Closed dependabot[bot] closed 3 months ago
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
Package | New capabilities | Transitives | Size | Publisher |
---|---|---|---|---|
npm/@jest/expect-utils@29.3.1 | None | +1 |
30.4 kB | simenb |
npm/@types/express-serve-static-core@4.17.32 | None | +3 |
3.48 MB | types |
npm/@types/express@4.17.15 | None | +8 |
3.52 MB | types |
npm/@types/serve-static@1.15.0 | None | +2 |
3.44 MB | types |
npm/accepts@1.3.8 | None | +3 |
268 kB | dougwilson |
npm/chokidar@3.5.3 | environment, filesystem | +11 |
461 kB | paulmillr |
npm/grapheme-splitter@1.0.4 | None | 0 |
237 kB | orling |
npm/has-bigints@1.0.2 | None | 0 |
12.8 kB | ljharb |
npm/is-docker@2.2.1 | filesystem | 0 |
3.01 kB | sindresorhus |
npm/js-sdsl@4.3.0 | None | 0 |
1.09 MB | yaozilong |
npm/magic-string@0.25.9 | None | 0 |
373 kB | antfu |
npm/memfs@3.4.13 | filesystem Transitive: unsafe | +1 |
202 kB | streamich |
npm/minimist@1.2.7 | None | 0 |
50.7 kB | ljharb |
npm/obuf@1.1.2 | None | 0 |
19.1 kB | indutny |
npm/open@8.4.0 | environment, filesystem, shell | +3 |
57.6 kB | sindresorhus |
npm/parseurl@1.3.3 | None | 0 |
10.3 kB | dougwilson |
🚮 Removed packages: npm/postcss-selector-parser@6.0.11, npm/postcss-value-parser@4.2.0, npm/prettier@2.8.3, npm/pretty-format@27.5.1, npm/prompts@2.4.2, npm/prop-types@15.8.1, npm/react-dom@18.2.0, npm/react-elastic-carousel@0.11.5, npm/react-icons@4.7.1, npm/react-multi-carousel@2.8.2, npm/react-otp-input@2.4.0, npm/react-phone-number-input@3.2.18, npm/react-router-dom@6.7.0, npm/react-scripts@5.0.1, npm/react-slick@0.29.0, npm/react@18.2.0, npm/regenerator-runtime@0.13.11, npm/resize-observer-polyfill@1.5.0, npm/resolve@1.22.1, npm/rimraf@3.0.2, npm/schema-utils@3.1.1, npm/semver@6.3.0, npm/signal-exit@3.0.7, npm/source-map-js@1.0.2, npm/source-map-support@0.5.21, npm/string.prototype.matchall@4.0.8, npm/strip-json-comments@3.1.1, npm/styled-components@5.3.6, npm/supports-color@7.2.0, npm/tapable@2.2.1, npm/terser-webpack-plugin@5.3.6, npm/terser@5.16.1, npm/tslib@2.5.0, npm/type-check@0.4.0, npm/typescript@4.9.4, npm/util-deprecate@1.0.2, npm/web-vitals@2.1.4, npm/whatwg-url@8.7.0, npm/word-wrap@1.2.3, npm/yaml@1.10.2
Stale pull request message
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version
or @dependabot ignore this minor version
.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
Bumps ip from 1.1.8 to 1.1.9.
Commits
1ecbf2f
1.1.96a3ada9
lib: fixed CVE-2023-42282 and added unit testDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show