github95

github95 copied to clipboard

Upgrade to GitHub-native Dependabot

2

_Dependabot Preview will be shut down on August 3rd, 2021. In order to keep getting Dependabot updates, please merge this PR and migrate to GitHub-native Dependabot before then._ Dependabot has...

dependabot-preview[bot]

build(deps): [security] bump ws from 6.2.1 to 6.2.2

1

Bumps [ws](https://github.com/websockets/ws) from 6.2.1 to 6.2.2. **This update includes security fixes.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. ReDoS in Sec-Websocket-Protocol header Impact A specially crafted value of...

dependabot-preview[bot]

build(deps): [security] bump dns-packet from 1.3.1 to 1.3.4

1

Bumps [dns-packet](https://github.com/mafintosh/dns-packet) from 1.3.1 to 1.3.4. **This update includes a security fix.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. Potential memory exposure in dns-packet This affects the package...

dependabot-preview[bot]

build(deps): [security] bump hosted-git-info from 2.8.8 to 2.8.9

1

Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9. **This update includes a security fix.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. Regular Expression Denial of Service in hosted-git-info The npm...

dependabot-preview[bot]

build(deps): [security] bump ssri from 6.0.1 to 6.0.2

1

Bumps [ssri](https://github.com/npm/ssri) from 6.0.1 to 6.0.2. **This update includes a security fix.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. Regular Expression Denial of Service (ReDoS) npm ssri 5.2.2-6.0.1...

dependabot-preview[bot]

build(deps): [security] bump y18n from 4.0.0 to 4.0.3

1

Bumps [y18n](https://github.com/yargs/y18n) from 4.0.0 to 4.0.3. **This update includes a security fix.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. Prototype Pollution Overview The npm package y18n before versions...

dependabot-preview[bot]

build(deps): [security] bump node-notifier from 8.0.0 to 8.0.2

1

Bumps [node-notifier](https://github.com/mikaelbr/node-notifier) from 8.0.0 to 8.0.2. **This update includes a security fix.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. OS Command Injection in node-notifier This affects the package...

dependabot-preview[bot]

build(deps): [security] bump react-dev-utils from 11.0.1 to 11.0.4

1

Bumps [react-dev-utils](https://github.com/facebook/create-react-app/tree/HEAD/packages/react-dev-utils) from 11.0.1 to 11.0.4. **This update includes a security fix.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. Improper Neutralization of Special Elements used in an OS...

dependabot-preview[bot]

build(deps): [security] bump elliptic from 6.5.3 to 6.5.4

1

Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.3 to 6.5.4. **This update includes a security fix.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. Use of a Broken or Risky Cryptographic Algorithm The...

dependabot-preview[bot]

build(deps): bump react-scripts from 4.0.1 to 4.0.3

1

Bumps [react-scripts](https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts) from 4.0.1 to 4.0.3. Changelog Sourced from react-scripts's changelog. 4.0.3 (2021-02-22) v4.0.3 is a maintenance release that includes minor bug fixes and dependency updates. :bug: Bug Fix react-scripts...

dependabot-preview[bot]