Bump sobelow from 0.11.1 to 0.14.1

[dependabot]

Bumps sobelow from 0.11.1 to 0.14.1.

Release notes

Sourced from sobelow's releases.

v0.14.1

• Enhancements
  • Implicitly use .sobelow-conf if detected in the root directory rather than require --config switch. The --no-config switch is still supported to prevent any settings from being read in from the file if needed.
  • Added guidance for warn_if_outdated option in mix deps
  • Added support for Elixir v1.19.x
• Bug fixes
  • Handled extra config options for app releases in mix.exs
  • Properly handle the use of CLI switches and config file settings in the same run. These would previously clobber each other in unapparent ways leading to confusing behavior. CLI switch take precedence.
  • .sobelow-conf now sorted alphabetically
  • Fix edwarning from zero argument functions
  • Fixed broken skip funcationality
  • Fixed broken GitHub Actions CI
• Misc
  • Typo fix

v0.14.0

• Removed
  • Support for minimum Elixir versions 1.7 - 1.11 (POTENTIALLY BREAKING - only applies if you relied on Elixir 1.7 through 1.11, 1.12+ is still supported)
• Enhancements
  • Added support for multiple variations of SQL.query()
  • Added support for `System.shell' command introduced in Elixir v1.12
  • Ignore runtime config during Config.HSTS
  • Updated developer dependencies (ex_doc & credo)
• Bug fixes
  • Fixed is_endpoint? error in main
  • Fixed findings normalization bug
  • Fixed truncation error
• Misc
  • GitHub Actions test matrix updated (hence the large drop in support for old Elixir versions)
  • Addressed compiler warnings from Elixir v1.18.x
  • Moved from master branch to main

Changelog

Sourced from sobelow's changelog.

v0.14.1

• Enhancements
  • Implicitly use .sobelow-conf if detected in the root directory rather than require --config switch. The --no-config switch is still supported to prevent any settings from being read in from the file if needed.
  • Added guidance for warn_if_outdated option in mix deps
  • Added support for Elixir v1.19.x
• Bug fixes
  • Handled extra config options for app releases in mix.exs
  • Properly handle the use of CLI switches and config file settings in the same run. These would previously clobber each other in unapparent ways leading to confusing behavior. CLI switch take precedence.
  • .sobelow-conf now sorted alphabetically
  • Fix edwarning from zero argument functions
  • Fixed broken skip funcationality
  • Fixed broken GitHub Actions CI
• Misc
  • Typo fix

v0.14.0

• Removed
  • Support for minimum Elixir versions 1.7 - 1.11 (POTENTIALLY BREAKING - only applies if you relied on Elixir 1.7 through 1.11, 1.12+ is still supported)
• Enhancements
  • Added support for multiple variations of SQL.query()
  • Added support for `System.shell' command introduced in Elixir v1.12
  • Ignore runtime config during Config.HSTS
  • Updated developer dependencies (ex_doc & credo)
• Bug fixes
  • Fixed is_endpoint? error in main
  • Fixed findings normalization bug
  • Fixed truncation error
• Misc
  • GitHub Actions test matrix updated (hence the large drop in support for old Elixir versions)
  • Addressed compiler warnings from Elixir v1.18.x
  • Moved from master branch to main

v0.13.0

• Removed
  • Support for minimum Elixir versions 1.5 & 1.6 (POTENTIALLY BREAKING - only applies if you relied on Elixir 1.5 or 1.6, 1.7+ is still supported)
• Enhancements
  • Fixed all credo warnings
  • Implemented all credo "Code Readability" adjustments
  • Took advantage of some credo refactoring opportunities
  • Added (sub)module documentation that was missing for some vulnerabilities and unified presentation of others
• Bug fixes
  • Fixed --details / -d not displaying correct information
  • Fixed incompatibility issue with Elixir 1.15
• Misc
  • Added mix credo --strict to project
  • Improvements to GitHub CI

... (truncated)

Commits

• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[nelsonic]

Superseded by #231

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.