portfolio

portfolio copied to clipboard

Bumps [json5](https://github.com/json5/json5) from 1.0.1 to 1.0.2. Release notes Sourced from json5's releases. v1.0.2 Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a...

dependabot[bot]

Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. Release notes Sourced from decode-uri-component's releases. v0.2.2 Prevent overwriting previously decoded tokens 980e0bf https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2 v0.2.1 Switch to GitHub workflows 76abc93 Fix issue where decode...

dependabot[bot]

Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.0.4 to 3.1.2. Commits 699c459 3.1.2 2f2b5ff fix: trim pattern 25d7c0d 3.1.1 55dda29 fix: treat nocase:true as always having magic 5e1fb8d 3.1.0 f8145c5 Add 'allowWindowsEscape' option 570e8b1...

dependabot[bot]

build(deps): bump terser from 4.8.0 to 4.8.1

1

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) Commits See full diff in compare...

dependabot[bot]

build(deps): bump minimist from 1.2.5 to 1.2.6

1

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

build(deps): bump next from 10.0.2 to 12.1.0

1

Bumps [next](https://github.com/vercel/next.js) from 10.0.2 to 12.1.0. Release notes Sourced from next's releases. v12.1.0 Core Changes Relay Support in Rust Compiler: #33702 fix eslint link-passhref rule: #33857 update webpack: #33831 Flush...

dependabot[bot]

build(deps): bump nanoid from 3.1.16 to 3.2.0

1

Bumps [nanoid](https://github.com/ai/nanoid) from 3.1.16 to 3.2.0. Changelog Sourced from nanoid's changelog. Change Log This project adheres to Semantic Versioning. 3.2 Added --size and --alphabet arguments to binary (by Vitaly Baev)....

dependabot[bot]

build(deps): bump path-parse from 1.0.6 to 1.0.7

1

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

build(deps-dev): bump postcss from 8.1.8 to 8.2.10

1

Bumps [postcss](https://github.com/postcss/postcss) from 8.1.8 to 8.2.10. Release notes Sourced from postcss's releases. 8.2.10 Fixed ReDoS vulnerabilities in source map parsing. Fixed webpack 5 support (by @​barak007). Fixed docs (by @​roelandmoors)....

dependabot[bot]

build(deps): bump lodash from 4.17.20 to 4.17.21

1

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]