bs-deriving

bs-deriving copied to clipboard

Bumps [async](https://github.com/caolan/async) from 2.6.2 to 2.6.4. Changelog Sourced from async's changelog. v2.6.4 Fix potential prototype pollution exploit (#1828) v2.6.3 Updated lodash to squelch a security warning (#1675) Commits c6bdaca Version...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. Commits 754f0c2 1.3.2 90ee1fa ensure keys are valid when mixing in values See full diff in compare view Maintainer changes This version was pushed...

dependabot[bot]

Bumps [bl](https://github.com/rvagg/bl) from 1.2.2 to 1.2.3. Commits d69edfd 1.2.3 847473a test all branches 0bd87ec Fix unintialized memory access dc097f3 test newer versions of Node See full diff in compare view...

dependabot[bot]

Bumps [decompress](https://github.com/kevva/decompress) from 4.2.0 to 4.2.1. Release notes Sourced from decompress's releases. v4.2.1 Prevent directory traversal (#73) 967146e https://github.com/kevva/decompress/compare/v4.2.0...v4.2.1 Commits 84a8c10 4.2.1 fafff47 Meta tweaks 967146e Prevent directory traversal (#73)...

dependabot[bot]

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.8. Commits a2c5da8 1.3.8 af5c6bb Do not use Object.create(null) 8b648a1 don't test where our devdeps don't even work c74c8af 1.3.7 024b8b5 update deps, add linting...

dependabot[bot]

Bumps [glob-parent](https://github.com/gulpjs/glob-parent) and [cpy](https://github.com/sindresorhus/cpy). These dependencies needed to be updated together. Updates `glob-parent` from 3.1.0 to 5.1.2 Release notes Sourced from glob-parent's releases. v5.1.2 Bug Fixes eliminate ReDoS (#36) (f923116)...

dependabot[bot]

Bumps [set-value](https://github.com/jonschlinkert/set-value) from 2.0.0 to 2.0.1. Commits bb0f038 2.0.1 cb12f14 ensure only valid keys are used See full diff in compare view Maintainer changes This version was pushed to npm...

dependabot[bot]

Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. Release notes Sourced from decode-uri-component's releases. v0.2.2 Prevent overwriting previously decoded tokens 980e0bf https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2 v0.2.1 Switch to GitHub workflows 76abc93 Fix issue where decode...

dependabot[bot]

Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.0.4 to 3.1.2. Commits 699c459 3.1.2 2f2b5ff fix: trim pattern 25d7c0d 3.1.1 55dda29 fix: treat nocase:true as always having magic 5e1fb8d 3.1.0 f8145c5 Add 'allowWindowsEscape' option 570e8b1...

dependabot[bot]