close-pull-request

close-pull-request copied to clipboard

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

Bump json5 from 2.2.0 to 2.2.3

1

Bumps [json5](https://github.com/json5/json5) from 2.2.0 to 2.2.3. Release notes Sourced from json5's releases. v2.2.3 Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299) v2.2.2 Fix: Properties...

dependabot[bot]

When reviewing any github workflow that contains this job's step, GitHub itself will complain about the deprecation warning and wishes everybody to migrate over to Node.js 20.

Kichura

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.14.1 to 3.14.2. Changelog Sourced from js-yaml's changelog. [3.14.2] - 2025-11-15 Security Backported v4.1.1 fix to v3 [4.1.1] - 2025-11-12 Security Fix prototype pollution issue in yaml...

dependabot[bot]

Only close PRs from unauthorized users.

lightclient

Bumps [form-data](https://github.com/form-data/form-data) from 3.0.1 to 3.0.4. Release notes Sourced from form-data's releases. v3.0.2 Fixes npmignore temporary build files (#532) move util.isArray to Array.isArray (#564) Tests migrate from travis to GHA...

dependabot[bot]