KDWSS / angular-components

Angular components for r$ch web applications
https://platform.uipath.com
MIT License
0 stars 0 forks source link

chore(deps): update dependency moment-timezone to v0.5.35 - autoclosed #84

Closed mend-for-github-com[bot] closed 1 year ago

mend-for-github-com[bot] commented 2 years ago

This PR contains the following updates:

Package Type Update Change
moment-timezone (source) peerDependencies patch ~0.5.33 -> ~0.5.35
moment-timezone (source) dependencies patch 0.5.33 -> 0.5.35

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
Critical 9.8 WS-2022-0280 #83
Critical 9.1 WS-2022-0284 #82

Release Notes

moment/moment-timezone ### [`v0.5.35`](https://togithub.com/moment/moment-timezone/blob/HEAD/changelog.md#​0535-2022-08-23) [Compare Source](https://togithub.com/moment/moment-timezone/compare/0.5.34...0.5.35) - Fix command injection in data pipeline https://github.com/moment/moment-timezone/security/advisories/GHSA-56x4-j7p9-fcf9 - Fix cleartext transmission of sensitive information https://github.com/moment/moment-timezone/security/advisories/GHSA-v78c-4p63-2j6c Thanks to the OpenSSF Alpha-Omega project for reporting these! ### [`v0.5.34`](https://togithub.com/moment/moment-timezone/blob/HEAD/changelog.md#​0534-2021-11-10) [Compare Source](https://togithub.com/moment/moment-timezone/compare/0.5.33...0.5.34) - Updated data to IANA TZDB `2021e`