frontend-reference
frontend-reference copied to clipboard
Bump @adobe/css-tools from 4.3.0 to 4.3.2 in /examples/million-poc-performance
Bumps @adobe/css-tools from 4.3.0 to 4.3.2.
Changelog
Sourced from @adobe/css-tools's changelog.
4.3.2 / 2023-11-28
- Fix redos vulnerability with specific crafted css string - CVE-2023-48631
- Fix Problem parsing with :is() and nested :nth-child() #211
4.3.1 / 2023-03-14
- Fix redos vulnerability with specific crafted css string - CVE-2023-26364
Commits
- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.
[!IMPORTANT]
Auto Review Skipped
Bot user detected.
To trigger a single review, invoke the
@coderabbitai reviewcommand.
Tips
Chat with CodeRabbit Bot (@coderabbitai)
- If you reply to a review comment from CodeRabbit, the bot will automatically respond.
- To engage with CodeRabbit bot directly around the specific lines of code in the PR, mention @coderabbitai in your review comment
- Note: Review comments are made on code diffs or files, not on the PR overview.
- Add
@coderabbitai ignoreanywhere in the PR description to prevent this PR from being reviewed.
CodeRabbit Commands (invoked as PR comments)
@coderabbitai pauseto pause the reviews on a PR.@coderabbitai resumeto resume the paused reviews.@coderabbitai reviewto trigger a review. This is useful when automatic reviews are disabled for the repository.@coderabbitai resolveresolve all the CodeRabbit review comments.@coderabbitai helpto get help.
Note: For conversation with the bot, please use the review comments on code diffs or files.
CodeRabbit Configration File (.coderabbit.yaml)
- You can programmatically configure CodeRabbit by adding a
.coderabbit.yamlfile to the root of your repository. - The JSON schema for the configuration file is available here.
- If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation:
# yaml-language-server: $schema=https://coderabbit.ai/integrations/coderabbit-overrides.v2.json