aurelia-realworld-example-app

aurelia-realworld-example-app copied to clipboard

Bumps [moment](https://github.com/moment/moment) from 2.22.1 to 2.29.4. Changelog Sourced from moment's changelog. 2.29.4 Release Jul 6, 2022 #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex 2.29.3 Full changelog Release Apr 17, 2022...

dependabot[bot]

Bumps [eventsource](https://github.com/EventSource/eventsource) from 1.0.7 to 1.1.1. Changelog Sourced from eventsource's changelog. 1.1.1 Do not include authorization and cookie headers on redirect to different origin (#273 Espen Hovlandsdal) 1.1.0 Improve performance...

dependabot[bot]

Bumps [aurelia-framework](https://github.com/aurelia/framework) from 1.2.0 to 1.4.1. Release notes Sourced from aurelia-framework's releases. 1.4.1 What's Changed fix(dep): use latest templating to resolve chain dep vul issue by @​bigopon in aurelia/framework#1001 Resolves...

dependabot[bot]

Bumps [karma](https://github.com/karma-runner/karma) from 2.0.2 to 6.3.16. Release notes Sourced from karma's releases. v6.3.16 6.3.16 (2022-02-10) Bug Fixes security: mitigate the "Open Redirect Vulnerability" (ff7edbb) v6.3.15 6.3.15 (2022-02-05) Bug Fixes helper:...

dependabot[bot]

Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.4.7 to 1.5.10. Commits 8cd4c6c 1.5.10 ce7a01f [fix] Improve handling of empty port 0071490 [doc] Update JSDoc comment a7044e3 [minor] Use more descriptive variable name d547792 [security]...

dependabot[bot]

Bumps [marked](https://github.com/markedjs/marked) from 0.3.19 to 4.0.10. Release notes Sourced from marked's releases. v4.0.10 4.0.10 (2022-01-13) Bug Fixes security: fix redos vulnerabilities (8f80657) v4.0.9 4.0.9 (2022-01-06) Bug Fixes retain line breaks...

dependabot[bot]

Bumps [jszip](https://github.com/Stuk/jszip) from 3.1.5 to 3.7.1. Changelog Sourced from jszip's changelog. v3.7.1 2021-08-05 Fix build of dist files. Note: this version ensures the changes from 3.7.0 are actually included in...

dependabot[bot]

Bumps [aurelia-path](https://github.com/aurelia/path) from 1.1.1 to 1.1.7. Release notes Sourced from aurelia-path's releases. 1.1.7 Fix a security issue related to prototype pollution fix: security issue gh closes #44 (7c4e235), closes #44...

dependabot[bot]

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.5 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [tar](https://github.com/npm/node-tar) from 2.2.1 to 2.2.2. Commits 523c5c7 2.2.2 7ecef07 Bump fstream to fix hardlink overwriting vulnerability 9fc84b9 Use {} for hardlink tracking instead of [] 15e59f1 Only track previously...

dependabot[bot]