9renpoto / phx

:beginner:

Ex

phx's Issues

Weekly Digest (31 March, 2019 - 7 April, 2019)

Here's the Weekly Digest for 9renpoto/ex:

---

ISSUES

Last week 2 issues were created.
Of these, 2 issues have been closed and 0 issues are still open.

CLOSED ISSUES

❤️ #61 Drop v1.6, by 9renpoto
❤️ #60 build(deps): bump ecto_sql from 3.0.5 to 3.1.0, by dependabot[bot]

NOISY ISSUE

🔈 #60 build(deps): bump ecto_sql from 3.0.5 to 3.1.0, by dependabot[bot]
It received 1 comments.

---

PULL REQUESTS

Last week, 3 pull requests were created, updated or merged.

UPDATED PULL REQUEST

Last week, 1 pull request was updated.
💛 #59 build(deps): bump phoenix from 1.3.4 to 1.4.3, by dependabot[bot]

MERGED PULL REQUEST

Last week, 2 pull requests were merged.
💜 #61 Drop v1.6, by 9renpoto
💜 #60 build(deps): bump ecto_sql from 3.0.5 to 3.1.0, by dependabot[bot]

---

COMMITS

Last week there were 4 commits.
🛠️ Merge pull request #60 from 9renpoto/dependabot/hex/ecto_sql-3.1.0 build(deps): bump ecto_sql from 3.0.5 to 3.1.0 by 9renpoto
🛠️ build(deps): bump ecto_sql from 3.0.5 to 3.1.0 Bumps ecto_sql from 3.0.5 to 3.1.0. - Release notes - Changelog - Commits Signed-off-by: dependabot[bot] [email protected] by dependabot-bot
🛠️ Merge pull request #61 from 9renpoto/fix/version Drop v1.6 by 9renpoto
🛠️ Drop v1.6 by 9renpoto

---

CONTRIBUTORS

Last week there were 2 contributors.
👤 9renpoto
👤 dependabot-bot

---

STARGAZERS

Last week there were no stargazers.

---

RELEASES

Last week there were no releases.

---

That's all for last week, please 👀 Watch and ⭐ Star the repository 9renpoto/ex to receive next weekly updates. 😃

You can also view all Weekly Digests by clicking here.

Your Weekly Digest bot. 📆

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.get:4.4.2

Vulnerabilities

DepShield reports that this application's usage of lodash.get:4.4.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.get:4.4.2 is a transitive dependency introduced by the following direct dependency(s):

• husky:1.3.1
        └─ cosmiconfig:5.1.0
              └─ lodash.get:4.4.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Weekly Digest (26 May, 2019 - 2 June, 2019)

Here's the Weekly Digest for 9renpoto/ex:

---

ISSUES

Last week 2 issues were created.
Of these, 2 issues have been closed and 0 issues are still open.

CLOSED ISSUES

❤️ #74 build(deps): bump phoenix_html from 2.13.2 to 2.13.3, by dependabot-preview[bot]
❤️ #73 build(deps): bump ecto_sql from 3.1.3 to 3.1.4, by dependabot-preview[bot]

---

PULL REQUESTS

Last week, 3 pull requests were created, updated or merged.

UPDATED PULL REQUEST

Last week, 1 pull request was updated.
💛 #69 build(deps): bump phoenix from 1.3.4 to 1.4.6, by dependabot-preview[bot]

MERGED PULL REQUEST

Last week, 2 pull requests were merged.
💜 #74 build(deps): bump phoenix_html from 2.13.2 to 2.13.3, by dependabot-preview[bot]
💜 #73 build(deps): bump ecto_sql from 3.1.3 to 3.1.4, by dependabot-preview[bot]

---

COMMITS

Last week there were 2 commits.
🛠️ [build(deps): bump phoenix_html from 2.13.2 to 2.13.3 Bumps phoenix_html from 2.13.2 to 2.13.3. - Release notes - Changelog - Commits](992f184) by dependabot-preview[bot]
🛠️ [build(deps): bump ecto_sql from 3.1.3 to 3.1.4 Bumps ecto_sql from 3.1.3 to 3.1.4. - Release notes - Changelog - Commits](ef39b7f) by dependabot-preview[bot]

---

CONTRIBUTORS

Last week there was 1 contributor.
👤 dependabot-preview[bot]

---

STARGAZERS

Last week there were no stargazers.

---

RELEASES

Last week there were no releases.

---

That's all for last week, please 👀 Watch and ⭐ Star the repository 9renpoto/ex to receive next weekly updates. 😃

You can also view all Weekly Digests by clicking here.

Your Weekly Digest bot. 📆

Dependabot can't evaluate your Elixir dependency files

Dependabot can't evaluate your Elixir dependency files.

As a result, Dependabot couldn't check whether any of your dependencies are out-of-date.

The error Dependabot encountered was:

Unchecked dependencies for environment dev:
* jason (Hex package)
  the dependency is not available, run "mix deps.get"
** (Mix) Can't continue due to errors on dependencies

You can mention @dependabot in the comments below to contact the Dependabot team.

Weekly Digest (9 June, 2019 - 16 June, 2019)

Here's the Weekly Digest for 9renpoto/ex:

---

ISSUES

Last week 2 issues were created.
Of these, 1 issues have been closed and 1 issues are still open.

OPEN ISSUES

💚 #78 build(deps): bump phoenix from 1.3.4 to 1.4.8, by dependabot-preview[bot]

CLOSED ISSUES

❤️ #79 build(deps): bump ecto_sql from 3.1.4 to 3.1.5, by dependabot-preview[bot]

---

PULL REQUESTS

Last week, 2 pull requests were created, updated or merged.

UPDATED PULL REQUEST

Last week, 1 pull request was updated.
💛 #78 build(deps): bump phoenix from 1.3.4 to 1.4.8, by dependabot-preview[bot]

MERGED PULL REQUEST

Last week, 1 pull request was merged.
💜 #79 build(deps): bump ecto_sql from 3.1.4 to 3.1.5, by dependabot-preview[bot]

---

COMMITS

Last week there was 1 commit.
🛠️ build(deps): bump ecto_sql from 3.1.4 to 3.1.5 Bumps ecto_sql from 3.1.4 to 3.1.5. - Release notes - Changelog - Commits Signed-off-by: dependabot-preview[bot] [email protected] by dependabot-preview[bot]

---

CONTRIBUTORS

Last week there was 1 contributor.
👤 dependabot-preview[bot]

---

STARGAZERS

Last week there were no stargazers.

---

RELEASES

Last week there were no releases.

---

That's all for last week, please 👀 Watch and ⭐ Star the repository 9renpoto/ex to receive next weekly updates. 😃

You can also view all Weekly Digests by clicking here.

Your Weekly Digest bot. 📆

Dependency Dashboard

This issue provides visibility into Renovate updates and their statuses. Learn more

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update dependency elixir to v1.13.4
• chore(deps): update codecov/codecov-action action to v3
• chore(deps): update github/codeql-action action to v2
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update dependency credo to ~> 1.6.0
• chore(deps): update dependency excoveralls to ~> 0.14
• chore(deps): update dependency gettext to ~> 0.19
• chore(deps): update dependency phoenix to ~> 1.6.0
• chore(deps): update actions/checkout action to v3
• chore(deps): update dependency cowboy to v2
• chore(deps): update dependency phoenix_html to v3
• chore(deps): update dependency phoenix_pubsub to v2
• chore(deps): update dependency plug_cowboy to v2
• chore(deps): update dependency postgres to v14

Detected dependencies

circleci

.circleci/config.yml

• circleci/classic edge

docker-compose

docker-compose.yml

• postgres 11-alpine

dockerfile

Dockerfile

• elixir 1.11.3-alpine

github-actions

.github/workflows/codeql-analysis.yml

• actions/checkout v2
• github/codeql-action v1
• github/codeql-action v1
• github/codeql-action v1

