github-comments

github-comments copied to clipboard

Bumps [qs](https://github.com/ljharb/qs) from 6.4.0 to 6.4.1. Changelog Sourced from qs's changelog. 6.4.1 [Fix] parse: ignore __proto__ keys (#428) [Fix] fix for an impossible situation: when the formatter is called with...

dependabot[bot]

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.5 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [tar](https://github.com/npm/node-tar) from 2.2.1 to 2.2.2. Commits 523c5c7 2.2.2 7ecef07 Bump fstream to fix hardlink overwriting vulnerability 9fc84b9 Use {} for hardlink tracking instead of [] 15e59f1 Only track previously...

dependabot[bot]

Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.4.2 to 2.8.9. Changelog Sourced from hosted-git-info's changelog. 2.8.9 (2021-04-07) Bug Fixes backport regex fix from #76 (29adfe5), closes #84 2.8.8 (2020-02-29) Bug Fixes #61 & #65...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.4 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Bumps [ini](https://github.com/isaacs/ini) from 1.3.4 to 1.3.7. Commits c74c8af 1.3.7 024b8b5 update deps, add linting 032fbaf Use Object.create(null) to avoid default object property hazards 2da9039 1.3.6 cfea636 better git push script,...

dependabot[bot]

Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) from 2.3.2 to 2.3.4. Commits - [`e4dfb0a`](https://github.com/salesforce/tough-cookie/commit/e4dfb0aec5d25e9e982805417a5d936071badc17) 2.3.4 - [`7d66ffd`](https://github.com/salesforce/tough-cookie/commit/7d66ffde12af5cbad40c3642f3c339fa82e6e381) Update public suffix list - [`7564c06`](https://github.com/salesforce/tough-cookie/commit/7564c0637e6674d8847a1b84979536930eb9b170) Merge pull request [#100](https://github-redirect.dependabot.com/salesforce/tough-cookie/issues/100) from salesforce/no-re-parser - [`751da6d`](https://github.com/salesforce/tough-cookie/commit/751da6dadfeddb916b7dc5f524715afd4b02969c) Document removal of 256...

dependabot[bot]

Bumps [macaddress](https://github.com/scravy/node-macaddress) from 0.2.8 to 0.2.9. Release notes *Sourced from [macaddress's releases](https://github.com/scravy/node-macaddress/releases).* > ## v0.2.9 > * Fixes an arbitrary command execution vulnerability (https://github-redirect.dependabot.com/scravy/node-macaddress/pull/16/files) > * Adds support for `freebsd`...

dependabot[bot]

Bumps [sshpk](https://github.com/joyent/node-sshpk) from 1.13.0 to 1.16.1. Release notes *Sourced from [sshpk's releases](https://github.com/joyent/node-sshpk/releases).* > ## v1.16.1 > * Fixes for [#60](https://github-redirect.dependabot.com/joyent/node-sshpk/issues/60) (correctly encoding certificates with expiry dates >=2050), [#62](https://github-redirect.dependabot.com/joyent/node-sshpk/issues/62) (accepting PKCS#8...

dependabot[bot]

Bumps [extend](https://github.com/justmoon/node-extend) from 3.0.1 to 3.0.2. Changelog *Sourced from [extend's changelog](https://github.com/justmoon/node-extend/blob/master/CHANGELOG.md).* > 3.0.2 / 2018-07-19 > ================== > * [Fix] Prevent merging `__proto__` property ([#48](https://github-redirect.dependabot.com/justmoon/node-extend/issues/48)) > * [Dev Deps] update...

dependabot[bot]