idyll-studio

idyll-studio copied to clipboard

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) Commits See full diff in compare...

dependabot[bot]

Bumps [shell-quote](https://github.com/substack/node-shell-quote) from 1.7.2 to 1.7.3. Changelog Sourced from shell-quote's changelog. 1.7.3 Fix a security issue where the regex for windows drive letters allowed some shell meta-characters to escape the...

dependabot[bot]

Bumps [electron](https://github.com/electron/electron) from 11.5.0 to 15.5.5. Release notes Sourced from electron's releases. electron v15.5.5 Release Notes for v15.5.5 Other Changes Backported fix for CVE-2022-1482. #34040 Backported fix for CVE-2022-1483. #34009...

dependabot[bot]

Bumps [npm](https://github.com/npm/cli) from 7.24.2 to 8.11.0. Release notes Sourced from npm's releases. libnpmhook: v8.0.3 8.0.3 (2022-04-06) Bug Fixes replace deprecated String.prototype.substr() (#4667) (e3da5df) update readme badges (#4658) (2829cb2) Dependencies @​npmcli/template-oss@​3.2.1...

dependabot[bot]

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.1 to 2.6.7. Release notes Sourced from node-fetch's releases. v2.6.7 Security patch release Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th...

dependabot[bot]

Bumps [plist](https://github.com/TooTallNate/node-plist) from 3.0.1 to 3.0.5. Changelog Sourced from plist's changelog. 3.0.5 / 2022-03-23 [96e2303d05] Prototype Pollution using .parse() #114 (mario-canva) update browserify from 16 to 17 3.0.4 / 2021-08-27...

dependabot[bot]

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.7 to 1.14.8. Commits 3d81dc3 Release version 1.14.8 of the npm package. 62e546a Drop confidential headers across schemes. See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)...

dependabot[bot]

Bumps [cached-path-relative](https://github.com/ashaffer/cached-path-relative) from 1.0.2 to 1.1.0. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Nice to have: The loading screen should make available "recently opened" posts, to facilitate quickly re-opening projects you've worked on.

mathisonian