amazon-next

amazon-next copied to clipboard

Bump shell-quote from 1.7.2 to 1.7.3

1

Bumps [shell-quote](https://github.com/substack/node-shell-quote) from 1.7.2 to 1.7.3. Changelog Sourced from shell-quote's changelog. 1.7.3 Fix a security issue where the regex for windows drive letters allowed some shell meta-characters to escape the...

dependabot[bot]

Bump lodash-es from 4.17.15 to 4.17.21

1

Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.15 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Bump follow-redirects from 1.13.1 to 1.14.8

1

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.13.1 to 1.14.8. Commits 3d81dc3 Release version 1.14.8 of the npm package. 62e546a Drop confidential headers across schemes. 2ede36d Release version 1.14.7 of the npm package. 8b347cb...

dependabot[bot]

Bump ajv from 6.11.0 to 6.12.6

1

Bumps [ajv](https://github.com/ajv-validator/ajv) from 6.11.0 to 6.12.6. Release notes Sourced from ajv's releases. v6.12.6 Fix performance issue of "url" format. v6.12.5 Fix uri scheme validation (@​ChALkeR). Fix boolean schemas with strictKeywords...

dependabot[bot]

Bump next from 9.3.2 to 11.1.3

1

Bumps [next](https://github.com/vercel/next.js) from 9.3.2 to 11.1.3. Release notes Sourced from next's releases. v11.1.3 See https://github.com/vercel/next.js/releases/v12.0.5 for details about this patch. v11.1.3-canary.105 Core Changes Update swc-minify-enabled link: #30290 Fix middleware header...

dependabot[bot]

Bump immer from 5.3.6 to 9.0.6

1

Bumps [immer](https://github.com/immerjs/immer) from 5.3.6 to 9.0.6. Release notes Sourced from immer's releases. v9.0.6 9.0.6 (2021-08-31) Bug Fixes security: Follow up on CVE-2020-28477 where path: [["__proto__"], "x"] could still pollute the...

dependabot[bot]

Bump tar from 4.4.13 to 4.4.19

1

Bumps [tar](https://github.com/npm/node-tar) from 4.4.13 to 4.4.19. Commits 9a6faa0 4.4.19 70ef812 drop dirCache for symlink on all platforms 3e35515 4.4.18 52b09e3 fix: prevent path escape using drive-relative paths bb93ba2 fix: reserve...

dependabot[bot]

Bump path-parse from 1.0.6 to 1.0.7

1

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bump hosted-git-info from 2.8.5 to 2.8.9

1

Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.5 to 2.8.9. Changelog Sourced from hosted-git-info's changelog. 2.8.9 (2021-04-07) Bug Fixes backport regex fix from #76 (29adfe5), closes #84 2.8.8 (2020-02-29) Bug Fixes #61 & #65...

dependabot[bot]

Bump ssri from 6.0.1 to 6.0.2

1

Bumps [ssri](https://github.com/npm/ssri) from 6.0.1 to 6.0.2. Changelog Sourced from ssri's changelog. 6.0.2 (2021-04-07) Bug Fixes backport regex change from 8.0.1 (b30dfdb), closes #19 Commits b7c8c7c chore(release): 6.0.2 b30dfdb fix: backport...

dependabot[bot]