canvg

canvg copied to clipboard

Hi `canvg/canvg`! This is a one-off automatically generated pull request from LGTM.com :robot:. You might have heard that we’ve integrated LGTM’s underlying CodeQL analysis engine natively into GitHub. The result...

lgtm-com[bot]

Bumps [ws](https://github.com/websockets/ws) from 7.5.6 to 7.5.10. Release notes Sourced from ws's releases. 7.5.10 Bug fixes Backported e55e5106 to the 7.x release line (22c28763). 7.5.9 Bug fixes Backported bc8bd34e to the...

dependabot[bot]

chore(deps): replace dependency standard-version with commit-and-tag-version ^9.5.0

1

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [standard-version](https://togithub.com/conventional-changelog/standard-version) | devDependencies | replacement | [`^9.3.2` -> `^9.5.0`](https://renovatebot.com/diffs/npm/standard-version/9.3.2/) | This is a...

renovate[bot]

chore(deps): update dependency @rollup/plugin-replace to v5

1

[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [@rollup/plugin-replace](https://togithub.com/rollup/plugins/tree/master/packages/replace#readme) ([source](https://togithub.com/rollup/plugins/tree/HEAD/packages/replace)) | [`^4.0.0` -> `^5.0.0`](https://renovatebot.com/diffs/npm/@rollup%2fplugin-replace/4.0.0/5.0.5) |...

renovate[bot]

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [typescript](https://www.typescriptlang.org/) ([source](https://redirect.github.com/microsoft/TypeScript)) | [`^4.3.5` -> `^5.0.0`](https://renovatebot.com/diffs/npm/typescript/4.9.5/5.9.3) |  |  | | [typescript](https://www.typescriptlang.org/)...

renovate[bot]

Bumps [ip](https://github.com/indutny/node-ip) from 1.1.5 to 1.1.9. Commits 1ecbf2f 1.1.9 6a3ada9 lib: fixed CVE-2023-42282 and added unit test 5dc3b2f 1.1.8 8e6f28b lib: even better node 6 support 088c9e5 1.1.7 1a4ca35 lib:...

dependabot[bot]

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [@rollup/plugin-node-resolve](https://togithub.com/rollup/plugins/tree/master/packages/node-resolve/#readme) ([source](https://togithub.com/rollup/plugins/tree/HEAD/packages/node-resolve)) | [`^13.0.5` -> `^15.0.0`](https://renovatebot.com/diffs/npm/@rollup%2fplugin-node-resolve/13.1.3/15.2.3) | [](https://docs.renovatebot.com/merge-confidence/) |...

renovate[bot]

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.7 to 1.15.6. Commits 35a517c Release version 1.15.6 of the npm package. c4f847f Drop Proxy-Authorization across hosts. 8526b4a Use GitHub for disclosure. b1677ce Release version 1.15.5 of...

dependabot[bot]

Bumps [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) from 5.3.0 to 5.3.4. Release notes Sourced from webpack-dev-middleware's releases. v5.3.4 5.3.4 (2024-03-20) Bug Fixes security: do not allow to read files above (#1779) (189c4ac) v5.3.3 5.3.3 (2022-05-18)...

dependabot[bot]

Bumps [express](https://github.com/expressjs/express) from 4.17.2 to 4.19.2. Release notes Sourced from express's releases. 4.19.2 What's Changed Improved fix for open redirect allow list bypass Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2 4.19.1 What's Changed Fix...

dependabot[bot]