wechat4u

wechat4u copied to clipboard

Bumps [ajv](https://github.com/ajv-validator/ajv) from 6.9.2 to 6.12.6. Release notes Sourced from ajv's releases. v6.12.6 Fix performance issue of "url" format. v6.12.5 Fix uri scheme validation (@​ChALkeR). Fix boolean schemas with strictKeywords...

dependabot[bot]

Bumps [pathval](https://github.com/chaijs/pathval) from 1.1.0 to 1.1.1. Release notes Sourced from pathval's releases. v1.1.1 Fixes a security issue around prototype pollution. Commits db6c3e3 chore: v1.1.1 7859e0e Merge pull request #60 from...

dependabot[bot]

- init串行调用 - 在更新contact数据时同时缓存一份memberlist，避免太多请求导致1205错误

eslizn

Bumps [tar](https://github.com/npm/node-tar) from 4.4.8 to 4.4.19. Commits 9a6faa0 4.4.19 70ef812 drop dirCache for symlink on all platforms 3e35515 4.4.18 52b09e3 fix: prevent path escape using drive-relative paths bb93ba2 fix: reserve...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.13 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

如果已经不能用了，建议 archived 一下 repo

2

chendatony31

Bumps [axios](https://github.com/axios/axios) from 0.18.1 to 0.21.1. Release notes Sourced from axios's releases. v0.21.1 0.21.1 (December 21, 2020) Fixes and Functionality: Hotfix: Prevent SSRF (#3410) Protocol not parsed when setting proxy...

dependabot[bot]

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7. Commits c74c8af 1.3.7 024b8b5 update deps, add linting 032fbaf Use Object.create(null) to avoid default object property hazards 2da9039 1.3.6 cfea636 better git push script,...

dependabot[bot]

Bumps [bl](https://github.com/rvagg/bl) from 1.2.1 to 2.2.1. Release notes Sourced from bl's releases. v2.2.1 Fix unintialized memory access v2.2.0 Add indexOf docs #60 fix empty shallowSlice return #65 v2.1.2 use ES3...

dependabot[bot]

Bumps [acorn](https://github.com/acornjs/acorn) from 6.1.1 to 6.4.1. Commits 9a2e9b6 Mark version 6.4.1 90a9548 More rigorously check surrogate pairs in regexp validator df0cf1a Mark version 6.4.0 5303412 Also export Parser via Parser.acorn...

dependabot[bot]