build(deps): bump wardnet/bulwark from 1 to 1.6.0

[dependabot]

Bumps wardnet/bulwark from 1 to 1.6.0.

Release notes

Sourced from wardnet/bulwark's releases.

v1.6.0

bulwark

Unified code-quality and security scanning for Rust, TypeScript, and Go — one CLI, run identically locally and in CI.

Install / update

curl -fsSL https://github.com/wardnet/bulwark/releases/latest/download/install.sh | sh

bulwark update self-updates the CLI in place.

Changelog

• ceaf6cc4222a45eb0f91e1c9f58a6b488a1e70ea feat(coverage): add noise tolerance to the coverage gates (#23)

v1.5.4

bulwark

Unified code-quality and security scanning for Rust, TypeScript, and Go — one CLI, run identically locally and in CI.

Install / update

curl -fsSL https://github.com/wardnet/bulwark/releases/latest/download/install.sh | sh

bulwark update self-updates the CLI in place.

Changelog

• dd9b18e4b02d006e1ebb9e562b9193150217217b fix(gitstate): PriorBaselines from a repo subdirectory (--dir source) (#22)

v1.5.3

bulwark

Unified code-quality and security scanning for Rust, TypeScript, and Go — one CLI, run identically locally and in CI.

Install / update

curl -fsSL https://github.com/wardnet/bulwark/releases/latest/download/install.sh | sh

bulwark update self-updates the CLI in place.

Changelog

• c2e49996c77407f6347c4ea5a1f9bb8cfefa00a1 fix(coverage): record a fully-carried baseline when a main run measures nothing (#21)

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)