weather-react

weather-react copied to clipboard

build(deps): bump moment-timezone from 0.5.34 to 0.5.35

1

Bumps [moment-timezone](https://github.com/moment/moment-timezone) from 0.5.34 to 0.5.35. Changelog Sourced from moment-timezone's changelog. 0.5.35 2022-08-23 Fix command injection in data pipeline https://github.com/moment/moment-timezone/security/advisories/GHSA-56x4-j7p9-fcf9 Fix cleartext transmission of sensitive information https://github.com/moment/moment-timezone/security/advisories/GHSA-v78c-4p63-2j6c Thanks to the...

dependabot[bot]

build(deps): bump terser from 4.8.0 to 4.8.1

1

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) Commits See full diff in compare...

dependabot[bot]

build(deps): bump eventsource from 1.1.0 to 1.1.1

1

Bumps [eventsource](https://github.com/EventSource/eventsource) from 1.1.0 to 1.1.1. Changelog Sourced from eventsource's changelog. 1.1.1 Do not include authorization and cookie headers on redirect to different origin (#273 Espen Hovlandsdal) Commits aa7a408 1.1.1...

dependabot[bot]

Hi, I think a search bar should be there since there are so many good features inside your project but I think implementing a Search bar helps to find more...

arghya59

build(deps): bump json5 from 1.0.1 to 1.0.2

1

Bumps [json5](https://github.com/json5/json5) from 1.0.1 to 1.0.2. Release notes Sourced from json5's releases. v1.0.2 Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a...

dependabot[bot]

build(deps): bump json5 and react-scripts

1

Bumps [json5](https://github.com/json5/json5) to 2.2.3 and updates ancestor dependency [react-scripts](https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts). These dependencies need to be updated together. Updates `json5` from 1.0.1 to 2.2.3 Release notes Sourced from json5's releases. v2.2.3 Fix:...

dependabot[bot]

build(deps): bump express from 4.17.2 to 4.18.2

1

Bumps [express](https://github.com/expressjs/express) from 4.17.2 to 4.18.2. Release notes Sourced from express's releases. 4.18.2 Fix regression routing a large stack in a single route deps: [email protected] deps: [email protected] perf: remove unnecessary...

dependabot[bot]

build(deps): bump decode-uri-component from 0.2.0 to 0.2.2

1

Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. Release notes Sourced from decode-uri-component's releases. v0.2.2 Prevent overwriting previously decoded tokens 980e0bf https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2 v0.2.1 Switch to GitHub workflows 76abc93 Fix issue where decode...

dependabot[bot]

build(deps): bump qs from 6.5.2 to 6.5.3

1

Bumps [qs](https://github.com/ljharb/qs) from 6.5.2 to 6.5.3. Changelog Sourced from qs's changelog. 6.5.3 [Fix] parse: ignore __proto__ keys (#428) [Fix] utils.merge`: avoid a crash with a null target and a truthy...

dependabot[bot]

build(deps): bump loader-utils and react-scripts

1

Bumps [loader-utils](https://github.com/webpack/loader-utils) to 2.0.4 and updates ancestor dependency [react-scripts](https://github.com/facebook/create-react-app/tree/HEAD/packages/react-scripts). These dependencies need to be updated together. Updates `loader-utils` from 1.2.3 to 2.0.4 Release notes Sourced from loader-utils's releases. v2.0.4 2.0.4...

dependabot[bot]