Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump lodash from 4.17.20 to 4.17.21 #119

Merged
merged 1 commit into from Jun 11, 2021

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 10, 2021

Bumps lodash from 4.17.20 to 4.17.21.

Commits
  • f299b52 Bump to v4.17.21
  • c4847eb Improve performance of toNumber, trim and trimEnd on large input strings
  • 3469357 Prevent command injection through _.template's variable option
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.20...4.17.21)

---
updated-dependencies:
- dependency-name: lodash
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 10, 2021
@hunterliu1003 hunterliu1003 merged commit a8a3922 into master Jun 11, 2021
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/lodash-4.17.21 branch June 11, 2021 03:29
hunterliu1003 added a commit that referenced this pull request Jun 24, 2021
feat: allow importing component directly

refactor: refine Plugin.js

Squashed commit of the following:

commit 65edad5
Author: Hunter <hunterliu1003@gmail.com>
Date:   Sun Jun 13 09:54:51 2021 +0800

    2.3.2

commit 52ddf45
Merge: c848a8a 836deb0
Author: Hunter Liu <hunterliu1003@gmail.com>
Date:   Sun Jun 13 09:53:24 2021 +0800

    Merge pull request #129 from vue-final/bugfix/do-not-close-modal-when-select-text

    fix: #111

commit 836deb0
Author: Hunter <hunterliu1003@gmail.com>
Date:   Sun Jun 13 00:12:08 2021 +0800

    fix: mobile #111

commit c500513
Author: Hunter <hunterliu1003@gmail.com>
Date:   Sat Jun 12 22:25:53 2021 +0800

    refactor: avoid using stop event modifiers #111

commit facad84
Merge: c848a8a 090d854
Author: Hunter <hunterliu1003@gmail.com>
Date:   Sat Jun 12 20:27:32 2021 +0800

    Merge branch 'patch-6' of https://github.com/mesqueeb/vue-final-modal into bugfix/do-not-close-modal-when-select-text

commit 090d854
Author: Luca Ban <mesqueeb@gmail.com>
Date:   Sat Jun 12 17:22:39 2021 +0900

    fix: #111

commit c848a8a
Merge: a8a3922 8518dfc
Author: Hunter Liu <hunterliu1003@gmail.com>
Date:   Fri Jun 11 11:29:19 2021 +0800

    Merge pull request #121 from vue-final/dependabot/npm_and_yarn/glob-parent-5.1.2

    build(deps): bump glob-parent from 5.1.1 to 5.1.2

commit a8a3922
Merge: 234e8ad 3958b39
Author: Hunter Liu <hunterliu1003@gmail.com>
Date:   Fri Jun 11 11:29:06 2021 +0800

    Merge pull request #119 from vue-final/dependabot/npm_and_yarn/lodash-4.17.21

    build(deps): bump lodash from 4.17.20 to 4.17.21

commit 234e8ad
Merge: b953f97 c362815
Author: Hunter Liu <hunterliu1003@gmail.com>
Date:   Fri Jun 11 11:28:52 2021 +0800

    Merge pull request #120 from vue-final/dependabot/npm_and_yarn/docs/y18n-4.0.3

    build(deps): bump y18n from 4.0.0 to 4.0.3 in /docs

commit b953f97
Merge: 45caddc 05219b4
Author: Hunter Liu <hunterliu1003@gmail.com>
Date:   Fri Jun 11 11:28:40 2021 +0800

    Merge pull request #122 from vue-final/dependabot/npm_and_yarn/ws-5.2.3

    build(deps): bump ws from 5.2.2 to 5.2.3

commit 45caddc
Merge: 3511740 9ff04c9
Author: Hunter Liu <hunterliu1003@gmail.com>
Date:   Fri Jun 11 11:26:44 2021 +0800

    Merge pull request #124 from mesqueeb/patch-5

    fix(docs): small fix

commit f15022a
Author: Luca Ban <mesqueeb@gmail.com>
Date:   Fri Jun 11 12:08:42 2021 +0900

    fix: #111 proper working fix

commit 1d47ff6
Author: Luca Ban <mesqueeb@users.noreply.github.com>
Date:   Fri Jun 11 11:58:47 2021 +0900

    fix: #111

    I believe this should fix #111 but I did not test it yet. Just an idea! Feel free to close : )

commit 9ff04c9
Author: Luca Ban <mesqueeb@users.noreply.github.com>
Date:   Fri Jun 11 11:20:49 2021 +0900

    Update dynamic-modal.md

commit 05219b4
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Thu Jun 10 18:06:58 2021 +0000

    build(deps): bump ws from 5.2.2 to 5.2.3

    Bumps [ws](https://github.com/websockets/ws) from 5.2.2 to 5.2.3.
    - [Release notes](https://github.com/websockets/ws/releases)
    - [Commits](websockets/ws@5.2.2...5.2.3)

    ---
    updated-dependencies:
    - dependency-name: ws
      dependency-type: indirect
    ...

