squarespace-core

squarespace-core copied to clipboard

Bump word-wrap from 1.2.3 to 1.2.4

1

Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4. Release notes Sourced from word-wrap's releases. 1.2.4 What's Changed Remove default indent by @​mohd-akram in jonschlinkert/word-wrap#24 🔒fix: CVE 2023 26115 (2) by @​OlafConijn in...

dependabot[bot]

Bump tough-cookie from 4.0.0 to 4.1.3

1

Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) from 4.0.0 to 4.1.3. Release notes Sourced from tough-cookie's releases. 4.1.3 Security fix for Prototype Pollution discovery in #282. This is a minor release, although output from the...

dependabot[bot]

Bump minimatch from 3.0.4 to 3.1.2

1

Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.0.4 to 3.1.2. Commits 699c459 3.1.2 2f2b5ff fix: trim pattern 25d7c0d 3.1.1 55dda29 fix: treat nocase:true as always having magic 5e1fb8d 3.1.0 f8145c5 Add 'allowWindowsEscape' option 570e8b1...

dependabot[bot]

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

I know you’re not accepting contributions to the core, but I thought you might consider something small and cosmetic-only.

Zearin