vue-cool-select

vue-cool-select copied to clipboard

The dropdown list is not accessible with KB, so user cant choose country from the list -> H4

daren-k

build(deps): bump tmpl from 1.0.4 to 1.0.5

1

Bumps [tmpl](https://github.com/daaku/nodejs-tmpl) from 1.0.4 to 1.0.5. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

build(deps): bump tar from 4.4.11 to 4.4.19

1

Bumps [tar](https://github.com/npm/node-tar) from 4.4.11 to 4.4.19. Commits 9a6faa0 4.4.19 70ef812 drop dirCache for symlink on all platforms 3e35515 4.4.18 52b09e3 fix: prevent path escape using drive-relative paths bb93ba2 fix: reserve...

dependabot[bot]

build(deps): bump path-parse from 1.0.6 to 1.0.7

1

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

build(deps): [security] bump tar from 4.4.11 to 4.4.15

1

Bumps [tar](https://github.com/npm/node-tar) from 4.4.11 to 4.4.15. **This update includes security fixes.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization Impact...

dependabot-preview[bot]

build(deps-dev): bump @babel/preset-env from 7.6.0 to 7.14.9

1

Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.6.0 to 7.14.9. Release notes Sourced from @​babel/preset-env's releases. v7.14.9 (2021-08-01) Thanks @​SCLeoX for your first PR! :bug: Bug Fix babel-traverse #13596 Fix completion record for variable...

dependabot-preview[bot]

build(deps): [security] bump url-parse from 1.4.7 to 1.5.3

1

Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.4.7 to 1.5.3. **This update includes a security fix.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. Path reaversal in url-parse url-parse before 1.5.0 mishandles certain...

dependabot-preview[bot]

build(deps): [security] bump color-string from 1.5.3 to 1.6.0

1

Bumps [color-string](https://github.com/Qix-/color-string) from 1.5.3 to 1.6.0. **This update includes a security fix.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. Regular Expression Denial of Service (ReDOS) A Regular Expression...

dependabot-preview[bot]

Upgrade to GitHub-native Dependabot

2

_Dependabot Preview will be shut down on August 3rd, 2021. In order to keep getting Dependabot updates, please merge this PR and migrate to GitHub-native Dependabot before then._ Dependabot has...

dependabot-preview[bot]

build(deps): [security] bump ws from 5.2.2 to 5.2.3

1

Bumps [ws](https://github.com/websockets/ws) from 5.2.2 to 5.2.3. **This update includes a security fix.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. ReDoS in Sec-Websocket-Protocol header Impact A specially crafted value...

dependabot-preview[bot]