.github/workflows/elixir.yml

• actions/checkout v2
• actions/setup-elixir v1
• codecov/codecov-action v1

.github/workflows/ossar-analysis.yml

• actions/checkout v2
• github/ossar-action v1
• github/codeql-action v1

mix

apps/web/mix.exs

• phoenix ~> 1.3.4
• phoenix_pubsub ~> 1.0
• phoenix_ecto ~> 4.0
• postgrex >= 0.0.0
• phoenix_html ~> 2.10
• phoenix_live_reload ~> 1.0
• plug_cowboy ~> 1.0
• ecto_sql ~> 3.0
• gettext ~> 0.18
• cowboy ~> 1.0

mix.exs

• excoveralls ~> 0.13
• credo ~> 1.4.1
• dialyxir ~> 1.1.0
• pre_commit ~> 0.3.4

npm

apps/web/assets/package.json

• phoenix file:../../../deps/phoenix
• phoenix_html file:../../../deps/phoenix_html
• babel-brunch 7.0.1
• brunch 4.0.0
• clean-css-brunch 3.0.0
• uglify-js-brunch 2.10.0

---

• Check this box to trigger a request for Renovate to run again on this repository

coverage report

not found report

Weekly Digest (16 June, 2019 - 23 June, 2019)

Here's the Weekly Digest for 9renpoto/ex:

---

ISSUES

Last week, no issues were created.

---

PULL REQUESTS

Last week, no pull requests were created, updated or merged.

---

COMMITS

Last week there were no commits.

---

CONTRIBUTORS

Last week there were no contributors.

---

STARGAZERS

Last week there were no stargazers.

---

RELEASES

Last week there were no releases.

---

That's all for last week, please 👀 Watch and ⭐ Star the repository 9renpoto/ex to receive next weekly updates. 😃

You can also view all Weekly Digests by clicking here.

Your Weekly Digest bot. 📆

DepShield encountered errors while building your project

The project could not be analyzed because of maven build errors. Please review the error messages here. Another build will be scheduled within 24 hours. If the build is successful this issue will be closed, otherwise the error message will be updated.

_{This is an automated GitHub Issue created by Sonatype DepShield. GitHub Apps, including DepShield, can be managed from the Developer settings of the repository administrators.}

Weekly Digest (2 June, 2019 - 9 June, 2019)

Here's the Weekly Digest for 9renpoto/ex:

---

ISSUES

Last week 1 issue was created.
It is closed now.

CLOSED ISSUES

❤️ #76 Create SECURITY.md, by 9renpoto

---

PULL REQUESTS

Last week, 1 pull request was created, updated or merged.

MERGED PULL REQUEST

Last week, 1 pull request was merged.
💜 #76 Create SECURITY.md, by 9renpoto

---

COMMITS

Last week there were 2 commits.
🛠️ Merge pull request #76 from 9renpoto/9renpoto-patch-1 Create SECURITY.md by 9renpoto
🛠️ Create SECURITY.md by 9renpoto

---

CONTRIBUTORS

Last week there was 1 contributor.
👤 9renpoto

---

STARGAZERS

Last week there were no stargazers.

---

RELEASES

Last week there were no releases.

---

That's all for last week, please 👀 Watch and ⭐ Star the repository 9renpoto/ex to receive next weekly updates. 😃

You can also view all Weekly Digests by clicking here.

Your Weekly Digest bot. 📆

[DepShield] (CVSS 7.5) Vulnerability due to usage of debug:2.6.9

Vulnerabilities

DepShield reports that this application's usage of debug:2.6.9 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

debug:2.6.9 is a transitive dependency introduced by the following direct dependency(s):

• lint-staged:8.2.1
        └─ micromatch:3.1.10
              └─ extglob:2.0.4
                    └─ expand-brackets:2.1.4
                          └─ debug:2.6.9
              └─ snapdragon:0.8.2
                    └─ debug:2.6.9

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}