CorePlus

CorePlus copied to clipboard

Removes [xmldom](https://github.com/xmldom/xmldom). It's no longer used after updating ancestor dependencies [xmldom](https://github.com/xmldom/xmldom), [botbuilder](https://github.com/Microsoft/botbuilder-js), [botbuilder-ai](https://github.com/Microsoft/botbuilder-js), [botbuilder-azure](https://github.com/Microsoft/botbuilder-js), [botbuilder-core](https://github.com/Microsoft/botbuilder-js), [botbuilder-dialogs](https://github.com/Microsoft/botbuilder-js) and [botframework-connector](https://github.com/Microsoft/botbuilder-js). These dependencies need to be updated together. Removes `xmldom` Updates `botbuilder` from...

dependabot[bot]

Removes [xmldom](https://github.com/xmldom/xmldom). It's no longer used after updating ancestor dependencies [xmldom](https://github.com/xmldom/xmldom), [botbuilder](https://github.com/Microsoft/botbuilder-js), [botbuilder-ai](https://github.com/Microsoft/botbuilder-js), [botbuilder-azure](https://github.com/Microsoft/botbuilder-js), [botbuilder-core](https://github.com/Microsoft/botbuilder-js), [botbuilder-dialogs](https://github.com/Microsoft/botbuilder-js) and [botframework-connector](https://github.com/Microsoft/botbuilder-js). These dependencies need to be updated together. Removes `xmldom` Updates `botbuilder` from...

dependabot[bot]

Bumps [ansi-regex](https://github.com/chalk/ansi-regex) from 3.0.0 to 3.0.1. Commits f545bdb 3.0.1 c57d4c2 fix a few old XO issues for backport 419250f Fix potential ReDoS (#37) See full diff in compare view [![Dependabot...

dependabot[bot]

Bumps [moment](https://github.com/moment/moment) from 2.24.0 to 2.29.4. Changelog Sourced from moment's changelog. 2.29.4 Release Jul 6, 2022 #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex 2.29.3 Full changelog Release Apr 17, 2022...

dependabot[bot]

Bumps [moment](https://github.com/moment/moment) from 2.24.0 to 2.29.4. Changelog Sourced from moment's changelog. 2.29.4 Release Jul 6, 2022 #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex 2.29.3 Full changelog Release Apr 17, 2022...

dependabot[bot]

Bumps [async](https://github.com/caolan/async) from 2.6.3 to 2.6.4. Changelog Sourced from async's changelog. v2.6.4 Fix potential prototype pollution exploit (#1828) Commits c6bdaca Version 2.6.4 8870da9 Update built files 4df6754 update changelog 8f7f903...

dependabot[bot]

Bumps [async](https://github.com/caolan/async) from 2.6.3 to 2.6.4. Changelog Sourced from async's changelog. v2.6.4 Fix potential prototype pollution exploit (#1828) Commits c6bdaca Version 2.6.4 8870da9 Update built files 4df6754 update changelog 8f7f903...

dependabot[bot]

Bumps [cross-fetch](https://github.com/lquixada/cross-fetch) from 3.1.4 to 3.1.5. Release notes Sourced from cross-fetch's releases. v3.1.5 What's Changed chore: updated node-fetch version to 2.6.7 by @​dlafreniere in lquixada/cross-fetch#124 New Contributors @​dlafreniere made their...

dependabot[bot]

Bumps [cross-fetch](https://github.com/lquixada/cross-fetch) from 3.1.4 to 3.1.5. Release notes Sourced from cross-fetch's releases. v3.1.5 What's Changed chore: updated node-fetch version to 2.6.7 by @​dlafreniere in lquixada/cross-fetch#124 New Contributors @​dlafreniere made their...

dependabot[bot]

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]