dev-desks
dev-desks copied to clipboard
Bumps [got](https://github.com/sindresorhus/got) from 11.8.1 to 11.8.5. Release notes Sourced from got's releases. v11.8.5 Backport security fix https://github.com/sindresorhus/got/commit/861ccd9ac2237df762a9e2beed7edd88c60782dc CVE-2022-33987 https://github.com/sindresorhus/got/compare/v11.8.4...v11.8.5 v11.8.3 Bump cacheable-request dependency (#1921) 9463bb6 Fix HTTPError missing .code property...
Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...
Bumps [next](https://github.com/vercel/next.js) from 10.0.7 to 12.1.0. Release notes Sourced from next's releases. v12.1.0 Core Changes Relay Support in Rust Compiler: #33702 fix eslint link-passhref rule: #33857 update webpack: #33831 Flush...
Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.0 to 2.6.1. Release notes Sourced from node-fetch's releases. v2.6.1 This is an important security release. It is strongly recommended to update as soon as possible. See...
Bumps [nanoid](https://github.com/ai/nanoid) from 3.1.20 to 3.2.0. Changelog Sourced from nanoid's changelog. Change Log This project adheres to Semantic Versioning. 3.2 Added --size and --alphabet arguments to binary (by Vitaly Baev)....
Bumps [@auth0/nextjs-auth0](https://github.com/auth0/nextjs-auth0) from 1.0.0 to 1.6.2. Release notes Sourced from @auth0/nextjs-auth0's releases. v1.6.2 Fixed Fix issue where error reporting wrong instanceof #543 (adamjmcgrath) Security Enforce configured host on user supplied...
Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [normalize-url](https://github.com/sindresorhus/normalize-url) from 4.5.0 to 4.5.1. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [postcss](https://github.com/postcss/postcss) from 8.2.1 to 8.2.10. Release notes Sourced from postcss's releases. 8.2.10 Fixed ReDoS vulnerabilities in source map parsing. Fixed webpack 5 support (by @barak007). Fixed docs (by @roelandmoors)....
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...