libplanet-explorer-frontend
libplanet-explorer-frontend copied to clipboard
Bump undici from 5.12.0 to 5.19.1
Bumps undici from 5.12.0 to 5.19.1.
Release notes
Sourced from undici's releases.
v5.19.1
⚠️ Security Release ⚠️
- Regular Expression Denial of Service in Headers with CVE-2023-24807
- CRLF Injection in Nodejs ‘undici’ via host with CVE-2023-23936
This release is part of the Node.js security release train: https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/
v5.19.0
What's Changed
- fix(fetch): raise AbortSignal max event listeners by
@KhafraDevin nodejs/undici#1910- fix: content-disposition header parsing by
@climba03003in nodejs/undici#1911- fix: remove test by
@KhafraDevin nodejs/undici#1916- feat: add Headers.prototype.getSetCookie by
@KhafraDevin nodejs/undici#1915- fix(headers): clone getSetCookie list & add getSetCookie type by
@KhafraDevin nodejs/undici#1917- doc(mock): update out-of-date reply documentation by
@p9fin nodejs/undici#1913- fix(types): add missing keepAlive params by
@SkeLLLain nodejs/undici#1918- Make the fetch() abort test pass locally, on Linux and Mac, Node 18/19. by
@mcollinain nodejs/undici#1927New Contributors
@climba03003made their first contribution in nodejs/undici#1911@p9fmade their first contribution in nodejs/undici#1913Full Changelog: https://github.com/nodejs/undici/compare/v5.18.0...v5.19.0
v5.18.0
What's Changed
- Add ability to set TCP keepalive by
@xconvergein nodejs/undici#1904- use faster timers by
@ronagin nodejs/undici#1908- fix: ensure header value is a string by
@ronagin nodejs/undici#1899Full Changelog: https://github.com/nodejs/undici/compare/v5.17.1...v5.18.0
v5.17.1
What's Changed
- fix: bad buffer slice (https://github.com/nodejs/undici/commit/d2be675575512794dcd41b9683b209fc15368154)
Full Changelog: https://github.com/nodejs/undici/compare/v5.17.0...v5.17.1
v5.17.0
What's Changed
- fix(wpts): Blob is a global getter in >=v19.x.x by
@KhafraDevin nodejs/undici#1880- doc: fix anchor links dispatcher.stream by
@RafaelGSSin nodejs/undici#1881- wpt: make runner more resilient by
@KhafraDevin nodejs/undici#1884- Make test pass in v19.x by
@mcollinain nodejs/undici#1879- Correct the type of DispatchOptions["headers"] by
@pan93412in nodejs/undici#1896- perf(content-type parser): faster string collector by
@KhafraDevin nodejs/undici#1894- feat: expose content-type parser by
@KhafraDevin nodejs/undici#1895- fix(types): Update DispatchOptions type for missing "blocking" by
@xconvergein nodejs/undici#1889
... (truncated)
Commits
984d53bBumped v5.19.16c32c0flint fixesf2324e5Merge pull request from GHSA-r6ch-mqf9-qc9wa2eff05Merge pull request from GHSA-5r9g-qh6m-jxfff5c89e5Bumped v5.19.0f7c6c6aMake the fetch() abort test pass locally, on Linux and Mac, Node 18 and 19 (#...aebb232fix(types): add missing keepAlive params (#1918)e155c6ddoc(mock): update out-of-date reply documentation (#1913)87fa734fix(headers): clone getSetCookie list & add getSetCookie type (#1917)ba5ef44feat: add Headers.prototype.getSetCookie (#1915)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
Deploying with
Cloudflare Pages
| Latest commit: |
9472b06
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://2b05e9a8.libplanet-explorer.pages.dev |
| Branch Preview URL: | https://dependabot-npm-and-yarn-undi.libplanet-explorer.pages.dev |
This PR has 0 quantified lines of changes. In general, a change size of upto 200 lines is ideal for the best PR experience!
Quantification details
Label : No Changes
Size : +0 -0
Percentile : 0%
Total files changed: 1
Change summary by file extension:
.lock : +0 -0
Change counts above are quantified counts, based on the PullRequestQuantifier customizations.
Why proper sizing of changes matters
Optimal pull request sizes drive a better predictable PR flow as they strike a balance between between PR complexity and PR review overhead. PRs within the optimal size (typical small, or medium sized PRs) mean:
- Fast and predictable releases to production:
- Optimal size changes are more likely to be reviewed faster with fewer iterations.
- Similarity in low PR complexity drives similar review times.
- Review quality is likely higher as complexity is lower:
- Bugs are more likely to be detected.
- Code inconsistencies are more likely to be detected.
- Knowledge sharing is improved within the participants:
- Small portions can be assimilated better.
- Better engineering practices are exercised:
- Solving big problems by dividing them in well contained, smaller problems.
- Exercising separation of concerns within the code changes.
What can I do to optimize my changes
- Use the PullRequestQuantifier to quantify your PR accurately
- Create a context profile for your repo using the context generator
- Exclude files that are not necessary to be reviewed or do not increase the review complexity. Example: Autogenerated code, docs, project IDE setting files, binaries, etc. Check out the
Excludedsection from yourprquantifier.yamlcontext profile. - Understand your typical change complexity, drive towards the desired complexity by adjusting the label mapping in your
prquantifier.yamlcontext profile. - Only use the labels that matter to you, see context specification to customize your
prquantifier.yamlcontext profile.
- Change your engineering behaviors
- For PRs that fall outside of the desired spectrum, review the details and check if:
- Your PR could be split in smaller, self-contained PRs instead
- Your PR only solves one particular issue. (For example, don't refactor and code new features in the same PR).
- For PRs that fall outside of the desired spectrum, review the details and check if:
How to interpret the change counts in git diff output
- One line was added:
+1 -0 - One line was deleted:
+0 -1 - One line was modified:
+1 -1(git diff doesn't know about modified, it will interpret that line like one addition plus one deletion) - Change percentiles: Change characteristics (addition, deletion, modification) of this PR in relation to all other PRs within the repository.
Was this comment helpful? :thumbsup: :ok_hand: :thumbsdown: (Email) Customize PullRequestQuantifier for this repository.
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.