DeviaVir / zenbot

Zenbot is a command-line cryptocurrency trading bot using Node.js and MongoDB.
MIT License
8.22k stars 2.04k forks source link

[Snyk] Upgrade bootstrap from 4.6.0 to 4.6.1 #2807

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to upgrade bootstrap from 4.6.0 to 4.6.1.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Release notes
Package name: bootstrap from bootstrap GitHub release notes
Commit messages
Package name: bootstrap
  • 043a03c Release v4.6.1 (#35272)
  • ef6a418 images.md: remove zero-width space (#35234)
  • 3f88326 Update devDependencies (#35271)
  • 4133069 Update devDependencies and switch to Node.js 16/npm 8
  • fc492ed terser: specify 2 passes as it offers slightly better compression
  • fe73da9 JS: minor refactoring
  • 4f0187c Revert "Bundlewatch: stop ignoring dependabot branches (#33192)" (#35069)
  • 6d0fd8c Backport #35074
  • 7b3a47e Update terser to v5.9.0.
  • e482fbb fix(input-group): custom-file with validation (#33239)
  • 8133c3e Fix capitalization after period in Markdown files (#35112)
  • 44a01ec Update devDependencies (#35068)
  • 8ebd6d9 Remove extra spaces in Markdown files (#35047)
  • bdab948 Remove unneeded conditional
  • af52795 Remove duplicate test.
  • f6ff736 Change test description so that it's unique
  • 77e0855 Merge duplicate test.
  • ed62ab6 Remove commented out test
  • d4e162f Skip tests if `attachShadow` is not present
  • 551f37a tests: comply to the new rules
  • 5391ecd Add eslint-plugin-qunit
  • e202996 Update devDependencies
  • cb55e38 Update CodeQL workflow (#34961)
  • 08a550a Backport #34937
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs