percy-common 3.1.8 → 3.1.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: daf5d5179a57be833d015e4d87092e2725622c8762f199d4cee9655fc1989508
-  data.tar.gz: aebf200ac7329d26c1e848dd5ba2967ab7ed7d87767c6e2f59e587fb3b448a00
+  metadata.gz: 20fd33d4a3d42879af016aa1b430c8ffc30a60cc0e6a21d11802ca8be356ed10
+  data.tar.gz: 7f6b0985e23d8d5fa119368fec41c8cad4b245b43b5af8719a836291a4fe5044
 SHA512:
-  metadata.gz: 583cba5530413ec3d418409a67cc78b881109f79aff5ed7d70191d6bb53f15b54835adf815de95f273c85cce1bfa4bf30d233adef4f340e1a9b3ef2670f7ecac
-  data.tar.gz: 1bbea03cfeb84ebde6fb7d9d3fdafa58b56a33e6f81420fcf794ee383c7d6abb44fa3147d3a879db720a1bc4434706a578603f8397c47a0e652bed9bf1cb5fd4
+  metadata.gz: '085195fa3fb6106f55fe5bbf293ea86c9ede6c6906a524ee3d9b3b4be639b413104a3fbfee29e19105666833979506935d9ca7b8b4b2e61a457c17c6fa5c1021'
+  data.tar.gz: d070dd279370f9155561e25d09b57ffc97fac1ae93bdcad41a39ca340a7e193126e48167f64a4e9e91bd4c1329bb16f9b409bb40d3a88ba97e3dcf5a8ccbf2f8

data/.github/workflows/Semgrep.yml

@@ -0,0 +1,48 @@
+# Name of this GitHub Actions workflow.
+name: Semgrep
+
+on:
+  # Scan changed files in PRs (diff-aware scanning):
+  # The branches below must be a subset of the branches above
+  pull_request:
+    branches: ["master", "main"]
+  push:
+    branches: ["master", "main"]
+  schedule:
+    - cron: '0 6 * * *'
+
+
+permissions:
+  contents: read
+
+jobs:
+  semgrep:
+    # User definable name of this GitHub Actions job.
+    permissions:
+      contents: read  # for actions/checkout to fetch code
+      security-events: write  # for github/codeql-action/upload-sarif to upload SARIF results
+    name: semgrep/ci 
+    # If you are self-hosting, change the following `runs-on` value: 
+    runs-on: ubuntu-latest
+
+    container:
+      # A Docker image with Semgrep installed. Do not change this.
+      image: returntocorp/semgrep
+
+    # Skip any PR created by dependabot to avoid permission issues:
+    if: (github.actor != 'dependabot[bot]')
+
+    steps:
+      # Fetch project source with GitHub Actions Checkout.
+      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
+      # Run the "semgrep ci" command on the command line of the docker image.
+      - run: semgrep ci --sarif --output=semgrep.sarif
+        env:
+            # Add the rules that Semgrep uses by setting the SEMGREP_RULES environment variable. 
+            SEMGREP_RULES: p/default # more at semgrep.dev/explore
+
+      - name: Upload SARIF file for GitHub Advanced Security Dashboard
+        uses: github/codeql-action/upload-sarif@6c089f53dd51dc3fc7e599c3cb5356453a52ca9e # v2.20.0
+        with:
+          sarif_file: semgrep.sarif
+        if: always()

data/CODEOWNERS

@@ -0,0 +1 @@
+* @percy/percy-product-reviewers

data/lib/percy/common/version.rb

@@ -1,5 +1,5 @@
 module Percy
   module Common
-    VERSION = '3.1.8'.freeze
+    VERSION = '3.1.9'.freeze
   end
 end

data/lib/percy/network_helpers.rb

@@ -10,9 +10,9 @@ module Percy
     class ServerDown < RuntimeError; end
     class OpenPortNotFound < RuntimeError; end
 
-    def self.random_open_port
+    def self.random_open_port(min_port: MIN_PORT, max_port: MAX_PORT)
       MAX_PORT_ATTEMPTS.times do
-        port = rand(MIN_PORT..MAX_PORT)
+        port = rand(min_port..max_port)
         return port if port_open? port
       end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: percy-common
 version: !ruby/object:Gem::Version
-  version: 3.1.8
+  version: 3.1.9
 platform: ruby
 authors:
 - Perceptual Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-10-04 00:00:00.000000000 Z
+date: 2024-02-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dogstatsd-ruby
@@ -156,10 +156,12 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".buildkite/pipeline.yml"
+- ".github/workflows/Semgrep.yml"
 - ".gitignore"
 - ".rspec"
 - ".rubocop.yml"
 - ".rubocop_todo.yml"
+- CODEOWNERS
 - Dockerfile
 - Gemfile
 - Guardfile
@@ -199,7 +201,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.2
+rubygems_version: 3.0.3.1
 signing_key: 
 specification_version: 4
 summary: Server-side common library for Percy.