houston

houston copied to clipboard

Bumps [file-type](https://github.com/sindresorhus/file-type) from 10.1.0 to 16.5.4. Release notes Sourced from file-type's releases. v16.5.4 Fix: Malformed MKV could cause an infinite loop https://github.com/sindresorhus/file-type/commit/d86835680f4cccbee1a60628783c36700ec9e254 CVE-2022-36313 Also fixed in 17.1.3 v16.5.3 Upgrade dependencies...

dependabot[bot]

Bumps [thenify](https://github.com/thenables/thenify) from 3.3.0 to 3.3.1. Changelog Sourced from thenify's changelog. 3.3.1 / 2020-06-18 fixes [0d94a24] - fix: remove eval (#30) (Yiyu He ) Commits 1d054b4 Release 3.3.1 0d94a24 fix:...

dependabot[bot]

Bumps [moment](https://github.com/moment/moment) from 2.22.2 to 2.29.4. Changelog Sourced from moment's changelog. 2.29.4 Release Jul 6, 2022 #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex 2.29.3 Full changelog Release Apr 17, 2022...

dependabot[bot]

Bumps [semantic-release](https://github.com/semantic-release/semantic-release) from 17.2.3 to 19.0.3. Release notes Sourced from semantic-release's releases. v19.0.3 19.0.3 (2022-06-09) Bug Fixes log-repo: use the original form of the repo url to remove the need...

dependabot[bot]

Bumps [ejs](https://github.com/mde/ejs) from 2.6.1 to 3.1.7. Release notes Sourced from ejs's releases. v3.1.7 Version 3.1.7 v3.1.6 Version 3.1.6 v3.1.5 Version 3.1.5 v3.0.2 No release notes provided. v2.7.4 Bug fixes Fixed...

dependabot[bot]

Issue #624: Add support for GitLab

14

#624 - added GitLab service - added tests

rupertdev

Bumps [urijs](https://github.com/medialize/URI.js) from 1.19.8 to 1.19.11. Release notes Sourced from urijs's releases. 1.19.11 (April 3rd 2022) SECURITY fixing URI.parse() handle excessive slashes in scheme-relative URLs - disclosed by zeyu2001 via...

dependabot[bot]

Bumps [@npmcli/arborist](https://github.com/npm/arborist) from 2.2.9 to 2.10.0. Commits 00e2164 2.10.0 6bda3e3 disable ws with workspaceEnabled=false and add includeWorkspaceRoot bb4b906 2.9.0 50c293d feat(vuln): expose isDirect 6baafaa 2.8.5 5b46b8b fix: use Intl.Collator for...

dependabot[bot]

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.1 to 2.6.7. Release notes Sourced from node-fetch's releases. v2.6.7 Security patch release Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th...

dependabot[bot]

Bumps [trim-off-newlines](https://github.com/stevemao/trim-off-newlines) from 1.0.1 to 1.0.3. Commits c3b28d3 1.0.3 6226c95 Merge pull request #4 from Trott/fix-it-again c77691d fix: remediate ReDOS further 76ca93c chore: pin mocha to version that works with...

dependabot[bot]