[dependabot]

Bumps the github-actions group with 2 updates in the / directory: docker/login-action and cachix/install-nix-action.

Updates docker/login-action from 4.6.0 to 4.7.0

Release notes

Sourced from docker/login-action's releases.

v4.7.0

• Preserve explicit ECR settings in registry-auth by @​crazy-max in docker/login-action#1089
• Use registry hosts for scoped credentials by @​crazy-max in docker/login-action#1088
• Raise Docker Hub OIDC max expiry to 6 hours by @​crazy-max in docker/login-action#1068
• Log Docker Hub OIDC token exchange progress by @​crazy-max in docker/login-action#1061
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1154.0 in docker/login-action#1093
• Bump @​docker/actions-toolkit from 0.94.0 to 0.107.0 in docker/login-action#1100
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/login-action#1077
• Bump csv-parse from 7.0.1 to 7.0.3 in docker/login-action#1078
• Bump handlebars from 4.7.9 to 4.7.10 in docker/login-action#1091
• Bump js-yaml from 5.2.2 to 5.5.0 in docker/login-action#1066
• Bump postcss from 8.5.22 to 8.5.26 in docker/login-action#1071
• Bump postcss-selector-parser from 7.1.1 to 7.1.6 in docker/login-action#1092
• Bump source-map-js from 1.2.1 to 1.2.2 in docker/login-action#1090
• Bump undici from 6.27.0 to 6.29.1 in docker/login-action#1085
• Bump uuid from 14.0.1 to 14.0.3 in docker/login-action#1096

Full Changelog: docker/login-action@v4.6.0...v4.7.0

Commits

• 81c6f93 Merge pull request #1100 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 1b16c8d Merge pull request #1096 from docker/dependabot/npm_and_yarn/uuid-14.0.3
• ac86b5e [dependabot skip] chore: update generated content
• 1476d84 build(deps): bump @​docker/actions-toolkit from 0.94.0 to 0.107.0
• 503cee6 Merge pull request #1095 from docker/dependabot/github_actions/actions/create...
• f093535 Merge pull request #1099 from docker/dependabot/github_actions/codecov/codeco...
• d5ae7f1 Merge pull request #1098 from docker/dependabot/github_actions/docker/bake-ac...
• 6f97507 Merge pull request #1097 from docker/dependabot/github_actions/docker/bake-ac...
• 006d61f Merge pull request #1094 from docker/dependabot/github_actions/codeql-actions...
• 93f5f52 Merge pull request #1093 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
• Additional commits viewable in compare view

Updates cachix/install-nix-action from 31.11.2 to 31.11.3

Release notes

Sourced from cachix/install-nix-action's releases.

31.11.3

This tag was incorrectly named. Prefer v31.11.3.

What's Changed

• nix: 2.35.3 -> 2.35.4 by @​xokdvium in cachix/install-nix-action#283 Security: Updates the bundled certificates shipped with the installer to remove the compromised eMudhra certificates.

Full Changelog: cachix/install-nix-action@v31.11.2...31.11.3

v31.11.3

What's Changed

• nix: 2.35.3 -> 2.35.4 by @​xokdvium in cachix/install-nix-action#283 Security: Updates the bundled certificates shipped with the installer to remove the compromised eMudhra certificates.

Re-release of 31.11.3, which was tagged incorrectly.

Full Changelog: cachix/install-nix-action@v31.11.2...v31.11.3

Commits

• 75c75c3 Merge pull request #283 from xokdvium/cacert-bump
• 3736037 nix: 2.35.3 -> 2.35.4
• See full diff in compare view

[meshcloud-gh-actions]

Coverage of the acceptance run against the meshStack backend, on 566fd7e7236e80639106abdf7b58cea2502a37da.

Scope	Coverage
Unit tests	78.3%
Acceptance tests	55.1%
Combined	80.8%

Uncovered functions

client/api_key.go:52: meshApiKeyClient.Create 0.0%
client/api_key.go:56: meshApiKeyClient.Read 0.0%
client/api_key.go:60: meshApiKeyClient.Update 0.0%
client/api_key.go:64: meshApiKeyClient.Delete 0.0%
client/api_key_permissions.go:20: ApiKeyPermissions.AllCodes 0.0%
client/api_key_permissions.go:33: ApiKeyPermissions.WorkspaceCodes 0.0%
client/api_key_permissions.go:262: AllApiKeyPermissions 0.0%
client/api_key_permissions.go:266: WorkspacePermissionCodes 0.0%
client/building_block_definition.go:71: MeshBuildingBlockDefinitionApprovalPolicies.NothingRequiresApproval 0.0%
client/building_block_definition.go:82: DisabledSchedule 0.0%
client/building_block_definition.go:89: MeshBuildingBlockDefinitionSchedule.IsDisabled 0.0%
client/building_block_definition.go:93: MeshBuildingBlockDefinitionSpec.HasNeutralPolicies 0.0%
client/building_block_definition.go:97: MeshBuildingBlockDefinitionSpec.WithNeutralPolicies 0.0%
client/building_block_definition.go:166: meshBuildingBlockDefinitionClient.List 0.0%
client/building_block_definition.go:173: meshBuildingBlockDefinitionClient.Read 0.0%
client/building_block_definition.go:177: meshBuildingBlockDefinitionClient.Create 0.0%
client/building_block_definition.go:181: meshBuildingBlockDefinitionClient.Update 0.0%
client/building_block_definition.go:185: meshBuildingBlockDefinitionClient.Delete 0.0%
client/building_block_definition_version.go:101: MeshBuildingBlockType.TagInputTargets 0.0%
client/building_block_definition_version.go:245: meshBuildingBlockDefinitionVersionClient.Create 0.0%
client/building_block_definition_version.go:254: meshBuildingBlockDefinitionVersionClient.Update 0.0%
client/building_block_definition_version_implementation.go:81: MeshBuildingBlockDefinitionImplementation.InferType 0.0%
client/building_block_definition_version_implementation.go:95: MeshBuildingBlockDefinitionImplementation.MarshalJSONTo 0.0%
client/building_block_definition_version_implementation.go:108: *MeshBuildingBlockDefinitionImplementation.UnmarshalJSONFrom 0.0%
client/building_block_runner.go:93: meshBuildingBlockRunnerClient.Create 0.0%
... and 127 more

covdata func names a method without its receiver, so an entry can belong to an implementation nothing selects rather than to a function the tests never reached. Open the file and line before reading one as a coverage gap.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud