Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump moment from 2.29.2 to 2.29.4 in /services/ui-src #139392

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 20, 2023

Bumps moment from 2.29.2 to 2.29.4.

Changelog

Sourced from moment's changelog.

2.29.4

  • Release Jul 6, 2022
    • #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex

2.29.3 Full changelog

  • Release Apr 17, 2022
    • #5995 [bugfix] Remove const usage
    • #5990 misc: fix advisory link
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 20, 2023
@github-actions github-actions bot enabled auto-merge July 20, 2023 17:32
@karla-vm karla-vm closed this Jul 24, 2023
auto-merge was automatically disabled July 24, 2023 16:14

Pull request was closed

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 24, 2023

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@karla-vm karla-vm deleted the dependabot/npm_and_yarn/services/ui-src/moment-2.29.4 branch July 24, 2023 16:14
@karla-vm karla-vm restored the dependabot/npm_and_yarn/services/ui-src/moment-2.29.4 branch July 24, 2023 20:44
@karla-vm karla-vm reopened this Jul 24, 2023
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/services/ui-src/moment-2.29.4 branch from 680271c to 5319db2 Compare July 24, 2023 20:44
@github-actions github-actions bot enabled auto-merge July 24, 2023 20:45
@karla-vm karla-vm closed this Jul 26, 2023
auto-merge was automatically disabled July 26, 2023 15:41

Pull request was closed

@karla-vm karla-vm deleted the dependabot/npm_and_yarn/services/ui-src/moment-2.29.4 branch July 26, 2023 15:41
@karla-vm karla-vm restored the dependabot/npm_and_yarn/services/ui-src/moment-2.29.4 branch July 27, 2023 13:58
@karla-vm
Copy link
Contributor

@dependabot rebase

@karla-vm karla-vm reopened this Jul 27, 2023
@karla-vm karla-vm enabled auto-merge (squash) July 27, 2023 13:59
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/services/ui-src/moment-2.29.4 branch from 5319db2 to ac684b2 Compare July 27, 2023 13:59
@karla-vm karla-vm closed this Jul 27, 2023
auto-merge was automatically disabled July 27, 2023 14:23

Pull request was closed

@karla-vm karla-vm deleted the dependabot/npm_and_yarn/services/ui-src/moment-2.29.4 branch July 27, 2023 14:23
@karla-vm karla-vm restored the dependabot/npm_and_yarn/services/ui-src/moment-2.29.4 branch July 27, 2023 19:02
@karla-vm
Copy link
Contributor

@dependabot rebase

@karla-vm karla-vm reopened this Jul 27, 2023
@karla-vm karla-vm enabled auto-merge (squash) July 27, 2023 19:02
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/services/ui-src/moment-2.29.4 branch from ac684b2 to 3f699f2 Compare July 27, 2023 19:03
Bumps [moment](https://github.com/moment/moment) from 2.29.2 to 2.29.4.
- [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md)
- [Commits](moment/moment@2.29.2...2.29.4)

---
updated-dependencies:
- dependency-name: moment
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/services/ui-src/moment-2.29.4 branch from 3f699f2 to a326e30 Compare July 27, 2023 19:05
@codeclimate
Copy link

codeclimate bot commented Jul 27, 2023

Code Climate has analyzed commit a326e30 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (90% is the threshold).

This pull request will bring the total coverage in the repository to 55.6%.

View more on Code Climate.

@karla-vm karla-vm merged commit ff25905 into main Aug 1, 2023
14 checks passed
@karla-vm karla-vm deleted the dependabot/npm_and_yarn/services/ui-src/moment-2.29.4 branch August 1, 2023 13:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant