cloudserver icon indicating copy to clipboard operation
cloudserver copied to clipboard

Bump async from 2.5.0 to 2.6.4

Open dependabot[bot] opened this issue 2 years ago • 20 comments

Bumps async from 2.5.0 to 2.6.4.

Changelog

Sourced from async's changelog.

v2.6.4

  • Fix potential prototype pollution exploit (#1828)

v2.6.3

  • Updated lodash to squelch a security warning (#1675)

v2.6.2

  • Updated lodash to squelch a security warning (#1620)

v2.6.1

  • Updated lodash to prevent npm audit warnings. (#1532, #1533)
  • Made async-es more optimized for webpack users (#1517)
  • Fixed a stack overflow with large collections and a synchronous iterator (#1514)
  • Various small fixes/chores (#1505, #1511, #1527, #1530)

v2.6.0

  • Added missing aliases for many methods. Previously, you could not (e.g.) require('async/find') or use async.anyLimit. (#1483)
  • Improved queue performance. (#1448, #1454)
  • Add missing sourcemap (#1452, #1453)
  • Various doc updates (#1448, #1471, #1483)
Commits
Maintainer changes

This version was pushed to npm by hargasinski, a new releaser for async since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.

dependabot[bot] avatar Apr 22 '22 08:04 dependabot[bot]

Hello dependabot[bot],

My role is to assist you with the merge of this pull request. Please type @bert-e help to get information on this process, or consult the user documentation.

Status report is not available.

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Apr 22 '22 08:04 bert-e

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Apr 22 '22 08:04 bert-e

Conflict

There is a conflict between your branch dependabot/npm_and_yarn/async-2.6.4 and the destination branch development/8.4.

Please resolve the conflict on the feature branch (dependabot/npm_and_yarn/async-2.6.4).

git fetch && \
git checkout origin/dependabot/npm_and_yarn/async-2.6.4 && \
git merge origin/development/8.4

Resolve merge conflicts and commit

git push origin HEAD:dependabot/npm_and_yarn/async-2.6.4

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar May 09 '22 15:05 bert-e

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar May 09 '22 15:05 bert-e

Conflict

There is a conflict between your branch dependabot/npm_and_yarn/async-2.6.4 and the destination branch development/8.5.

Please resolve the conflict on the feature branch (dependabot/npm_and_yarn/async-2.6.4).

git fetch && \
git checkout origin/dependabot/npm_and_yarn/async-2.6.4 && \
git merge origin/development/8.5

Resolve merge conflicts and commit

git push origin HEAD:dependabot/npm_and_yarn/async-2.6.4

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jun 10 '22 13:06 bert-e

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jun 10 '22 13:06 bert-e

Conflict

There is a conflict between your branch dependabot/npm_and_yarn/async-2.6.4 and the destination branch development/8.5.

Please resolve the conflict on the feature branch (dependabot/npm_and_yarn/async-2.6.4).

git fetch && \
git checkout origin/dependabot/npm_and_yarn/async-2.6.4 && \
git merge origin/development/8.5

Resolve merge conflicts and commit

git push origin HEAD:dependabot/npm_and_yarn/async-2.6.4

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jun 21 '22 07:06 bert-e

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jun 21 '22 07:06 bert-e

Conflict

There is a conflict between your branch dependabot/npm_and_yarn/async-2.6.4 and the destination branch development/8.5.

Please resolve the conflict on the feature branch (dependabot/npm_and_yarn/async-2.6.4).

git fetch && \
git checkout origin/dependabot/npm_and_yarn/async-2.6.4 && \
git merge origin/development/8.5

Resolve merge conflicts and commit

git push origin HEAD:dependabot/npm_and_yarn/async-2.6.4

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jul 06 '22 09:07 bert-e

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jul 06 '22 09:07 bert-e

Conflict

There is a conflict between your branch dependabot/npm_and_yarn/async-2.6.4 and the destination branch development/8.5.

Please resolve the conflict on the feature branch (dependabot/npm_and_yarn/async-2.6.4).

git fetch && \
git checkout origin/dependabot/npm_and_yarn/async-2.6.4 && \
git merge origin/development/8.5

Resolve merge conflicts and commit

git push origin HEAD:dependabot/npm_and_yarn/async-2.6.4

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jul 18 '22 11:07 bert-e

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jul 18 '22 11:07 bert-e

Conflict

There is a conflict between your branch dependabot/npm_and_yarn/async-2.6.4 and the destination branch development/8.5.

Please resolve the conflict on the feature branch (dependabot/npm_and_yarn/async-2.6.4).

git fetch && \
git checkout origin/dependabot/npm_and_yarn/async-2.6.4 && \
git merge origin/development/8.5

Resolve merge conflicts and commit

git push origin HEAD:dependabot/npm_and_yarn/async-2.6.4

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jul 19 '22 11:07 bert-e

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jul 19 '22 11:07 bert-e

Conflict

There is a conflict between your branch dependabot/npm_and_yarn/async-2.6.4 and the destination branch development/8.5.

Please resolve the conflict on the feature branch (dependabot/npm_and_yarn/async-2.6.4).

git fetch && \
git checkout origin/dependabot/npm_and_yarn/async-2.6.4 && \
git merge origin/development/8.5

Resolve merge conflicts and commit

git push origin HEAD:dependabot/npm_and_yarn/async-2.6.4

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jul 22 '22 14:07 bert-e

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jul 22 '22 14:07 bert-e

Conflict

There is a conflict between your branch dependabot/npm_and_yarn/async-2.6.4 and the destination branch development/8.5.

Please resolve the conflict on the feature branch (dependabot/npm_and_yarn/async-2.6.4).

git fetch && \
git checkout origin/dependabot/npm_and_yarn/async-2.6.4 && \
git merge origin/development/8.5

Resolve merge conflicts and commit

git push origin HEAD:dependabot/npm_and_yarn/async-2.6.4

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jul 22 '22 22:07 bert-e

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Jul 22 '22 22:07 bert-e

Conflict

There is a conflict between your branch dependabot/npm_and_yarn/async-2.6.4 and the destination branch development/8.5.

Please resolve the conflict on the feature branch (dependabot/npm_and_yarn/async-2.6.4).

git fetch && \
git checkout origin/dependabot/npm_and_yarn/async-2.6.4 && \
git merge origin/development/8.5

Resolve merge conflicts and commit

git push origin HEAD:dependabot/npm_and_yarn/async-2.6.4

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Aug 18 '22 00:08 bert-e

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Aug 18 '22 00:08 bert-e

Conflict

There is a conflict between your branch dependabot/npm_and_yarn/async-2.6.4 and the destination branch development/8.5.

Please resolve the conflict on the feature branch (dependabot/npm_and_yarn/async-2.6.4).

git fetch && \
git checkout origin/dependabot/npm_and_yarn/async-2.6.4 && \
git merge origin/development/8.5

Resolve merge conflicts and commit

git push origin HEAD:dependabot/npm_and_yarn/async-2.6.4

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Sep 29 '22 09:09 bert-e

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Sep 29 '22 09:09 bert-e

Conflict

There is a conflict between your branch dependabot/npm_and_yarn/async-2.6.4 and the destination branch development/8.5.

Please resolve the conflict on the feature branch (dependabot/npm_and_yarn/async-2.6.4).

git fetch && \
git checkout origin/dependabot/npm_and_yarn/async-2.6.4 && \
git merge origin/development/8.5

Resolve merge conflicts and commit

git push origin HEAD:dependabot/npm_and_yarn/async-2.6.4

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Oct 05 '22 10:10 bert-e

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Oct 05 '22 10:10 bert-e

Conflict

There is a conflict between your branch dependabot/npm_and_yarn/async-2.6.4 and the destination branch development/8.5.

Please resolve the conflict on the feature branch (dependabot/npm_and_yarn/async-2.6.4).

git fetch && \
git checkout origin/dependabot/npm_and_yarn/async-2.6.4 && \
git merge origin/development/8.5

Resolve merge conflicts and commit

git push origin HEAD:dependabot/npm_and_yarn/async-2.6.4

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Nov 03 '22 23:11 bert-e

Integration data created

I have created the integration data for the additional destination branches.

The following branches will NOT be impacted:

  • development/6.4
  • development/7.10
  • development/7.4
  • development/7.70
  • development/8.4

You can set option create_pull_requests if you need me to create integration pull requests in addition to integration branches, with:

@bert-e create_pull_requests

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Nov 03 '22 23:11 bert-e

Waiting for approval

The following approvals are needed before I can proceed with the merge:

  • the author

  • 2 peers

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Nov 03 '22 23:11 bert-e

Conflict

There is a conflict between your branch dependabot/npm_and_yarn/async-2.6.4 and the destination branch development/8.5.

Please resolve the conflict on the feature branch (dependabot/npm_and_yarn/async-2.6.4).

git fetch && \
git checkout origin/dependabot/npm_and_yarn/async-2.6.4 && \
git merge origin/development/8.5

Resolve merge conflicts and commit

git push origin HEAD:dependabot/npm_and_yarn/async-2.6.4

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Nov 12 '22 11:11 bert-e

History mismatch

Merge commit #36d7ec0b7b46346d88509222409a9e02b8f2a379 on the integration branch w/8.6/dependabot/npm_and_yarn/async-2.6.4 is merging a branch which is neither the current branch dependabot/npm_and_yarn/async-2.6.4 nor the development branch development/8.6.

It is likely due to a rebase of the branch dependabot/npm_and_yarn/async-2.6.4 and the merge is not possible until all related w/* branches are deleted or updated.

Please use the reset command to have me reinitialize these branches.

The following options are set: bypass_author_approval, bypass_jira_check

bert-e avatar Nov 12 '22 11:11 bert-e

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot[bot] avatar Nov 12 '22 12:11 dependabot[bot]