Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

updating wp-api plugin version #420

Closed
wants to merge 2 commits into from
Closed

updating wp-api plugin version #420

wants to merge 2 commits into from

Conversation

bdolor
Copy link
Contributor

@bdolor bdolor commented May 25, 2016

greatislander pushed a commit that referenced this pull request May 25, 2016
Update REST API (#420).
91a8ea5
@greatislander
Copy link
Contributor

@bdolor Thanks for spotting this. I updated in 91a8ea5 to avoid dealing with the merge conflict.

@bdolor
Copy link
Contributor Author

bdolor commented May 25, 2016

ok - conflicts resolved, just not fast enough

@greatislander
Copy link
Contributor

Hah, thanks!

greatislander pushed a commit that referenced this pull request Dec 21, 2018
@dependabot
[Security] Bump debug from 2.2.0 to 2.6.9 (#1531)
d7228ff 
Bumps [debug](https://github.com/visionmedia/debug) from 2.2.0 to 2.6.9. **This update includes security fixes.**
<details>
<summary>Vulnerabilities fixed</summary>

*Sourced from [The npm Advisory Database](https://npmjs.com/advisories/534).*

> **Regular Expression Denial of Service**
> Affected versions of `debug` are vulnerable to regular expression denial of service when untrusted user input is passed into the `o` formatter. 
> 
> As it takes 50,000 characters to block the event loop for 2 seconds, this issue is a low severity issue.
> 
> Affected versions: <= 2.6.8; >= 3.0.0 <= 3.0.1

*Sourced from The GitHub Security Advisory Database.*

> **Low severity vulnerability that affects debug**
> The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue.
> 
> Affected versions: < 2.6.9

</details>
<details>
<summary>Release notes</summary>

*Sourced from [debug's releases](https://github.com/visionmedia/debug/releases).*

> ## 2.6.9
> ### Patches 
> 
> - Remove ReDoS regexp in `%o` formatter: [#504](https://github-redirect.dependabot.com/visionmedia/debug/issues/504)
> 
> ### Credits 
> 
> Huge thanks to [**zhuangya**](https://github.com/zhuangya) for their help!
> 
> ## release 2.6.7
> No release notes provided.
> 
> ## release 2.6.6
> No release notes provided.
> 
> ## release 2.6.5
> No release notes provided.
> 
> ## release 2.6.4
> No release notes provided.
> 
> ## release 2.6.3
> No release notes provided.
> 
> ## release 2.6.2
> No release notes provided.
> 
> ## release 2.6.1
> No release notes provided.
> 
> ## release 2.6.0
> No release notes provided.
> 
> ## release 2.5.2
> No release notes provided.
> 
> ## release 2.5.1
> No release notes provided.
> 
> ## release 2.4.5
> No release notes provided.
> 
> ## release 2.4.4
> No release notes provided.
> 
> ## release 2.4.3
> No release notes provided.
> 
> ## release 2.4.2
> No release notes provided.
></table> ... (truncated)
</details>
<details>
<summary>Changelog</summary>

*Sourced from [debug's changelog](https://github.com/visionmedia/debug/blob/2.6.9/CHANGELOG.md).*

