dcpm
dcpm copied to clipboard
fix(deps): update dependency semver to v6.3.1 [security]
This PR contains the following updates:
Package | Change | Age | Adoption | Passing | Confidence |
---|---|---|---|---|---|
semver | 6.3.0 -> 6.3.1 |
GitHub Vulnerability Alerts
CVE-2022-25883
Versions of the package semver before 7.5.2 on the 7.x branch, before 6.3.1 on the 6.x branch, and all other versions before 5.7.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.
Release Notes
npm/node-semver (semver)
v6.3.1
Bug Fixes
-
928e56d
#591 better handling of whitespace (#591) (@lukekarrys, @joaomoreno, @nicolo-ribaudo)
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
- [ ] If you want to rebase/retry this PR, check this box
This PR has been generated by Mend Renovate. View repository job log here.