28013)
  • strip leading v for version string comparison (d280221)
  • type alias imports (5be209e)
  • type issues with latest packageurl library (62cb48d)
  • unique ID callbacks (e90ae04)
  • update get_package_url to unencode purl before processing (1bce643)
  • update test fixtures (fb560b6)
  • updated nuget plugin package handling (98fdbb9)
  • use RepositoryUrl object (bf11f48)
  • use RepositoryUrl object (fcfac40)
  • use the new RepositoryUrl class (737a849)
  • validate correct ExternalReferences type (19fe2c7)
  • value not in list error (0f2423c)

v1.8.8

Compare Source

Bug Fixes
  • Add in backmerge fixes (288ae4c)
  • consolidate docker collector path variables to fix pathing issue (f1f95b4)
  • Correct dev loop semantic release error (780beeb)
  • Correct misstype (535a286)
  • Correct unit testing (929c5b0)
  • Cut dev release (104f12f)
  • Escape characters so that patern is taken as a literal. (713c7f9)

v1.8.7

Compare Source

Bug Fixes
  • Add ability to choose binary or source pulls for pypi (40c3788)
  • Add in integration tests (0ca2f58)
  • Add tests (f6baadb)
  • Call plugin directly (8cd52c0)
  • Correct linting and unit test errors (d5a5604)
  • Correct unit test (cb63e1a)
  • Correct unit testing (96a552e)
  • Correct unit testing (27c7373)
  • Define pip (9704919)
  • Move pip command into init (89cd81f)
  • Set collection type and response message to add clarity (51022bd)
  • Test the python init method (9786169)
  • Update expected toc for new int test (42976fa)
  • Updates per comments (6005608)

v1.8.6

Compare Source

Bug Fixes
  • Add backmerge capability into semantic-release config (54d2072)
  • Add gitignore to not save new configurations of vscode launch and settings unless manual (9e5fa1b)
  • Add in echo's so we know what's going on. (d00596f)
  • Add nexus component to test (f443754)
  • Add nexus component to test (8dc9f12)
  • Bump semantic release image tag (8836fa3)
  • Cleanup formatting (a38f990)
  • Cleanup temp logging (ef3342d)
  • collectors only process components with supported purl types (7144d58)
  • Correct backmerge pattern (330b2d5)
  • Correct commandline bug with skopeo (1b01e41)
  • Correct completed result and update nexus to handle npm (ebeeb97)
  • Correct completed result and update nexus to handle npm (ac28975)
  • Correct lint job (8e7e17f)
  • Correct nexus collector plugin with url decoding (351c911)
  • Correct plugin creation by adding config to instance (9869e8b)
  • Correct string (8564ad7)
  • Correct unit tests and verify pattern (78adf72)
  • Correct variable names (3d5fc80)
  • Improve the nexus npm collection (0f47425)
  • Improve the unit test (4341253)
  • Leverage threadpoolexecutor (ab2807e)
  • Print logs dynamically as they run (81fb652)
  • Reduce number of branches (c1ec0b1)
  • Run black against plugin (a35fe2c)
  • Set exception catch type (3a4fd31)
  • Set exception catch type (776f79e)
  • update docker collector path sep to @​ (bd8feac)
  • Updates per MR comments (b942e4b)
  • Use threadpoolexecutor and enable mixed characters in stages (03b6202)

v1.8.5

Compare Source

Bug Fixes
  • add deepcopy for purl manipulation in manifest, per Jonathan (4a41e10)
  • add ignore_excluded decorator to hoppr_process (4db206c)
  • add regression test data for custom component property support (af0f6ac)
  • add unit test for ReportGenerator._parse_property (aa0b78f)
  • do not run processes when method is not overridded from HopprPlugin class (2af2011)
  • docker collector handle sha256 versions (672c369)
  • fix type check error in base collector (f689788)
  • handle raw nexus artifacts (fcdcd6c)
  • make report_generator support custom component properties (e183119)
  • replace remaining calls to PackageURL.fromString with utils.get_package_url. Add unit test for complete coverage of processor (770f376)
  • stop RepositoryUrl from prepending scheme (dde32ac)
  • treat component_search_sequence as a specific case (7341fb3)
  • Update Helm collector to return failure if cmd returned 404 (5b0d6fa)

v1.8.4

Compare Source

Bug Fixes
  • attestation product list for delta (43f647e)
  • fix delta processing, add back delta int test (63fa610)
  • mypy issues, code review comments (30e36fd)
  • unit test fix, linting (75de1ab)

v1.8.3

Compare Source

Bug Fixes
  • integration tests: allow integration tests to pass from forked repositories (ca123cf)
  • integration tests: allow integration tests to pass from forked repositories (d65b5a6)
  • restore "file:" repository URL handling (58d4d0c)
  • trailing slash in Helm expected BOM (ef89d49)

v1.8.2

Compare Source

Bug Fixes
  • Apply MR fixes (c88c7ec)
  • Correct coverage badge (6e040be)
  • Correct coverage regex (d1d748e)
  • invalid or missing URL scheme (1b8313e)
  • Merge main into dev (083c046)
  • Only release if release version is set (356b4f6)
  • Only sign and push to dockerhub if RELEASE_VERSION populated (a4e32a0)
  • URL strings for commands (4e4f1c1)
  • URL trailing slash handling (8a0b7ec)
  • v1.8.2 Release Branch (6088524)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.


  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited by lmco-renovate-bot

Merge request reports

Loading