Skip to content

chore(deps): bump ruff from 0.15.7 to 0.15.8#14624

Open
manuel-sommer wants to merge 1 commit intoDefectDojo:devfrom
manuel-sommer:upgrade_ruff
Open

chore(deps): bump ruff from 0.15.7 to 0.15.8#14624
manuel-sommer wants to merge 1 commit intoDefectDojo:devfrom
manuel-sommer:upgrade_ruff

Conversation

@manuel-sommer
Copy link
Copy Markdown
Contributor

@manuel-sommer manuel-sommer commented Apr 1, 2026

@dryrunsecurity
Copy link
Copy Markdown

dryrunsecurity bot commented Apr 1, 2026

DryRun Security

This pull request includes a sensitive-file edit: dojo/finding/helper.py was flagged by the configured-codepaths analyzer as a sensitive change (severity: error). The scanner notes that sensitive paths and allowed authors can be configured in .dryrunsecurity.yaml.

🔴 Configured Codepaths Edit in dojo/finding/helper.py (drs_557f1436)
Vulnerability Configured Codepaths Edit
Description Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

We've notified @mtesauro.


Comment to provide feedback on these findings.

Report false positive: @dryrunsecurity fp [FINDING ID] [FEEDBACK]
Report low-impact: @dryrunsecurity nit [FINDING ID] [FEEDBACK]

Example: @dryrunsecurity fp drs_90eda195 This code is not user-facing

All finding details can be found in the DryRun Security Dashboard.

@@ -1 +1 @@
ruff==0.15.7
ruff==0.15.8
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
ruff==0.15.8

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:-D

Copy link
Copy Markdown
Contributor

@mtesauro mtesauro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants