Release 2.8.10

• Merge pull request #112 from texastribune/dependabot/npm_and_yarn/node-fetch-2.6.7 (6cd4185)
• Bump node-fetch from 2.6.1 to 2.6.7 (cc033ca)
• Merge pull request #111 from texastribune/security-updates (c17e3ea)
• Update changelog for next release (9f59782)
• Bump release-it from 13.6.6 to 14.12.3 (c1df11b)
• Bump jwks-rsa from 1.8.0 to 2.0.5 (87ab13b)
• Run npm audit fix for security patches (e169b72)
• Bump validator from 10.11.0 to 13.7.0 (061788f)
• update README and CHANGELOG (03ab190)

Release 2.8.9

• Merge pull request #96 from texastribune/dependabot/npm_and_yarn/axios-0.21.2 (25a8c2e)
• Bump axios from 0.21.1 to 0.21.2 (8597f70)

Release 2.8.8

• Merge pull request #92 from texastribune/dependabot/npm_and_yarn/path-parse-1.0.7 (699b8d6)
• Bump path-parse from 1.0.6 to 1.0.7 (d500748)
• Merge pull request #82 from texastribune/dependabot/npm_and_yarn/postcss-7.0.36 (1fc8527)
• Bump postcss from 7.0.27 to 7.0.36 (b699a30)
• Merge pull request #74 from texastribune/dependabot/add-v2-config-file (644e33d)
• enable github-native dependabot (49e71fe)
• Upgrade to GitHub-native Dependabot (1fbe242)

Release 2.8.7

• run npm audit fix (41284e7)
• Merge pull request #76 from texastribune/dependabot/npm_and_yarn/hosted-git-info-2.8.9 (be1def6)
• Merge pull request #75 from texastribune/dependabot/npm_and_yarn/underscore-1.13.1 (0062623)
• [Security] Bump hosted-git-info from 2.8.8 to 2.8.9 (86b36e4)
• [Security] Bump underscore from 1.10.2 to 1.13.1 (17cd6cd)

Release 2.8.6

• update ssri to 6.0.2 for security patch (80e5a28)

Release 2.8.5

• Merge pull request #72 from texastribune/dependabot/npm_and_yarn/y18n-4.0.1 (86de312)
• [Security] Bump y18n from 4.0.0 to 4.0.1 (5a46471)

Release 2.8.4

• Merge pull request #69 from texastribune/dependabot/npm_and_yarn/pug-3.0.1 (09672c1)
• Merge pull request #70 from texastribune/dependabot/npm_and_yarn/elliptic-6.5.4 (34ac27c)
• [Security] Bump elliptic from 6.5.3 to 6.5.4 (a6fc3c5)
• [Security] Bump pug from 2.0.4 to 3.0.1 (06bd282)

Release 2.8.3

• update changelog (8107906)
• Merge pull request #67 from texastribune/dependabot/npm_and_yarn/axios-0.21.1 (0989c2e)
• [Security] Bump axios from 0.19.2 to 0.21.1 (25dc6dd)

Release 2.8.2

• update changelog (68afed2)
• make view-validation failures warnings, not errors (d3b1856)
• run npm audit fix (99c3706)
• remove seeder (0d3d3a8)

Release 2.8.1

• Merge pull request #66 from texastribune/more-elex (be764ac)
• add comment (2eb0eef)
• bring back url-length validation to model and gql scalars (8f0b337)
• make validator match version used internally in sequelize (899157e)
• remove election-specific logic (433b756)
• delete election-specific script (b35f9c1)