Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dependabots fix #2046

Merged
merged 11 commits into from
Oct 9, 2024
Merged

Dependabots fix #2046

merged 11 commits into from
Oct 9, 2024

Commits on Sep 25, 2024

  1. Bump webrick from 1.8.1 to 1.8.2 

    Bumps [webrick](https://github.com/ruby/webrick) from 1.8.1 to 1.8.2.
- [Release notes](https://github.com/ruby/webrick/releases)
- [Commits](ruby/webrick@v1.8.1...v1.8.2)

---
updated-dependencies:
- dependency-name: webrick
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot
    dependabot[bot] authored Sep 25, 2024
    Configuration menu
    Copy the full SHA
    f8472dd View commit details
    Browse the repository at this point in the history

Commits on Sep 30, 2024

  1. Uncontrolled resource consumption in braces #137

    @jdonis
    jdonis committed Sep 30, 2024
    Configuration menu
    Copy the full SHA
    82d62fa View commit details
    Browse the repository at this point in the history

  2. Command Injection in lodash #132, updating gulp-notify

    @jdonis
    jdonis committed Sep 30, 2024
    Configuration menu
    Copy the full SHA
    b88f506 View commit details
    Browse the repository at this point in the history

  3. semver vulnerable to Regular Expression Denial of Service #119semver … 

    …vulnerable to Regular Expression Denial of Service #119
    @jdonis
    jdonis committed Sep 30, 2024
    Configuration menu
    Copy the full SHA
    057081d View commit details
    Browse the repository at this point in the history

  4. Merge pull request #2032 from GSA/dependabot/bundler/webrick-1.8.2 

    Bump webrick from 1.8.1 to 1.8.2
    @kkrug
    kkrug authored Sep 30, 2024
    Configuration menu
    Copy the full SHA
    98e6b0f View commit details
    Browse the repository at this point in the history

  5. Merge pull request #2034 from GSA/dependabot-fix-general 

    Dependabot fix general
    @kkrug
    kkrug authored Sep 30, 2024
    Configuration menu
    Copy the full SHA
    54f095c View commit details
    Browse the repository at this point in the history

Commits on Oct 3, 2024

  1. force semver to 7.5.2

    @jdonis
    jdonis committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    1c47d69 View commit details
    Browse the repository at this point in the history

  2. Update google-protobuf to solve dependabot

    @jdonis
    jdonis committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    7aca32e View commit details
    Browse the repository at this point in the history

  3. Merge pull request #2044 from GSA/dependabot-fix-general-2 

    force semver to 7.5.2
    @kkrug
    kkrug authored Oct 3, 2024
    Configuration menu
    Copy the full SHA
    5c589cb View commit details
    Browse the repository at this point in the history

  4. PostCSS update

    @jdonis
    jdonis committed Oct 3, 2024
    Configuration menu
    Copy the full SHA
    01a86b5 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #2045 from GSA/dependabot-fix-general-2 

    PostCSS update
    @kkrug
    kkrug authored Oct 3, 2024
    Configuration menu
    Copy the full SHA
    a62c21b View commit details
    Browse the repository at this point in the history