Ticket 3221 - Dependabot critical vulnerability fixes #273
Commits on Jun 7, 2024
-
-
Bump minimist, mkdirp, http-server, karma, handlebars and protractor
Bumps [minimist](https://github.com/minimistjs/minimist) to 1.2.8 and updates ancestor dependencies [minimist](https://github.com/minimistjs/minimist), [mkdirp](https://github.com/isaacs/node-mkdirp), [http-server](https://github.com/http-party/http-server), [karma](https://github.com/karma-runner/karma), [handlebars](https://github.com/handlebars-lang/handlebars.js) and [protractor](https://github.com/angular/protractor). These dependencies need to be updated together. Updates `minimist` from 1.2.0 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.0...v1.2.8) Updates `mkdirp` from 0.5.1 to 0.5.6 - [Changelog](https://github.com/isaacs/node-mkdirp/blob/main/CHANGELOG.md) - [Commits](isaacs/node-mkdirp@0.5.1...v0.5.6) Updates `http-server` from 0.11.1 to 14.1.1 - [Release notes](https://github.com/http-party/http-server/releases) - [Commits](http-party/http-server@0.11.1...v14.1.1) Updates `karma` from 3.1.4 to 6.4.3 - [Release notes](https://github.com/karma-runner/karma/releases) - [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md) - [Commits](karma-runner/karma@v3.1.4...v6.4.3) Updates `handlebars` from 4.1.0 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.1.0...v4.7.8) Updates `protractor` from 5.4.2 to 5.4.4 - [Release notes](https://github.com/angular/protractor/releases) - [Changelog](https://github.com/angular/protractor/blob/5.4.4/CHANGELOG.md) - [Commits](angular/protractor@5.4.2...5.4.4) --- updated-dependencies: - dependency-name: minimist dependency-type: indirect - dependency-name: mkdirp dependency-type: indirect - dependency-name: http-server dependency-type: direct:development - dependency-name: karma dependency-type: direct:development - dependency-name: handlebars dependency-type: indirect - dependency-name: protractor dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>
-
Bump json-schema and jsprim in /web
Bumps [json-schema](https://github.com/kriszyp/json-schema) and [jsprim](https://github.com/joyent/node-jsprim). These dependencies needed to be updated together. Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `jsprim` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md) - [Commits](TritonDataCenter/node-jsprim@v1.4.1...v1.4.2) --- updated-dependencies: - dependency-name: json-schema dependency-type: indirect - dependency-name: jsprim dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]>
-
Bump set-value and union-value in /web
Bumps [set-value](https://github.com/jonschlinkert/set-value) and [union-value](https://github.com/jonschlinkert/union-value). These dependencies needed to be updated together. Updates `set-value` from 2.0.0 to 2.0.1 - [Commits](jonschlinkert/set-value@2.0.0...2.0.1) Updates `union-value` from 1.0.0 to 1.0.1 - [Release notes](https://github.com/jonschlinkert/union-value/releases) - [Commits](jonschlinkert/union-value@1.0.0...1.0.1) --- updated-dependencies: - dependency-name: set-value dependency-type: indirect - dependency-name: union-value dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]>
-
Bump mixin-deep from 1.3.1 to 1.3.2
Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. - [Release notes](https://github.com/jonschlinkert/mixin-deep/releases) - [Commits](jonschlinkert/mixin-deep@1.3.1...1.3.2) Signed-off-by: dependabot[bot] <[email protected]>
-
Bump lodash from 4.17.11 to 4.17.21 in /web
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.21. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.11...4.17.21) Signed-off-by: dependabot[bot] <[email protected]>
-
Merge pull request #272 from bcgov/dev-AH-FOIMOD3221-FINAL
Ticket 3221 - Dependabot critical vulnerability fixes
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.