    Signed-off-by: dependabot[bot] <support@github.com>

commit 8518dfc
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Thu Jun 10 18:06:56 2021 +0000

    build(deps): bump glob-parent from 5.1.1 to 5.1.2

    Bumps [glob-parent](https://github.com/gulpjs/glob-parent) from 5.1.1 to 5.1.2.
    - [Release notes](https://github.com/gulpjs/glob-parent/releases)
    - [Changelog](https://github.com/gulpjs/glob-parent/blob/main/CHANGELOG.md)
    - [Commits](gulpjs/glob-parent@v5.1.1...v5.1.2)

    ---
    updated-dependencies:
    - dependency-name: glob-parent
      dependency-type: indirect
    ...

    Signed-off-by: dependabot[bot] <support@github.com>

commit c362815
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Thu Jun 10 18:06:44 2021 +0000

    build(deps): bump y18n from 4.0.0 to 4.0.3 in /docs

    Bumps [y18n](https://github.com/yargs/y18n) from 4.0.0 to 4.0.3.
    - [Release notes](https://github.com/yargs/y18n/releases)
    - [Changelog](https://github.com/yargs/y18n/blob/y18n-v4.0.3/CHANGELOG.md)
    - [Commits](yargs/y18n@v4.0.0...y18n-v4.0.3)

    ---
    updated-dependencies:
    - dependency-name: y18n
      dependency-type: indirect
    ...

    Signed-off-by: dependabot[bot] <support@github.com>

commit 3958b39
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Thu Jun 10 18:06:35 2021 +0000

    build(deps): bump lodash from 4.17.20 to 4.17.21

    Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21.
    - [Release notes](https://github.com/lodash/lodash/releases)
    - [Commits](lodash/lodash@4.17.20...4.17.21)

    ---
    updated-dependencies:
    - dependency-name: lodash
      dependency-type: indirect
    ...

    Signed-off-by: dependabot[bot] <support@github.com>

commit 3511740
Merge: a8ad334 1dac4cd
Author: Hunter Liu <hunterliu1003@gmail.com>
Date:   Fri Jun 11 02:06:25 2021 +0800

    Merge pull request #112 from vue-final/dependabot/npm_and_yarn/docs/ws-6.2.2

    build(deps): bump ws from 6.2.1 to 6.2.2 in /docs

commit a8ad334
Merge: 210345c a75ffb1
Author: Hunter Liu <hunterliu1003@gmail.com>
Date:   Fri Jun 11 02:06:08 2021 +0800

    Merge pull request #109 from vue-final/dependabot/npm_and_yarn/docs/browserslist-4.16.6

    build(deps): bump browserslist from 4.14.5 to 4.16.6 in /docs

commit 210345c
Merge: e77a88a f18cbbe
Author: Hunter Liu <hunterliu1003@gmail.com>
Date:   Fri Jun 11 02:05:56 2021 +0800

    Merge pull request #108 from vue-final/dependabot/npm_and_yarn/browserslist-4.16.6

    build(deps): bump browserslist from 4.16.3 to 4.16.6

commit 1dac4cd
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Sat Jun 5 04:54:05 2021 +0000

    build(deps): bump ws from 6.2.1 to 6.2.2 in /docs

    Bumps [ws](https://github.com/websockets/ws) from 6.2.1 to 6.2.2.
    - [Release notes](https://github.com/websockets/ws/releases)
    - [Commits](https://github.com/websockets/ws/commits)

    ---
    updated-dependencies:
    - dependency-name: ws
      dependency-type: indirect
    ...

    Signed-off-by: dependabot[bot] <support@github.com>

commit a75ffb1
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Wed May 26 17:54:38 2021 +0000

    build(deps): bump browserslist from 4.14.5 to 4.16.6 in /docs

    Bumps [browserslist](https://github.com/browserslist/browserslist) from 4.14.5 to 4.16.6.
    - [Release notes](https://github.com/browserslist/browserslist/releases)
    - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
    - [Commits](browserslist/browserslist@4.14.5...4.16.6)

    Signed-off-by: dependabot[bot] <support@github.com>

commit f18cbbe
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Wed May 26 12:35:31 2021 +0000

    build(deps): bump browserslist from 4.16.3 to 4.16.6

    Bumps [browserslist](https://github.com/browserslist/browserslist) from 4.16.3 to 4.16.6.
    - [Release notes](https://github.com/browserslist/browserslist/releases)
    - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md)
    - [Commits](browserslist/browserslist@4.16.3...4.16.6)

    Signed-off-by: dependabot[bot] <support@github.com>

feat: back to original API

fix: ts export

refactor: rename plugin export function name

fix: ts type

docs: improve details
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant