fix(deps): update all non-major dependencies #7392
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
bluwy
previously approved these changes
Mar 21, 2022
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
from
2aaf2ec to
eb6f8f0
Compare
patak-dev
previously approved these changes
Mar 21, 2022
|
@bluwy do you know why it is a |
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
from
eb6f8f0 to
3f84441
Compare
|
According to the docs, looks like renovate does so when updating prod deps, likely so that release tools like semantic-release would keep the commit in the changelog. |
bluwy
approved these changes
Mar 22, 2022
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^7.17.7->^7.17.8^7.17.7->^7.17.8^7.17.7->^7.17.8^5.15.0->^5.16.0^5.15.0->^5.16.0^4.3.3->^4.3.4^0.10.1->^0.10.4^2.2.0->^2.2.1^12.3.6->^12.3.7^1.2.1->^1.3.0Release Notes
babel/babel (@babel/core)
v7.17.8Compare Source
👓 Spec Compliance
babel-helpers,babel-plugin-proposal-decorators🐛 Bug Fix
babel-plugin-transform-modules-systemjslet/constshadowing imported bindings (@The-x-Theorist)babel-parser↩️ Revert
babel-parser<T>() => {}TSX error to Babel 8 (@nicolo-ribaudo)babel/babel (@babel/parser)
v7.17.8Compare Source
v7.17.8 (2022-03-18)
👓 Spec Compliance
babel-helpers,babel-plugin-proposal-decorators🐛 Bug Fix
babel-plugin-transform-modules-systemjslet/constshadowing imported bindings (@The-x-Theorist)babel-parser↩️ Revert
babel-parser<T>() => {}TSX error to Babel 8 (@nicolo-ribaudo)Committers: 4
typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)
v5.16.0Compare Source
Bug Fixes
constassertions (#4685) (8ec05be)Features
typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v5.16.0Compare Source
Note: Version bump only for package @typescript-eslint/parser
debug-js/debug
v4.3.4Compare Source
What's Changed
New Contributors
Full Changelog: debug-js/debug@4.3.3...4.3.4
guybedford/es-module-lexer
v0.10.4Compare Source
What's Changed
Full Changelog: guybedford/es-module-lexer@0.10.3...0.10.4
v0.10.3Compare Source
What's Changed
Full Changelog: guybedford/es-module-lexer@0.10.2...0.10.3
v0.10.2Compare Source
What's Changed
Full Changelog: guybedford/es-module-lexer@0.10.1...0.10.2
json5/json5
v2.2.1Compare Source
okonet/lint-staged
v12.3.7Compare Source
Bug Fixes
--silentandFORCE_COLORsettings (d327873)digitalbazaar/forge
v1.3.0Compare Source
Security
Yahyazadeh (moosa-yahyazadeh@uiowa.edu).
digestAlgorithmstructure can lead tosignature forgery.
allow a crafted structure that steals padding bytes and uses unchecked
portion of the PKCS#1 encoded message to forge a signature when a low
public exponent is being used. For more information, please see
"Bleichenbacher's RSA signature forgery based on implementation
error"
by Hal Finney.
forgery.
DigestInfoASN.1 structure. This can allow padding bytes to be removedand garbage data added to forge a signature when a low public exponent is
being used. For more information, please see "Bleichenbacher's RSA
signature forgery based on implementation
error"
by Hal Finney.
DigestInfois not properly checked for proper ASN.1 structure. This canlead to successful verification with signatures that contain invalid
structures but a valid digest.
Fixed
fromDeris now more strict and will default to ensuring all inputbytes are parsed or throw an error. A new option
parseAllBytescan disablethis behavior.
security issues with crafted inputs. It is possible that code doing custom
DER parsing may need to adapt to this new behavior and optional flag.
RSASSA-PKCS-v1_5DigestInfodata. Additionally check that the hashalgorithm identifier is a known value from RFC 8017
PKCS1-v1-5DigestAlgorithms. An invalidDigestInfoor algorithm identifierwill now throw an error.
since it could lead to security issues with crafted inputs. It is possible
that code may have to handle the errors from these stricter checks.
Added
identifiers:
1.2.840.113549.2.2/md22.16.840.1.101.3.4.2.4/sha2242.16.840.1.101.3.4.2.5/sha512-2242.16.840.1.101.3.4.2.6/sha512-256Configuration
📅 Schedule: "before 3am on Monday" (UTC).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by WhiteSource Renovate. View repository job log here.