Skip to content

chore(deps): bump @virustotal/yara-x from 1.15.0 to 1.19.0 - #68

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/virustotal/yara-x-1.19.0
Closed

chore(deps): bump @virustotal/yara-x from 1.15.0 to 1.19.0#68
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/virustotal/yara-x-1.19.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Contributor

Bumps @virustotal/yara-x from 1.15.0 to 1.19.0.

Release notes

Sourced from @​virustotal/yara-x's releases.

v1.19.0

  • Add missing machine architecture types to pe module (#687).
  • Add warning for single-byte patterns (71baa67).
  • Add warning for duplicate patterns in a rule (9061803).
  • Small optimization when generating structures from a protobuf (9255a3e).
  • BUGFIX: Don't derive header constraints from patterns with certain flags (#689).
  • BUGFIX: Prevent undefined behavior when deserializing rules from untrusted binary data (25efa37).

Contributors: @​nugxperience @​cherepanov74

v1.18.0

  • Improve scan performance by ignoring patterns that can't match due to file header constraints (#676).
  • Optimize regular expression evaluation (#678).
  • New --cpu-limit option for the CLI (e9ee494).
  • BUGFIX: fix issues in atom extraction logic from regular expressions (#673).
  • BUGFIX: stack overflow when compiling rules if YARA-X uses musl (#666).

Contributors: @​FranciscoPombal @​webknjaz

v1.17.0

  • Add support for modules developed in external crates (#655).
  • Implement the fast scan mode and --fast-scan option for the CLI (297ceb9, a9ebdf7).
  • Improve performance by grouping multiple matches expressions inside or conditions into a RegexSet (#657).
  • Better YAML output for multi-line strings (a7b7581).
  • Faster rendering of error and warning messages (88a5a44).
  • BUGFIX: Multile issues in dex module, including incorrect parsing and out-of-memory errors (efb5cad, eccf374, 833660e, 38fdf8b, 5e89e5b).
  • BUGFIX: Issue in bitsquatting logic in vt module (3a20364).

Contributors: @​1ndahous3

v1.16.0

  • Multiple performance improvements (#623, #624, #626, #627, #629, #631, #632, #635, #649, #654).
  • Implement constant folding for bitwise operations (#634).
  • Allow specifying context size for matches (#644).
  • Improvements in Language Server for better integration with neovim (#648).
  • BUGFIX: Avoid panic while parsing certain rules (#640).
  • BUGFIX: Avoid panic on bad reader input in the Python API (#643).
  • BUGFIX: Handle null values while deserializing Cuckoo reports in cuckoo module. (#646).
  • BUGFIX: Validate bool metadata as bool in Language Server diagnostics (#621).

Contributors: @​king-tero @​PeterMatula @​nyx0 @​kevinmuoz @​tlansec @​prosperritty

Commits
  • fe40349 tests: ignore disabled modules while running tests.
  • dc48090 chore: fix test cases after disabling vba and olecf modules.
  • 4426f0a chore: bump version to 1.19.0.
  • f7d6a43 chore: don't include vba and olecf as default modules.
  • 25efa37 fix: prevent undefined behavior when deserializing rules from untrusted binar...
  • 4fbaf55 docs: add documentation for Rules::header_constraints.
  • 496b5c8 style: remove empty lines.
  • 3f2b2aa chore: upgrade dependencies.
  • 71baa67 feat: flag single-byte patterns as slow and allow failing compilation
  • b2e0fca chore: assert completeness of pattern flags for header constraints
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@virustotal/yara-x](https://github.com/VirusTotal/yara-x) from 1.15.0 to 1.19.0.
- [Release notes](https://github.com/VirusTotal/yara-x/releases)
- [Commits](VirusTotal/yara-x@v1.15.0...v1.19.0)

---
updated-dependencies:
- dependency-name: "@virustotal/yara-x"
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 26, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #72.

@dependabot dependabot Bot closed this Sep 6, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/virustotal/yara-x-1.19.0 branch September 6, 2026 19:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants