Skip to content

chore(deps): bump @virustotal/yara-x from 1.15.0 to 1.19.0 - #68

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/virustotal/yara-x-1.19.0
Open

chore(deps): bump @virustotal/yara-x from 1.15.0 to 1.19.0#68
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/virustotal/yara-x-1.19.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Contributor

Bumps @virustotal/yara-x from 1.15.0 to 1.19.0.

Release notes

Sourced from @​virustotal/yara-x's releases.

v1.19.0

  • Add missing machine architecture types to pe module (#687).
  • Add warning for single-byte patterns (71baa67).
  • Add warning for duplicate patterns in a rule (9061803).
  • Small optimization when generating structures from a protobuf (9255a3e).
  • BUGFIX: Don't derive header constraints from patterns with certain flags (#689).
  • BUGFIX: Prevent undefined behavior when deserializing rules from untrusted binary data (25efa37).

Contributors: @​nugxperience @​cherepanov74

v1.18.0

  • Improve scan performance by ignoring patterns that can't match due to file header constraints (#676).
  • Optimize regular expression evaluation (#678).
  • New --cpu-limit option for the CLI (e9ee494).
  • BUGFIX: fix issues in atom extraction logic from regular expressions (#673).
  • BUGFIX: stack overflow when compiling rules if YARA-X uses musl (#666).

Contributors: @​FranciscoPombal @​webknjaz

v1.17.0

  • Add support for modules developed in external crates (#655).
  • Implement the fast scan mode and --fast-scan option for the CLI (297ceb9, a9ebdf7).
  • Improve performance by grouping multiple matches expressions inside or conditions into a RegexSet (#657).
  • Better YAML output for multi-line strings (a7b7581).
  • Faster rendering of error and warning messages (88a5a44).
  • BUGFIX: Multile issues in dex module, including incorrect parsing and out-of-memory errors (efb5cad, eccf374, 833660e, 38fdf8b, 5e89e5b).
  • BUGFIX: Issue in bitsquatting logic in vt module (3a20364).

Contributors: @​1ndahous3

v1.16.0

  • Multiple performance improvements (#623, #624, #626, #627, #629, #631, #632, #635, #649, #654).
  • Implement constant folding for bitwise operations (#634).
  • Allow specifying context size for matches (#644).
  • Improvements in Language Server for better integration with neovim (#648).
  • BUGFIX: Avoid panic while parsing certain rules (#640).
  • BUGFIX: Avoid panic on bad reader input in the Python API (#643).
  • BUGFIX: Handle null values while deserializing Cuckoo reports in cuckoo module. (#646).
  • BUGFIX: Validate bool metadata as bool in Language Server diagnostics (#621).

Contributors: @​king-tero @​PeterMatula @​nyx0 @​kevinmuoz @​tlansec @​prosperritty

Commits
  • fe40349 tests: ignore disabled modules while running tests.
  • dc48090 chore: fix test cases after disabling vba and olecf modules.
  • 4426f0a chore: bump version to 1.19.0.
  • f7d6a43 chore: don't include vba and olecf as default modules.
  • 25efa37 fix: prevent undefined behavior when deserializing rules from untrusted binar...
  • 4fbaf55 docs: add documentation for Rules::header_constraints.
  • 496b5c8 style: remove empty lines.
  • 3f2b2aa chore: upgrade dependencies.
  • 71baa67 feat: flag single-byte patterns as slow and allow failing compilation
  • b2e0fca chore: assert completeness of pattern flags for header constraints
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@virustotal/yara-x](https://github.com/VirusTotal/yara-x) from 1.15.0 to 1.19.0.
- [Release notes](https://github.com/VirusTotal/yara-x/releases)
- [Commits](VirusTotal/yara-x@v1.15.0...v1.19.0)

---
updated-dependencies:
- dependency-name: "@virustotal/yara-x"
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants