lico

lico copied to clipboard

Bumps [github.com/rs/cors](https://github.com/rs/cors) from 1.10.1 to 1.11.0. Commits 4c32059 Normalize allowed request headers and store them in a sorted set (fixes #170)... 8d33ca4 Complete documentation; deprecate AllowOriginRequestFunc in favour of AllowOr......

dependabot[bot]

longsleep

Bumps [ws](https://github.com/websockets/ws) from 8.14.2 to 8.17.1. Release notes Sourced from ws's releases. 8.17.1 Bug fixes Fixed a DoS vulnerability (#2231). A request with a number of headers exceeding the[server.maxHeadersCount][] threshold...

dependabot[bot]

Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3. Commits 74b2db2 3.0.3 88f1429 update eslint. lint, fix unit tests. 415d660 Snyk js braces 6838727 (#40) 190510f fix tests, skip 1 test in test/braces.expand...

dependabot[bot]

When configuring the OAuth component with a redirect URI, instead of a redirect URL, the authentication fails with `invalid or missing redirect_uri`, which in the context of a redirect URI...

AliveDevil

Bumps [rollup](https://github.com/rollup/rollup) from 2.79.1 to 2.79.2. Changelog Sourced from rollup's changelog. rollup changelog 4.22.4 2024-09-21 Bug Fixes Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles...

dependabot[bot]

Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 4.5.2 to 4.5.5. Changelog Sourced from vite's changelog. 4.5.5 (2024-09-16) 4.5.4 (2024-09-16) fix: avoid DOM Clobbering gadget in getRelativeUrlFromDocument (#18115) (e812716), closes #18115 fix: backport #18112, fs...

dependabot[bot]

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.15.1 to 1.20.4. Release notes Sourced from github.com/prometheus/client_golang's releases. v1.20.4 [BUGFIX] histograms: Fix a possible data race when appending exemplars vs metrics gather. #1623 v1.20.3 [BUGFIX] histograms:...

dependabot[bot]

Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) from 1.8.0 to 1.9.0. Release notes Sourced from path-to-regexp's releases. Fix backtracking in 1.x Fixed Add backtrack protection to 1.x release (#320) 925ac8e Fix re.exec(&[#39](https://github.com/pillarjs/path-to-regexp/issues/39);/test/route&[#39](https://github.com/pillarjs/path-to-regexp/issues/39);) result (#267) 32a14b0...

dependabot[bot]

Bumps [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml) from 1.3.0 to 1.4.0. Release notes Sourced from sigs.k8s.io/yaml's releases. v1.4.0 Adds a goyaml.v2 subpackage containing a fork of gopkg.in/yaml.v2 at v2.4.0 Adds a goyaml.v3 subpackage containing a...

dependabot[bot]