eviction-free-nyc

eviction-free-nyc copied to clipboard

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Bumps [merge](https://github.com/yeikos/js.merge) from 1.2.0 to 1.2.1. Commits b31e67f link broken 6ad6035 Fix prototype pollution See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this...

dependabot[bot]

Bumps [sockjs](https://github.com/sockjs/sockjs-node) from 0.3.19 to 0.3.21. Release notes Sourced from sockjs's releases. 0.3.21 Update faye-websocket and websocket-driver to address DDoS vulnerability #275 0.3.20 Updated node-uuid and coffeescript Exclude examples, tests,...

dependabot[bot]

Bumps [y18n](https://github.com/yargs/y18n) from 3.2.1 to 3.2.2. Commits See full diff in compare view Maintainer changes This version was pushed to npm by oss-bot, a new releaser for y18n since your...

dependabot[bot]

Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.3 to 6.5.4. Commits 43ac7f2 6.5.4 f4bc72b package: bump deps 441b742 ec: validate that a point before deriving keys e71b2d9 lib: relint using eslint 8421a01 build(deps): bump...

dependabot[bot]

Bumps [socket.io](https://github.com/socketio/socket.io) from 2.0.4 to 2.4.1. Release notes Sourced from socket.io's releases. 2.4.1 This release reverts the breaking change introduced in 2.4.0 (https://github.com/socketio/socket.io/commit/f78a575f66ab693c3ea96ea88429ddb1a44c86c7). If you are using Socket.IO v2, you...

dependabot[bot]

Bumps [node-notifier](https://github.com/mikaelbr/node-notifier) from 8.0.0 to 8.0.1. Changelog Sourced from node-notifier's changelog. v8.0.1 fixes possible injection issue for notify-send Commits 5d62799 v8.0.1 0c4a80d chore: adds changelog f5a7bc6 fix: test cases b9d148d...

dependabot[bot]

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7. Commits c74c8af 1.3.7 024b8b5 update deps, add linting 032fbaf Use Object.create(null) to avoid default object property hazards 2da9039 1.3.6 cfea636 better git push script,...

dependabot[bot]

This exposes the textbot on the web at `/en-US/textbot`. It's intended primarily for development purposes, to make it easier for folks who aren't familiar with the terminal to run the...

toolness

In #127, we introduced a serverless function called `send-to-phone` that interacts with Twilio to text users. While we include tests for our validation functions, let's consider adding testing infrastructure for...

sraby