remit

remit copied to clipboard

Bumps [mocha](https://github.com/mochajs/mocha) from 8.3.0 to 9.0.3. Release notes Sourced from mocha's releases. v9.0.3 9.0.3 / 2021-07-25 :bug: Fixes #4702: Error rethrow from cwd-relative path while loading .mocharc.js (@​kirill-golovan) #4688: Usage...

dependabot[bot]

Bumps [generic-pool](https://github.com/coopernurse/node-pool) from 3.7.2 to 3.8.2. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [addressable](https://github.com/sporkmonger/addressable) from 2.5.2 to 2.8.0. Changelog Sourced from addressable's changelog. Addressable 2.8.0 fixes ReDoS vulnerability in Addressable::Template#match no longer replaces + with spaces in queries for non-http(s) schemes fixed...

dependabot[bot]

Bumps [coveralls](https://github.com/nickmerwin/node-coveralls) from 3.1.0 to 3.1.1. Release notes Sourced from coveralls's releases. Maintenance / Security updates swapped exec for execFile. Credit: Adar Zandberg from the CxSCA AppSec team at Checkmarx....

dependabot[bot]

Bumps [glob-parent](https://github.com/gulpjs/glob-parent) from 5.1.1 to 5.1.2. Release notes Sourced from glob-parent's releases. v5.1.2 Bug Fixes eliminate ReDoS (#36) (f923116) Changelog Sourced from glob-parent's changelog. 5.1.2 (2021-03-06) Bug Fixes eliminate ReDoS...

dependabot[bot]

Bumps [amqplib](https://github.com/squaremo/amqp.node) from 0.7.0 to 0.8.0. Release notes Sourced from amqplib's releases. v0.8.0 ⚠️ This release drops support for NodeJS < v10 :warning:. This version of amqplib still works with...

dependabot[bot]

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.11.1 to 1.11.4. Release notes Sourced from nokogiri's releases. 1.11.4 / 2021-05-14 Security [CRuby] Vendored libxml2 upgraded to v2.9.12 which addresses: CVE-2019-20388 CVE-2020-24977 CVE-2021-3517 CVE-2021-3518 CVE-2021-3537 CVE-2021-3541...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.19 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Bumps [serialize-error](https://github.com/sindresorhus/serialize-error) from 8.0.1 to 8.1.0. Release notes Sourced from serialize-error's releases. v8.1.0 Add maxDepth option (#43) f15af7d https://github.com/sindresorhus/serialize-error/compare/v8.0.1...v8.1.0 Commits 5a318e5 8.1.0 f15af7d Add maxDepth option (#43) See full diff...

dependabot[bot]

Bumps [chai](https://github.com/chaijs/chai) from 4.3.0 to 4.3.4. Release notes Sourced from chai's releases. v4.3.4 This fixes broken inspect behavior with bigints (#1321) (#1383) thanks @​vapier 4.3.3 / 2021-03-03 This reintroduces Assertion...

dependabot[bot]