Skip to content

Update checkov requirement from <4.0.0,>=3.0.0 to >=3.3.8,<4.0.0#29

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/checkov-gte-3.2.529-and-lt-4.0.0
Closed

Update checkov requirement from <4.0.0,>=3.0.0 to >=3.3.8,<4.0.0#29
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/checkov-gte-3.2.529-and-lt-4.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on checkov to permit the latest version.

Release notes

Sourced from checkov's releases.

3.3.8

Bug Fix

  • kubernetes: CKV_K8S_40 should pass when hostUsers is false - #7580
Changelog

Sourced from checkov's changelog.

3.3.8 - 2026-07-09

Bug Fix

  • kubernetes: CKV_K8S_40 should pass when hostUsers is false - #7580

3.3.7 - 2026-07-07

Feature

  • general: fix github only output for sca - #7598

3.3.6 - 2026-06-30

Bug Fix

  • terraform: prevent crash in S3AllowsAnyPrincipal with unparsed v… - #7581

3.3.5 - 2026-06-29

Feature

  • general: fix danger node version - #7589

Bug Fix

  • general: retry kustomize/helm install to survive transient GitHub failures - #7591
  • terraform: CKV_AZURE_190 override singular get_expected_value - #7592

3.3.2 - 2026-06-23

Bug Fix

  • terraform_plan: handle computed log_bucket in CKV_GCP_62 and CKV_GCP_63 - #7582
  • terraform: pass CKV_GCP_123 when remove_default_node_pool is true - #7575

3.3.1 - 2026-06-11

Feature

  • serverless: disable vars opt out - #7574

3.3.0 - 2026-06-10

  • no noteworthy changes

3.2.534 - 2026-06-09

Feature

... (truncated)

Commits
  • 7e4d523 Merge branch 'main' into fix-ckv-k8s-40-hostusers
  • 58b2200 fix(kubernetes): CKV_K8S_40 should pass when hostUsers is false (#7580)
  • 225ddf5 chore: update release notes
  • b2742b7 feat(general): fix github only output for sca (#7598)
  • f20134c feat(general): fix github only output for sca (#7598)
  • 2e0ab64 chore: update release notes
  • 4f04622 Merge 295d3c344d020ebf7b97b63d810e1d25a68309b1 into 9c6a42eabe339592684d196ad...
  • 9c6a42e fix(terraform): prevent crash in S3AllowsAnyPrincipal with unparsed v… (#7581)
  • d32961a chore: update release notes
  • 07a94fe Merge a5dfacf9f3fb4d597825bfbbb9794ee44431fb96 into 0896e312b080f94b4be25fd45...
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from alphacrack as a code owner May 18, 2026 11:31
@dependabot @github

dependabot Bot commented on behalf of github May 18, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@alphacrack
alphacrack enabled auto-merge (squash) July 21, 2026 20:10
@alphacrack

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot dependabot Bot changed the title Update checkov requirement from <4.0.0,>=3.0.0 to >=3.2.529,<4.0.0 Update checkov requirement from <4.0.0,>=3.0.0 to >=3.3.8,<4.0.0 Jul 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/checkov-gte-3.2.529-and-lt-4.0.0 branch from 985fe90 to 8538c15 Compare July 21, 2026 20:16
@github-actions github-actions Bot added the dependencies Runtime / dev dependency upgrade (Dependabot uses this name) label Jul 21, 2026
Updates the requirements on [checkov](https://github.com/bridgecrewio/checkov) to permit the latest version.
- [Release notes](https://github.com/bridgecrewio/checkov/releases)
- [Changelog](https://github.com/bridgecrewio/checkov/blob/main/CHANGELOG.md)
- [Commits](bridgecrewio/checkov@3.0.0...3.3.8)

---
updated-dependencies:
- dependency-name: checkov
  dependency-version: 3.2.529
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/checkov-gte-3.2.529-and-lt-4.0.0 branch from 8538c15 to 3c4c386 Compare July 21, 2026 20:23
@alphacrack

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor Author

Looks like checkov is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 23, 2026
auto-merge was automatically disabled July 23, 2026 19:08

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/pip/checkov-gte-3.2.529-and-lt-4.0.0 branch July 23, 2026 19:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Runtime / dev dependency upgrade (Dependabot uses this name)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant