Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Bump fangfrisch from 1.6.0 to 1.9.0 in /integrations/malware_tools_analyzers/requirements #2660

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 7, 2025

Bumps fangfrisch from 1.6.0 to 1.9.0.

Release notes

Sourced from fangfrisch's releases.

1.9.0

2024-03-08:

  • The logic for on_update* has been largely rewritten. As a user-visible side effect, detailed debugging information about on_update_* tasks is now available.
  • For improved flexibility, configuration sections may now override global on_update_exec and on_update_timeout. Eearlier Fangfrisch versions only examined the DEFAULTS section.
  • Add internal default configurations for providers InterServer and Fangfrisch News. As per usual, these new providers are disabled by default.

1.8.1

2024-02-21:

  • Python unit tests requiring network connections are now disabled by default to facilitate sandboxed testing. Set environment variable NETWORK_TESTS=1 to enable these tests.

1.8.0

2024-02-14:

1.7.0

2024-02-03:

  • Support user-defined connection timeouts.

1.6.1

2023-02-21: Release 1.6.1

Changelog

Sourced from fangfrisch's changelog.

========= Changelog

Release 1.9.1 (TBA)

  • Filter out Python unit tests during packaging.

  • Fix issue #41: Consistently use "enabled=yes/no" in the documentation.

Release 1.9.0 (2024-03-08)

  • The logic for on_update* has been largely rewritten. As a user-visible side effect, detailed debugging information about 'on_update_*' tasks is now available.

  • For improved flexibility, configuration sections may now override global 'on_update_exec' and 'on_update_timeout'. Eearlier Fangfrisch versions only examined the DEFAULTS section.

  • Add internal default configurations for providers InterServer (https://www.interserver.net/) and Fangfrisch News (https://rseichter.github.io/fangfrisch/#ffnews). As per usual, these new providers are disabled by default.

Release 1.8.1 (2024-02-21)

  • Python unit tests requiring network connections are now disabled by default to facilitate sandboxed testing. Set environment variable NETWORK_TESTS=1 to enable these tests.

Release 1.8.0 (2024-02-14)

Release 1.7.0 (2024-02-03)

  • Support user-defined connection timeouts.

Release 1.6.1 (2023-02-21)

  • Require SQLAlchemy version 1.4 or higher. Version 1.3 is no longer maintained by the SQLAlchemy developers.

Release 1.6.0 (2023-02-18)

  • Use Python context management protocol to improve SQLAlchemy session handling, in particular to more reliably release resources like database connections.

Release 1.5.0 (2021-10-12)

  • When running external commands, Fangfrisch now catches all types of exceptions, not only those in the

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [fangfrisch](https://github.com/rseichter/fangfrisch) from 1.6.0 to 1.9.0.
- [Release notes](https://github.com/rseichter/fangfrisch/releases)
- [Changelog](https://github.com/rseichter/fangfrisch/blob/master/CHANGELOG.rst)
- [Commits](rseichter/fangfrisch@1.6.0...1.9.0)

---
updated-dependencies:
- dependency-name: fangfrisch
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 7, 2025
@mlodic mlodic merged commit 9ed91e4 into develop Jan 7, 2025
7 checks passed
@dependabot dependabot bot deleted the dependabot/pip/integrations/malware_tools_analyzers/requirements/develop/fangfrisch-1.9.0 branch January 7, 2025 13:19
mlodic added a commit that referenced this pull request Jan 7, 2025
* Fix vt hash (#2654)

* fix vt3 and added debug logs

* fix file read

* Bump quark-engine from 24.12.1 to 25.1.1 in /requirements (#2650)

Bumps [quark-engine](https://github.com/quark-engine/quark-engine) from 24.12.1 to 25.1.1.
- [Release notes](https://github.com/quark-engine/quark-engine/releases)
- [Commits](quark-engine/quark-engine@v24.12.1...v25.1.1)

---
updated-dependencies:
- dependency-name: quark-engine
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump actions/checkout from 4.1.0 to 4.2.2 (#2652)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.0 to 4.2.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.1.0...v4.2.2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump mobsfscan in /integrations/malware_tools_analyzers/requirements (#2634)

Bumps [mobsfscan](https://github.com/MobSF/mobsfscan) from 0.3.9 to 0.4.5.
- [Release notes](https://github.com/MobSF/mobsfscan/releases)
- [Commits](MobSF/mobsfscan@0.3.9...0.4.5)

---
updated-dependencies:
- dependency-name: mobsfscan
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump django-ses from 4.2.0 to 4.3.1 in /requirements (#2643)

Bumps [django-ses](https://github.com/django-ses/django-ses) from 4.2.0 to 4.3.1.
- [Release notes](https://github.com/django-ses/django-ses/releases)
- [Changelog](https://github.com/django-ses/django-ses/blob/main/CHANGES.md)
- [Commits](django-ses/django-ses@v4.2.0...v4.3.1)

---
updated-dependencies:
- dependency-name: django-ses
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump ossf/scorecard-action from 2.3.0 to 2.4.0 (#2648)

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@483ef80...62b2cac)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump thug in /integrations/malware_tools_analyzers/requirements (#2644)

Bumps [thug](https://github.com/buffer/thug) from 4.9 to 6.10.
- [Release notes](https://github.com/buffer/thug/releases)
- [Commits](buffer/thug@v4.9...v6.10)

---
updated-dependencies:
- dependency-name: thug
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* reverting Thug and adding disclaimer

* More logs + fix investigation status on job removal (#2653)

* More logs + fix investigation status on job removal

* Retry insert if path already exists

* Fix datamodel generic job serializer (#2662)

* fix job serializer data model generic

* fix job serializer data model generic

* Bump fangfrisch in /integrations/malware_tools_analyzers/requirements (#2660)

Bumps [fangfrisch](https://github.com/rseichter/fangfrisch) from 1.6.0 to 1.9.0.
- [Release notes](https://github.com/rseichter/fangfrisch/releases)
- [Changelog](https://github.com/rseichter/fangfrisch/blob/master/CHANGELOG.rst)
- [Commits](rseichter/fangfrisch@1.6.0...1.9.0)

---
updated-dependencies:
- dependency-name: fangfrisch
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump actions/upload-artifact from 4.3.1 to 4.5.0 (#2651)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.1 to 4.5.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@5d5d22a...6f51ac0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump elasticsearch-dsl from 8.15.0 to 8.17.0 in /requirements (#2646)

Bumps [elasticsearch-dsl](https://github.com/elasticsearch/elasticsearch-dsl-py) from 8.15.0 to 8.17.0.
- [Release notes](https://github.com/elasticsearch/elasticsearch-dsl-py/releases)
- [Changelog](https://github.com/elastic/elasticsearch-dsl-py/blob/main/Changelog.rst)
- [Commits](elastic/elasticsearch-dsl-py@v8.15.0...v8.17.0)

---
updated-dependencies:
- dependency-name: elasticsearch-dsl
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump github/codeql-action from 2.22.11 to 3.28.0 (#2645)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.11 to 3.28.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](github/codeql-action@v2.22.11...v3.28.0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump gunicorn in /integrations/malware_tools_analyzers/requirements (#2638)

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 22.0.0 to 23.0.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@22.0.0...23.0.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump gunicorn from 22.0.0 to 23.0.0 in /integrations/tor_analyzers (#2637)

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 22.0.0 to 23.0.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@22.0.0...23.0.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump gunicorn from 22.0.0 to 23.0.0 in /integrations/pcap_analyzers (#2633)

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 22.0.0 to 23.0.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@22.0.0...23.0.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump actions/setup-python from 5.1.0 to 5.3.0 (#2632)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5.1.0 to 5.3.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5.1.0...v5.3.0)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* bump and changelog

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Cristina Ascari <95929371+cristinaascari@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant