3421 Commits

Author SHA1 Message Date
Loris S
d95396c132
Modify S6437(docker): Improve the samples (#2975) 2023-08-29 14:52:20 +02:00
github-actions[bot]
a1e6719485
Create rule S6722(secrets): PlanetScale database passwords should not be disclosed (#2947)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6722/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: loris-s-sonarsource <loris-s-sonarsource@users.noreply.github.com>
Co-authored-by: Loris Sierra <loris.sierra@sonarsource.com>
2023-08-29 14:34:32 +02:00
Loris S
1be862d28d
Modify S7000&S2091: Fix resource links (#2976) 2023-08-29 10:22:18 +02:00
github-actions[bot]
57e9ea916f Create rule S6717(secrets): Slack Workflow Webhook URLs should not be disclosed (#2942)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6717/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: loris-s-sonarsource <loris-s-sonarsource@users.noreply.github.com>
Co-authored-by: Loris Sierra <loris.sierra@sonarsource.com>
Co-authored-by: Loris S <91723853+loris-s-sonarsource@users.noreply.github.com>
2023-08-28 14:53:45 +02:00
github-actions[bot]
ec4643680c Create rule S6720(secrets): Zapier keys should not be disclosed (#2945)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6720/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: loris-s-sonarsource <loris-s-sonarsource@users.noreply.github.com>
Co-authored-by: Loris Sierra <loris.sierra@sonarsource.com>
2023-08-28 14:53:45 +02:00
github-actions[bot]
e131b6b2db Create rule S6721(secrets): Microsoft Teams webhooks URLs should not be disclosed (#2946)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6721/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: loris-s-sonarsource <loris-s-sonarsource@users.noreply.github.com>
Co-authored-by: Loris Sierra <loris.sierra@sonarsource.com>
2023-08-28 14:53:45 +02:00
github-actions[bot]
89aa9daaf1 Create rule S6713(secrets): Slack Incoming Webhook URLs should not be disclosed (#2928)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6713/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com>
Co-authored-by: Loris Sierra <loris.sierra@sonarsource.com>
Co-authored-by: Loris S <91723853+loris-s-sonarsource@users.noreply.github.com>
2023-08-28 14:53:45 +02:00
Loghin Vlad-Andrei
e6ecadff0f
Modify rule S3590: LaYC format
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: Philipp Dominik Schubert <119606487+pdschbrt@users.noreply.github.com>
2023-08-28 14:50:46 +02:00
Loris S
875d39a1ee
Modify S5693: Add syntax highlighting (#2971) 2023-08-28 07:47:38 +00:00
SonarTech
c1d3b46306 update coverage information 2023-08-26 00:32:47 +00:00
Loris S
a0a00c4cba
Modify S5689: Clarify the rule stakes (#2911)
For review, have a look to our docs:
https://docs.sonarsource.com/sonarqube/9.8/extension-guide/adding-coding-rules/#coding-rule-guidelines

This should not be merged by an AppSec member, because it contains
message information. It should be merged by someone from SonarJS.

---------

Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2023-08-25 19:32:17 +02:00
sebastien-andrivet-sonarsource
89de4d7476
Modify rule S2115: Update to LaYC format (APPSEC-799) (#2927)
## Review

A dedicated reviewer checked the rule description successfully for:

- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-25 14:34:42 +02:00
Rudy Regazzoni
53ed3f06b4
Modify rule S5785: add examples with boolean literals (#2926)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-25 13:55:18 +02:00
Peter Trifanov
9511a4a1b6
Modify rule S4144: Add more exceptions for PHP (#2969)
Co-authored-by: Jonas Wielage <127737854+jonas-wielage-sonarsource@users.noreply.github.com>
2023-08-25 09:51:18 +00:00
Philipp Dominik Schubert
1595dcd062
Modify rule S2095: Expand and adjust for LaYC
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-25 11:40:35 +02:00
SonarTech
6c7a0f2fea update coverage information 2023-08-25 00:32:48 +00:00
Antonio Aversa
ef664eee67
Modify rule S2566: Fix code example (#2963) 2023-08-24 18:56:29 +02:00
Peter Trifanov
1752e83ce8
Modify rule S117: Update regular expression for PHP (#2960) 2023-08-24 16:47:43 +02:00
Dorian Burihabwa
06c82f57cf
Modify rule S5384: Replace broken GitHub link with webarchive reference (#2965) 2023-08-24 16:44:01 +02:00
Yassin Kammoun
246716be78
Modify rule S6326: Add support for quick fixes (#2962) 2023-08-24 15:56:49 +02:00
Loris S
4fc653c99f
Modify S6497(docker): Remove from SonarWay (#2959)
Related ticket:
[**SONARIAC-1075**](https://sonarsource.atlassian.net/browse/SONARIAC-1075).
2023-08-24 15:20:35 +02:00
Ilia Kebets
25fc761644
Modify rule S2699: add support for sinon.JS library (#2961) 2023-08-24 14:59:15 +02:00
Jonas Wielage
89423ef606
Modify rule S1200 Remove mention of Single Responsibility Principle in title (#2954)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-24 14:58:20 +02:00
Costin Zaharia
9ad140f1ee
Modify rule S3776: use default remediation (#2935) 2023-08-24 14:29:46 +02:00
Loris S
1f304e54ca
Create Shared content: Make impacts consistents across messenger secrets (#2950)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2023-08-24 14:27:22 +02:00
Philipp Dominik Schubert
5c74fc7ebf
Modify rule S3588: Expand and adjust for LaYC
Removed code example which contains a FN. A corresponding Jira ticket
has been created at https://sonarsource.atlassian.net/browse/CPP-4655


## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-24 10:47:20 +02:00
Andrea Guarino
88a814b01e
Adjust clean code attributes for DBD rules (#2952) 2023-08-24 10:05:19 +02:00
tomasz-kaminski-sonarsource
be4265a91f
Modify rule S2259: Expand and adjust for LaYC 2023-08-24 09:32:24 +02:00
SonarTech
c87359e2d4 update coverage information 2023-08-24 00:32:30 +00:00
github-actions[bot]
0e4746e235
Create rule S6708(secrets): Discord Webhook URLs should not be disclosed (#2919)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6708/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com>
Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com>
2023-08-23 15:37:47 +02:00
Philipp Dominik Schubert
1e2bf05e5b
Modify rule S5280: Update quickfix status
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-23 15:28:39 +02:00
Philipp Dominik Schubert
00d10a799e
Modify rule S5280: Expand and adjust for LaYC
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-23 14:27:08 +02:00
Philipp Dominik Schubert
acaeb943cf
Modify rule S5273: Expand and adjust for LaYC
**Caution:** our analyzer currently does not correctly detect the issue
in the first code example in section `Why is this an issue?`.


## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-23 13:59:14 +02:00
Egon Okerman
ee3a611ce2
Modify rule S4347: Update to LayC format (APPSEC-975) (#2903)
## Review

A dedicated reviewer checked the rule description successfully for:

- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-23 13:18:37 +02:00
Mary Georgiou
a4b68c982b
Modify S2255: Delete (#2930)
Deleting S2255 as it has been deprecated.
Deprecated since:
-  sonar-dotnet 8.9.0.19135, released on Jun 26, 2020
- SQ 8.4.0.35506 on Jul 3, 2020.
2023-08-23 10:58:18 +02:00
Tibor Blenessy
fa56bf4c9c
Modify rule S3699: Remove duplicated MDN prefix from links (#2932) 2023-08-23 10:25:03 +02:00
Anton Haubner
b5a123e90f
Modify rule S6416: Also check for IllegalStateException (#2826) 2023-08-23 10:10:34 +02:00
Antonio Aversa
f8b02f1be9
Modify rule S2589: fix missing diff-id (#2931)
Related to [this discuss
post](https://discuss.sonarsource.com/t/layc-diff-view-validation/15392/2?u=antonio.aversa).
2023-08-23 08:53:31 +02:00
Philipp Dominik Schubert
74e699cf15
Modify rule S3588: Expand and adjust for LaYC
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-22 14:33:47 +02:00
Philipp Dominik Schubert
70be86ab51
Modify rule S5308: Expand and adjust for LaYC (#2916)
## Review

A dedicated reviewer checked the rule description successfully for:

- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: tomasz-kaminski-sonarsource <79814193+tomasz-kaminski-sonarsource@users.noreply.github.com>
2023-08-22 08:54:59 +00:00
Philipp Dominik Schubert
fa9676ea16
Modify rule S5488: Expand and adjust for LaYC
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-22 10:04:47 +02:00
SonarTech
e2e2f6525a update coverage information 2023-08-22 00:33:10 +00:00
Yassin Kammoun
881f0fd245
Modify rule S6661: Quote the method's name in the title (#2915)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-21 16:33:29 +02:00
Marco Borgeaud
8209548e54
Diff blocks: fix incorrect use for python (#2795)
Improvement identified in #2790.

Add a prefix to the diff-id when it is used multiple times in different
"how to fix it in XYZ" sections to avoid ambiguity and pedantically
follow the spec:

> A single and unique diff-id should be used only once for each type of
code example as shown in the description of a rule.

Obvious typos around `diff-type` were fixed.

An obvious extra use of diff blocks was removed.
2023-08-21 15:22:49 +02:00
Cristian Ambrosini
08247967e0
S2931: fix spacing (#2913)
Fixing tabs on Compliant solution snippet (it was showing `$nbsp;`)

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-21 11:22:22 +02:00
dependabot[bot]
a905672e30
[dependabot] Bump gitpython from 3.1.30 to 3.1.32 in /rspec-tools (#2870)
Bumps [gitpython](https://github.com/gitpython-developers/GitPython)
from 3.1.30 to 3.1.32.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/gitpython-developers/GitPython/releases">gitpython's
releases</a>.</em></p>
<blockquote>
<h2>v3.1.32 - with another security update</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump cygwin/cygwin-install-action from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1572">gitpython-developers/GitPython#1572</a></li>
<li>Fix up the commit trailers functionality by <a
href="https://github.com/itsluketwist"><code>@​itsluketwist</code></a>
in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1576">gitpython-developers/GitPython#1576</a></li>
<li>Name top-level exceptions as private variables by <a
href="https://github.com/Hawk777"><code>@​Hawk777</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1590">gitpython-developers/GitPython#1590</a></li>
<li>fix pypi long description by <a
href="https://github.com/eUgEntOptIc44"><code>@​eUgEntOptIc44</code></a>
in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1603">gitpython-developers/GitPython#1603</a></li>
<li>Don't rely on <strong>del</strong> by <a
href="https://github.com/r-darwish"><code>@​r-darwish</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1606">gitpython-developers/GitPython#1606</a></li>
<li>Block insecure non-multi options in clone/clone_from by <a
href="https://github.com/Beuc"><code>@​Beuc</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1609">gitpython-developers/GitPython#1609</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Hawk777"><code>@​Hawk777</code></a> made
their first contribution in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1590">gitpython-developers/GitPython#1590</a></li>
<li><a
href="https://github.com/eUgEntOptIc44"><code>@​eUgEntOptIc44</code></a>
made their first contribution in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1603">gitpython-developers/GitPython#1603</a></li>
<li><a href="https://github.com/r-darwish"><code>@​r-darwish</code></a>
made their first contribution in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1606">gitpython-developers/GitPython#1606</a></li>
<li><a href="https://github.com/Beuc"><code>@​Beuc</code></a> made their
first contribution in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1609">gitpython-developers/GitPython#1609</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/gitpython-developers/GitPython/compare/3.1.31...3.1.32">https://github.com/gitpython-developers/GitPython/compare/3.1.31...3.1.32</a></p>
<h2>3.1.31</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix Sphinx rendering errors by <a
href="https://github.com/stephan-cr"><code>@​stephan-cr</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1524">gitpython-developers/GitPython#1524</a></li>
<li>tests: Use <code>command -v</code> instead of third-party
<code>which</code> program by <a
href="https://github.com/mgorny"><code>@​mgorny</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1525">gitpython-developers/GitPython#1525</a></li>
<li>fix/add allow_unsafe_* params in docstrings + fix typo by <a
href="https://github.com/obfusk"><code>@​obfusk</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1530">gitpython-developers/GitPython#1530</a></li>
<li>use tempfile.TemporaryDirectory &amp; fix clone_from_unsafe_protocol
tests by <a href="https://github.com/obfusk"><code>@​obfusk</code></a>
in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1531">gitpython-developers/GitPython#1531</a></li>
<li>Fix some resource leaks by open file handles by <a
href="https://github.com/marlamb"><code>@​marlamb</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1532">gitpython-developers/GitPython#1532</a></li>
<li>fix files list on file rename by <a
href="https://github.com/teknoraver"><code>@​teknoraver</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1537">gitpython-developers/GitPython#1537</a></li>
<li>Declare support for Python 3.11 by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1541">gitpython-developers/GitPython#1541</a></li>
<li>Fix ignored by <a
href="https://github.com/Lightborne"><code>@​Lightborne</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1545">gitpython-developers/GitPython#1545</a></li>
<li>Fix timezone parsing functions for non-hour timezones by <a
href="https://github.com/jcowgill"><code>@​jcowgill</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1547">gitpython-developers/GitPython#1547</a></li>
<li>Enable user to override default diff -M arg by <a
href="https://github.com/mellowed100"><code>@​mellowed100</code></a> in
<a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1551">gitpython-developers/GitPython#1551</a></li>
<li>Remove optional from two member variables by <a
href="https://github.com/Sineaggi"><code>@​Sineaggi</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1550">gitpython-developers/GitPython#1550</a></li>
<li>Fix RecursionError when iterating streams by <a
href="https://github.com/eric-wieser"><code>@​eric-wieser</code></a> in
<a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1554">gitpython-developers/GitPython#1554</a></li>
<li>Fix get_values() so it correctly loads section names by <a
href="https://github.com/Codym48"><code>@​Codym48</code></a> in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1555">gitpython-developers/GitPython#1555</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/stephan-cr"><code>@​stephan-cr</code></a> made
their first contribution in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1524">gitpython-developers/GitPython#1524</a></li>
<li><a href="https://github.com/obfusk"><code>@​obfusk</code></a> made
their first contribution in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1530">gitpython-developers/GitPython#1530</a></li>
<li><a href="https://github.com/marlamb"><code>@​marlamb</code></a> made
their first contribution in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1532">gitpython-developers/GitPython#1532</a></li>
<li><a
href="https://github.com/teknoraver"><code>@​teknoraver</code></a> made
their first contribution in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1537">gitpython-developers/GitPython#1537</a></li>
<li><a
href="https://github.com/Lightborne"><code>@​Lightborne</code></a> made
their first contribution in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1545">gitpython-developers/GitPython#1545</a></li>
<li><a href="https://github.com/jcowgill"><code>@​jcowgill</code></a>
made their first contribution in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1547">gitpython-developers/GitPython#1547</a></li>
<li><a
href="https://github.com/mellowed100"><code>@​mellowed100</code></a>
made their first contribution in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1551">gitpython-developers/GitPython#1551</a></li>
<li><a href="https://github.com/Sineaggi"><code>@​Sineaggi</code></a>
made their first contribution in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1550">gitpython-developers/GitPython#1550</a></li>
<li><a href="https://github.com/Codym48"><code>@​Codym48</code></a> made
their first contribution in <a
href="https://redirect.github.com/gitpython-developers/GitPython/pull/1555">gitpython-developers/GitPython#1555</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/gitpython-developers/GitPython/compare/3.1.30...3.1.31">https://github.com/gitpython-developers/GitPython/compare/3.1.30...3.1.31</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5d45ce243a"><code>5d45ce2</code></a>
prepare 3.1.32 release</li>
<li><a
href="ca965ecc81"><code>ca965ec</code></a>
Merge pull request <a
href="https://redirect.github.com/gitpython-developers/GitPython/issues/1609">#1609</a>
from Beuc/block-insecure-options-clone-non-multi</li>
<li><a
href="5c59e0d63d"><code>5c59e0d</code></a>
Block insecure non-multi options in clone/clone_from</li>
<li><a
href="c09a71e2ca"><code>c09a71e</code></a>
Merge pull request <a
href="https://redirect.github.com/gitpython-developers/GitPython/issues/1606">#1606</a>
from r-darwish/no-del</li>
<li><a
href="a3859ee6f7"><code>a3859ee</code></a>
fixes</li>
<li><a
href="8186159af1"><code>8186159</code></a>
Don't rely on <strong>del</strong></li>
<li><a
href="741edb5430"><code>741edb5</code></a>
Merge pull request <a
href="https://redirect.github.com/gitpython-developers/GitPython/issues/1603">#1603</a>
from eUgEntOptIc44/eugenoptic44-fix-pypi-long-descri...</li>
<li><a
href="0c543cd0dd"><code>0c543cd</code></a>
Improve readability of README.md</li>
<li><a
href="9cd7ddb960"><code>9cd7ddb</code></a>
Improve the 'long_description' displayed on pypi</li>
<li><a
href="6fc11e6e36"><code>6fc11e6</code></a>
update README to reflect the status quo on <code>git</code> command
usage</li>
<li>Additional commits viewable in <a
href="https://github.com/gitpython-developers/GitPython/compare/3.1.30...3.1.32">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gitpython&package-manager=pip&previous-version=3.1.30&new-version=3.1.32)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/SonarSource/rspec/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-21 11:07:47 +02:00
Loris S
cd03a1dd3d
Modify S5144&S6547: Improve fixes (#2912)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-21 10:51:21 +02:00
Ilia Kebets
4db020b283
Modify rule S1488: add code example when returning awaited promise (#2909)
Fixes https://github.com/SonarSource/eslint-plugin-sonarjs/issues/413
2023-08-21 10:28:17 +02:00
dependabot[bot]
c841e81ad5
[dependabot] Bump certifi from 2023.5.7 to 2023.7.22 in /rspec-tools (#2646)
Bumps [certifi](https://github.com/certifi/python-certifi) from 2023.5.7
to 2023.7.22.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8fb96ed81f"><code>8fb96ed</code></a>
2023.07.22</li>
<li><a
href="afe77220e0"><code>afe7722</code></a>
Bump actions/setup-python from 4.6.1 to 4.7.0 (<a
href="https://redirect.github.com/certifi/python-certifi/issues/230">#230</a>)</li>
<li><a
href="2038739ad5"><code>2038739</code></a>
Bump dessant/lock-threads from 3.0.0 to 4.0.1 (<a
href="https://redirect.github.com/certifi/python-certifi/issues/229">#229</a>)</li>
<li><a
href="44df761f4c"><code>44df761</code></a>
Hash pin Actions and enable dependabot (<a
href="https://redirect.github.com/certifi/python-certifi/issues/228">#228</a>)</li>
<li>See full diff in <a
href="https://github.com/certifi/python-certifi/compare/2023.05.07...2023.07.22">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=certifi&package-manager=pip&previous-version=2023.5.7&new-version=2023.7.22)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/SonarSource/rspec/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-21 10:00:59 +02:00
Loris S
5a15b560fd
APPSEC-843 Modify S3329: Mention FIPS-compliant PRNG (#2904)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2023-08-21 07:55:20 +00:00