search

ValentinH / react-easy-crop

A React component to crop images/videos with easy interactions
https://valentinh.github.io/react-easy-crop/
MIT License
2.34k stars 167 forks source link

Bump follow-redirects from 1.15.2 to 1.15.6 #517

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 8 months ago

Bumps follow-redirects from 1.15.2 to 1.15.6.

Commits
  • 35a517c Release version 1.15.6 of the npm package.
  • c4f847f Drop Proxy-Authorization across hosts.
  • 8526b4a Use GitHub for disclosure.
  • b1677ce Release version 1.15.5 of the npm package.
  • d8914f7 Preserve fragment in responseUrl.
  • 6585820 Release version 1.15.4 of the npm package.
  • 7a6567e Disallow bracketed hostnames.
  • 05629af Prefer native URL instead of deprecated url.parse.
  • 1cba8e8 Prefer native URL instead of legacy url.resolve.
  • 72bc2a4 Simplify _processResponse error handling.
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ValentinH/react-easy-crop/network/alerts).
codesandbox-ci[bot] commented 8 months ago

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.

socket-security[bot] commented 8 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@auto-it/all-contributors@10.42.0 environment, filesystem Transitive: eval, network, shell, unsafe +87 17 MB alisowski
npm/@auto-it/first-time-contributor@10.42.0 Transitive: environment, eval, filesystem, network, shell, unsafe +100 17.2 MB alisowski
npm/@auto-it/released@10.42.0 Transitive: environment, eval, filesystem, network, shell, unsafe +68 15.1 MB alisowski
npm/@babel/code-frame@7.18.6 Transitive: environment +8 154 kB nicolo-ribaudo
npm/@babel/compat-data@7.20.14 None 0 57.9 kB nicolo-ribaudo
npm/@babel/core@7.20.12 environment, filesystem, unsafe +44 10.6 MB nicolo-ribaudo
npm/@babel/generator@7.20.14 Transitive: environment +9 3.39 MB nicolo-ribaudo
npm/@babel/helper-compilation-targets@7.20.7 Transitive: environment, filesystem, unsafe +44 10.6 MB nicolo-ribaudo
npm/@babel/helper-create-class-features-plugin@7.20.12 Transitive: environment, filesystem, unsafe +50 10.8 MB nicolo-ribaudo
npm/@babel/helper-create-regexp-features-plugin@7.20.5 Transitive: environment, filesystem, unsafe +46 10.6 MB nicolo-ribaudo
npm/@babel/helper-function-name@7.19.0 Transitive: environment +13 4.67 MB nicolo-ribaudo
npm/@babel/helper-module-imports@7.18.6 Transitive: environment +3 2.55 MB nicolo-ribaudo
npm/@babel/helper-module-transforms@7.20.11 Transitive: environment +30 6.38 MB nicolo-ribaudo
npm/@babel/helper-plugin-utils@7.20.2 None 0 11.9 kB nicolo-ribaudo
npm/@babel/helper-replace-supers@7.20.7 Transitive: environment +30 6.3 MB nicolo-ribaudo
npm/@babel/helper-validator-identifier@7.19.1 None 0 51.7 kB nicolo-ribaudo
npm/@babel/parser@7.20.15 None 0 1.95 MB nicolo-ribaudo
npm/@babel/plugin-proposal-class-properties@7.18.6 Transitive: environment, filesystem, unsafe +52 10.9 MB nicolo-ribaudo
npm/@babel/plugin-proposal-nullish-coalescing-operator@7.18.6 Transitive: environment, filesystem, unsafe +47 10.6 MB nicolo-ribaudo
npm/@babel/plugin-proposal-numeric-separator@7.18.6 Transitive: environment, filesystem, unsafe +47 10.6 MB nicolo-ribaudo
npm/@babel/plugin-proposal-object-rest-spread@7.20.7 Transitive: environment, filesystem, unsafe +48 10.7 MB nicolo-ribaudo
npm/@babel/plugin-proposal-optional-chaining@7.20.7 Transitive: environment, filesystem, unsafe +48 10.6 MB nicolo-ribaudo
npm/@babel/plugin-proposal-private-methods@7.18.6 Transitive: environment, filesystem, unsafe +52 10.9 MB nicolo-ribaudo
npm/@babel/plugin-proposal-unicode-property-regex@7.18.6 Transitive: environment, filesystem, unsafe +48 10.6 MB nicolo-ribaudo
npm/@babel/plugin-syntax-class-properties@7.12.13 Transitive: environment, filesystem, unsafe +46 10.6 MB nicolo-ribaudo
npm/@babel/plugin-syntax-jsx@7.18.6 Transitive: environment, filesystem, unsafe +46 10.6 MB nicolo-ribaudo
npm/@babel/plugin-syntax-top-level-await@7.14.5 Transitive: environment, filesystem, unsafe +46 10.6 MB nicolo-ribaudo
npm/@babel/plugin-syntax-typescript@7.20.0 Transitive: environment, filesystem, unsafe +46 10.6 MB nicolo-ribaudo
npm/@babel/plugin-transform-dotall-regex@7.18.6 Transitive: environment, filesystem, unsafe +48 10.6 MB nicolo-ribaudo
npm/@babel/plugin-transform-parameters@7.20.7 Transitive: environment, filesystem, unsafe +46 10.6 MB nicolo-ribaudo
npm/@babel/plugin-transform-react-display-name@7.18.6 Transitive: environment, filesystem, unsafe +46 10.6 MB nicolo-ribaudo
npm/@babel/plugin-transform-react-jsx@7.20.13 Transitive: environment, filesystem, unsafe +48 10.7 MB nicolo-ribaudo
npm/@babel/preset-env@7.20.2 environment Transitive: filesystem, unsafe +128 13 MB nicolo-ribaudo
npm/@babel/preset-typescript@7.18.6 Transitive: environment, filesystem, unsafe +54 11 MB nicolo-ribaudo
npm/@babel/runtime@7.20.13 None 0 238 kB nicolo-ribaudo
npm/@babel/template@7.20.7 Transitive: environment +12 4.65 MB nicolo-ribaudo
npm/@babel/traverse@7.20.13 Transitive: environment +27 6.21 MB nicolo-ribaudo
npm/@babel/types@7.20.7 environment +2 2.53 MB nicolo-ribaudo
npm/@jridgewell/resolve-uri@3.1.0 None 0 55.2 kB jridgewell
npm/@jridgewell/set-array@1.1.2 None 0 15.5 kB jridgewell
npm/@jridgewell/sourcemap-codec@1.4.14 None 0 40 kB jridgewell
npm/@jridgewell/trace-mapping@0.3.17 None +2 259 kB jridgewell
npm/@nodelib/fs.stat@2.0.5 filesystem 0 11.8 kB mrmlnc
npm/@nodelib/fs.walk@1.2.8 Transitive: filesystem +3 99.3 kB mrmlnc
npm/@octokit/request-error@2.1.0 None +3 2.34 MB octokitbot
npm/@octokit/request@5.6.3 network +6 2.52 MB octokitbot
npm/@octokit/types@6.41.0 None +1 2.31 MB octokitbot
npm/@percy/cli@1.18.0 environment, filesystem, unsafe Transitive: eval, network, shell +36 6.01 MB percy-admin
npm/@percy/cypress@3.1.2 eval Transitive: environment, filesystem, network, shell, unsafe +91 8.06 MB percy-admin
npm/@rollup/pluginutils@3.1.0 None +2 80.7 kB shellscape
npm/@types/babel__traverse@7.18.3 Transitive: environment +3 2.6 MB types
