corestore-networker

corestore-networker copied to clipboard

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9. Changelog Sourced from hosted-git-info's changelog. 2.8.9 (2021-04-07) Bug Fixes backport regex fix from #76 (29adfe5), closes #84 Commits 8d4b369 chore(release): 2.8.9 29adfe5 fix: backport...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.19 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.8. Commits a2c5da8 1.3.8 af5c6bb Do not use Object.create(null) 8b648a1 don't test where our devdeps don't even work c74c8af 1.3.7 024b8b5 update deps, add linting...

dependabot[bot]

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Companion PR to https://github.com/hypercore-protocol/hypercore/pull/291, adding `onfeedauthenticate` hook to corestore networker. _Note: the PR needs 291 to be merged and released before the dependency can be updated. Until then I opened...

martinheidegger

ref: https://github.com/geut/nanoresource-promise/releases https://github.com/geut/nanoresource-promise/releases/tag/v2.0.0 https://github.com/hypercore-protocol/corestore-networker/blob/a6df51eb8949562ffa1674d64d91643cdc307f1f/package.json#L11 Please consider bumping to 2.0.0, thank you :)

DougAnderson444

Bumps [minimist](https://github.com/minimistjs/minimist) from 1.2.5 to 1.2.8. Changelog Sourced from minimist's changelog. v1.2.8 - 2023-02-09 Merged [Fix] Fix long option followed by single dash [#17](https://github.com/minimistjs/minimist/issues/17) [Tests] Remove duplicate test [#12](https://github.com/minimistjs/minimist/issues/12) [Fix]...

dependabot[bot]

Bumps [dns-packet](https://github.com/mafintosh/dns-packet) and [multicast-dns](https://github.com/mafintosh/multicast-dns). These dependencies needed to be updated together. Updates `dns-packet` from 4.2.0 to 5.4.0 Changelog Sourced from dns-packet's changelog. Version 5.4.0 - 2022-06-14 Feature: Added support for...

dependabot[bot]

Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.0.4 to 3.1.2. Commits 699c459 3.1.2 2f2b5ff fix: trim pattern 25d7c0d 3.1.1 55dda29 fix: treat nocase:true as always having magic 5e1fb8d 3.1.0 f8145c5 Add 'allowWindowsEscape' option 570e8b1...

dependabot[bot]