Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 6, 2025

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.


This PR contains the following updates:

Package Change Age Confidence
co.touchlab:kermit 2.0.6 -> 2.0.8 age confidence

Release Notes

touchlab/Kermit (co.touchlab:kermit)

v2.0.8

Compare Source


Configuration

📅 Schedule: Branch creation - "before 5am on Monday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label Oct 6, 2025
@renovate renovate bot enabled auto-merge October 6, 2025 01:35
@github-actions
Copy link
Contributor

github-actions bot commented Oct 6, 2025

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
  • ⚠️ 2 packages with OpenSSF Scorecard issues.
See the Details below.

License Issues

settings.gradle.kts

PackageVersionLicenseIssue Type
org.jetbrains.kotlin:kotlin-stdlib-common2.2.0NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
maven/co.touchlab:kermit 2.0.8 UnknownUnknown
maven/co.touchlab:kermit-core 2.0.8 UnknownUnknown
maven/co.touchlab:kermit-core-jvm 2.0.8 UnknownUnknown
maven/co.touchlab:kermit-jvm 2.0.8 UnknownUnknown
maven/org.jetbrains.kotlin:kotlin-stdlib 2.2.0 ⚠️ 2.4
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 0Found 0/30 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Branch-Protection⚠️ -1internal error: error during GetBranch(2.2.20): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Token-Permissions⚠️ -1No tokens found
Security-Policy🟢 10security policy file detected
Dangerous-Workflow⚠️ -1no workflows found
License🟢 9license file detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0no SAST tool detected
Binary-Artifacts⚠️ 0binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 030 existing vulnerabilities detected
maven/org.jetbrains.kotlin:kotlin-stdlib-common 2.2.0 ⚠️ 2.4
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 0Found 0/30 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Branch-Protection⚠️ -1internal error: error during GetBranch(2.2.20): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Token-Permissions⚠️ -1No tokens found
Security-Policy🟢 10security policy file detected
Dangerous-Workflow⚠️ -1no workflows found
License🟢 9license file detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0no SAST tool detected
Binary-Artifacts⚠️ 0binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 030 existing vulnerabilities detected

Scanned Files

  • settings.gradle.kts

@github-actions
Copy link
Contributor

github-actions bot commented Oct 6, 2025

😔 JUnit failed

Passed Failed Skipped
✅ 0 ❌ 0 ⚠️ 0

You can see the report here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants