lico

lico copied to clipboard

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.15.1 to 1.19.1. Release notes Sourced from github.com/prometheus/client_golang's releases. v1.19.1 What's Changed Security patches for golang.org/x/sys and google.golang.org/protobuf New Contributors @​lukasauk made their first contribution in prometheus/client_golang#1494...

dependabot[bot]

Bumps google.golang.org/protobuf from 1.30.0 to 1.33.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands...

dependabot[bot]

Bumps [tar](https://github.com/isaacs/node-tar) from 6.1.11 to 6.2.1. Release notes Sourced from tar's releases. v6.1.13 6.1.13 (2022-12-07) Dependencies cc4e0dd #343 bump minipass from 3.3.6 to 4.0.0 v6.1.12 6.1.12 (2022-10-31) Bug Fixes 57493ee...

dependabot[bot]

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 4.5.2 to 4.5.3. Changelog Sourced from vite's changelog. 4.5.3 (2024-03-24) fix: fs.deny with globs with directories (#16250) (96a7f3a), closes #16250 Commits aac695e release: v4.5.3 96a7f3a fix: fs.deny...

dependabot[bot]

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.4 to 1.15.6. Commits 35a517c Release version 1.15.6 of the npm package. c4f847f Drop Proxy-Authorization across hosts. 8526b4a Use GitHub for disclosure. b1677ce Release version 1.15.5 of...

dependabot[bot]

Bumps [axios](https://github.com/axios/axios) from 0.22.0 to 0.28.0. Release notes Sourced from axios's releases. Release v0.28.0 Release notes: Bug Fixes fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091) Backports from...

dependabot[bot]

Bump github.com/spf13/cobra from 1.7.0 to 1.8.0

1

Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.7.0 to 1.8.0. Release notes Sourced from github.com/spf13/cobra's releases. v1.8.0 ✨ Features Support usage as plugin for tools like kubectl by @​nirs in spf13/cobra#2018 - this means...

dependabot[bot]

Bumps [@adobe/css-tools](https://github.com/adobe/css-tools) from 4.3.1 to 4.3.2. Changelog Sourced from @​adobe/css-tools's changelog. 4.3.2 / 2023-11-28 Fix redos vulnerability with specific crafted css string - CVE-2023-48631 Fix Problem parsing with :is() and...

dependabot[bot]

Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.0.4 to 3.1.2. Commits 699c459 3.1.2 2f2b5ff fix: trim pattern 25d7c0d 3.1.1 55dda29 fix: treat nocase:true as always having magic 5e1fb8d 3.1.0 f8145c5 Add 'allowWindowsEscape' option 570e8b1...

dependabot[bot]

Adding implicit scopes broken for clients requiring consent

1

I've been trying to implicitly add the `LibgreGraph.UUID` scope (to always get the `lg.uuid` claim added to tokens and userinfo) to our client configuration. But it breaks as soon as...

rhafer