chore(deps): bump ra from 3.1.10 to 3.2.0

[dependabot]

Bumps ra from 3.1.10 to 3.2.0.

Release notes

Sourced from ra's releases.

v3.2.0

What's Changed

• Add metrics_labels to MUTABLE_CONFIG_KEYS to introduce the value in 3.13 migrated queues config, in line with 4.2 queues by @​elo-magnier-7s in rabbitmq/ra#651
• rebar.config: Remove elvis as a test dependency by @​dumbbell in rabbitmq/ra#654
• Support PID alias in the send_msg effect by @​dumbbell in rabbitmq/ra#653
• Add support for timeouts to ra force delete server operations by @​Ayanda-D in rabbitmq/ra#652

New Contributors

• @​elo-magnier-7s made their first contribution in rabbitmq/ra#651
• @​Ayanda-D made their first contribution in rabbitmq/ra#652

Full Changelog: rabbitmq/ra@v3.1.10...v3.2.0

Commits

• 5b35391 v3.2.0
• 315e0cf Merge pull request #652 from Ayanda-D/force-delete-with-timeout
• 6e89e8e Merge pull request #653 from rabbitmq/support-pid-alias-in-send_msg-effect
• 5e2b9b6 Update docs of the send_msg side-effect
• 7f99718 Support PID alias in the send_msg effect
• 38ecaee Merge pull request #654 from rabbitmq/remove-elvis-as-test-dep
• b761d36 rebar.config: Remove elvis as a test dependency
• 83423dd remove unused ra:delete_server/2
• f7b94a2 add tests for ra force delete operations with timeout
• 3c436d0 add support for timeouts to ra force delete operations.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🔍 Hypatia Security Scan

Findings: 16 issues detected

Severity	Count
🔴 Critical	0
🟠 High	10
🟡 Medium	6

View findings

[
  {
    "reason": "Issue in label-triage.yml",
    "type": "missing_timeout_minutes",
    "file": "label-triage.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in labels.yml",
    "type": "missing_timeout_minutes",
    "file": "labels.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Required file missing (condition: public_repo)",
    "type": "missing_requirement",
    "file": "SECURITY.md",
    "action": "create",
    "rule_module": "cicd_rules",
    "severity": "high"
  },
  {
    "reason": "binary_to_term without :safe option -- deserialization attack (1 occurrences, CWE-502)",
    "type": "elixir_send_unsanitised",
    "file": "/home/runner/work/phronesis/phronesis/lib/phronesis/compiler.ex",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "No SECURITY.md found in phronesis",
    "type": "SecurityPolicy",
    "file": "/home/runner/work/phronesis/phronesis",
    "action": "auto_fix",
    "rule_module": "scorecard",
    "severity": "medium",
    "remediation": "Add SECURITY.md documenting how to report vulnerabilities.",
    "scorecard_check": "Security-Policy"
  },
  {
    "reason": "Code scanning (Scorecard): TokenPermissionsID -- Token-Permissions -- 6 day(s) old",
    "type": "CSA001",
    "file": ".github/workflows/hypatia-scan.yml",
    "action": "update",
    "rule_module": "code_scanning_alerts",
    "severity": "high"
  },
  {
    "reason": "Code scanning (Scorecard): TokenPermissionsID -- Token-Permissions -- 6 day(s) old",
    "type": "CSA001",
    "file": ".github/workflows/dependabot-automerge.yml",
    "action": "update",
    "rule_module": "code_scanning_alerts",
    "severity": "high"
  },
  {
    "reason": "Code scanning (Scorecard): TokenPermissionsID -- Token-Permissions -- 6 day(s) old",
    "type": "CSA001",
    "file": ".github/workflows/scorecard.yml",
    "action": "update",
    "rule_module": "code_scanning_alerts",
    "severity": "high"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/workflow_audit/missing_timeout_minutes -- Hypatia workflow_audit: missing_timeout_minutes -- 10 day(s) old",
    "type": "CSA001",
    "file": "labels.yml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  },
  {
    "reason": "Code scanning (Hypatia): hypatia/workflow_audit/missing_timeout_minutes -- Hypatia workflow_audit: missing_timeout_minutes -- 10 day(s) old",
    "type": "CSA001",
    "file": "label-triage.yml",
    "action": "review",
    "rule_module": "code_scanning_alerts",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence