Skip to content

Commit

Permalink
Bump ansi-regex in /cirq-web/cirq_ts (#5937)
Browse files Browse the repository at this point in the history
Bumps [ansi-regex](https://github.com/chalk/ansi-regex) and [ansi-regex](https://github.com/chalk/ansi-regex). These dependencies needed to be updated together.
Updates `ansi-regex` from 3.0.0 to 5.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/chalk/ansi-regex/releases">ansi-regex's releases</a>.</em></p>
<blockquote>
<h2>v5.0.1</h2>
<h3>Fixes (backport of <code>6.0.1</code> to v5)</h3>
<p>This is a backport of the <strong>minor</strong> ReDos vulnerability in <code>ansi-regex@&lt;6.0.1</code>, as requested in <a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/38">#38</a>.</p>
<ul>
<li>Fix <a href="https://en.wikipedia.org/wiki/ReDoS">ReDoS</a> in certain cases (<a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/37">#37</a>)
You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.</li>
</ul>
<p><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807">CVE-2021-3807</a></p>
<p><a href="https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1">https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1</a></p>
<p>Thank you <a href="https://github.com/yetingli"><code>@​yetingli</code></a> for the patch and reproduction case!</p>
<h2>v5.0.0</h2>
<h3>Breaking</h3>
<ul>
<li>Require Node.js 8  166a0d5</li>
</ul>
<h3>Enhancements</h3>
<ul>
<li>Add TypeScript definition (<a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/32">#32</a>)  e77ea17</li>
</ul>
<p><a href="https://github.com/chalk/ansi-regex/compare/v4.1.0...v5.0.0">https://github.com/chalk/ansi-regex/compare/v4.1.0...v5.0.0</a></p>
<h2>v4.1.0</h2>
<ul>
<li>Support more escape code like links (<a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/29">#29</a>)  96200bb</li>
</ul>
<p><a href="https://github.com/chalk/ansi-regex/compare/v4.0.0...v4.1.0">https://github.com/chalk/ansi-regex/compare/v4.0.0...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/chalk/ansi-regex/commit/a9babce885cf19c363cf1d1c645f834592c3f7a4"><code>a9babce</code></a> 5.0.1</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/4657833b3419f381c8ef4eb5787e71c5206b1b35"><code>4657833</code></a> fix incorrect format</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/c3c0b3f2736b9c01feec0fef33980c43720dcde8"><code>c3c0b3f</code></a> Fix potential ReDoS (<a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/37">#37</a>)</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/178363b3a297b712a0054e702d8ddde3879913e5"><code>178363b</code></a> Move to GitHub Actions (<a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/35">#35</a>)</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/0755e661553387cfebcb62378181e9f55b2567ff"><code>0755e66</code></a> Add <a href="https://github.com/Qix"><code>@​Qix</code></a>- to funding.yml</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/2b56fb0c7a07108e5b54241e8faec160d393aedb"><code>2b56fb0</code></a> 5.0.0</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/f26f7fe2287b44d3092c75a8dc3f7722282773d0"><code>f26f7fe</code></a> Meta tweaks</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/e77ea173f2e2b3f8bee370bf4cc4d29820783daf"><code>e77ea17</code></a> Add TypeScript definition (<a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/32">#32</a>)</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/166a0d5eddedacf0db7ccd7ee137b862ab1dae70"><code>166a0d5</code></a> Require Node.js 8</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/f115fca8a0d1bd7be0af5efa6b6ade54e7145207"><code>f115fca</code></a> Tidelift tasks</li>
<li>Additional commits viewable in <a href="https://github.com/chalk/ansi-regex/compare/v3.0.0...v5.0.1">compare view</a></li>
</ul>
</details>
<br />

Updates `ansi-regex` from 5.0.0 to 5.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/chalk/ansi-regex/releases">ansi-regex's releases</a>.</em></p>
<blockquote>
<h2>v5.0.1</h2>
<h3>Fixes (backport of <code>6.0.1</code> to v5)</h3>
<p>This is a backport of the <strong>minor</strong> ReDos vulnerability in <code>ansi-regex@&lt;6.0.1</code>, as requested in <a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/38">#38</a>.</p>
<ul>
<li>Fix <a href="https://en.wikipedia.org/wiki/ReDoS">ReDoS</a> in certain cases (<a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/37">#37</a>)
You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.</li>
</ul>
<p><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807">CVE-2021-3807</a></p>
<p><a href="https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1">https://github.com/chalk/ansi-regex/compare/v5.0.0..v5.0.1</a></p>
<p>Thank you <a href="https://github.com/yetingli"><code>@​yetingli</code></a> for the patch and reproduction case!</p>
<h2>v5.0.0</h2>
<h3>Breaking</h3>
<ul>
<li>Require Node.js 8  166a0d5</li>
</ul>
<h3>Enhancements</h3>
<ul>
<li>Add TypeScript definition (<a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/32">#32</a>)  e77ea17</li>
</ul>
<p><a href="https://github.com/chalk/ansi-regex/compare/v4.1.0...v5.0.0">https://github.com/chalk/ansi-regex/compare/v4.1.0...v5.0.0</a></p>
<h2>v4.1.0</h2>
<ul>
<li>Support more escape code like links (<a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/29">#29</a>)  96200bb</li>
</ul>
<p><a href="https://github.com/chalk/ansi-regex/compare/v4.0.0...v4.1.0">https://github.com/chalk/ansi-regex/compare/v4.0.0...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/chalk/ansi-regex/commit/a9babce885cf19c363cf1d1c645f834592c3f7a4"><code>a9babce</code></a> 5.0.1</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/4657833b3419f381c8ef4eb5787e71c5206b1b35"><code>4657833</code></a> fix incorrect format</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/c3c0b3f2736b9c01feec0fef33980c43720dcde8"><code>c3c0b3f</code></a> Fix potential ReDoS (<a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/37">#37</a>)</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/178363b3a297b712a0054e702d8ddde3879913e5"><code>178363b</code></a> Move to GitHub Actions (<a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/35">#35</a>)</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/0755e661553387cfebcb62378181e9f55b2567ff"><code>0755e66</code></a> Add <a href="https://github.com/Qix"><code>@​Qix</code></a>- to funding.yml</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/2b56fb0c7a07108e5b54241e8faec160d393aedb"><code>2b56fb0</code></a> 5.0.0</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/f26f7fe2287b44d3092c75a8dc3f7722282773d0"><code>f26f7fe</code></a> Meta tweaks</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/e77ea173f2e2b3f8bee370bf4cc4d29820783daf"><code>e77ea17</code></a> Add TypeScript definition (<a href="https://github-redirect.dependabot.com/chalk/ansi-regex/issues/32">#32</a>)</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/166a0d5eddedacf0db7ccd7ee137b862ab1dae70"><code>166a0d5</code></a> Require Node.js 8</li>
<li><a href="https://github.com/chalk/ansi-regex/commit/f115fca8a0d1bd7be0af5efa6b6ade54e7145207"><code>f115fca</code></a> Tidelift tasks</li>
<li>Additional commits viewable in <a href="https://github.com/chalk/ansi-regex/compare/v3.0.0...v5.0.1">compare view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/quantumlib/Cirq/network/alerts).

</details>
  • Loading branch information
dependabot[bot] committed Oct 31, 2022
1 parent 0cd9e1a commit 6245c91
Showing 1 changed file with 12 additions and 9 deletions.
21 changes: 12 additions & 9 deletions cirq-web/cirq_ts/package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

0 comments on commit 6245c91

Please sign in to comment.