feat: bump conan from 2.32.0 to 2.33.0 in /.devcontainer by dependabot[bot] · Pull Request #138 · embedded-pro/embedded-devcontainer

dependabot · 2026-10-23T14:59:36Z

Bumps conan from 2.32.0 to 2.33.0.

Release notes

2.33.0 (29-Sep-2026)

Feature: Support for CPS components configurations. (conan-io/conan#20354)

Feature: Use extra_info to provide CPEs to the component. (conan-io/conan#20353)

Feature: Download recipe and package metadata in parallel with regular files instead of after them. (conan-io/conan#20351)

Feature: Add core.net.http:trust_store conf to verify HTTPS certs against the OS trust store. (conan-io/conan#20343). Docs: 📃

Feature: New remotes force_auth capability. (conan-io/conan#20341). Docs: 📃

Feature: Add copy_config_files to the [runner] profile to copy extra host config files into Docker runners. (conan-io/conan#20332). Docs: 📃

Feature: Support Clang 23. (conan-io/conan#20330)

Feature: Support Apple OS 27.0. (conan-io/conan#20330)

Feature: CMakeConfigDeps.get_cmake_file_name returns a dict object instead of a string. (conan-io/conan#20300)

Feature: Allow cpp_info.sources-only packages in CMakeConfigDeps. (conan-io/conan#20297). Docs: 📃

Fix: Remove support for Python 3.7, EOL since 2024. (conan-io/conan#20357)

Fix: Error messages inside the source(), generate() and package() steps missing the package reference. (conan-io/conan#20348)

Fix: Add support for CMakeConfigDeps for cpp_info.objects imported object libraries. (conan-io/conan#20347)

Fix: Do not force DebuggerFlavor from generated prop files in MsBuildDeps, it's already the default. (conan-io/conan#20340)

Fix: Only spawn min(threads, download_count) threads in parallel downloads. (conan-io/conan#20335)

Fix: Split skipped binaries summary per host/build/test group. (conan-io/conan#20326)

Fix: Avoid CMakeDeps generating empty generator expressions, improving performance. (conan-io/conan#20322)

Fix: Propagate errors from a .bat script called by another .bat script. (conan-io/conan#20317)

Fix: Prioritize host and visible nodes in workspace monolithic builds when ambiguity arises. (conan-io/conan#20305). Docs: 📃

Fix: Implements the find_package verbosity level in CMakeConfigDeps. (conan-io/conan#20275)

Fix: Do not inject a full lockfile due to export operations. (conan-io/conan#19404)

Bugfix: Fix conan graph build-order --update ignoring the --update flag. (conan-io/conan#20356)

Bugfix: Consider a server revision found via --update as latest, even if its prev isn't latest locally. (conan-io/conan#20336)

Bugfix: Correct computation of options in the conan graph build-order command. (conan-io/conan#20331)

Bugfix: QbsDeps dependency names now match pkg_config_name/qbs_file_name. (conan-io/conan#20329)

Bugfix: Avoid reporting the cached username when authentication was attempted with a different user. (conan-io/conan#20316)

Bugfix: Limit propagation of cpp_info.sources from INTERFACE_SOURCES to only direct dependencies. (conan-io/conan#20297). Docs: 📃

Commits

137e919 Conan 2.33.0
87a02bb not using lockfile at export time (#19404)
4c80cbd fix typo in Py3.10 version
88272e5 use Python 3.10 for PyPI deploy
ce9c1ec fix emscripten tests for Python 3.8, use only 3.10
bdc86e3 fix docker image emscripten node version (#20358)
d7a420d fix runner tests Python version
d8aafb0 remove support for Python 3.7 (#20357)
99ff218 fix graph build-order --update (#20356)
965ed4a ubuntu26 (#20355)
Additional commits viewable in compare view

github-actions · 2026-10-23T15:04:36Z

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	25		0	0	0.42s
⚠️ ACTION	zizmor	25	0	0	1	7.48s
✅ DOCKERFILE	hadolint	3		0	0	0.35s
✅ JSON	npm-package-json-lint	yes		no	no	0.43s
✅ JSON	prettier	22	3	0	0	0.7s
✅ JSON	v8r	22		0	0	11.42s
✅ MARKDOWN	markdownlint	12	0	0	0	0.74s
✅ MARKDOWN	markdown-table-formatter	12	0	0	0	0.2s
✅ REPOSITORY	betterleaks	yes		no	no	0.77s
✅ REPOSITORY	checkov	yes		no	no	35.0s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	106.53s
✅ REPOSITORY	osv-scanner	yes		no	no	1.43s
✅ REPOSITORY	secretlint	yes		no	no	1.65s
✅ REPOSITORY	syft	yes		no	no	3.18s
✅ REPOSITORY	trivy	yes		no	no	13.74s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.49s
✅ REPOSITORY	trufflehog	yes		no	no	3.54s
⚠️ SPELL	lychee	88		1	0	8.98s
✅ YAML	prettier	33	0	0	0	0.75s
✅ YAML	v8r	33		0	0	12.98s
✅ YAML	yamllint	33		0	0	1.17s

Detailed Issues

⚠️ SPELL / lychee - 1 error

📝 Summary
---------------------
🔍 Total..........133
🔗 Unique.........112
✅ Successful.....127
⏳ Timeouts.........0
🔀 Redirected......13
👻 Excluded.........0
❓ Unknown..........0
🚫 Errors...........1
⛔ Unsupported......1

Errors in .github/TOOL_VERSION_ISSUE_TEMPLATE.md
[403] https://developer.arm.com/downloads/-/arm-gnu-toolchain-downloads (at 30:7) | Rejected status code: 403 Forbidden

Hint: Followed 13 redirects. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: You can configure accepted/rejected response codes with `-a` or `--accept`

⚠️ ACTION / zizmor - 1 warning

INFO zizmor: 🌈 zizmor v1.25.0
 WARN audit: zizmor: one or more inputs contains YAML anchors; see https://docs.zizmor.sh/usage/#yaml-anchors for details
 INFO audit: zizmor: 🌈 completed .github/workflows/build-push-test.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/continuous-integration.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/image-cleanup.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/issue-cleanup.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/issue-creation-tool-versions.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/linting-formatting.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/ossf-scorecard.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/pr-conventional-title.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/pr-image-cleanup.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/pr-report.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/release-build.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/release-please.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/update-dependencies.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/vulnerability-scan.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/wc-acceptance-test.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/wc-build-push-test.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/wc-build-push.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/wc-dependency-review.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/wc-document-generation.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/wc-integration-test-docker.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/wc-integration-test-podman.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/wc-integration-test.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/wc-mirror-image.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/wc-publish-templates.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/wc-sanitize-image-name.yml
{
  "$schema": "https://docs.oasis-open.org/sarif/sarif/v2.1.0/os/schemas/sarif-schema-2.1.0.json",
  "runs": [
    {
      "invocations": [
        {
          "executionSuccessful": true
        }
      ],
      "results": [],
      "tool": {
        "driver": {
          "downloadUri": "https://github.com/zizmorcore/zizmor",
          "informationUri": "https://docs.zizmor.sh",
          "name": "zizmor",
          "rules": [],
          "semanticVersion": "1.25.0",
          "version": "1.25.0"
        }
      }
    }
  ],
  "version": "2.1.0"
No fixes available to apply.
}

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: REPOSITORY_KICS. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

oxsecurity/megalinter/flavors/salesforce@v10.1.0 (58 linters)

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

Documentation: Custom Flavors
Command: npx mega-linter-runner@10.1.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,DOCKERFILE_HADOLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

github-actions · 2026-10-23T15:14:30Z

📦 Container Size Analysis

Note

Comparing ghcr.io/embedded-pro/embedded-devcontainer-base:edge ➔ ghcr.io/embedded-pro/embedded-devcontainer-base:pr-138

📈 Size Comparison Table

OS/Platform	Previous	Current	Change	Trend
linux/amd64	0 B	1.03 GB	+1.03 GB (+∞)	🔼
linux/arm64	0 B	1.03 GB	+1.03 GB (+∞)	🔼

github-actions · 2026-10-23T15:21:12Z

📦 Container Size Analysis

Note

Comparing ghcr.io/embedded-pro/embedded-devcontainer-rust:edge ➔ ghcr.io/embedded-pro/embedded-devcontainer-rust:pr-138

📈 Size Comparison Table

OS/Platform	Previous	Current	Change	Trend
linux/amd64	0 B	1.46 GB	+1.46 GB (+∞)	🔼
linux/arm64	0 B	1.39 GB	+1.39 GB (+∞)	🔼

github-actions · 2026-10-23T15:23:13Z

📦 Container Size Analysis

Note

Comparing ghcr.io/embedded-pro/embedded-devcontainer-cpp:edge ➔ ghcr.io/embedded-pro/embedded-devcontainer-cpp:pr-138

📈 Size Comparison Table

OS/Platform	Previous	Current	Change	Trend
linux/amd64	0 B	1.54 GB	+1.54 GB (+∞)	🔼
linux/arm64	0 B	1.51 GB	+1.51 GB (+∞)	🔼

github-actions · 2026-10-23T15:37:52Z

Test Results

12 files 12 suites 16m 32s ⏱️
36 tests 36 ✅ 0 💤 0 ❌
152 runs 152 ✅ 0 💤 0 ❌

Results for commit 7e31f61.

♻️ This comment has been updated with latest results.

Bumps [conan](https://github.com/conan-io/conan) from 2.32.0 to 2.33.0. - [Release notes](https://github.com/conan-io/conan/releases) - [Commits](conan-io/conan@2.32.0...2.33.0) --- updated-dependencies: - dependency-name: conan dependency-version: 2.33.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-10-27T09:38:29Z

Pull Request Report (#138)

Static measures

Description	Value
Number of added lines	8
Number of deleted lines	4
Number of changed files	2
Number of commits	1
Number of reviews	0
Number of comments (w/o review comments)	5
Number of reviews that contains a comment to resolve	0
Number of reviews that requested a change from the author	0
Number of reviews that approved the Pull Request	0
Get the total number of participants of a Pull Request	2

Time related measures

Description	Value
PR lead time (from creation to close of PR)	3.8 Days
Time that was spend on the branch before the PR was created	0 Sec
Time that was spend on the branch before the PR was merged	3.7 Days
Time to merge after last review	0 Sec

Status check related measures

Description	Value
Total runtime for last status check run (Workflow for PR)	1.9 Hours
Total time spend in last status check run on PR	42 Min

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 23, 2026

dependabot Bot force-pushed the dependabot/pip/dot-devcontainer/conan-2.33.0 branch from b4880ac to 7e31f61 Compare October 23, 2026 16:14

gabrielfrasantos merged commit 44604ab into main Oct 27, 2026
53 checks passed

gabrielfrasantos deleted the dependabot/pip/dot-devcontainer/conan-2.33.0 branch October 27, 2026 09:37

embedded-releaser-app Bot mentioned this pull request Oct 23, 2026

chore(main): release 7.4.0 #102

Open

Navigation Menu

Repository navigation

feat: bump conan from 2.32.0 to 2.33.0 in /.devcontainer - #138

feat: bump conan from 2.32.0 to 2.33.0 in /.devcontainer#138
gabrielfrasantos merged 1 commit into
mainfrom
dependabot/pip/dot-devcontainer/conan-2.33.0

dependabot Bot commented on behalf of github Oct 23, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 23, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 23, 2026

Uh oh!

github-actions Bot commented Oct 23, 2026

Uh oh!

github-actions Bot commented Oct 23, 2026

Uh oh!

github-actions Bot commented Oct 23, 2026 •

edited

Loading

Uh oh!

Uh oh!

github-actions Bot commented Oct 27, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.33.0 (29-Sep-2026)

Uh oh!

github-actions Bot commented Oct 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅⚠️MegaLinter analysis: Success with warnings

Detailed Issues

Notices

Uh oh!

github-actions Bot commented Oct 23, 2026

📦 Container Size Analysis

📈 Size Comparison Table

Uh oh!

github-actions Bot commented Oct 23, 2026

📦 Container Size Analysis

📈 Size Comparison Table

Uh oh!

github-actions Bot commented Oct 23, 2026

📦 Container Size Analysis

📈 Size Comparison Table

Uh oh!

github-actions Bot commented Oct 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test Results

Uh oh!

Uh oh!

github-actions Bot commented Oct 27, 2026

Pull Request Report (#138)

Static measures

Time related measures

Status check related measures

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 23, 2026 •

edited

Loading

github-actions Bot commented Oct 23, 2026 •

edited

Loading

github-actions Bot commented Oct 23, 2026 •

edited

Loading