Skip to content

Bump microsoft.cst.devskim.cli from 1.0.90 to 1.0.100 - #1324

Merged
tiksn merged 1 commit into
mainfrom
dependabot/nuget/dot-config/microsoft.cst.devskim.cli-1.0.100
Sep 30, 2026
Merged

tiksn merged 1 commit into
mainfrom
dependabot/nuget/dot-config/microsoft.cst.devskim.cli-1.0.100

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2026

Copy link
Copy Markdown
Contributor

Updated microsoft.cst.devskim.cli from 1.0.90 to 1.0.100.

Release notes

Sourced from microsoft.cst.devskim.cli's releases.

1.0.100

Changes:

  • ea92e6f3cc1a1482c39afbe2060aba7f77b74c48 Close SDL coverage gaps and fix rules that could never match (#​780) [ #​654, #​787 ]
  • 0169059213ec6f9ebc9976c88b91db68fe395a9d Fix quadratic backtracking in rule DS440011 (#​789)
  • a452aa506f80928b611c4c7bfe306b8115821aae Fix VS Code release publish failing with npm E401 (#​772)
  • 24e90f68355560b6c2152636c7cee425e4e6f3a3 Pin GitHub Actions to full-length commit SHAs (#​779)
  • e07864b08597b7b22e235292d121e51d32b81b9b Consolidate open Dependabot updates into one dependency bump (#​773) [ #​765, #​766, #​767, #​768, #​769 ]
  • 3592c088fcea88b6e25fa8d1d4e2ced4ca2954a5 Add Dependabot config that consolidates updates into a single PR (#​770)
  • db6dff6e6e34ec60202c3976b5f002d6e8ecaee6 Bump js-yaml from 4.1.1 to 4.3.0 in /DevSkim-VSCode-Plugin (#​762)
  • cb9950a1f8092896d167fc6f6b6b0a40a01c25e8 Bump markdown-it from 14.1.1 to 14.2.0 in /DevSkim-VSCode-Plugin (#​760)
  • a79045ed2e767c6c8873668096f063bbe768b4b3 Bump form-data from 4.0.5 to 4.0.6 in /DevSkim-VSCode-Plugin (#​758)
  • 751c1be02e13af109bbb2cbb3252167797ec17e7 Bump esbuild from 0.25.2 to 0.28.1 in /DevSkim-VSCode-Plugin (#​757)

This list of changes was auto generated.

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: microsoft.cst.devskim.cli
  dependency-version: 1.0.100
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file maintenance labels Sep 30, 2026
@tiksn
tiksn merged commit 4b21e7c into main Sep 30, 2026
15 of 25 checks passed
@dependabot
dependabot Bot deleted the dependabot/nuget/dot-config/microsoft.cst.devskim.cli-1.0.100 branch September 30, 2026 15:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file maintenance

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant