dark-sky

dark-sky copied to clipboard

Bumps [stringstream](https://github.com/mhart/StringStream) from 0.0.5 to 0.0.6. Commits - [`fee31c5`](https://github.com/mhart/StringStream/commit/fee31c5c4a5efc7c7cc2fde4aee633dedefd6d67) 0.0.6 - [`2f4a9d4`](https://github.com/mhart/StringStream/commit/2f4a9d496f94b0880e01a26857aa266a5a3ef274) Merge pull request [#9](https://github-redirect.dependabot.com/mhart/StringStream/issues/9) from mhart/fix-buffer-constructor-vuln - [`afbc744`](https://github.com/mhart/StringStream/commit/afbc7442220358419e330618e47f3a65fc265b1b) Ensure data is not a number in Buffer constructor -...

dependabot[bot]

Pirate Weather is a free (donatable) drop-in replacement for the defunct Dark Sky API and your code already works great against it. More info at https://docs.pirateweather.net/en/latest/API/ This would fix your...

monitron

Bumps [debug](https://github.com/debug-js/debug) from 2.6.8 to 2.6.9. Release notes Sourced from debug's releases. 2.6.9 Patches Remove ReDoS regexp in %o formatter: #504 Credits Huge thanks to @​zhuangya for their help! Changelog...

dependabot[bot]

Bumps [json5](https://github.com/json5/json5) to 2.2.3 and updates ancestor dependency [jest](https://github.com/facebook/jest/tree/HEAD/packages/jest). These dependencies need to be updated together. Updates `json5` from 0.5.1 to 2.2.3 Release notes Sourced from json5's releases. v2.2.3 Fix:...

dependabot[bot]

Bumps [qs](https://github.com/ljharb/qs) and [qs](https://github.com/ljharb/qs). These dependencies needed to be updated together. Updates `qs` from 6.1.0 to 6.5.3 Changelog Sourced from qs's changelog. 6.5.3 [Fix] parse: ignore __proto__ keys (#428) [Fix]...

dependabot[bot]

Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. Release notes Sourced from decode-uri-component's releases. v0.2.2 Prevent overwriting previously decoded tokens 980e0bf https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2 v0.2.1 Switch to GitHub workflows 76abc93 Fix issue where decode...

dependabot[bot]

Bumps [moment](https://github.com/moment/moment) from 2.22.1 to 2.29.4. Changelog Sourced from moment's changelog. 2.29.4 Release Jul 6, 2022 #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex 2.29.3 Full changelog Release Apr 17, 2022...

dependabot[bot]

Hi, As Apple is cutting off the DarkSky API for web usage and moving it to WeatherKit, could you possibly move to Pirate Weather, which is created as a "drop...

ventz