dress-shop

dress-shop copied to clipboard

Bump async from 3.2.1 to 3.2.4 in /client

1

Bumps [async](https://github.com/caolan/async) from 3.2.1 to 3.2.4. Changelog Sourced from async's changelog. v3.2.4 Fix a bug in priorityQueue where it didn't wait for the result. (#1725) Fix a bug where unshiftAsync...

dependabot[bot]

Bump minimist from 1.2.5 to 1.2.6 in /server

1

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

Bump lodash-es from 4.17.15 to 4.17.21 in /client

1

Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.15 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Bump next from 11.1.0 to 12.1.0 in /client

1

Bumps [next](https://github.com/vercel/next.js) from 11.1.0 to 12.1.0. Release notes Sourced from next's releases. v12.1.0 Core Changes Relay Support in Rust Compiler: #33702 fix eslint link-passhref rule: #33857 update webpack: #33831 Flush...

dependabot[bot]

Bump ajv from 6.10.2 to 6.12.6 in /client

1

Bumps [ajv](https://github.com/ajv-validator/ajv) from 6.10.2 to 6.12.6. Release notes Sourced from ajv's releases. v6.12.6 Fix performance issue of "url" format. v6.12.5 Fix uri scheme validation (@​ChALkeR). Fix boolean schemas with strictKeywords...

dependabot[bot]

Bump node-fetch from 2.6.0 to 2.6.7 in /server

1

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.0 to 2.6.7. Release notes Sourced from node-fetch's releases. v2.6.7 Security patch release Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th...

dependabot[bot]

Bump nanoid from 3.1.25 to 3.2.0 in /client

1

Bumps [nanoid](https://github.com/ai/nanoid) from 3.1.25 to 3.2.0. Changelog Sourced from nanoid's changelog. Change Log This project adheres to Semantic Versioning. 3.2 Added --size and --alphabet arguments to binary (by Vitaly Baev)....

dependabot[bot]

Bump validator from 13.1.1 to 13.7.0 in /server

1

Bumps [validator](https://github.com/validatorjs/validator.js) from 13.1.1 to 13.7.0. Release notes Sourced from validator's releases. 13.7.0 13.7.0 New Features #1706 isISO4217, currency code validator @​jpaya17 Fixes and Enhancements #1647 isFQDN: add allow_wildcard option...

dependabot[bot]

Bump axios from 0.19.1 to 0.21.2 in /client

1

Bumps [axios](https://github.com/axios/axios) from 0.19.1 to 0.21.2. Release notes Sourced from axios's releases. v0.21.2 0.21.2 (September 4, 2021) Fixes and Functionality: Updating axios requests to be delayed by pre-emptive promise creation...

dependabot[bot]

Bump lodash from 4.17.15 to 4.17.21 in /client

1

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]