react-study

react-study copied to clipboard

Bump immer from 9.0.5 to 9.0.6

1

Bumps [immer](https://github.com/immerjs/immer) from 9.0.5 to 9.0.6. Release notes Sourced from immer's releases. v9.0.6 9.0.6 (2021-08-31) Bug Fixes security: Follow up on CVE-2020-28477 where path: [["__proto__"], "x"] could still pollute the...

dependabot[bot]

Bump tar from 4.4.8 to 4.4.19

1

Bumps [tar](https://github.com/npm/node-tar) from 4.4.8 to 4.4.19. Commits 9a6faa0 4.4.19 70ef812 drop dirCache for symlink on all platforms 3e35515 4.4.18 52b09e3 fix: prevent path escape using drive-relative paths bb93ba2 fix: reserve...

dependabot[bot]

Bump ua-parser-js from 0.7.17 to 0.7.31

1

Bumps [ua-parser-js](https://github.com/faisalman/ua-parser-js) from 0.7.17 to 0.7.31. Commits 97f3368 Bump version 0.7.31 b86860e Merge pull request #546 from hansott/master 157af1e Merge pull request #547 from sunny-mwx/patch-1 b4cfe1b Merge pull request #535...

dependabot[bot]

Bump follow-redirects from 1.5.5 to 1.14.8

1

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.5.5 to 1.14.8. Commits 3d81dc3 Release version 1.14.8 of the npm package. 62e546a Drop confidential headers across schemes. 2ede36d Release version 1.14.7 of the npm package. 8b347cb...

dependabot[bot]

Bump url-parse from 1.4.3 to 1.5.10

1

Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.4.3 to 1.5.10. Commits 8cd4c6c 1.5.10 ce7a01f [fix] Improve handling of empty port 0071490 [doc] Update JSDoc comment a7044e3 [minor] Use more descriptive variable name d547792 [security]...

dependabot[bot]

Bump lodash-es from 4.17.11 to 4.17.21

1

Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.11 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Bump cross-fetch from 3.0.3 to 3.1.5

1

Bumps [cross-fetch](https://github.com/lquixada/cross-fetch) from 3.0.3 to 3.1.5. Release notes Sourced from cross-fetch's releases. v3.1.5 What's Changed chore: updated node-fetch version to 2.6.7 by @​dlafreniere in lquixada/cross-fetch#124 New Contributors @​dlafreniere made their...

dependabot[bot]

Bump urijs from 1.19.1 to 1.19.11

1

Bumps [urijs](https://github.com/medialize/URI.js) from 1.19.1 to 1.19.11. Release notes Sourced from urijs's releases. 1.19.11 (April 3rd 2022) SECURITY fixing URI.parse() handle excessive slashes in scheme-relative URLs - disclosed by zeyu2001 via...

dependabot[bot]

Bump moment from 2.24.0 to 2.29.4

1

Bumps [moment](https://github.com/moment/moment) from 2.24.0 to 2.29.4. Changelog Sourced from moment's changelog. 2.29.4 Release Jul 6, 2022 #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex 2.29.3 Full changelog Release Apr 17, 2022...

dependabot[bot]

Bump css-what from 2.1.0 to 2.1.3

1

Bumps [css-what](https://github.com/fb55/css-what) from 2.1.0 to 2.1.3. Commits 2db00ca 2.1.3 dc51092 fix(css-selectors): extend regex to include superscript in range, fix #27 (#28) a5f1991 Test on node LTS b2a2117 2.1.2 e9ef3f1 Run...

dependabot[bot]