laravel-commerce

laravel-commerce copied to clipboard

Bumps [loader-utils](https://github.com/webpack/loader-utils) from 1.4.0 to 1.4.2. Release notes Sourced from loader-utils's releases. v1.4.2 1.4.2 (2022-11-11) Bug Fixes ReDoS problem (#226) (17cbf8f) v1.4.1 1.4.1 (2022-11-07) Bug Fixes security problem (#220) (4504e34)...

dependabot[bot]

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) Commits See full diff in compare...

dependabot[bot]

Bumps [guzzlehttp/guzzle](https://github.com/guzzle/guzzle) from 6.5.5 to 6.5.8. Release notes Sourced from guzzlehttp/guzzle's releases. Release 6.5.8 See change log for changes. Release 6.5.7 See change log for changes. Release 6.5.6 See change...

dependabot[bot]

Bumps [async](https://github.com/caolan/async) from 2.6.3 to 2.6.4. Changelog Sourced from async's changelog. v2.6.4 Fix potential prototype pollution exploit (#1828) Commits c6bdaca Version 2.6.4 8870da9 Update built files 4df6754 update changelog 8f7f903...

dependabot[bot]

Bumps [composer/composer](https://github.com/composer/composer) from 2.1.9 to 2.3.5. Release notes Sourced from composer/composer's releases. 2.3.5 Security: Fixed command injection vulnerability in HgDriver/GitDriver (GHSA-x7cr-6qr6-2hh6 / CVE-2022-24828) Added warning when downloading a file with...

dependabot[bot]

Bumps [guzzlehttp/psr7](https://github.com/guzzle/psr7) from 1.8.2 to 1.8.5. Release notes Sourced from guzzlehttp/psr7's releases. 1.8.5 See change log for changes. 1.8.4 See change log for changes. 1.8.3 See change log for changes....

dependabot[bot]

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

Bumps [node-forge](https://github.com/digitalbazaar/forge) from 1.2.1 to 1.3.0. Changelog Sourced from node-forge's changelog. 1.3.0 - 2022-03-17 Security Three RSA PKCS#1 v1.5 signature verification issues were reported by Moosa Yahyazadeh ([email protected]). HIGH: Leniency...

dependabot[bot]

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.7 to 1.14.8. Commits 3d81dc3 Release version 1.14.8 of the npm package. 62e546a Drop confidential headers across schemes. See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)...

dependabot[bot]

Bumps [postcss](https://github.com/postcss/postcss) from 8.4.5 to 8.4.31. Release notes Sourced from postcss's releases. 8.4.31 Fixed \r parsing to fix CVE-2023-44270. 8.4.30 Improved source map performance (by @​romainmenke). 8.4.29 Fixed Node#source.offset (by...

dependabot[bot]