bungke

bungke copied to clipboard

Bumps [guava](https://github.com/google/guava) from 27.1-jre to 29.0-jre. Release notes Sourced from guava's releases. 29.0 Maven <dependency> <groupId>com.google.guava</groupId> <artifactId>guava</artifactId> <version>29.0-jre</version> <!-- or, for Android: --> <version>29.0-android</version> </dependency> Javadoc 29.0-jre 29.0-android JDiff 29.0-jre...

dependabot[bot]

Bumps [y18n](https://github.com/yargs/y18n) from 4.0.0 to 4.0.1. Changelog Sourced from y18n's changelog. Change Log All notable changes to this project will be documented in this file. See standard-version for commit guidelines....

dependabot[bot]

Bumps [elliptic](https://github.com/indutny/elliptic) from 6.4.1 to 6.5.4. Commits 43ac7f2 6.5.4 f4bc72b package: bump deps 441b742 ec: validate that a point before deriving keys e71b2d9 lib: relint using eslint 8421a01 build(deps): bump...

dependabot[bot]

Bumps [axios](https://github.com/axios/axios) from 0.18.0 to 0.21.1. Release notes Sourced from axios's releases. v0.21.1 0.21.1 (December 21, 2020) Fixes and Functionality: Hotfix: Prevent SSRF (#3410) Protocol not parsed when setting proxy...

dependabot[bot]

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.8. Commits a2c5da8 1.3.8 af5c6bb Do not use Object.create(null) 8b648a1 don't test where our devdeps don't even work c74c8af 1.3.7 024b8b5 update deps, add linting...

dependabot[bot]

Bumps [http-proxy](https://github.com/http-party/node-http-proxy) from 1.17.0 to 1.18.1. Changelog Sourced from http-proxy's changelog. v1.18.1 - 2020-05-17 Merged Skip sending the proxyReq event when the expect header is present [#1447](https://github.com/http-party/node-http-proxy/issues/1447) Remove node6 support,...

dependabot[bot]

Bumps [websocket-extensions](https://github.com/faye/websocket-extensions-node) from 0.1.3 to 0.1.4. Changelog Sourced from websocket-extensions's changelog. 0.1.4 / 2020-06-02 Remove a ReDoS vulnerability in the header parser (CVE-2020-7662, reported by Robert McLaughlin) Change license from...

dependabot[bot]

Bumps [lodash.defaultsdeep](https://github.com/lodash/lodash) from 4.6.0 to 4.6.1. Commits - [`ddf9354`](https://github.com/lodash/lodash/commit/ddf9354d26f55ac4e8402b71770aaeac8ac6f093) Bump to v4.6.1. - [`5f58b65`](https://github.com/lodash/lodash/commit/5f58b65c04716a4a7e92d6778af74869777f8876) Rebuild lodash and docs. - [`1ec20c5`](https://github.com/lodash/lodash/commit/1ec20c5281fd4a83166ac526007c1f58acb0689d) Use `propertyIsEnumerable` var. - [`3421fab`](https://github.com/lodash/lodash/commit/3421fab58a789137988e86f9dbd9a0707798c7a6) Update lodash dev dep. -...

dependabot[bot]

Bumps [webpack-bundle-analyzer](https://github.com/webpack-contrib/webpack-bundle-analyzer) from 3.1.0 to 3.6.0. Changelog *Sourced from [webpack-bundle-analyzer's changelog](https://github.com/webpack-contrib/webpack-bundle-analyzer/blob/master/CHANGELOG.md).* > ## 3.6.0 > > * **Improvement** > * Support webpack builds where `output.globalObject` is set to `'self'` ([#323](https://github-redirect.dependabot.com/webpack-contrib/webpack-bundle-analyzer/pull/323)...

dependabot[bot]

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. Commits - [`754f0c2`](https://github.com/jonschlinkert/mixin-deep/commit/754f0c20e1bc13ea5a21a64fbc7d6ba5f7b359b9) 1.3.2 - [`90ee1fa`](https://github.com/jonschlinkert/mixin-deep/commit/90ee1fab375fccfd9b926df718243339b4976d50) ensure keys are valid when mixing in values - See full diff in [compare view](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2) Maintainer changes This...

dependabot[bot]