npm/@types/estree@0.0.39 None 0 17.8 kB types
npm/@types/istanbul-lib-coverage@2.0.4 None 0 5.76 kB types
npm/@types/jest@29.4.0 Transitive: environment, filesystem +31 4.77 MB types
npm/@types/keyv@3.1.4 None +1 3.59 MB types
npm/@types/lodash.debounce@4.0.7 None +1 1.72 MB types
npm/@types/react-dom@18.0.10 None +4 1.41 MB types
npm/@types/react@18.0.28 None +3 1.38 MB types
npm/@types/tapable@1.0.8 None 0 17.9 kB types
npm/@typescript-eslint/eslint-plugin@5.51.0 Transitive: environment, eval, filesystem, shell, unsafe +68 15.2 MB jameshenry
npm/@typescript-eslint/parser@5.51.0 Transitive: environment, eval, filesystem, shell, unsafe +61 12.1 MB jameshenry
npm/@typescript-eslint/utils@5.51.0 Transitive: environment, eval, filesystem, shell, unsafe +65 12.8 MB jameshenry
npm/acorn-jsx@5.3.2 None +1 1.22 MB rreverser
npm/all-contributors-cli@6.24.0 environment, filesystem, network, shell Transitive: eval +19 1.89 MB all-contributors-release-bot
npm/ansi-escapes@4.3.2 None 0 16.4 kB sindresorhus
npm/anymatch@3.1.3 None 0 9.65 kB phated
npm/array-back@3.1.0 None 0 8.95 kB 75lb
npm/array-includes@3.1.6 Transitive: eval +30 2.11 MB ljharb
npm/array.prototype.flatmap@1.3.1 Transitive: eval +31 2.11 MB ljharb
npm/async@3.2.4 None 0 821 kB hargasinski
npm/auto@10.42.0 Transitive: environment, eval, filesystem, network, shell, unsafe +98 15.9 MB alisowski
npm/bili@5.0.5 environment, eval, filesystem, shell, unsafe +171 23.1 MB egoist
npm/browserslist@4.21.5 environment, filesystem +2 2.19 MB ai
npm/caniuse-lite@1.0.30001451 None 0 1.92 MB caniuse-lite
npm/chalk@4.1.2 None +2 46.2 kB sindresorhus
npm/check-more-types@2.24.0 None 0 63.8 kB bahmutov
npm/convert-source-map@1.9.0 filesystem 0 11.4 kB thlorenz
npm/cosmiconfig@7.0.0 filesystem Transitive: environment +3 555 kB davidtheclark
npm/cypress@5.6.0 environment, filesystem, shell Transitive: eval, network, unsafe +89 8.01 MB chrisbreiding
npm/debug@4.3.4 environment +1 49.2 kB qix
npm/deepmerge@4.3.0 None 0 30.4 kB tehshrike
npm/define-properties@1.2.0 Transitive: eval +5 109 kB ljharb
npm/deprecation@2.3.1 None 0 4.01 kB gr2m
npm/domhandler@4.3.1 None +1 55.9 kB feedic
npm/domutils@2.8.0 network +4 199 kB feedic
npm/enquirer@2.3.6 environment +1 224 kB jonschlinkert
npm/es-abstract@1.21.1 Transitive: eval +29 2.08 MB ljharb
npm/eslint-config-prettier@8.6.0 Transitive: environment, eval, filesystem, shell, unsafe +52 10.7 MB lydell
npm/eslint-config-react-app@7.0.1 Transitive: environment, eval, filesystem, shell, unsafe +284 40.6 MB iansu
npm/eslint-plugin-cypress@2.12.1 Transitive: environment, eval, filesystem, shell, unsafe +53 10.7 MB cypress-npm-publisher
npm/eslint-plugin-flowtype@8.0.3 Transitive: environment, eval, filesystem, shell, unsafe +100 21.6 MB gajus
npm/eslint-plugin-import@2.27.5 filesystem, unsafe Transitive: environment, eval, shell +90 14.2 MB ljharb
npm/eslint-plugin-jsx-a11y@6.7.1 Transitive: environment, eval, filesystem, shell, unsafe +101 18.4 MB ljharb
