Fix code scanning alert no. 45: Implicit narrowing conversion in compound assignment by robfrank · Pull Request #1768 · ArcadeData/arcadedb

robfrank · 2024-10-19T15:06:34Z

Fixes https://github.com/ArcadeData/arcadedb/security/code-scanning/45

To fix the problem, we need to ensure that the type of the left-hand side of the compound assignment statement is at least as wide as the type of the right-hand side. In this case, we should change the type of the edges variable from int to long. This will prevent any implicit narrowing conversion and ensure that the edges variable can hold the value returned by countEdges without any data loss.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

…ound assignment Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

codacy-production · 2024-10-19T15:24:36Z

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation	Diff coverage
✅ +0.00%	✅ ∅

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (`29a0bff`)	65144	0	0.00%
Head commit (`ac27d57`)	65144 (+0)	0 (+0)	0.00% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#1768)	0	0	∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

See your quality gate settings Change summary preferences

_{Codacy stopped sending the deprecated coverage status on June 5th, 2024. Learn more}

…ound assignment (ArcadeData#1768) Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Bumps [actions/cache/restore](https://github.com/actions/cache) from 5.0.5 to 6.1.0. Release notes *Sourced from [actions/cache/restore's releases](https://github.com/actions/cache/releases).* > v6.1.0 > ------ > > What's Changed > -------------- > > * Bump `@actions/cache` to v6.1.0 - handle read-only cache access by [`@jasongin`](https://github.com/jasongin) in [actions/cache#1768](https://redirect.github.com/actions/cache/pull/1768) > > **Full Changelog**: <actions/cache@v6...v6.1.0> > > v6.0.0 > ------ > > What's Changed > -------------- > > * Update packages, migrate to ESM by [`@Samirat`](https://github.com/Samirat) in [actions/cache#1760](https://redirect.github.com/actions/cache/pull/1760) > > **Full Changelog**: <actions/cache@v5...v6.0.0> > > v5.1.0 > ------ > > What's Changed > -------------- > > * Bump `@actions/cache` to v5.1.0 - handle read-only cache access by [`@jasongin`](https://github.com/jasongin) in [actions/cache#1775](https://redirect.github.com/actions/cache/pull/1775) > > **Full Changelog**: <actions/cache@v5...v5.1.0> Changelog *Sourced from [actions/cache/restore's changelog](https://github.com/actions/cache/blob/main/RELEASES.md).* > Releases > ======== > > How to prepare a release > ------------------------ > > > [!NOTE] > > Relevant for maintainers with write access only. > > 1. Switch to a new branch from `main`. > 2. Run `npm test` to ensure all tests are passing. > 3. Update the version in [`https://github.com/actions/cache/blob/main/package.json`](https://github.com/actions/cache/blob/main/package.json). > 4. Run `npm run build` to update the compiled files. > 5. Update this [`https://github.com/actions/cache/blob/main/RELEASES.md`](https://github.com/actions/cache/blob/main/RELEASES.md) with the new version and changes in the `## Changelog` section. > 6. Run `licensed cache` to update the license report. > 7. Run `licensed status` and resolve any warnings by updating the [`https://github.com/actions/cache/blob/main/.licensed.yml`](https://github.com/actions/cache/blob/main/.licensed.yml) file with the exceptions. > 8. Commit your changes and push your branch upstream. > 9. Open a pull request against `main` and get it reviewed and merged. > 10. Draft a new release <https://github.com/actions/cache/releases> use the same version number used in `package.json` > 1. Create a new tag with the version number. > 2. Auto generate release notes and update them to match the changes you made in `RELEASES.md`. > 3. Toggle the set as the latest release option. > 4. Publish the release. > 11. Navigate to <https://github.com/actions/cache/actions/workflows/release-new-action-version.yml> > 1. There should be a workflow run queued with the same version number. > 2. Approve the run to publish the new version and update the major tags for this action. > > Changelog > --------- > > ### 6.1.0 > > * Bump `@actions/cache` to v6.1.0 to pick up [actions/toolkit#2435 Handle cache write error due to read-only token](https://redirect.github.com/actions/toolkit/pull/2435) > * Switch redundant "Cache save failed" warning to debug log in save-only > > ### 6.0.0 > > * Updated `@actions/cache` to ^6.0.1, `@actions/core` to ^3.0.1, `@actions/exec` to ^3.0.0, `@actions/io` to ^3.0.2 > * Migrated to ESM module system > * Upgraded Jest to v30 and test infrastructure to be ESM compatible > > ### 5.0.4 > > * Bump `minimatch` to v3.1.5 (fixes ReDoS via globstar patterns) > * Bump `undici` to v6.24.1 (WebSocket decompression bomb protection, header validation fixes) > * Bump `fast-xml-parser` to v5.5.6 > > ### 5.0.3 > > * Bump `@actions/cache` to v5.0.5 (Resolves: <https://github.com/actions/cache/security/dependabot/33>) > * Bump `@actions/core` to v2.0.3 > > ### 5.0.2 ... (truncated) Commits * [`55cc834`](actions/cache@55cc834) Merge pull request [#1768](https://redirect.github.com/actions/cache/issues/1768) from jasongin/readonly-cache * [`d8cd72f`](actions/cache@d8cd72f) Bump `@actions/cache` to v6.1.0 - handle cache write error due to RO token * [`2c8a9bd`](actions/cache@2c8a9bd) Merge pull request [#1760](https://redirect.github.com/actions/cache/issues/1760) from actions/samirat/esm\_migration\_and\_package\_update * [`e9b91fd`](actions/cache@e9b91fd) Prettier fixes * [`e4884b8`](actions/cache@e4884b8) Rebuild dist * [`10baf01`](actions/cache@10baf01) Fixed licenses * [`e39b386`](actions/cache@e39b386) Fix test mock return order * [`b692820`](actions/cache@b692820) PR feedback * [`6074912`](actions/cache@6074912) Rebuild dist bundles as ESM to match type:module * [`5a912e8`](actions/cache@5a912e8) Fix lint and jest issues * Additional commits viewable in [compare view](actions/cache@27d5ce7...55cc834) [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/cache/restore&package-manager=github\_actions&previous-version=5.0.5&new-version=6.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/cache](https://github.com/actions/cache) from 5.0.5 to 6.1.0. Release notes *Sourced from [actions/cache's releases](https://github.com/actions/cache/releases).* > v6.1.0 > ------ > > What's Changed > -------------- > > * Bump `@actions/cache` to v6.1.0 - handle read-only cache access by [`@jasongin`](https://github.com/jasongin) in [actions/cache#1768](https://redirect.github.com/actions/cache/pull/1768) > > **Full Changelog**: <actions/cache@v6...v6.1.0> > > v6.0.0 > ------ > > What's Changed > -------------- > > * Update packages, migrate to ESM by [`@Samirat`](https://github.com/Samirat) in [actions/cache#1760](https://redirect.github.com/actions/cache/pull/1760) > > **Full Changelog**: <actions/cache@v5...v6.0.0> > > v5.1.0 > ------ > > What's Changed > -------------- > > * Bump `@actions/cache` to v5.1.0 - handle read-only cache access by [`@jasongin`](https://github.com/jasongin) in [actions/cache#1775](https://redirect.github.com/actions/cache/pull/1775) > > **Full Changelog**: <actions/cache@v5...v5.1.0> Changelog *Sourced from [actions/cache's changelog](https://github.com/actions/cache/blob/main/RELEASES.md).