chore(deps): bump axios to 1.7.5 to address CVE-2024-39338 #332
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
zimeg
added
dependencies
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #332 +/- ##
=======================================
Coverage 97.91% 97.91%
=======================================
Files 2 2
Lines 96 96
=======================================
Hits 94 94
Misses 2 2 ☔ View full report in Codecov by Sentry. |
filmaj
approved these changes
Aug 28, 2024
adamnolte
referenced
this pull request
in autoblocksai/autoblocks-examples
Sep 3, 2024
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | Type | Update | |---|---|---|---|---|---|---|---| | [@tailwindcss/forms](https://redirect.github.com/tailwindlabs/tailwindcss-forms) | [`0.5.7` -> `0.5.8`](https://renovatebot.com/diffs/npm/@tailwindcss%2fforms/0.5.7/0.5.8) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | | [@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node) ([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)) | [`20.16.1` -> `20.16.3`](https://renovatebot.com/diffs/npm/@types%2fnode/20.16.1/20.16.3) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | | [@types/react](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react) ([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react)) | [`18.3.4` -> `18.3.5`](https://renovatebot.com/diffs/npm/@types%2freact/18.3.4/18.3.5) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | | [ai](https://sdk.vercel.ai/docs) ([source](https://redirect.github.com/vercel/ai)) | [`3.3.18` -> `3.3.25`](https://renovatebot.com/diffs/npm/ai/3.3.18/3.3.25) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | | [dspy-ai](https://redirect.github.com/stanfordnlp/dsp) | `2.4.13` -> `2.4.14` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | | [eslint-config-next](https://nextjs.org/docs/app/building-your-application/configuring/eslint#eslint-config) ([source](https://redirect.github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next)) | [`14.2.6` -> `14.2.7`](https://renovatebot.com/diffs/npm/eslint-config-next/14.2.6/14.2.7) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | | [guardrails-ai](https://www.guardrailsai.com/) | `0.5.5` -> `0.5.6` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | | [httpx](https://redirect.github.com/encode/httpx) ([changelog](https://redirect.github.com/encode/httpx/blob/master/CHANGELOG.md)) | `0.27.0` -> `0.27.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | | [next](https://nextjs.org) ([source](https://redirect.github.com/vercel/next.js)) | [`14.2.6` -> `14.2.7`](https://renovatebot.com/diffs/npm/next/14.2.6/14.2.7) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | | [openai](https://redirect.github.com/openai/openai-python) | `1.42.0` -> `1.43.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor | | [openai](https://redirect.github.com/openai/openai-node) | [`4.56.0` -> `4.57.0`](https://renovatebot.com/diffs/npm/openai/4.56.0/4.57.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor | | [postcss](https://postcss.org/) ([source](https://redirect.github.com/postcss/postcss)) | [`8.4.41` -> `8.4.44`](https://renovatebot.com/diffs/npm/postcss/8.4.41/8.4.44) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | | [slackapi/slack-github-action](https://redirect.github.com/slackapi/slack-github-action) | `v1.26.0` -> `v1.27.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | action | minor | | [tsx](https://tsx.is) ([source](https://redirect.github.com/privatenumber/tsx)) | [`4.18.0` -> `4.19.0`](https://renovatebot.com/diffs/npm/tsx/4.18.0/4.19.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor | --- ### Release Notes <details> <summary>tailwindlabs/tailwindcss-forms (@​tailwindcss/forms)</summary> ### [`v0.5.8`](https://redirect.github.com/tailwindlabs/tailwindcss-forms/blob/HEAD/CHANGELOG.md#058---2024-08-28) [Compare Source](https://redirect.github.com/tailwindlabs/tailwindcss-forms/compare/v0.5.7...v0.5.8) ##### Fixed - Support installing with alpha versions of Tailwind CSS v4 ([#​163](https://redirect.github.com/tailwindlabs/tailwindcss-forms/pull/163)) </details> <details> <summary>vercel/ai (ai)</summary> ### [`v3.3.25`](https://redirect.github.com/vercel/ai/releases/tag/ai%403.3.25) [Compare Source](https://redirect.github.com/vercel/ai/compare/ai@3.3.24...ai@3.3.25) ##### Patch Changes - [`4f1530f`](https://redirect.github.com/vercel/ai/commit/4f1530f): feat (ai/core): add OpenTelemetry Semantic Conventions for GenAI operations to v1.27.0 of standard - [`dad775f`](https://redirect.github.com/vercel/ai/commit/dad775f): feat (ai/core): add finish event and avg output tokens per second (telemetry) ### [`v3.3.24`](https://redirect.github.com/vercel/ai/releases/tag/ai%403.3.24) [Compare Source](https://redirect.github.com/vercel/ai/compare/ai@3.3.23...ai@3.3.24) ##### Patch Changes - [`d87a655`](https://redirect.github.com/vercel/ai/commit/d87a655): fix (ai/core): provide fallback when globalThis.performance is not available ### [`v3.3.23`](https://redirect.github.com/vercel/ai/releases/tag/ai%403.3.23) [Compare Source](https://redirect.github.com/vercel/ai/compare/ai@3.3.22...ai@3.3.23) ##### Patch Changes - [`b55e6f7`](https://redirect.github.com/vercel/ai/commit/b55e6f7): fix (ai/core): streamObject text stream in array mode must not include elements: prefix. ### [`v3.3.22`](https://redirect.github.com/vercel/ai/releases/tag/ai%403.3.22) [Compare Source](https://redirect.github.com/vercel/ai/compare/ai@3.3.21...ai@3.3.22) ##### Patch Changes - [`a5a56fd`](https://redirect.github.com/vercel/ai/commit/a5a56fd): fix (ai/core): only send roundtrip-finish event after async tool calls are done ### [`v3.3.21`](https://redirect.github.com/vercel/ai/releases/tag/ai%403.3.21) [Compare Source](https://redirect.github.com/vercel/ai/compare/ai@3.3.20...ai@3.3.21) ##### Patch Changes - [`aa2dc58`](https://redirect.github.com/vercel/ai/commit/aa2dc58): feat (ai/core): add maxToolRoundtrips to streamText - Updated dependencies \[[`aa2dc58`](https://redirect.github.com/vercel/ai/commit/aa2dc58)] - [@​ai-sdk/ui-utils](https://redirect.github.com/ai-sdk/ui-utils)[@​0](https://redirect.github.com/0).0.40 - [@​ai-sdk/react](https://redirect.github.com/ai-sdk/react)[@​0](https://redirect.github.com/0).0.53 - [@​ai-sdk/solid](https://redirect.github.com/ai-sdk/solid)[@​0](https://redirect.github.com/0).0.43 - [@​ai-sdk/svelte](https://redirect.github.com/ai-sdk/svelte)[@​0](https://redirect.github.com/0).0.45 - [@​ai-sdk/vue](https://redirect.github.com/ai-sdk/vue)[@​0](https://redirect.github.com/0).0.45 ### [`v3.3.20`](https://redirect.github.com/vercel/ai/releases/tag/ai%403.3.20) [Compare Source](https://redirect.github.com/vercel/ai/compare/ai@3.3.19...ai@3.3.20) ##### Patch Changes - [`7807677`](https://redirect.github.com/vercel/ai/commit/7807677): fix (rsc): Deep clone currentState in getMutableState() ### [`v3.3.19`](https://redirect.github.com/vercel/ai/releases/tag/ai%403.3.19) [Compare Source](https://redirect.github.com/vercel/ai/compare/ai@3.3.18...ai@3.3.19) ##### Patch Changes - [`7235de0`](https://redirect.github.com/vercel/ai/commit/7235de0): fix (ai/core): convertToCoreMessages accepts Message\[] </details> <details> <summary>stanfordnlp/dsp (dspy-ai)</summary> ### [`v2.4.14`](https://redirect.github.com/stanfordnlp/dspy/releases/tag/2.4.14): DSPy v2.4.14 [Compare Source](https://redirect.github.com/stanfordnlp/dsp/compare/2.4.13...2.4.14) </details> <details> <summary>vercel/next.js (eslint-config-next)</summary> ### [`v14.2.7`](https://redirect.github.com/vercel/next.js/compare/v14.2.6...v14.2.7) [Compare Source](https://redirect.github.com/vercel/next.js/compare/v14.2.6...v14.2.7) </details> <details> <summary>encode/httpx (httpx)</summary> ### [`v0.27.2`](https://redirect.github.com/encode/httpx/blob/HEAD/CHANGELOG.md#0272-27th-August-2024) [Compare Source](https://redirect.github.com/encode/httpx/compare/0.27.1...0.27.2) ##### Fixed - Reintroduced supposedly-private `URLTypes` shortcut. ([#​2673](https://redirect.github.com/encode/httpx/issues/2673)) ### [`v0.27.1`](https://redirect.github.com/encode/httpx/blob/HEAD/CHANGELOG.md#0271-27th-August-2024) [Compare