ember-collection

ember-collection copied to clipboard

Bumps [http-proxy](https://github.com/http-party/node-http-proxy) from 1.18.0 to 1.18.1. Changelog Sourced from http-proxy's changelog. v1.18.1 - 2020-05-17 Merged Skip sending the proxyReq event when the expect header is present [#1447](https://github.com/http-party/node-http-proxy/issues/1447) Remove node6 support,...

dependabot[bot]

Bumps [websocket-extensions](https://github.com/faye/websocket-extensions-node) from 0.1.3 to 0.1.4. Changelog Sourced from websocket-extensions's changelog. 0.1.4 / 2020-06-02 Remove a ReDoS vulnerability in the header parser (CVE-2020-7662, reported by Robert McLaughlin) Change license from...

dependabot[bot]

`array-observers` deprecation

1

The [`ember-collection` component][1] is triggering the [`array-observers` deprecation][2]. This may be a blocker for Ember 4 upgrades. [1]: https://github.com/adopted-ember-addons/ember-collection/blob/796107758fe38d2bd5313761b05b51bc551d48a7/addon/components/ember-collection.js [2]: https://deprecations.emberjs.com/v3.x/#toc_array-observers

nwhittaker

See https://deprecations.emberjs.com/v3.x/#toc_this-property-fallback

jrowlingson

Bumps [tmpl](https://github.com/daaku/nodejs-tmpl) from 1.0.4 to 1.0.5. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [tar](https://github.com/npm/node-tar) from 6.0.2 to 6.1.11. Commits e573aee 6.1.11 edb8e9a fix: perf regression on hot string munging path a9d9b05 chore(test): Avoid spurious failures packing node_modules/.cache 24b8bda fix(test): use posix path...

dependabot[bot]

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [socket.io-parser](https://github.com/socketio/socket.io-parser) from 3.3.0 to 3.3.2. Release notes Sourced from socket.io-parser's releases. 3.3.2 Bug Fixes prevent DoS (OOM) via massive packets (#95) (89197a0) Links Diff: https://github.com/Automattic/socket.io-parser/compare/3.3.1...3.3.2 3.3.1 Links Diff: https://github.com/socketio/socket.io-parser/compare/3.3.0...3.3.1...

dependabot[bot]

Bumps [glob-parent](https://github.com/gulpjs/glob-parent) from 5.1.1 to 5.1.2. Release notes Sourced from glob-parent's releases. v5.1.2 Bug Fixes eliminate ReDoS (#36) (f923116) Changelog Sourced from glob-parent's changelog. 5.1.2 (2021-03-06) Bug Fixes eliminate ReDoS...

dependabot[bot]

Bumps [ssri](https://github.com/npm/ssri) from 7.1.0 to 7.1.1. Changelog Sourced from ssri's changelog. 7.1.1 (2021-05-17) Bug Fixes backport regex change from 8.0.1 (809c84d), closes #20 Commits 9bb0cee chore(release): 7.1.1 809c84d fix: backport...

dependabot[bot]