make-fetch-happen

make-fetch-happen copied to clipboard

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7. Commits c74c8af 1.3.7 024b8b5 update deps, add linting 032fbaf Use Object.create(null) to avoid default object property hazards 2da9039 1.3.6 cfea636 better git push script,...

dependabot[bot]

Bumps [standard-version](https://github.com/conventional-changelog/standard-version) from 4.3.0 to 8.0.1. Release notes Sourced from standard-version's releases. standard-version v8.0.1 Bug Fixes deps: update dependency conventional-changelog to v3.1.21 (#586) (fd456c9) deps: update dependency conventional-changelog-conventionalcommits to v4.3.0...

dependabot[bot]

Bumps [https-proxy-agent](https://github.com/TooTallNate/node-https-proxy-agent) from 2.2.1 to 2.2.3. Release notes Sourced from https-proxy-agent's releases. 2.2.3 Patches Update README with actual secureProxy behavior: #65 Update proxy to v1.0.0: d0e3c18079119057b05582cb72d4fda21dfc2546 Remove unreachable code: 46aad0988b471f042856436cf3192b0e09e36fe6...

dependabot[bot]

chore(deps): bump https-proxy-agent from 2.2.1 to 3.0.1

1

Updating https-proxy-agent to fix vulnerability. Fixes: https://github.com/zkat/make-fetch-happen/issues/75 Related: https://github.com/zkat/make-fetch-happen/pull/71

stickeerehan

Before ``` added 361 packages from 207 contributors, removed 327 packages, updated 87 packages and audited 3537 packages in 53.944s found 78 vulnerabilities (2 low, 13 moderate, 61 high, 2...

ralic

Bumps [lodash.template](https://github.com/lodash/lodash) from 4.4.0 to 4.5.0. Commits - [`ab73503`](https://github.com/lodash/lodash/commit/ab73503859a2d2f7f603bc8a293ce93ecc071e83) Bump to v4.5.0. - [`a4f7d4c`](https://github.com/lodash/lodash/commit/a4f7d4cc2a3b6d3a43f6c27beadbf90410eecdcd) Rebuild lodash and docs. - [`cca5ac6`](https://github.com/lodash/lodash/commit/cca5ac60d61a2f786eeafadb674d6e12fc6179c8) Fix npm-test by removing the call to test-docs. - [`9f7f9fc`](https://github.com/lodash/lodash/commit/9f7f9fc3c5f1a4db9a2134950872440c792ee8bb)...

dependabot[bot]

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.11.0 to 3.13.1. Changelog *Sourced from [js-yaml's changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md).* > ## [3.13.1] - 2019-04-05 > ### Security > - Fix possible code execution in (already unsafe) `.load()`, [#480](https://github-redirect.dependabot.com/nodeca/js-yaml/issues/480)....

dependabot[bot]

Bumps [stringstream](https://github.com/mhart/StringStream) from 0.0.5 to 0.0.6. Commits - [`fee31c5`](https://github.com/mhart/StringStream/commit/fee31c5c4a5efc7c7cc2fde4aee633dedefd6d67) 0.0.6 - [`2f4a9d4`](https://github.com/mhart/StringStream/commit/2f4a9d496f94b0880e01a26857aa266a5a3ef274) Merge pull request [#9](https://github-redirect.dependabot.com/mhart/StringStream/issues/9) from mhart/fix-buffer-constructor-vuln - [`afbc744`](https://github.com/mhart/StringStream/commit/afbc7442220358419e330618e47f3a65fc265b1b) Ensure data is not a number in Buffer constructor -...

dependabot[bot]

Bumps [extend](https://github.com/justmoon/node-extend) from 3.0.1 to 3.0.2. Changelog *Sourced from [extend's changelog](https://github.com/justmoon/node-extend/blob/master/CHANGELOG.md).* > 3.0.2 / 2018-07-19 > ================== > * [Fix] Prevent merging `__proto__` property ([#48](https://github-redirect.dependabot.com/justmoon/node-extend/issues/48)) > * [Dev Deps] update...

dependabot[bot]

The dependency https-proxy-agent in version < 2.2.3 comes with a vulnerability: https://www.npmjs.com/advisories/1184 Can you please upgrade to the latest version (2.2.4 or 3.0.1) and make a release?

ma-jahn