consent-management-platform
consent-management-platform copied to clipboard
chore(deps): bump the npm_and_yarn group across 1 directories with 2 updates
Bumps the npm_and_yarn group with 2 updates in the /. directory: axios and semver.
Updates axios
from 1.6.3 to 1.6.4
Release notes
Sourced from axios's releases.
Release v1.6.4
Release notes:
Bug Fixes
- security: fixed formToJSON prototype pollution vulnerability; (#6167) (3c0c11c)
- security: fixed security vulnerability in follow-redirects (#6163) (75af1cd)
Contributors to this release
Changelog
Sourced from axios's changelog.
1.6.4 (2024-01-03)
Bug Fixes
- security: fixed formToJSON prototype pollution vulnerability; (#6167) (3c0c11c)
- security: fixed security vulnerability in follow-redirects (#6163) (75af1cd)
Contributors to this release
Commits
8790b8e
chore(release): v1.6.4 (#6173)0ad520d
chore(ci): fix notify action; (#6172)3c0c11c
fix(security): fixed formToJSON prototype pollution vulnerability; (#6167)75af1cd
fix(security): fixed security vulnerability in follow-redirects (#6163)90864b3
docs: update logos1542719
docs: updated headline sponsors- See full diff in compare view
Updates semver
from 5.7.1 to 5.7.2
Release notes
Sourced from semver's releases.
v5.7.2
5.7.2 (2023-07-10)
Bug Fixes
2f8fd41
#585 better handling of whitespace (#585) (@joaomoreno
,@lukekarrys
)
Changelog
Sourced from semver's changelog.
5.7.2 (2023-07-10)
Bug Fixes
2f8fd41
#585 better handling of whitespace (#585) (@joaomoreno
,@lukekarrys
)5.7
- Add
minVersion
method5.6
- Move boolean
loose
param to an options object, with backwards-compatibility protection.- Add ability to opt out of special prerelease version handling with the
includePrerelease
option flag.5.5
- Add version coercion capabilities
5.4
- Add intersection checking
5.3
- Add
minSatisfying
method5.2
- Add
prerelease(v)
that returns prerelease components5.1
- Add Backus-Naur for ranges
- Remove excessively cute inspection methods
5.0
- Remove AMD/Browserified build artifacts
- Fix ltr and gtr when using the
*
range- Fix for range
*
with a prerelease identifier
Commits
Maintainer changes
This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebase
will rebase this PR -
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it -
@dependabot merge
will merge this PR after your CI passes on it -
@dependabot squash and merge
will squash and merge this PR after your CI passes on it -
@dependabot cancel merge
will cancel a previously requested merge and block automerging -
@dependabot reopen
will reopen this PR if it is closed -
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency -
@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.