bootstrap-ui

bootstrap-ui copied to clipboard

Bumps [moment](https://github.com/moment/moment) from 2.29.1 to 2.29.4. Changelog Sourced from moment's changelog. 2.29.4 Release Jul 6, 2022 #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex 2.29.3 Full changelog Release Apr 17, 2022...

dependabot[bot]

Bumps [select2](https://github.com/select2/select2) from 3.5.1 to 4.0.6. Release notes Sourced from select2's releases. Select2 4.0.6 New features/improvements Add style property to package.json (#5019) Implement clear and clearing events (#5058) Add scrollAfterSelect...

dependabot[bot]

Bumps [grunt](https://github.com/gruntjs/grunt) from 1.4.1 to 1.5.3. Release notes Sourced from grunt's releases. v1.5.3 Merge pull request #1745 from gruntjs/fix-copy-op 572d79b Patch up race condition in symlink copying. 58016ff Merge pull...

dependabot[bot]

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.1 to 2.6.7. Release notes Sourced from node-fetch's releases. v2.6.7 Security patch release Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th...

dependabot[bot]

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

Bumps [karma](https://github.com/karma-runner/karma) from 6.3.4 to 6.3.16. Release notes Sourced from karma's releases. v6.3.16 6.3.16 (2022-02-10) Bug Fixes security: mitigate the "Open Redirect Vulnerability" (ff7edbb) v6.3.15 6.3.15 (2022-02-05) Bug Fixes helper:...

dependabot[bot]

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.5.10 to 1.14.8. Commits 3d81dc3 Release version 1.14.8 of the npm package. 62e546a Drop confidential headers across schemes. 2ede36d Release version 1.14.7 of the npm package. 8b347cb...

dependabot[bot]

Bumps [log4js](https://github.com/log4js-node/log4js-node) from 6.3.0 to 6.4.0. Changelog Sourced from log4js's changelog. 6.4.0 security: default file permission to be 0o600 instead of 0o644 - thanks ranjit-git and @​peteriman chore(docs): updated fileSync.md...

dependabot[bot]

Bumps [i](https://github.com/pksunkara/inflect) from 0.3.6 to 0.3.7. Commits 71961bd Version bump v0.3.7 a9a0a8e Fix CVE-2021-3820 c025e15 Fix formatting dace42b Move away from travis 22fa473 Merge pull request #30 from pksunkara/dependabot/add-v2-config-file e84c23a...

dependabot[bot]

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]