ts-3d-model-viewer

ts-3d-model-viewer copied to clipboard

Bumps [crossbeam-utils](https://github.com/crossbeam-rs/crossbeam) from 0.8.5 to 0.8.8. Release notes Sourced from crossbeam-utils's releases. crossbeam-utils 0.8.8 Fix a bug when unstable loom support is enabled. (#787) crossbeam-utils 0.8.7 Add AtomicCell<{i*,u*}>::{fetch_max,fetch_min}. (#785) Add...

dependabot[bot]

Bumps [image](https://github.com/image-rs/image) from 0.19.0 to 0.23.12. Changelog Sourced from image's changelog. Version 0.23.12 Fix a soundness issue affecting the impls of Pixel::from_slice_mut. This would previously reborrow the mutable input reference...

dependabot[bot]

Bumps [semver-regex](https://github.com/sindresorhus/semver-regex) from 3.1.3 to 3.1.4. Release notes Sourced from semver-regex's releases. v3.1.4 Backport of ReDoS fix https://github.com/sindresorhus/semver-regex/commit/7712ba564d40da101cf2b2b33e6a910d9f2f57f4 Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will...

dependabot[bot]

Bumps [simple-get](https://github.com/feross/simple-get) from 3.0.3 to 3.1.1. Commits 496166d 3.1.1 6eb82c0 Bug fix: Thirdparty cookie leak abdcdb3 3.1.0 73508a8 feat: do not follow redirects and do not error out (#44) 72ecc9f...

dependabot[bot]

Bumps [eventsource](https://github.com/EventSource/eventsource) from 1.1.0 to 1.1.1. Changelog Sourced from eventsource's changelog. 1.1.1 Do not include authorization and cookie headers on redirect to different origin (#273 Espen Hovlandsdal) Commits aa7a408 1.1.1...

dependabot[bot]

[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to...

dependabot[bot]

chore(deps): bump ini from 1.3.5 to 1.3.8 in /tools/threejs-thumbnail

12

[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to...

dependabot[bot]

Bumps [cross-fetch](https://github.com/lquixada/cross-fetch) from 3.1.4 to 3.1.5. Release notes Sourced from cross-fetch's releases. v3.1.5 What's Changed chore: updated node-fetch version to 2.6.7 by @​dlafreniere in lquixada/cross-fetch#124 New Contributors @​dlafreniere made their...

dependabot[bot]

Bumps [urijs](https://github.com/medialize/URI.js) from 1.19.7 to 1.19.11. Release notes Sourced from urijs's releases. 1.19.11 (April 3rd 2022) SECURITY fixing URI.parse() handle excessive slashes in scheme-relative URLs - disclosed by zeyu2001 via...

dependabot[bot]

Bumps [shelljs](https://github.com/shelljs/shelljs) from 0.8.4 to 0.8.5. Release notes Sourced from shelljs's releases. v0.8.5 This was a small security fix for #1058. Commits 70668a4 0.8.5 d919d22 fix(exec): lockdown file permissions (#1060)...

dependabot[bot]