Skip to content

Auto-update dependencies. - #2826

Open
dpebot wants to merge 1 commit into
masterfrom
dpebot-repositorygardener
Open

Auto-update dependencies.#2826
dpebot wants to merge 1 commit into
masterfrom
dpebot-repositorygardener

Conversation

@dpebot

@dpebot dpebot commented Jul 31, 2026

Copy link
Copy Markdown
Collaborator

Brought to you by your friendly Repository Gardener.

@wiz-9635d3485b

wiz-9635d3485b Bot commented Jul 31, 2026

Copy link
Copy Markdown

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities 2 High 3 Medium 5 Low
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations -
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 2 High 3 Medium 5 Low

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try the Wiz Code extension for VS Code, JetBrains, or Visual Studio.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the ktlint dependency version from 0.49.1 to 0.50.0 in build.gradle.kts. The feedback suggests defining this dependency in the Gradle Version Catalog (gradle/libs.versions.toml) instead of hardcoding it directly in the build script, which helps maintain consistency across the project.

Comment thread build.gradle.kts

dependencies {
ktlint("com.pinterest:ktlint:0.49.1") {
ktlint("com.pinterest:ktlint:0.50.0") {

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

Instead of hardcoding the ktlint dependency version directly in build.gradle.kts, it is highly recommended to define it in the Gradle Version Catalog (gradle/libs.versions.toml) to maintain consistency with the rest of the project's dependencies.

To do this:

  1. Add the following to gradle/libs.versions.toml:
[versions]
ktlint = "0.50.0"

[libraries]
ktlint = { module = "com.pinterest:ktlint", version.ref = "ktlint" }
  1. Update this line to reference the catalog dependency.
    ktlint(libs.ktlint) {

@dpebot
dpebot force-pushed the dpebot-repositorygardener branch 3 times, most recently from 9e5e03b to 83209a9 Compare August 3, 2026 22:09
@dpebot
dpebot force-pushed the dpebot-repositorygardener branch 2 times, most recently from e5d7b84 to 4ef5543 Compare August 5, 2026 22:17
@dpebot
dpebot force-pushed the dpebot-repositorygardener branch from 4ef5543 to c9726e9 Compare August 6, 2026 22:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants