SONARAZDO-487 Remove Mend and update release action

.cirrus.yml

@@ -103,31 +103,3 @@ promote_task:
   script:
     - source cirrus-env PROMOTE
     - npm run promote
-
-mend_scan_task:
-  depends_on:
-    - build
-  only_if: $CIRRUS_BRANCH == "master"
-  timeout_in: 30m
-  eks_container:
-    <<: *CONTAINER_TEMPLATE
-    cpu: 2
-    memory: 2G
-  env:
-    WS_APIKEY: VAULT[development/kv/data/mend data.apikey]
-    WS_WSS_URL: VAULT[development/kv/data/mend data.url]
-    WS_USERKEY: VAULT[development/kv/data/mend data.userKey]
-    # No need to clone the full history.
-    # Depth of 1 is not enough because it would fail the build in case of consecutive pushes
-    # (example of error: "Hard resetting to c968ecaf7a1942dacecd78480b3751ac74d53c33...Failed to force reset to c968ecaf7a1942dacecd78480b3751ac74d53c33: object not found!")
-    CIRRUS_CLONE_DEPTH: 50
-  mend_script:
-    - bash scripts/install.sh
-    - source cirrus-env BUILD # to set the environment variable BUILD_NUMBER
-    - PROJECT_VERSION='NO-VERSION'
-    - echo $PROJECT_VERSION
-    - source ws_scan.sh
-  allow_failures: $CIRRUS_CRON != "nightly"
-  always:
-    ws_artifacts:
-      path: "whitesource/**/*"

.github/workflows/release.yml

@@ -10,7 +10,7 @@ jobs:
     permissions:
       id-token: write
       contents: write
-    uses: SonarSource/gh-action_release/.github/workflows/main.yaml@v5
+    uses: SonarSource/gh-action_release/.github/workflows/main.yaml@v6
     with:
       publishToBinaries: true
       slackChannel: squad-analysis-experience-azdo

package.json

@@ -74,7 +74,7 @@
     "libxmljs2": "https://registry.npmjs.org/@ttskp/libxmljs2-noop/-/libxmljs2-noop-1.0.0.tgz"
   },
   "overridesComment": {
-    "libxmljs2": "Workaround for https://github.com/CycloneDX/cyclonedx-javascript-library/issues/1061 to silent Mend"
+    "libxmljs2": "Workaround for https://github.com/CycloneDX/cyclonedx-javascript-library/issues/1061 to silent vulnerability findings"
   },
   "engines": {
     "node": ">=6",