Release: Merge back 2.39.1 into bugfix from: master-into-bugfix/2.39.1-2.40.0-dev

[github-actions]

Release triggered by rossops

[dryrunsecurity]

DryRun Security Summary

The changes in this GitHub Pull Request are minor updates to the version number in the dojo/__init__.py file and the Helm chart version for the DefectDojo application, which is an open-source application security platform, and do not introduce any obvious security concerns.

Expand for full summary

Summary:

The changes in this GitHub Pull Request are relatively minor and do not introduce any obvious security concerns. The first change updates the version number in the dojo/__init__.py file, which is a typical maintenance update to fix bugs, improve performance, or introduce new features. The second change updates the version of the Helm chart for the DefectDojo application, which is an open-source application security platform. The Helm chart version has been updated, but the version of the DefectDojo application itself remains unchanged.

As an application security engineer, I would recommend approving these changes, as they do not appear to have any direct impact on the security of the application. However, it's always important to review any code changes, even minor ones, to ensure that there are no unintended consequences or hidden security vulnerabilities. In the case of the DefectDojo Helm chart update, the project is actively maintained and focused on application security, which provides additional confidence in the security of the changes.

Files Changed:

1. dojo/__init__.py: The changes in this file update the __version__ variable from "2.39.0" to "2.39.1". This is a routine maintenance update and does not introduce any security concerns.

2. helm/defectdojo/Chart.yaml: The changes in this file update the version of the Helm chart from 1.6.154-dev to 1.6.155-dev, while the appVersion field, which represents the version of the DefectDojo application itself, remains at "2.40.0-dev". This is a routine update to the Helm chart and does not raise any immediate security concerns, as the DefectDojo project is actively maintained and focused on application security.

Code Analysis

We ran 9 analyzers against 2 files and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.