diem/whackadep issues and pull requests

#178 - Bump word-wrap from 1.2.3 to 1.2.4 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, javascript

#177 - Bump semver from 7.3.4 to 7.5.2 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, javascript

#176 - Bump openssl from 0.10.35 to 0.10.55

Pull Request - State: open - Opened by dependabot[bot] over 1 year ago
Labels: dependencies, rust

#174 - Bump h2 from 0.3.3 to 0.3.17

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, rust

#173 - Bump nokogiri from 1.11.1 to 1.14.3 in /web-backend/metrics/dependabot

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, ruby

#172 - Bump openssl from 0.10.35 to 0.10.48

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 1 comment
Labels: dependencies, rust

#171 - Bump mongodb from 2.0.0-alpha to 2.0.0-beta

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, rust

#170 - Bump minimist from 1.2.5 to 1.2.8 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies, javascript

#169 - unknown target triple: aarch64-pc-windows-gnullvm

Issue - State: open - Opened by ulrichard almost 2 years ago

#168 - Bump warp from 0.3.1 to 0.3.3

Pull Request - State: open - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, rust

#167 - Bump bumpalo from 3.7.0 to 3.12.0

Pull Request - State: open - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, rust

#166 - Bump tokio from 1.7.1 to 1.16.1

Pull Request - State: open - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, rust

#165 - Bump httparty from 0.18.1 to 0.21.0 in /web-backend/metrics/dependabot

Pull Request - State: open - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, ruby

#164 - Bump express from 4.17.1 to 4.18.2 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, javascript

#163 - Bump qs from 6.5.2 to 6.5.3 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, javascript

#162 - Bump decode-uri-component from 0.2.0 to 0.2.2 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] about 2 years ago
Labels: dependencies, javascript

#161 - Bump minimatch from 3.0.4 to 3.1.2 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, javascript

#160 - Bump nokogiri from 1.11.1 to 1.13.9 in /web-backend/metrics/dependabot

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies, ruby

#159 - Bump addressable from 2.7.0 to 2.8.1 in /web-backend/metrics/dependabot

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, ruby

#158 - Bump terser from 4.8.0 to 4.8.1 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, javascript

#157 - Bump node-fetch from 2.6.1 to 2.6.7 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, javascript

#156 - Bump shell-quote from 1.7.2 to 1.7.3 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, javascript

#155 - Bump thread_local from 1.1.3 to 1.1.4

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, rust

#154 - Bump jmespath from 1.4.0 to 1.6.1 in /web-backend/metrics/dependabot

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, ruby

#153 - Bump tar from 0.4.35 to 0.4.36

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, rust

#152 - Bump regex from 1.5.4 to 1.5.5

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, rust

#151 - Bump tokio from 1.7.1 to 1.8.4

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies, rust

#150 - Bump crossbeam-utils from 0.8.5 to 0.8.8

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, rust

#149 - Bump crossbeam-deque from 0.8.0 to 0.8.1

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, rust

#148 - Bump eventsource from 1.0.7 to 1.1.1 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] over 2 years ago
Labels: dependencies, javascript

#147 - Bump nokogiri from 1.11.1 to 1.13.6 in /web-backend/metrics/dependabot

Pull Request - State: closed - Opened by dependabot[bot] almost 3 years ago - 1 comment
Labels: dependencies, ruby

#146 - Bump async from 2.6.3 to 2.6.4 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] almost 3 years ago
Labels: dependencies, javascript

#145 - Update to Rust edition 2021

Issue - State: open - Opened by nasifimtiazohi almost 3 years ago

#144 - Fix broken tests

Pull Request - State: open - Opened by nasifimtiazohi almost 3 years ago - 1 comment

#143 - Bump nokogiri from 1.11.1 to 1.13.4 in /web-backend/metrics/dependabot

Pull Request - State: closed - Opened by dependabot[bot] almost 3 years ago - 1 comment
Labels: dependencies, ruby

#142 - Bump minimist from 1.2.5 to 1.2.6 in /web-frontend

Pull Request - State: closed - Opened by dependabot[bot] almost 3 years ago - 1 comment
Labels: dependencies, javascript

#141 - Bump url-parse from 1.4.7 to 1.5.10 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] almost 3 years ago
Labels: dependencies, javascript

#140 - Bump nokogiri from 1.11.1 to 1.13.3 in /web-backend/metrics/dependabot

Pull Request - State: closed - Opened by dependabot[bot] almost 3 years ago - 1 comment
Labels: dependencies, ruby

#139 - Bump url-parse from 1.4.7 to 1.5.7 in /web-frontend

Pull Request - State: closed - Opened by dependabot[bot] about 3 years ago - 1 comment
Labels: dependencies, javascript

#138 - Bump follow-redirects from 1.13.2 to 1.14.8 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] about 3 years ago
Labels: dependencies, javascript

#137 - Bump follow-redirects from 1.13.2 to 1.14.7 in /web-frontend

Pull Request - State: closed - Opened by dependabot[bot] about 3 years ago - 1 comment
Labels: dependencies, javascript

#136 - Get version commit from `.cargo_vcs_info.json` file

Issue - State: open - Opened by nasifimtiazohi about 3 years ago
Labels: enhancement

#135 - Bump url-parse from 1.4.7 to 1.5.3 in /web-frontend

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies, javascript

#134 - Bump color-string from 1.5.4 to 1.6.0 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] over 3 years ago
Labels: dependencies, javascript

#133 - Bump axios from 0.21.1 to 0.21.2 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] over 3 years ago
Labels: dependencies, javascript

#132 - Reduce GH API call for repo name check

Pull Request - State: closed - Opened by jnaulty over 3 years ago

#131 - Add error when github token is missing

Pull Request - State: closed - Opened by jnaulty over 3 years ago

#130 - Bump nokogiri from 1.11.1 to 1.12.5 in /web-backend/metrics/dependabot

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago - 1 comment
Labels: dependencies, ruby

#129 - Bump path-parse from 1.0.6 to 1.0.7 in /web-frontend

Pull Request - State: open - Opened by dependabot[bot] over 3 years ago
Labels: dependencies, javascript

#128 - fix README

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago

#127 - add docs and exclude test resources in depdive Cargo.toml

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment

#126 - fix keyword

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment

#125 - Add depdive readme and docstring

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 5 comments

#124 - fallback to Cargo.toml hisotry parsing when tag for a version doesn't exist

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment

#123 - Speed up tests

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment

#122 - [depdive] handle non-git repos

Issue - State: open - Opened by nasifimtiazohi over 3 years ago
Labels: enhancement

#121 - publish depdive

Issue - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment
Labels: in progress

#120 - Refactor locate_package_toml to search through Cargo.toml parsing

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 7 comments

#119 - Determine kind ( normal/build/dev) for all dependencies (not just edges)

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 16 comments

#118 - Improve error handling in dependency metrics

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 3 comments

#117 - [depdive] running cargo geiger will fail when a project requires cargo +nightly

Issue - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment

#116 - [depdive] Improve error propagation

Issue - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment

#115 - [depdive] Handle when github repo is invalid and API limit is exceeding

Issue - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment
Labels: enhancement

#114 - [depdive] Add dependency kind in the output for dep metrics

Issue - State: closed - Opened by nasifimtiazohi over 3 years ago
Labels: enhancement, in progress

#113 - Output dependency metrics in json format

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment

#112 - [depdive] Move guppy related function to a separate module `guppy_wrapper`

Issue - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment
Labels: code style

#111 - [depdive] integrate rustsec reporting in dep metrics

Issue - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment
Labels: enhancement

#110 - [depdive] output analysis metrics in CSV/JSON format

Issue - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment
Labels: enhancement

#109 - Check if new transitive deps are added during a dep update

Issue - State: open - Opened by nasifimtiazohi over 3 years ago
Labels: enhancement

#108 - analyze changelogs to highlight security fixes

Issue - State: open - Opened by nasifimtiazohi over 3 years ago
Labels: enhancement

#107 - Generate summary update review report to comment on PR

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 14 comments

#106 - While analyzing version diff consider source type for both versions from guppy SummarySource

Issue - State: open - Opened by nasifimtiazohi over 3 years ago
Labels: enhancement

#105 - Handle crate renaming and git source in supertoml

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 3 comments

#104 - compare version diff from crates.io code rather than git source in update review

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment

#103 - How to represent various dependency metrics

Issue - State: open - Opened by nasifimtiazohi over 3 years ago
Labels: idea

#102 - post depdive update review report on PRs in diem that updates some dependencies

Issue - State: closed - Opened by nasifimtiazohi over 3 years ago
Labels: in progress

#101 - Feature idea: Dependency Bus-harmonic

Issue - State: open - Opened by nasifimtiazohi over 3 years ago
Labels: idea

#100 - Generate super toml for virtual manifests to satisfy cargo geiger

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 12 comments

#99 - [depdive] determine changes in a diff at module level for unsafe change signal

Issue - State: open - Opened by nasifimtiazohi over 3 years ago
Labels: enhancement

#98 - Analyzes changes in unsafe code in dependency update review

Pull Request - State: closed - Opened by nasifimtiazohi over 3 years ago - 10 comments

#97 - [depdive] analyze version diff from crates.io hosted code in stead of fetching from repository

Issue - State: closed - Opened by nasifimtiazohi over 3 years ago - 1 comment
Labels: enhancement, in progress

#96 - [depdive] locate package toml in a git repository works only when the root directory contains a valid Cargo.toml file

Issue - State: closed - Opened by nasifimtiazohi over 3 years ago
Labels: enhancement, in progress

GitHub / diem/whackadep issues and pull requests