Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update all non-major dependencies #315

Merged
merged 1 commit into from
Jan 7, 2021

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jan 6, 2021

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
nodemon (source) ^2.0.6 -> ^2.0.7 age adoption passing confidence
open ^7.3.0 -> ^7.3.1 age adoption passing confidence
sass ^1.32.0 -> ^1.32.2 age adoption passing confidence
socket.io ^2.4.0 -> ^2.4.1 age adoption passing confidence

Release Notes

remy/nodemon

v2.0.7

Compare Source

Bug Fixes
sindresorhus/open

v7.3.1

Compare Source

sass/dart-sass

v1.32.2

Compare Source

  • Print the actual number that was received in unit deprecation warnings for
    color functions.

v1.32.1

Compare Source

  • Don't emit permissions errors on Windows and OS X when trying to determine the
    real case of path names.
socketio/socket.io

v2.4.1

Compare Source

This release reverts the breaking change introduced in 2.4.0 (f78a575).

If you are using Socket.IO v2, you should explicitly allow/disallow cross-origin requests:

  • without CORS (server and client are served from the same domain):
io.origins((req, callback) => {
  callback(null, req.headers.origin === undefined); // cross-origin requests will not be allowed
});
  • with CORS (server and client are served from distinct domains):
io.origins(["http://localhost:3000"]); // for local development
io.origins(["https://example.com"]);

In any case, please consider upgrading to Socket.IO v3, where this security issue is now fixed (CORS is disabled by default).

Reverts
  • fix(security): do not allow all origins by default (a169050)
Links:

Renovate configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by WhiteSource Renovate. View repository job log here.

@codecov
Copy link

codecov bot commented Jan 6, 2021

Codecov Report

Merging #315 (53b63d2) into development (b3e9b97) will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@             Coverage Diff              @@
##           development     #315   +/-   ##
============================================
  Coverage        96.52%   96.52%           
============================================
  Files               49       49           
  Lines             1468     1468           
  Branches           312      331   +19     
============================================
  Hits              1417     1417           
  Misses               3        3           
  Partials            48       48           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update b3e9b97...53b63d2. Read the comment docs.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from ae825df to 9fdf555 Compare January 6, 2021 22:06
@renovate renovate bot changed the title chore(deps): update dependency nodemon to ^2.0.7 chore(deps): update all non-major dependencies Jan 6, 2021
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from ec6c8b8 to 5c828f5 Compare January 7, 2021 08:17
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 5c828f5 to 53b63d2 Compare January 7, 2021 10:39
@exreplay exreplay merged commit 4236e78 into development Jan 7, 2021
@exreplay exreplay deleted the renovate/all-minor-patch branch January 7, 2021 16:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants