World-Cleanup-Day

World-Cleanup-Day copied to clipboard

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.5 to 4.17.19. Release notes Sourced from lodash's releases. 4.17.16 Commits d7fbc52 Bump to v4.17.19 2e1c0f2 Add npm-package 1b6c282 Bump to v4.17.18 a370ac8 Bump to v4.17.17 1144918...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.4 to 4.17.19. Release notes Sourced from lodash's releases. 4.17.16 Commits d7fbc52 Bump to v4.17.19 2e1c0f2 Add npm-package 1b6c282 Bump to v4.17.18 a370ac8 Bump to v4.17.17 1144918...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.5 to 4.17.19. Release notes Sourced from lodash's releases. 4.17.16 Commits d7fbc52 Bump to v4.17.19 2e1c0f2 Add npm-package 1b6c282 Bump to v4.17.18 a370ac8 Bump to v4.17.17 1144918...

dependabot[bot]

Bumps [npm](https://github.com/npm/cli) from 5.8.0 to 6.14.6. Release notes Sourced from npm's releases. v6.14.6 6.14.6 (2020-07-07) BUG FIXES a9857b8f6 chore: remove auth info from logs (@claudiahdz) b7ad77598 #1416 fix: wrong npm...

dependabot[bot]

Bumps [websocket-extensions](https://github.com/faye/websocket-extensions-node) from 0.1.1 to 0.1.4. Changelog Sourced from websocket-extensions's changelog. 0.1.4 / 2020-06-02 Remove a ReDoS vulnerability in the header parser (CVE-2020-7662, reported by Robert McLaughlin) Change license from...

dependabot[bot]

Bumps [excon](https://github.com/excon/excon) from 0.62.0 to 0.71.0. Changelog *Sourced from [excon's changelog](https://github.com/excon/excon/blob/master/changelog.txt).* > 0.71.0 2019-12-12 > ================= > > fix for leftover data with interrupted persistent connections > > 0.70.0 2019-12-02...

dependabot[bot]

Bumps [tar](https://github.com/npm/node-tar) from 2.2.1 to 2.2.2. Commits - [`523c5c7`](https://github.com/npm/node-tar/commit/523c5c7fef48b10811fccd12b42803c61b6aead8) 2.2.2 - [`7ecef07`](https://github.com/npm/node-tar/commit/7ecef07da6a9e72cc0c4d0c9c6a8e85b6b52395d) Bump fstream to fix hardlink overwriting vulnerability - [`9fc84b9`](https://github.com/npm/node-tar/commit/9fc84b9c596c3589d4c1ab050843de0eafb002e8) Use {} for hardlink tracking instead of [] -...

dependabot[bot]

web-app: user listing has a bunch of broken facebook avatars

2

So only the text fallback is displayed. It boils down to the fact, that the urls stored for them are transient and now they return "URL signature expired". Example (shown...

lynxlynxlynx

The warning we received was due to this CVE: https://github.com/hapijs/cryptiles/issues/34 However we do not use randomDigits, so this is not important.

lynxlynxlynx

(App)(Events)Selecting trashpoints for event

3

1. User creates event and selects trashpoints to be cleaned 2. Will the trashpoints be locked for others, so they cannot be selected to another event?

kadry55