JavaScript-Notes

JavaScript-Notes copied to clipboard

chore(deps): bump validator from 8.0.0 to 13.7.0 in /examples/packages/declarative-validator

1

Bumps [validator](https://github.com/validatorjs/validator.js) from 8.0.0 to 13.7.0. Release notes Sourced from validator's releases. 13.7.0 13.7.0 New Features #1706 isISO4217, currency code validator @​jpaya17 Fixes and Enhancements #1647 isFQDN: add allow_wildcard option...

dependabot[bot]

chore(deps): bump tar from 2.2.1 to 2.2.2 in /examples/packages/x-fetch

1

Bumps [tar](https://github.com/npm/node-tar) from 2.2.1 to 2.2.2. Commits 523c5c7 2.2.2 7ecef07 Bump fstream to fix hardlink overwriting vulnerability 9fc84b9 Use {} for hardlink tracking instead of [] 15e59f1 Only track previously...

dependabot[bot]

chore(deps): bump hosted-git-info from 2.4.1 to 2.8.9 in /examples/packages/x-fetch

1

Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.4.1 to 2.8.9. Changelog Sourced from hosted-git-info's changelog. 2.8.9 (2021-04-07) Bug Fixes backport regex fix from #76 (29adfe5), closes #84 2.8.8 (2020-02-29) Bug Fixes #61 & #65...

dependabot[bot]

chore(deps): bump lodash from 4.17.4 to 4.17.21 in /examples/packages/x-fetch

1

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.4 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

chore(deps): bump ini from 1.3.4 to 1.3.8 in /examples/packages/x-fetch

1

Bumps [ini](https://github.com/isaacs/ini) from 1.3.4 to 1.3.8. Commits a2c5da8 1.3.8 af5c6bb Do not use Object.create(null) 8b648a1 don't test where our devdeps don't even work c74c8af 1.3.7 024b8b5 update deps, add linting...

dependabot[bot]

chore(deps): bump extend from 3.0.0 to 3.0.2 in /examples/packages/x-fetch

1

Bumps [extend](https://github.com/justmoon/node-extend) from 3.0.0 to 3.0.2. Changelog Sourced from extend's changelog. 3.0.2 / 2018-07-19 [Fix] Prevent merging __proto__ property (#48) [Dev Deps] update eslint, @ljharb/eslint-config, tape [Tests] up to node...

dependabot[bot]

chore(deps): bump stringstream from 0.0.5 to 0.0.6 in /examples/packages/x-fetch

1

Bumps [stringstream](https://github.com/mhart/StringStream) from 0.0.5 to 0.0.6. Commits fee31c5 0.0.6 2f4a9d4 Merge pull request #9 from mhart/fix-buffer-constructor-vuln afbc744 Ensure data is not a number in Buffer constructor See full diff in...

dependabot[bot]

chore(deps): bump fstream from 1.0.11 to 1.0.12 in /examples/packages/x-fetch

1

Bumps [fstream](https://github.com/npm/fstream) from 1.0.11 to 1.0.12. Commits 4235459 1.0.12 6a77d2f Clobber a Link if it's in the way of a File See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/configuring-github-dependabot-security-updates)...

dependabot[bot]

chore(deps): bump qs from 6.4.0 to 6.4.1 in /examples/packages/x-fetch

1

Bumps [qs](https://github.com/ljharb/qs) from 6.4.0 to 6.4.1. Changelog Sourced from qs's changelog. 6.4.1 [Fix] parse: ignore __proto__ keys (#428) [Fix] fix for an impossible situation: when the formatter is called with...

dependabot[bot]

chore(deps): bump loader-utils from 1.1.0 to 1.4.2 in /examples/packages/declarative-validator

1

Bumps [loader-utils](https://github.com/webpack/loader-utils) from 1.1.0 to 1.4.2. Release notes Sourced from loader-utils's releases. v1.4.2 1.4.2 (2022-11-11) Bug Fixes ReDoS problem (#226) (17cbf8f) v1.4.1 1.4.1 (2022-11-07) Bug Fixes security problem (#220) (4504e34)...

dependabot[bot]