* > Releases > ======== > > How to prepare a release > ------------------------ > > > [!NOTE] > > Relevant for maintainers with write access only. > > 1. Switch to a new branch from `main`. > 2. Run `npm test` to ensure all tests are passing. > 3. Update the version in [`https://github.com/actions/cache/blob/main/package.json`](https://github.com/actions/cache/blob/main/package.json). > 4. Run `npm run build` to update the compiled files. > 5. Update this [`https://github.com/actions/cache/blob/main/RELEASES.md`](https://github.com/actions/cache/blob/main/RELEASES.md) with the new version and changes in the `## Changelog` section. > 6. Run `licensed cache` to update the license report. > 7. Run `licensed status` and resolve any warnings by updating the [`https://github.com/actions/cache/blob/main/.licensed.yml`](https://github.com/actions/cache/blob/main/.licensed.yml) file with the exceptions. > 8. Commit your changes and push your branch upstream. > 9. Open a pull request against `main` and get it reviewed and merged. > 10. Draft a new release <https://github.com/actions/cache/releases> use the same version number used in `package.json` > 1. Create a new tag with the version number. > 2. Auto generate release notes and update them to match the changes you made in `RELEASES.md`. > 3. Toggle the set as the latest release option. > 4. Publish the release. > 11. Navigate to <https://github.com/actions/cache/actions/workflows/release-new-action-version.yml> > 1. There should be a workflow run queued with the same version number. > 2. Approve the run to publish the new version and update the major tags for this action. > > Changelog > --------- > > ### 6.1.0 > > * Bump `@actions/cache` to v6.1.0 to pick up [actions/toolkit#2435 Handle cache write error due to read-only token](https://redirect.github.com/actions/toolkit/pull/2435) > * Switch redundant "Cache save failed" warning to debug log in save-only > > ### 6.0.0 > > * Updated `@actions/cache` to ^6.0.1, `@actions/core` to ^3.0.1, `@actions/exec` to ^3.0.0, `@actions/io` to ^3.0.2 > * Migrated to ESM module system > * Upgraded Jest to v30 and test infrastructure to be ESM compatible > > ### 5.0.4 > > * Bump `minimatch` to v3.1.5 (fixes ReDoS via globstar patterns) > * Bump `undici` to v6.24.1 (WebSocket decompression bomb protection, header validation fixes) > * Bump `fast-xml-parser` to v5.5.6 > > ### 5.0.3 > > * Bump `@actions/cache` to v5.0.5 (Resolves: <https://github.com/actions/cache/security/dependabot/33>) > * Bump `@actions/core` to v2.0.3 > > ### 5.0.2 ... (truncated) Commits * [`55cc834`](actions/cache@55cc834) Merge pull request [#1768](https://redirect.github.com/actions/cache/issues/1768) from jasongin/readonly-cache * [`d8cd72f`](actions/cache@d8cd72f) Bump `@actions/cache` to v6.1.0 - handle cache write error due to RO token * [`2c8a9bd`](actions/cache@2c8a9bd) Merge pull request [#1760](https://redirect.github.com/actions/cache/issues/1760) from actions/samirat/esm\_migration\_and\_package\_update * [`e9b91fd`](actions/cache@e9b91fd) Prettier fixes * [`e4884b8`](actions/cache@e4884b8) Rebuild dist * [`10baf01`](actions/cache@10baf01) Fixed licenses * [`e39b386`](actions/cache@e39b386) Fix test mock return order * [`b692820`](actions/cache@b692820) PR feedback * [`6074912`](actions/cache@6074912) Rebuild dist bundles as ESM to match type:module * [`5a912e8`](actions/cache@5a912e8) Fix lint and jest issues * Additional commits viewable in [compare view](actions/cache@27d5ce7...55cc834) [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/cache&package-manager=github\_actions&previous-version=5.0.5&new-version=6.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/cache/save](https://github.com/actions/cache) from 5.0.5 to 6.1.0. Release notes *Sourced from [actions/cache/save's releases](https://github.com/actions/cache/releases).* > v6.1.0 > ------ > > What's Changed > -------------- > > * Bump `@actions/cache` to v6.1.0 - handle read-only cache access by [`@jasongin`](https://github.com/jasongin) in [actions/cache#1768](https://redirect.github.com/actions/cache/pull/1768) > > **Full Changelog**: <actions/cache@v6...v6.1.0> > > v6.0.0 > ------ > > What's Changed > -------------- > > * Update packages, migrate to ESM by [`@Samirat`](https://github.com/Samirat) in [actions/cache#1760](https://redirect.github.com/actions/cache/pull/1760) > > **Full Changelog**: <actions/cache@v5...v6.0.0> > > v5.1.0 > ------ > > What's Changed > -------------- > > * Bump `@actions/cache` to v5.1.0 - handle read-only cache access by [`@jasongin`](https://github.com/jasongin) in [actions/cache#1775](https://redirect.github.com/actions/cache/pull/1775) > > **Full Changelog**: <actions/cache@v5...v5.1.0> Changelog *Sourced from [actions/cache/save's changelog](https://github.com/actions/cache/blob/main/RELEASES.md).* > Releases > ======== > > How to prepare a release > ------------------------ > > > [!NOTE] > > Relevant for maintainers with write access only. > > 1. Switch to a new branch from `main`. > 2. Run `npm test` to ensure all tests are passing. > 3. Update the version in [`https://github.com/actions/cache/blob/main/package.json`](https://github.com/actions/cache/blob/main/package.json). > 4. Run `npm run build` to update the compiled files. > 5. Update this [`https://github.com/actions/cache/blob/main/RELEASES.md`](https://github.com/actions/cache/blob/main/RELEASES.md) with the new version and changes in the `## Changelog` section. > 6. Run `licensed cache` to update the license report. > 7. Run `licensed status` and resolve any warnings by updating the [`https://github.com/actions/cache/blob/main/.licensed.yml`](https://github.com/actions/cache/blob/main/.licensed.yml) file with the exceptions. > 8. Commit your changes and push your branch upstream. > 9. Open a pull request against `main` and get it reviewed and merged. > 10. Draft a new release <https://github.com/actions/cache/releases> use the same version number used in `package.json` > 1. Create a new tag with the version number. > 2. Auto generate release notes and update them to match the changes you made in `RELEASES.md`. > 3. Toggle the set as the latest release option. > 4. Publish the release. > 11. Navigate to <https://github.com/actions/cache/actions/workflows/release-new-action-version.yml> > 1. There should be a workflow run queued with the same version number. > 2. Approve the run to publish the new version and update the major tags for this action. > > Changelog > --------- > > ### 6.1.0 > > * Bump `@actions/cache` to v6.1.0 to pick up [actions/toolkit#2435 Handle cache write error due to read-only token](https://redirect.github.com/actions/toolkit/pull/2435) > * Switch redundant "Cache save failed" warning to debug log in save-only > > ### 6.0.0 > > * Updated `@actions/cache` to ^6.0.1, `@actions/core` to ^3.0.1, `@actions/exec` to ^3.0.0, `@actions/io` to ^3.0.2 > * Migrated to ESM module system > * Upgraded Jest to v30 and test infrastructure to be ESM compatible > > ### 5.0.4 > > * Bump `minimatch` to v3.1.5 (fixes ReDoS via globstar patterns) > * Bump `undici` to v6.24.1 (WebSocket decompression bomb protection, header validation fixes) > * Bump `fast-xml-parser` to v5.5.6 > > ### 5.0.3 > > * Bump `@actions/cache` to v5.0.5 (Resolves: <https://github.com/actions/cache/security/dependabot/33>) > * Bump `@actions/core` to v2.0.3 > > ### 5.0.2 ... (truncated) Commits * [`55cc834`](actions/cache@55cc834) Merge pull request [#1768](https://redirect.github.com/actions/cache/issues/1768) from jasongin/readonly-cache * [`d8cd72f`](actions/cache@d8cd72f) Bump `@actions/cache` to v6.1.0 - handle cache write error due to RO token * [`2c8a9bd`](actions/cache@2c8a9bd) Merge pull request [#1760](https://redirect.github.com/actions/cache/issues/1760) from actions/samirat/esm\_migration\_and\_package\_update * [`e9b91fd`](actions/cache@e9b91fd) Prettier fixes * [`e4884b8`](actions/cache@e4884b8) Rebuild dist * [`10baf01`](actions/cache@10baf01) Fixed licenses * [`e39b386`](actions/cache@e39b386) Fix test mock return order * [`b692820`](actions/cache@b692820) PR feedback * [`6074912`](actions/cache@6074912) Rebuild dist bundles as ESM to match type:module * [`5a912e8`](actions/cache@5a912e8) Fix lint and jest issues * Additional commits viewable in [compare view](actions/cache@27d5ce7...55cc834) [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=actions/cache/save&package-manager=github\_actions&previous-version=5.0.5&new-version=6.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

….2.0 [skip ci] Bumps [org.neo4j.driver:neo4j-java-driver](https://github.com/neo4j/neo4j-java-driver) from 4.4.20 to 6.2.0. Release notes *Sourced from [org.neo4j.driver:neo4j-java-driver's releases](https://github.com/neo4j/neo4j-java-driver/releases).* > 6.2.0 > ----- > > This release brings a new feature, general improvements and dependency updates. > > [6.2 API documentation](https://neo4j.com/docs/api/java-driver/6.2) > > #### ⭐ New Features > > --- > > * feat(uuid): add support for Neo4j UUID and Bolt 6.1 [#1766](https://redirect.github.com/neo4j/neo4j-java-driver/pull/1766) > > #### 👏 Improvements > > --- > > * feat(summary): introduce QueryProfile [#1730](https://redirect.github.com/neo4j/neo4j-java-driver/pull/1730) > * fix(vector): account for element arrays in Vector equality and hash code [#1762](https://redirect.github.com/neo4j/neo4j-java-driver/pull/1762) > * docs: update procedure name in transaction metadata [#1768](https://redirect.github.com/neo4j/neo4j-java-driver/pull/1768) > > #### 🔧 Build > > --- > > * build(deps): update dependencies [#1767](https://redirect.github.com/neo4j/neo4j-java-driver/pull/1767) > * build(deps): update dependencies [#1764](https://redirect.github.com/neo4j/neo4j-java-driver/pull/1764) > * build(java): build on Java 25 [#1753](https://redirect.github.com/neo4j/neo4j-java-driver/pull/1753) > > 6.1.0 > ----- > > This release brings a new feature, general improvement and dependency updates. > > [6.1 API documentation](https://neo4j.com/docs/api/java-driver/6.1) > > #### Automatic retries for auto-commit queries > > --- > > This update introduces automatic retries for auto-commit queries executed via session `run` methods. At present, the driver performs a single immediate retry, and only for idempotent errors. > > This behaviour is enabled by default, but can be disabled at both the driver and session levels. > > Driver configuration: > > ``` > var config = Config.builder() > .withAutoCommitRetriesDisabled(true) // Defaults to false > .build(); > ``` > > Session configuration: > > ``` > var config = SessionConfig.builder() > .withAutoCommitRetriesMode(AutoCommitRetriesMode.DISABLED) // Defaults to AutoCommitRetriesMode.DEFAULT that delegates to driver configuration > .build(); > ``` ... (truncated) Commits * [`99b3417`](neo4j/neo4j-java-driver@99b3417) build(deps): update dependencies ([#1767](https://redirect.github.com/neo4j/neo4j-java-driver/issues/1767)) * [`4a296f4`](neo4j/neo4j-java-driver@4a296f4) docs: update procedure name in transaction metadata ([#1768](https://redirect.github.com/neo4j/neo4j-java-driver/issues/1768)) * [`7aacaca`](neo4j/neo4j-java-driver@7aacaca) feat(summary): introduce QueryProfile ([#1730](https://redirect.github.com/neo4j/neo4j-java-driver/issues/1730)) * [`54ab15d`](neo4j/neo4j-java-driver@54ab15d) feat(uuid): add support for Neo4j UUID and Bolt 6.1 ([#1766](https://redirect.github.com/neo4j/neo4j-java-driver/issues/1766)) * [`e0342b1`](neo4j/neo4j-java-driver@e0342b1) fix(vector): account for element arrays in Vector equality and hash code ([#1762](https://redirect.github.com/neo4j/neo4j-java-driver/issues/1762)) * [`08e9a92`](neo4j/neo4j-java-driver@08e9a92) build(deps): update dependencies ([#1764](https://redirect.github.com/neo4j/neo4j-java-driver/issues/1764)) * [`daee652`](neo4j/neo4j-java-driver@daee652) build(java): build on Java 25 ([#1753](https://redirect.github.com/neo4j/neo4j-java-driver/issues/1753)) * [`7652d3c`](neo4j/neo4j-java-driver@7652d3c) build(deps): update dependencies ([#1760](https://redirect.github.com/neo4j/neo4j-java-driver/issues/1760)) * [`3439d70`](neo4j/neo4j-java-driver@3439d70) feat(idempotent): add support for autocommit retries ([#1759](https://redirect.github.com/neo4j/neo4j-java-driver/issues/1759)) * [`e19560d`](neo4j/neo4j-java-driver@e19560d) TestKit backend: fix parsing of ZonedDateTime ([#1758](https://redirect.github.com/neo4j/neo4j-java-driver/issues/1758)) * Additional commits viewable in [compare view](neo4j/neo4j-java-driver@4.4.20...6.2.0) [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=org.neo4j.driver:neo4j-java-driver&package-manager=maven&previous-version=4.4.20&new-version=6.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Fix code scanning alert no. 45: Implicit narrowing conversion in comp…

ac27d57

…ound assignment Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

robfrank marked this pull request as ready for review October 19, 2024 15:12

robfrank self-assigned this Oct 19, 2024

robfrank added the fixed label Oct 19, 2024

robfrank added this to the 24.11.1 milestone Oct 19, 2024

robfrank merged commit f937a09 into main Oct 19, 2024

robfrank deleted the alert-autofix-45 branch October 19, 2024 15:29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Fix code scanning alert no. 45: Implicit narrowing conversion in compound assignment#1768

Fix code scanning alert no. 45: Implicit narrowing conversion in compound assignment#1768
robfrank merged 1 commit into
mainfrom
alert-autofix-45

robfrank commented Oct 19, 2024

Uh oh!

codacy-production Bot commented Oct 19, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

robfrank commented Oct 19, 2024

Uh oh!

codacy-production Bot commented Oct 19, 2024

Coverage summary from Codacy

See diff coverage on Codacy

See your quality gate settings Change summary preferences

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant