GMall

GMall copied to clipboard

Bumps [jsoup](https://github.com/jhy/jsoup) from 1.11.2 to 1.15.3. Release notes Sourced from jsoup's releases. jsoup 1.15.3 jsoup 1.15.3 is out now, and includes a security fix for potential XSS attacks, along with...

dependabot[bot]

Bumps [fastjson](https://github.com/alibaba/fastjson) from 1.2.46 to 1.2.83. Release notes Sourced from fastjson's releases. FASTJSON 1.2.83版本发布（安全修复） 这是一个安全修复版本，修复最近收到在特定场景下可以绕过autoType关闭限制的漏洞，建议fastjson用户尽快采取安全措施保障系统安全。 安全修复方案 ：https://github.com/alibaba/fastjson/wiki/security_update_20220523 Issues 安全加固 修复JDK17下setAccessible报错的问题 #4077 下载 https://repo1.maven.org/maven2/com/alibaba/fastjson/1.2.83/ 文档 https://github.com/alibaba/fastjson/wiki/%E5%B8%B8%E8%A7%81%E9%97%AE%E9%A2%98 源码 https://github.com/alibaba/fastjson/tree/1.2.83 fastjson 1.2.79版本发布，BUG修复 这又是一个bug...

dependabot[bot]

Bumps [dubbo](https://github.com/apache/incubator-dubbo) from 2.6.0 to 2.6.12. Release notes Sourced from dubbo's releases. dubbo-2.6.12 What's Changed [2.6] update hessian lite version: 3.2.11 -> 3.2.12 (#9455) dubbo-2.6.11 Change Lists Add serialize id...

dependabot[bot]

Bumps httpclient from 4.4.1 to 4.5.13. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

Bumps [mybatis](https://github.com/mybatis/mybatis-3) from 3.4.6 to 3.5.6. Release notes Sourced from mybatis's releases. mybatis-3.5.6 Enhancements: A new configuration option defaultSqlProviderType is added. The specified class will be used as the SQL...

dependabot[bot]

Bumps [axios](https://github.com/axios/axios) from 0.18.0 to 0.19.2. Release notes Sourced from axios's releases. v0.19.2 Remove unnecessary XSS check (#2679) (see (#2646) for discussion) v0.19.1 Fixes and Functionality: Fixing invalid agent issue...

dependabot[bot]

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 3.1.5 to 3.11.0. Release notes Sourced from webpack-dev-server's releases. v3.11.0 3.11.0 (2020-05-08) Features add icons for directory viewer (#2441) (e953d01) allow multiple contentBasePublicPath paths (#2489) (c6bdfe4) emit...

dependabot[bot]

Bumps [webpack-bundle-analyzer](https://github.com/webpack-contrib/webpack-bundle-analyzer) from 2.13.1 to 3.8.0. Release notes Sourced from webpack-bundle-analyzer's releases. First test with Lerna monorepo th0r/webpack-bundle-analyzer#98 Changelog Sourced from webpack-bundle-analyzer's changelog. 3.8.0 Improvement Added support for exports.modules when...

dependabot[bot]