Source](https://redirect.github.com/encode/httpx/compare/0.27.0...0.27.1) ##### Added - Support for `zstd` content decoding using the python `zstandard` package is added. Installable using `httpx[zstd]`. ([#​3139](https://redirect.github.com/encode/httpx/issues/3139)) ##### Fixed - Improved error messaging for `InvalidURL` exceptions. ([#​3250](https://redirect.github.com/encode/httpx/issues/3250)) - Fix `app` type signature in `ASGITransport`. ([#​3109](https://redirect.github.com/encode/httpx/issues/3109)) </details> <details> <summary>vercel/next.js (next)</summary> ### [`v14.2.7`](https://redirect.github.com/vercel/next.js/compare/v14.2.6...v14.2.7) [Compare Source](https://redirect.github.com/vercel/next.js/compare/v14.2.6...v14.2.7) </details> <details> <summary>openai/openai-python (openai)</summary> ### [`v1.43.0`](https://redirect.github.com/openai/openai-python/blob/HEAD/CHANGELOG.md#1430-2024-08-29) [Compare Source](https://redirect.github.com/openai/openai-python/compare/v1.42.0...v1.43.0) Full Changelog: [v1.42.0...v1.43.0](https://redirect.github.com/openai/openai-python/compare/v1.42.0...v1.43.0) ##### Features - **api:** add file search result details to run steps ([#​1681](https://redirect.github.com/openai/openai-python/issues/1681)) ([f5449c0](https://redirect.github.com/openai/openai-python/commit/f5449c07580ac9707f0387f86f4772fbf0a874b6)) </details> <details> <summary>openai/openai-node (openai)</summary> ### [`v4.57.0`](https://redirect.github.com/openai/openai-node/blob/HEAD/CHANGELOG.md#4570-2024-08-29) [Compare Source](https://redirect.github.com/openai/openai-node/compare/v4.56.2...v4.57.0) Full Changelog: [v4.56.2...v4.57.0](https://redirect.github.com/openai/openai-node/compare/v4.56.2...v4.57.0) ##### Features - **api:** add file search result details to run steps ([#​1023](https://redirect.github.com/openai/openai-node/issues/1023)) ([d9acd0a](https://redirect.github.com/openai/openai-node/commit/d9acd0a2c52b27983f8db6a8de6a776078b1d41b)) ##### Bug Fixes - install examples deps as part of bootstrap script ([#​1022](https://redirect.github.com/openai/openai-node/issues/1022)) ([eae8e36](https://redirect.github.com/openai/openai-node/commit/eae8e36fd5514eb60773646ec775badde50e783c)) ### [`v4.56.2`](https://redirect.github.com/openai/openai-node/blob/HEAD/CHANGELOG.md#4562-2024-08-29) [Compare Source](https://redirect.github.com/openai/openai-node/compare/v4.56.1...v4.56.2) Full Changelog: [v4.56.1...v4.56.2](https://redirect.github.com/openai/openai-node/compare/v4.56.1...v4.56.2) ##### Chores - run tsc as part of lint script ([#​1020](https://redirect.github.com/openai/openai-node/issues/1020)) ([4942347](https://redirect.github.com/openai/openai-node/commit/49423472f2b0a0b63961174bedfc00bfd99d47f9)) ### [`v4.56.1`](https://redirect.github.com/openai/openai-node/blob/HEAD/CHANGELOG.md#4561-2024-08-27) [Compare Source](https://redirect.github.com/openai/openai-node/compare/v4.56.0...v4.56.1) Full Changelog: [v4.56.0...v4.56.1](https://redirect.github.com/openai/openai-node/compare/v4.56.0...v4.56.1) ##### Chores - **ci:** check for build errors ([#​1013](https://redirect.github.com/openai/openai-node/issues/1013)) ([7ff2127](https://redirect.github.com/openai/openai-node/commit/7ff21273091a605e05173502654cfb9c90a4382e)) </details> <details> <summary>postcss/postcss (postcss)</summary> ### [`v8.4.44`](https://redirect.github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8444) [Compare Source](https://redirect.github.com/postcss/postcss/compare/8.4.43...8.4.44) - Another way to fix `markClean is not a function` error. ### [`v8.4.43`](https://redirect.github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8443) [Compare Source](https://redirect.github.com/postcss/postcss/compare/8.4.42...8.4.43) - Fixed `markClean is not a function` error. ### [`v8.4.42`](https://redirect.github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8442) [Compare Source](https://redirect.github.com/postcss/postcss/compare/8.4.41...8.4.42) - Fixed CSS syntax error on long minified files (by [@​varpstar](https://redirect.github.com/varpstar)). </details> <details> <summary>slackapi/slack-github-action (slackapi/slack-github-action)</summary> ### [`v1.27.0`](https://redirect.github.com/slackapi/slack-github-action/releases/tag/v1.27.0): Slack Send V1.27.0 [Compare Source](https://redirect.github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0) #### What's changed This release introduces an optional `payload-delimiter` parameter for flattening nested objects with a customized delimiter before the payload is sent to Slack Workflow Builder when using workflow webhook triggers. ```diff - name: Send a custom flattened payload uses: slackapi/slack-github-action@v1.27.0 + with: + payload-delimiter: "_" env: SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} ``` Setting this value to an underscore (`_`) is recommended when using nested inputs within Workflow Builder to match expected input formats of Workflow Builder, but the actual value can be changed to something else! This "flattening" behavior **did** exist prior to this version, but used a period (`.`) which is not valid for webook inputs in Workflow Builder. <details> <summary>Flattening example</summary> The resulting output of flattened objects is not always clear, but the following can hopefully serve as a quick reference as well as [these specs](https://redirect.github.com/slackapi/slack-github-action/blob/5d1fb07d3c4f410b8d278134c714edff31264beb/test/slack-send-test.js#L264-L319) when using `_` as the delimiter: **Input**: ```json { "apples": "tree", "bananas": { "truthiness": true } } ``` **Output**: ```json { "apples": "tree", "bananas_truthiness": "true" } ``` Notice that `bananas_truthiness` is also stringified in this process, as part of updating values to match the expected inputs of Workflow Builder! </details> #### Changes In addition to the changes above, the following lists all of the changes since the prior version with the **complete changelog** changes found here: slackapi/slack-github-action@v1.26.0...v1.27.0 ##### 🎁 Enhancements - Make payload delimiter configurable in [https://github.com/slackapi/slack-github-action/pull/281](https://redirect.github.com/slackapi/slack-github-action/pull/281) - thanks [@​rzumer](https://redirect.github.com/rzumer)! ##### 📚 Documentation - doc: how to reply to a message in [https://github.com/slackapi/slack-github-action/pull/309](https://redirect.github.com/slackapi/slack-github-action/pull/309) - thanks [@​WilliamBergamin](https://redirect.github.com/WilliamBergamin)! ##### 🔒 Security - chore(deps): bump axios to 1.7.5 to address CVE-2024-39338 in [https://github.com/slackapi/slack-github-action/pull/332](https://redirect.github.com/slackapi/slack-github-action/pull/332) - thanks [@​zimeg](https://redirect.github.com/zimeg)! ##### 🧪 Maintenance - Add codecov coverage uploading in [https://github.com/slackapi/slack-github-action/pull/308](https://redirect.github.com/slackapi/slack-github-action/pull/308) - thanks [@​filmaj](https://redirect.github.com/filmaj)! - ci(test): run integration tests in a single sequential environment in [https://github.com/slackapi/slack-github-action/pull/310](https://redirect.github.com/slackapi/slack-github-action/pull/310) - thanks [@​zimeg](https://redirect.github.com/zimeg)! ##### 📦 Dependencies - Bump eslint-plugin-jsdoc from 48.2.2 to 48.2.3 in [https://github.com/slackapi/slack-github-action/pull/305](https://redirect.github.com/slackapi/slack-github-action/pull/305) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - Bump [@​slack/web-api](https://redirect.github.com/slack/web-api) from 7.0.2 to 7.0.4 in [https://github.com/slackapi/slack-github-action/pull/307](https://redirect.github.com/slackapi/slack-github-action/pull/307) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps-dev): bump sinon from 17.0.1 to 18.0.0 in [https://github.com/slackapi/slack-github-action/pull/313](https://redirect.github.com/slackapi/slack-github-action/pull/313) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps-dev): bump eslint-plugin-jsdoc from 48.2.3 to 48.2.7 in [https://github.com/slackapi/slack-github-action/pull/314](https://redirect.github.com/slackapi/slack-github-action/pull/314) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps): bump axios from 1.6.8 to 1.7.2 in [https://github.com/slackapi/slack-github-action/pull/315](https://redirect.github.com/slackapi/slack-github-action/pull/315) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps): bump codecov/codecov-action from 4.0.1 to 4.4.1 in [https://github.com/slackapi/slack-github-action/pull/316](https://redirect.github.com/slackapi/slack-github-action/pull/316) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps-dev): bump nyc from 15.1.0 to 17.0.0 in [https://github.com/slackapi/slack-github-action/pull/319](https://redirect.github.com/slackapi/slack-github-action/pull/319) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps-dev): bump eslint-plugin-jsdoc from 48.2.7 to 48.5.0 in [https://github.com/slackapi/slack-github-action/pull/321](https://redirect.github.com/slackapi/slack-github-action/pull/321) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps-dev): bump mocha from 10.4.0 to 10.5.2 in [https://github.com/slackapi/slack-github-action/pull/322](https://redirect.github.com/slackapi/slack-github-action/pull/322) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 in [https://github.com/slackapi/slack-github-action/pull/324](https://redirect.github.com/slackapi/slack-github-action/pull/324) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps): bump [@​slack/web-api](https://redirect.github.com/slack/web-api) from 7.0.4 to 7.2.0 in [https://github.com/slackapi/slack-github-action/pull/323](https://redirect.github.com/slackapi/slack-github-action/pull/323) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps): bump https-proxy-agent from 7.0.4 to 7.0.5 in [https://github.com/slackapi/slack-github-action/pull/320](https://redirect.github.com/slackapi/slack-github-action/pull/320) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps-dev): bump eslint-plugin-jsdoc from 48.5.0 to 48.10.2 in [https://github.com/slackapi/slack-github-action/pull/325](https://redirect.github.com/slackapi/slack-github-action/pull/325) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps-dev): bump chai from 4.4.1 to 4.5.0 in [https://github.com/slackapi/slack-github-action/pull/326](https://redirect.github.com/slackapi/slack-github-action/pull/326) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps): bump [@​slack/web-api](https://redirect.github.com/slack/web-api) from 7.2.0 to 7.3.2 in [https://github.com/slackapi/slack-github-action/pull/327](https://redirect.github.com/slackapi/slack-github-action/pull/327) - thanks [@​dependabot](https://redirect.github.com/dependabot)! - build(deps-dev): bump mocha from 10.5.2 to 10.7.0 in [https://github.com/slackapi/slack-github-action/pull/328](https://redirect.github.com/slackapi/slack-github-action/pull/328) - thanks [@​dependabot](https://redirect.github.com/dependabot)! #### 🎉 New contributors - [@​rzumer](https://redirect.github.com/rzumer) made their first contribution in [https://github.com/slackapi/slack-github-action/pull/281](https://redirect.github.com/slackapi/slack-github-action/pull/281)! </details> <details> <summary>privatenumber/tsx (tsx)</summary> ### [`v4.19.0`](https://redirect.github.com/privatenumber/tsx/compare/v4.18.0...157c3ec6bcf0b0a5e387080576404c00f7fd662f) [Compare Source](https://redirect.github.com/privatenumber/tsx/compare/v4.18.0...v4.19.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" in timezone America/Chicago, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/autoblocksai/autoblocks-examples). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC41OS4yIiwidXBkYXRlZEluVmVyIjoiMzguNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
This PR bumps the minimum version of axios to 1.7.5 to address a CVE - see Axios 1.7.4 release notes for more information.
Also here is a bump to
@slack/web-apithat has a similar patch update 🚀Requirements