[Snyk] Upgrade snyk from 1.425.4 to 1.439.1

[bangbang93]

Snyk has created this PR to upgrade snyk from 1.425.4 to 1.439.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 35 versions ahead of your current version.
• The recommended version was released 2 days ago, on 2021-01-25.

Release notes

Package name: snyk

• 1.439.1 - 2021-01-25
  

  1.439.1 (2021-01-25)

  Bug Fixes

  • add support for aar, war and zip archives in scan-all-unmanaged (d9a7069)
• 1.439.0 - 2021-01-21
  

  1.439.0 (2021-01-21)

  Features

  • improves reachability on gradle (380ed89)
• 1.438.0 - 2021-01-20
  

  1.438.0 (2021-01-20)

  Features

  • Run the IaC queries in validate & test in parallel (70937e9)
• 1.437.4 - 2021-01-13
  

  1.437.4 (2021-01-13)

  Bug Fixes

  • bump python plugin version to fix circular dependencies in poetry (e6c1373)
• 1.437.3 - 2020-12-22
  

  1.437.3 (2020-12-22)

  Bug Fixes

  • update go plugin (810bbe0)
• 1.437.2 - 2020-12-16
  

  1.437.2 (2020-12-16)

  Bug Fixes

  • bump docker plugin to explicity append latest (ece33af)
• 1.437.1 - 2020-12-15
  

  1.437.1 (2020-12-15)

  Bug Fixes

  • add type annotation to request module (c25ab73)
  • export ConfigStoreWithEnvironmentVariables (5c6d1b6)
  • make analytics typescript (714ba35)
• 1.437.0 - 2020-12-14
  

  1.437.0 (2020-12-14)

  Features

  • Add impact and resolve fields in sarif output. (bb2a470)
• 1.436.0 - 2020-12-10
  

  1.436.0 (2020-12-10)

  Features

  • bump gradle plugin to support non root gradlew for reachable vulns (fa80a71)
• 1.435.1 - 2020-12-10
  

  1.435.1 (2020-12-10)

  Bug Fixes

  • Group issues should also group names (4ddf826)
• 1.435.0 - 2020-12-10
• 1.434.4 - 2020-12-09
• 1.434.3 - 2020-12-08
• 1.434.2 - 2020-12-04
• 1.434.1 - 2020-12-04
• 1.434.0 - 2020-12-03
• 1.433.0 - 2020-12-01
• 1.432.1 - 2020-12-01
• 1.432.0 - 2020-12-01
• 1.431.4 - 2020-11-30
• 1.431.3 - 2020-11-30
• 1.431.2 - 2020-11-27
• 1.431.1 - 2020-11-24
• 1.431.0 - 2020-11-24
• 1.430.2 - 2020-11-23
• 1.430.1 - 2020-11-23
• 1.430.0 - 2020-11-20
• 1.429.0 - 2020-11-20
• 1.428.2 - 2020-11-19
• 1.428.1 - 2020-11-19
• 1.428.0 - 2020-11-18
• 1.427.2 - 2020-11-17
• 1.427.1 - 2020-11-17
• 1.427.0 - 2020-11-15
• 1.426.0 - 2020-11-13
• 1.425.4 - 2020-11-13

from snyk GitHub release notes

Commit messages

Package name: snyk

• fda908b Merge pull request #1591 from snyk/fix/mvn-add-support-for-wars-and-aars-in-scan-all-unmanaged
• d9a7069 fix: add support for aar, war and zip archives in scan-all-unmanaged
• 3519c48 Merge pull request #1586 from snyk/feat/improve-gradle-reachability
• 380ed89 feat: improves reachability on gradle
• ccb9baa Merge pull request #1576 from snyk/feat/test-iac-parallel-requests-cc-594
• 544a793 refactor: Use Promise.all to resolve all promises on detect
• 8ccd42f refactor: Separate iac path logic, handle spinner issue.
• 799d672 refactor: Add keepAlive=true on http/https agent
• 8569305 Merge pull request #1582 from snyk/fix/poetry-handle-circular-dependencies
• e6c1373 fix: bump python plugin version to fix circular dependencies in poetry
• 48ee642 refactor: Await all promises to resolve in queue
• 898a208 refactor: Use promise queue for rate limiting operations
• 70937e9 feat: Run the IaC queries in validate & test in parallel
• 98e795c Merge pull request #1579 from snyk/smoke/case-insensitive-downloader
• c9b214e chore(smoke): handle uppercase header in release downloader
• 91f9010 Merge pull request #1573 from didier-durand/fixing_bug_report_md
• e6cd66d docs: improve bug-report.md. Removing 1 typo and fixing markdown
• 378fb03 docs: improve bug-report.md. Removing 1 typo and fixing markdown
• 1705939 Merge pull request #1571 from snyk/fix/log-filtered-out-files
• cdff3af chore: log filtered out files instead of all
• c7622cc Merge pull request #1570 from snyk/fix/update-go-plugin
• 810bbe0 fix: update go plugin
• 7e6ec39 Merge pull request #1568 from snyk/CAP-58/bump-sdp
• c19278f Merge pull request #1567 from snyk/chore/cli-alert-improvement

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs