shisho
shisho copied to clipboard
Lightweight static analyzer for several programming languages
Bumps [terser](https://github.com/terser/terser) from 5.7.1 to 5.14.2. Changelog Sourced from terser's changelog. v5.14.2 Security fix for RegExps that should not be evaluated (regexp DDOS) Source maps improvements (#1211) Performance improvements in...
Bumps [moment](https://github.com/moment/moment) from 2.29.1 to 2.29.4. Changelog Sourced from moment's changelog. 2.29.4 Release Jul 6, 2022 #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex 2.29.3 Full changelog Release Apr 17, 2022...
Bumps [parse-url](https://github.com/IonicaBizau/parse-url) from 6.0.0 to 6.0.2. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [jpeg-js](https://github.com/eugeneware/jpeg-js) from 0.4.3 to 0.4.4. Release notes Sourced from jpeg-js's releases. v0.4.4 v0.4.4 (2022-06-07) feat: add comment tag encoding (#87) (13e1ffa), closes #87 fix: validate sampling factors (#106) (9ccd35f),...
Bumps [regex](https://github.com/rust-lang/regex) from 1.5.4 to 1.5.5. Changelog Sourced from regex's changelog. 1.5.5 (2022-03-08) This releases fixes a security bug in the regex compiler. This bug permits a vector for a...
Bumps [gatsby-plugin-mdx](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-mdx) from 2.11.0 to 2.14.1. Changelog Sourced from gatsby-plugin-mdx's changelog. 2.14.1 (2022-06-02) Bug Fixes don't allow JS frontmatter by default #35830 #35834 (ff94ed5) 2.13.0 (2021-09-01) 🧾 Release notes Chores...
Bumps [devcert](https://github.com/davewasmer/devcert) from 1.2.0 to 1.2.1. Commits 1ed164f 1.2.1 b076321 switch from vulnerable VALID_DOMAIN regex to is-valid-domain lib (#79) See full diff in compare view Maintainer changes This version was...
Bumps [eventsource](https://github.com/EventSource/eventsource) from 1.1.0 to 1.1.1. Changelog Sourced from eventsource's changelog. 1.1.1 Do not include authorization and cookie headers on redirect to different origin (#273 Espen Hovlandsdal) Commits aa7a408 1.1.1...
Bumps [axios](https://github.com/axios/axios) from 0.21.1 to 0.21.4. Release notes Sourced from axios's releases. v0.21.4 0.21.4 (September 6, 2021) Fixes and Functionality: Fixing JSON transform when data is stringified. Providing backward compatibility...
tree-sitter grammar is [here](https://github.com/cstrahan/tree-sitter-nix). I'm a nix user and I really like the look of shisho :heart: Last I checked the grammar wasn't super fully featured for syntax highlighting but...