FightForSub / ffs-zera

Fight For Subs Front
https://ffs-events.zerator.com/
GNU General Public License v3.0
26 stars 9 forks source link

chore(deps): update dependency react-draft-wysiwyg to v1.14.6 [security] #156

Open renovate[bot] opened 3 years ago

renovate[bot] commented 3 years ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
react-draft-wysiwyg 1.13.2 -> 1.14.6 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-31712

react-draft-wysiwyg (aka React Draft Wysiwyg) before 1.14.6 allows a javascript: URi in a Link Target of the link decorator in decorators/Link/index.js when a draft is shared across users, leading to XSS.


Release Notes

jpuri/react-draft-wysiwyg ### [`v1.14.6`](https://togithub.com/jpuri/react-draft-wysiwyg/compare/4d0aaf6b6bb28b7c04a46cef384c2594d26daacc...d2faeb612b53f10dff048de7dc57e1f4044b5380) [Compare Source](https://togithub.com/jpuri/react-draft-wysiwyg/compare/4d0aaf6b6bb28b7c04a46cef384c2594d26daacc...d2faeb612b53f10dff048de7dc57e1f4044b5380) ### [`v1.14.5`](https://togithub.com/jpuri/react-draft-wysiwyg/compare/b917617f913c2c908f126cf0a8262c1c72470fed...4d0aaf6b6bb28b7c04a46cef384c2594d26daacc) [Compare Source](https://togithub.com/jpuri/react-draft-wysiwyg/compare/b917617f913c2c908f126cf0a8262c1c72470fed...4d0aaf6b6bb28b7c04a46cef384c2594d26daacc) ### [`v1.14.4`](https://togithub.com/jpuri/react-draft-wysiwyg/compare/9915eaaa899a6720a1e8560f72f415a050bce467...b917617f913c2c908f126cf0a8262c1c72470fed) [Compare Source](https://togithub.com/jpuri/react-draft-wysiwyg/compare/9915eaaa899a6720a1e8560f72f415a050bce467...b917617f913c2c908f126cf0a8262c1c72470fed) ### [`v1.14.3`](https://togithub.com/jpuri/react-draft-wysiwyg/compare/9915eaaa899a6720a1e8560f72f415a050bce467...9915eaaa899a6720a1e8560f72f415a050bce467) [Compare Source](https://togithub.com/jpuri/react-draft-wysiwyg/compare/9915eaaa899a6720a1e8560f72f415a050bce467...9915eaaa899a6720a1e8560f72f415a050bce467) ### [`v1.14.2`](https://togithub.com/jpuri/react-draft-wysiwyg/compare/5bdebf86c655632136d395332de643c13227c734...9915eaaa899a6720a1e8560f72f415a050bce467) [Compare Source](https://togithub.com/jpuri/react-draft-wysiwyg/compare/5bdebf86c655632136d395332de643c13227c734...9915eaaa899a6720a1e8560f72f415a050bce467) ### [`v1.14.1`](https://togithub.com/jpuri/react-draft-wysiwyg/compare/610d8f588fdb122af38a5988e639c9b2f09a4f17...5bdebf86c655632136d395332de643c13227c734) [Compare Source](https://togithub.com/jpuri/react-draft-wysiwyg/compare/610d8f588fdb122af38a5988e639c9b2f09a4f17...5bdebf86c655632136d395332de643c13227c734) ### [`v1.14.0`](https://togithub.com/jpuri/react-draft-wysiwyg/compare/0ac8d9e053f9d5739bbb9690ccaf3eba60c70fc9...610d8f588fdb122af38a5988e639c9b2f09a4f17) [Compare Source](https://togithub.com/jpuri/react-draft-wysiwyg/compare/0ac8d9e053f9d5739bbb9690ccaf3eba60c70fc9...610d8f588fdb122af38a5988e639c9b2f09a4f17)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

renovate[bot] commented 3 years ago

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻️ Renovate will retry this branch, including artifacts, only when one of the following happens:

The artifact failure details are included below:

File name: package-lock.json
npm ERR! Linux 4.15.0-1050-aws
npm ERR! argv "/usr/local/node/14.16.1/bin/node" "/home/ubuntu/.npm-global/bin/npm" "install" "--package-lock-only" "--no-audit" "--ignore-scripts"
npm ERR! node v14.16.1
npm ERR! npm  v3.10.10

npm ERR! cb.apply is not a function
npm ERR! 
npm ERR! If you need help, you may report this error at:
npm ERR!     <https://github.com/npm/npm/issues>

npm ERR! Please include the following file with any support request:
npm ERR!     /mnt/renovate/gh/FightForSub/ffs-zera/npm-debug.log
renovate[bot] commented 1 year ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.