-
Notifications
You must be signed in to change notification settings - Fork 164
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Snyk] Upgrade bancos-brasileiros from 6.1.6 to 6.1.10 #622
Conversation
Snyk has created this PR to upgrade bancos-brasileiros from 6.1.6 to 6.1.10. See this package in npm: bancos-brasileiros See this project in Snyk: https://app.snyk.io/org/guibranco/project/337dc2ee-ac4c-4ec7-8f33-7fddb26040de?utm_source=github&utm_medium=referral&page=upgrade-pr
Reviewer's Guide by SourceryThis pull request upgrades the ER diagram showing bank data structure changeserDiagram
BANK {
string code
string name
string cnpj
string products
string pixType
datetime datePixStarted
}
%% New bank added
ACTUAL_DTVM {
string code "663"
string name "ACTUAL DTVM S.A."
string cnpj "44.782.130/0001-07"
}
%% Updated banks
BCO_TRIANGULO {
string code "634"
string products "Cheque Especial, Troca de Modalidade"
}
WE_PAY_OUT {
string code "662"
string pixType "DRCT"
datetime datePixStarted "2024-12-09 11:10:00"
}
BANK ||--o| ACTUAL_DTVM : "new"
BANK ||--o| BCO_TRIANGULO : "updated"
BANK ||--o| WE_PAY_OUT : "updated"
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
Important Review skippedIgnore keyword(s) in the title. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We have skipped reviewing this pull request. It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I've completed my review and didn't find any issues.
Need a new review? Comment
/korbit-review
on this PR and I'll review your latest changes.Korbit Guide: Usage and Customization
Interacting with Korbit
- You can manually ask Korbit to review your PR using the
/korbit-review
command in a comment at the root of your PR.- You can ask Korbit to generate a new PR description using the
/korbit-generate-pr-description
command in any comment on your PR.- Too many Korbit comments? I can resolve all my comment threads if you use the
/korbit-resolve
command in any comment on your PR.- Chat with Korbit on issues we post by tagging @korbit-ai in your reply.
- Help train Korbit to improve your reviews by giving a 👍 or 👎 on the comments Korbit posts.
Customizing Korbit
- Check out our docs on how you can make Korbit work best for you and your team.
- Customize Korbit for your organization through the Korbit Console.
Current Korbit Configuration
General Settings
Setting Value Review Schedule Automatic excluding drafts Max Issue Count 10 Automatic PR Descriptions ✅ Issue Categories
Category Enabled Naming ✅ Database Operations ✅ Documentation ✅ Logging ✅ Error Handling ✅ Systems and Environment ✅ Objects and Data Structures ✅ Readability and Maintainability ✅ Asynchronous Processing ✅ Design Patterns ✅ Third-Party Libraries ✅ Performance ✅ Security ✅ Functionality ✅ Feedback and Support
Note
Korbit Pro is free for open source projects 🎉
Looking to add Korbit to your team? Get started with a free 2 week trial here
PR Review 🔍
|
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/[email protected] |
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat are unpopular packages?This package is not very popular. Unpopular packages may have less maintenance and contain other problems. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
PR Code Suggestions ✨
|
Summary
Errors per inputErrors in ./README.md
Errors in ./README.pt-br.md |
@gstraccini rerun failed workflows |
Rerunning 0 failed workflows on the commit |
@gstraccini rerun workflows failure |
I'm sorry @guibranco, I can't do that. Command not found. 🥺 |
@gstraccini rerun workflows failure |
@gstraccini rerun workflows cancelled |
1 similar comment
@gstraccini rerun workflows cancelled |
Rerunning 5 cancelled workflows on the commit |
Infisical secrets check: ✅ No secrets leaked! 💻 Scan logs10:25PM INF scanning for exposed secrets...
10:25PM INF 1079 commits scanned.
10:25PM INF scan completed in 2.66s
10:25PM INF no leaks found
|
@gstraccini rerun workflows cancelled |
Rerunning 4 cancelled workflows on the commit |
Rerunning the following workflows:
|
Quality Gate passedIssues Measures |
User description
Snyk has created this PR to upgrade bancos-brasileiros from 6.1.6 to 6.1.10.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 2 versions ahead of your current version.
The recommended version was released 22 days ago.
Release notes
Package name: bancos-brasileiros
Release of Bancos Brasileiros - v6.1.10
Release of Bancos Brasileiros - v6.1.8
Release of Bancos Brasileiros - v6.1.6
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
Note
I'm currently writing a description for your pull request. I should be done shortly (<1 minute). Please don't edit the description field until I'm finished, or we may overwrite each other. If I find nothing to write about, I'll delete this message.
Description
bancos-brasileiros
from version6.1.6
to6.1.10
in bothpackage.json
andpackage-lock.json
.Changes walkthrough 📝
package-lock.json
Upgrade bancos-brasileiros in package-lock.json
examples/emberjs/package-lock.json
bancos-brasileiros
version from6.1.6
to6.1.10
.package.json
Upgrade bancos-brasileiros in package.json
examples/emberjs/package.json
bancos-brasileiros
version from6.1.6
to6.1.10
.