> 2.6.9 / 2017-09-22
> ==================
> 
>   * remove ReDoS regexp in %o formatter ([#504](https://github-redirect.dependabot.com/visionmedia/debug/issues/504))
> 
> 2.6.8 / 2017-05-18
> ==================
> 
>   * Fix: Check for undefined on browser globals ([#462](https://github-redirect.dependabot.com/visionmedia/debug/issues/462), [**marbemac**](https://github.com/marbemac))
> 
> 2.6.7 / 2017-05-16
> ==================
> 
>   * Fix: Update ms to 2.0.0 to fix regular expression denial of service vulnerability ([#458](https://github-redirect.dependabot.com/visionmedia/debug/issues/458), [**hubdotcom**](https://github.com/hubdotcom))
>   * Fix: Inline extend function in node implementation ([#452](https://github-redirect.dependabot.com/visionmedia/debug/issues/452), [**dougwilson**](https://github.com/dougwilson))
>   * Docs: Fix typo ([#455](https://github-redirect.dependabot.com/visionmedia/debug/issues/455), [**msasad**](https://github.com/msasad))
> 
> 2.6.5 / 2017-04-27
> ==================
>   
>   * Fix: null reference check on window.documentElement.style.WebkitAppearance ([#447](https://github-redirect.dependabot.com/visionmedia/debug/issues/447), [**thebigredgeek**](https://github.com/thebigredgeek))
>   * Misc: clean up browser reference checks ([#447](https://github-redirect.dependabot.com/visionmedia/debug/issues/447), [**thebigredgeek**](https://github.com/thebigredgeek))
>   * Misc: add npm-debug.log to .gitignore ([**thebigredgeek**](https://github.com/thebigredgeek))
> 
> 
> 2.6.4 / 2017-04-20
> ==================
> 
>   * Fix: bug that would occure if process.env.DEBUG is a non-string value. ([#444](https://github-redirect.dependabot.com/visionmedia/debug/issues/444), [**LucianBuzzo**](https://github.com/LucianBuzzo))
>   * Chore: ignore bower.json in npm installations. ([#437](https://github-redirect.dependabot.com/visionmedia/debug/issues/437), [**joaovieira**](https://github.com/joaovieira))
>   * Misc: update "ms" to v0.7.3 ([**tootallnate**](https://github.com/tootallnate))
> 
> 2.6.3 / 2017-03-13
> ==================
> 
>   * Fix: Electron reference to `process.env.DEBUG` ([#431](https://github-redirect.dependabot.com/visionmedia/debug/issues/431), [**paulcbetts**](https://github.com/paulcbetts))
>   * Docs: Changelog fix ([**thebigredgeek**](https://github.com/thebigredgeek))
> 
> 2.6.2 / 2017-03-10
> ==================
> 
>   * Fix: DEBUG_MAX_ARRAY_LENGTH ([#420](https://github-redirect.dependabot.com/visionmedia/debug/issues/420), [**slavaGanzin**](https://github.com/slavaGanzin))
>   * Docs: Add backers and sponsors from Open Collective ([#422](https://github-redirect.dependabot.com/visionmedia/debug/issues/422), [**piamancini**](https://github.com/piamancini))
>   * Docs: Add Slackin invite badge ([**tootallnate**](https://github.com/tootallnate))
> 
> 2.6.1 / 2017-02-10
> ==================
> 
>   * Fix: Module's `export default` syntax fix for IE8 `Expected identifier` error
>   * Fix: Whitelist DEBUG_FD for values 1 and 2 only ([#415](https://github-redirect.dependabot.com/visionmedia/debug/issues/415), [**pi0**](https://github.com/pi0))
></table> ... (truncated)
</details>
<details>
<summary>Commits</summary>

- [`13abeae`](debug-js/debug@13abeae) Release 2.6.9
- [`f53962e`](debug-js/debug@f53962e) remove ReDoS regexp in %o formatter ([#504](https://github-redirect.dependabot.com/visionmedia/debug/issues/504))
- [`52e1f21`](debug-js/debug@52e1f21) Release 2.6.8
- [`2482e08`](debug-js/debug@2482e08) Check for undefined on browser globals ([#462](https://github-redirect.dependabot.com/visionmedia/debug/issues/462))
- [`6bb07f7`](debug-js/debug@6bb07f7) release 2.6.7
- [`15850cb`](debug-js/debug@15850cb) Fix Regular Expression Denial of Service (ReDoS)
- [`4a6c85c`](debug-js/debug@4a6c85c) update "debug" to v1.0.0 ([#454](https://github-redirect.dependabot.com/visionmedia/debug/issues/454))
- [`b68dbf8`](debug-js/debug@b68dbf8) Fix typo ([#455](https://github-redirect.dependabot.com/visionmedia/debug/issues/455))
- [`1351d2f`](debug-js/debug@1351d2f) Inline extend function in node implementation ([#452](https://github-redirect.dependabot.com/visionmedia/debug/issues/452))
- [`c211947`](debug-js/debug@c211947) update version for component
- Additional commits viewable in [compare view](debug-js/debug@2.2.0...2.6.9)
</details>
<br />

[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=debug&package-manager=npm_and_yarn&previous-version=2.2.0&new-version=2.6.9)](https://dependabot.com/compatibility-score.html?dependency-name=debug&package-manager=npm_and_yarn&previous-version=2.2.0&new-version=2.6.9)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

</details>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@bdolor @greatislander