Bump JetBrains/qodana-action from 2023.3.1 to 2024.3.2 #513
dependabot[bot]Annotations
5 warnings
|
qodana
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
qodana
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/
|
|
qodana
Unexpected input(s) 'linter', valid inputs are ['args', 'results-dir', 'cache-dir', 'use-caches', 'primary-cache-key', 'additional-cache-key', 'cache-default-branch-only', 'upload-result', 'artifact-name', 'use-annotations', 'pr-mode', 'post-pr-comment', 'github-token', 'push-fixes', 'commit-message', 'use-nightly']
|
|
qodana
Cannot run analysis for commit 46e26f26c83d14fb19b3873b66e5f2d5b540e736 because it doesn't exist in the repository. Check that you retrieve the full git history before running Qodana.
|
|
Vulnerable declared dependency:
build.gradle.kts#L154
Provides transitive vulnerable dependency maven:com.thoughtworks.xstream:xstream:1.4.20
* [GHSA-hfq9-hggm-c56q](https://osv.dev/vulnerability/GHSA-hfq9-hggm-c56q) 7.5 XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream
Results powered by [OSV](https://osv.dev/)
|