material-vtuber-button

material-vtuber-button copied to clipboard

build(deps): bump terser from 4.8.0 to 4.8.1

1

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) Commits See full diff in compare...

dependabot[bot]

build(deps-dev): bump axios from 0.21.1 to 0.21.2

1

Bumps [axios](https://github.com/axios/axios) from 0.21.1 to 0.21.2. Release notes Sourced from axios's releases. v0.21.2 0.21.2 (September 4, 2021) Fixes and Functionality: Updating axios requests to be delayed by pre-emptive promise creation...

dependabot[bot]

build(deps): bump node-fetch from 2.6.1 to 2.6.7

1

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.1 to 2.6.7. Release notes Sourced from node-fetch's releases. v2.6.7 Security patch release Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th...

dependabot[bot]

build(deps): bump vuetify from 2.3.0 to 2.6.10

1

Bumps [vuetify](https://github.com/vuetifyjs/vuetify/tree/HEAD/packages/vuetify) from 2.3.0 to 2.6.10. Release notes Sourced from vuetify's releases. v2.6.10 :wrench: Bug Fixes VCalendar: prevent XSS from eventName function (ade1434), closes #15757 VDialog: don't try to focus...

dependabot[bot]

build(deps): bump jszip from 3.7.1 to 3.10.1

1

Bumps [jszip](https://github.com/Stuk/jszip) from 3.7.1 to 3.10.1. Changelog Sourced from jszip's changelog. v3.10.1 2022-08-02 Add sponsorship files. If you appreciate the time spent maintaining JSZip then I would really appreciate your...

dependabot[bot]

build(deps): bump ua-parser-js from 0.7.28 to 0.7.33

1

Bumps [ua-parser-js](https://github.com/faisalman/ua-parser-js) from 0.7.28 to 0.7.33. Changelog Sourced from ua-parser-js's changelog. Version 0.7.33 / 1.0.33 Add new browser : Cobalt Identify Macintosh as an Apple device Fix ReDoS vulnerability Version...

dependabot[bot]

build(deps): bump express from 4.17.1 to 4.18.2

1

Bumps [express](https://github.com/expressjs/express) from 4.17.1 to 4.18.2. Release notes Sourced from express's releases. 4.18.2 Fix regression routing a large stack in a single route deps: [email protected] deps: [email protected] perf: remove unnecessary...

dependabot[bot]

build(deps): bump decode-uri-component from 0.2.0 to 0.2.2

1

Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. Release notes Sourced from decode-uri-component's releases. v0.2.2 Prevent overwriting previously decoded tokens 980e0bf https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2 v0.2.1 Switch to GitHub workflows 76abc93 Fix issue where decode...

dependabot[bot]

build(deps): bump elliptic from 6.5.7 to 6.6.0

1

Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.7 to 6.6.0. Commits b8a7edd 6.6.0 34c8534 fix: signature verification due to leading zeros See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any...

dependabot[bot]

build(deps): bump nuxt from 2.14.3 to 3.12.4

1

Bumps [nuxt](https://github.com/nuxt/nuxt/tree/HEAD/packages/nuxt) from 2.14.3 to 3.12.4. Release notes Sourced from nuxt's releases. v3.12.4 3.12.4 is the next regularly scheduled patch release. 👉 Changelog compare changes 🔥 Performance vite: Start warmups...

dependabot[bot]