New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency gh-pages to v5 [SECURITY] - autoclosed #78

Closed

renovate wants to merge 1 commit into master from renovate/npm-gh-pages-vulnerability

renovate bot commented Apr 23, 2024 •

edited

Loading

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
gh-pages	`^3.1.0` -> `^5.0.0`

GitHub Vulnerability Alerts

CVE-2022-37611

Prototype pollution vulnerability in tschaub gh-pages via the partial variable in util.js.

Release Notes

tschaub/gh-pages (gh-pages)

`v5.0.0`

Potentially breaking change: the publish method now always returns a promise. Previously, it did not return a promise in some error cases. This should not impact most users.

Updates to the development dependencies required a minimum Node version of 14 for the tests. The library should still work on Node 12, but tests are no longer run in CI for version 12. A future major version of the library may drop support for version 12 altogether.

#438 - Remove quotation marks (@Vicropht)
#459 - Bump async from 2.6.4 to 3.2.4 (@tschaub)
#454 - Bump email-addresses from 3.0.1 to 5.0.0 (@tschaub)
#455 - Bump actions/setup-node from 1 to 3 (@tschaub)
#453 - Bump actions/checkout from 2 to 3 (@tschaub)
#445 - Update README to clarify project site configuration requirements with tools like CRA, webpack, Vite, etc. (@Nezteb)
#452 - Assorted updates (@tschaub)

`v4.0.0`

This release doesn't include any breaking changes, but due to updated development dependencies, tests are no longer run on Node 10.

#432 - Updated dev dependencies and formatting (@tschaub)
#430 - Bump ansi-regex from 3.0.0 to 3.0.1 (@tschaub)
#431 - Bump path-parse from 1.0.6 to 1.0.7 (@tschaub)
#427 - Bump async from 2.6.1 to 2.6.4 (@tschaub)
#423 - Bump minimist from 1.2.5 to 1.2.6 (@tschaub)

`v3.2.3`

#398 - Update glob-parent (@tschaub)
#395 - Switch from filenamify-url to filenamify (@tw0517tw)

`v3.2.2`

#396 - Revert "security(deps): bump filenamify-url to 2.1.1" (@tschaub)

`v3.2.1`

#393 - security(deps): bump filenamify-url to 2.1.1 (@AviVahl)

`v3.2.0`

This release updates a few development dependencies and adds a bit of documentation.

#391 - Update dev dependencies (@tschaub)
#375 - Add note about domain problem (@demee)
#390 - Fix little typo in the README (@cizordj)
#388 - Bump hosted-git-info from 2.8.8 to 2.8.9 (@tschaub)
#387 - Bump y18n from 4.0.0 to 4.0.3 (@tschaub)
#378 - Add GitHub Actions tips to readme.md (@mickelsonmichael)
#386 - Bump lodash from 4.17.14 to 4.17.21 (@tschaub)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


          Update dependency gh-pages to v5 [SECURITY]

8b750a8

renovate bot requested a review from KSXGitHub as a code owner

April 23, 2024 01:35

renovate bot changed the title ~~Update dependency gh-pages to v5 [SECURITY]~~ Update dependency gh-pages to v5 [SECURITY] - autoclosed

renovate bot closed this

renovate bot deleted the renovate/npm-gh-pages-vulnerability branch

August 6, 2024 09:13

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet