Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update all non-major dependencies (patch) #1154

Merged
merged 1 commit into from
Apr 13, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 13, 2023

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@sveltejs/kit (source) 1.15.4 -> 1.15.5 age adoption passing confidence devDependencies patch
node 18.14.0 -> 18.14.2 age adoption passing confidence volta patch
node 18.14.0 -> 18.14.2 age adoption passing confidence stage patch

Release Notes

sveltejs/kit

v1.15.5

Compare Source

Patch Changes
  • fix: correct allow header methods list for 405s (#​9655)

  • fix: prevent routes/layouts from having conflicting files through resets or different extensions (#​9590)

  • fix: prevent unhandled exceptions for invalid header values (#​9638)

nodejs/node

v18.14.2: 2023-02-21, Version 18.14.2 'Hydrogen' (LTS), @​MylesBorins

Compare Source

Notable Changes
Commits

v18.14.1: 2023-02-16, Version 18.14.1 'Hydrogen' (LTS), @​RafaelGSS prepared by @​juanarbol

Compare Source

This is a security release.

Notable Changes

The following CVEs are fixed in this release:

  • CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
  • CVE-2023-23919: Node.js OpenSSL error handling issues in nodejs crypto library (Medium)
  • CVE-2023-23936: Fetch API in Node.js did not protect against CRLF injection in host headers (Medium)
  • CVE-2023-24807: Regular Expression Denial of Service in Headers in Node.js fetch API (Low)
  • CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)

More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.

This security release includes OpenSSL security updates as outlined in the recent
OpenSSL security advisory.

Commits

Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@netlify
Copy link

netlify bot commented Feb 13, 2023

Deploy Preview for mermaidjs ready!

Name Link
🔨 Latest commit 172a995
🔍 Latest deploy log https://app.netlify.com/sites/mermaidjs/deploys/6437ed6a2ac1eb0008c97203
😎 Deploy Preview https://deploy-preview-1154--mermaidjs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

@cypress
Copy link

cypress bot commented Feb 13, 2023

Passing run #904 ↗︎

0 27 6 0 Flakiness 0

Details:

Merge 172a995 into a12efbc...
Project: Mermaid Live Editor Commit: 3bf901c711 ℹ️
Status: Passed Duration: 02:16 💡
Started: Apr 13, 2023 11:58 AM Ended: Apr 13, 2023 12:00 PM

This comment has been generated by cypress-bot as a result of this project's GitHub integration settings.

@renovate renovate bot force-pushed the renovate/patch-all-minor-patch branch 5 times, most recently from 5e31cdf to d70203c Compare February 16, 2023 15:32
@renovate renovate bot force-pushed the renovate/patch-all-minor-patch branch from c28f93d to 172a995 Compare April 13, 2023 11:54
@sidharthv96 sidharthv96 added this pull request to the merge queue Apr 13, 2023
@sidharthv96 sidharthv96 merged commit 07d312c into develop Apr 13, 2023
@sidharthv96 sidharthv96 deleted the renovate/patch-all-minor-patch branch April 13, 2023 12:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant