SQSCANGHA-131 Bump picomatch from 4.0.3 to 4.0.4 (#223)
Some checks are pending
QA Install Build Wrapper action / Action outputs-4 (push) Waiting to run
QA Main action / No inputs (push) Waiting to run
QA Main action / 'args' input with command injection will fail -1 (push) Waiting to run
QA Main action / 'args' input with command injection will fail -2 (push) Waiting to run
QA Main action / 'args' input with command injection will fail -3 (push) Waiting to run
QA Main action / 'args' input with command injection will fail -4 (push) Waiting to run
QA Main action / 'args' input with command injection will fail -5 (push) Waiting to run
QA Main action / 'args' input with backticks injection does not execute command -2 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-1 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-2 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-3 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-4 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-5 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-6 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-7 (push) Waiting to run
QA Deprecated C and C++ action / Action outputs-8 (push) Waiting to run
QA Install Build Wrapper action / Action outputs (push) Waiting to run
QA Install Build Wrapper action / Action outputs-1 (push) Waiting to run
QA Install Build Wrapper action / Action outputs-2 (push) Waiting to run
QA Install Build Wrapper action / Action outputs-3 (push) Waiting to run
QA Install Build Wrapper action / Action outputs-5 (push) Waiting to run
QA Install Build Wrapper action / Action outputs-6 (push) Waiting to run
QA Install Build Wrapper action / Action outputs-7 (push) Waiting to run
QA Install Build Wrapper action / Action outputs-8 (push) Waiting to run
QA Main action / 'SONAR_ROOT_CERT' is converted to truststore -2 (push) Waiting to run
QA Main action / Analysis takes into account 'SONAR_ROOT_CERT' (push) Waiting to run
QA Main action / truststore.p12 is updated when present (push) Waiting to run
QA Main action / No inputs -1 (push) Waiting to run
QA Main action / 'args' input (push) Waiting to run
QA Main action / 'args' input -1 (push) Waiting to run
QA Main action / 'args' input -2 (push) Waiting to run
QA Main action / 'args' input with command injection will fail (push) Waiting to run
QA Main action / 'args' input with backticks injection does not execute command (push) Waiting to run
QA Main action / 'args' input with backticks injection does not execute command -1 (push) Waiting to run
QA Main action / 'args' input with dollar command injection does not execute command (push) Waiting to run
QA Main action / 'args' input with dollar command injection does not execute command -1 (push) Waiting to run
QA Main action / 'args' input with dollar command injection does not execute command -2 (push) Waiting to run
QA Main action / 'args' input with other command injection variants does not execute command (push) Waiting to run
QA Main action / 'args' input with other command injection variants does not execute command -1 (push) Waiting to run
QA Main action / 'args' input with other command injection variants does not execute command -2 (push) Waiting to run
QA Main action / 'projectBaseDir' input (push) Waiting to run
QA Main action / 'projectBaseDir' input -1 (push) Waiting to run
QA Main action / 'projectBaseDir' input -2 (push) Waiting to run
QA Main action / 'scannerVersion' input (push) Waiting to run
QA Main action / 'scannerBinariesUrl' input with invalid URL (push) Waiting to run
QA Main action / 'scannerBinariesUrl' is escaped with wget so special chars are not injected in the download command (push) Waiting to run
QA Main action / 'scannerBinariesUrl' is escaped with curl so special chars are not injected in the download command (push) Waiting to run
QA Main action / Don't fail on Gradle project (push) Waiting to run
QA Main action / Don't fail on Kotlin Gradle project (push) Waiting to run
QA Main action / Don't fail on Maven project (push) Waiting to run
QA Main action / runAnalysisTest (push) Waiting to run
QA Main action / 'RUNNER_DEBUG' is used (push) Waiting to run
QA Main action / 'RUNNER_DEBUG' is used -1 (push) Waiting to run
QA Main action / 'RUNNER_DEBUG' is used -2 (push) Waiting to run
QA Main action / 'scannerVersion' input validation (push) Waiting to run
QA Main action / runAnalysisWithCacheTest (push) Waiting to run
QA Main action / 'SONARCLOUD_URL' is used (push) Waiting to run
QA Main action / 'SONARCLOUD_URL' is used -1 (push) Waiting to run
QA Main action / 'SONARCLOUD_URL' is used -2 (push) Waiting to run
QA Main action / curl performs redirect when scannerBinariesUrl returns 3xx (push) Waiting to run
QA Main action / 'SONAR_ROOT_CERT' is converted to truststore (push) Waiting to run
QA Main action / 'SONAR_ROOT_CERT' is converted to truststore -1 (push) Waiting to run
QA Scripts / create_install_path.sh (push) Waiting to run
QA Scripts / configure_paths.sh (push) Waiting to run
QA Scripts / download.sh (push) Waiting to run
QA Scripts / fetch_latest_version.sh (push) Waiting to run
Unit tests / test (push) Waiting to run

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
dependabot[bot] 2026-03-31 08:58:59 +02:00 committed by GitHub
parent 9598b8a83f
commit 3988e54db2
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

6
package-lock.json generated
View file

@ -859,9 +859,9 @@
"license": "MIT"
},
"node_modules/picomatch": {
"version": "4.0.3",
"resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
"integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
"version": "4.0.4",
"resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
"integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
"dev": true,
"license": "MIT",
"engines": {