npm/eslint-plugin-react-hooks@4.6.0 environment Transitive: eval, filesystem, shell, unsafe +52 10.8 MB gnoff
npm/eslint-plugin-react@7.32.2 filesystem Transitive: environment, eval, shell, unsafe +89 14 MB ljharb
npm/eslint@8.34.0 filesystem Transitive: environment, eval, shell, unsafe +51 10.6 MB eslintbot
npm/estraverse@5.3.0 None 0 37.1 kB michaelficarra
npm/execa@4.1.0 environment, shell Transitive: filesystem +3 126 kB sindresorhus
npm/expect@29.4.2 Transitive: environment, filesystem +30 4.7 MB simenb
npm/fast-glob@3.2.12 filesystem +7 223 kB mrmlnc
npm/fromentries@1.3.2 None 0 4.95 kB feross
npm/fsevents@2.3.2 None 0 156 kB pipobscure
npm/get-caller-file@2.0.5 None 0 4.72 kB stefanpenner
npm/get-intrinsic@1.2.0 eval +3 87.2 kB ljharb
npm/glob@7.2.3 filesystem Transitive: environment +3 76.2 kB isaacs
npm/globals@11.12.0 None 0 39.8 kB sindresorhus
npm/graceful-fs@4.2.10 environment, filesystem 0 32.5 kB isaacs
npm/has-bigints@1.0.2 None 0 12.8 kB ljharb
npm/has-symbols@1.0.3 None 0 20.6 kB ljharb
npm/has@1.0.3 None +1 27.9 kB ljharb
npm/html-webpack-plugin@4.5.2 filesystem, unsafe Transitive: environment, network, shell +16 5.01 MB jantimon
npm/husky@4.3.8 environment, filesystem, shell +10 683 kB typicode
npm/icss-replace-symbols@1.1.0 None 0 3.03 kB geelen
npm/import-fresh@3.3.0 None 0 4.87 kB sindresorhus
npm/inherits@2.0.4 None 0 3.96 kB isaacs
npm/ini@1.3.7 None 0 9.39 kB isaacs
npm/inquirer@7.3.3 Transitive: environment, filesystem, shell +14 650 kB sboudrias
npm/internal-slot@1.0.5 Transitive: eval +4 107 kB ljharb
npm/is-callable@1.2.7 None 0 28.9 kB ljharb
npm/is-core-module@2.11.0 None +2 56 kB ljharb
npm/is-date-object@1.0.5 None +2 52.3 kB ljharb
npm/is-glob@4.0.3 None +1 19.8 kB phated
npm/is-installed-globally@0.3.2 filesystem Transitive: environment +3 25.5 kB sindresorhus
npm/is-map@2.0.2 None 0 12.7 kB ljharb
npm/is-path-inside@3.0.3 None 0 4.12 kB sindresorhus
npm/is-set@2.0.2 None 0 12.3 kB ljharb
npm/is-string@1.0.7 None +2 50.6 kB ljharb
npm/is-symbol@1.0.4 None +1 42.6 kB ljharb
npm/is-typed-array@1.1.10 Transitive: eval +10 195 kB ljharb
npm/is-typedarray@1.0.0 None 0 4.41 kB hughsk
npm/istanbul-lib-coverage@3.2.0 None 0 29.3 kB oss-bot
npm/istanbul-lib-instrument@5.2.1 Transitive: environment, filesystem, unsafe +47 10.7 MB oss-bot
npm/jest-util@29.4.2 environment Transitive: filesystem +13 4.19 MB simenb
npm/jest@29.4.2 Transitive: environment, eval, filesystem, network, shell, unsafe +181 19.5 MB simenb
npm/js-tokens@4.0.0 None 0 15.1 kB lydell
npm/json-fixer@1.6.15 eval +4 376 kB berkmann18
npm/json5@2.2.3 None 0 235 kB jordanbtucker
npm/jsx-ast-utils@3.3.3 Transitive: eval +31 2.34 MB ljharb
npm/lazy-ass@1.6.0 None 0 19.4 kB bahmutov
npm/lint-staged@10.5.4 environment, filesystem Transitive: shell +20 1.4 MB okonet

🚮 Removed packages: npm/@babel/code-frame@7.10.4, npm/@babel/compat-data@7.11.0, npm/@babel/generator@7.11.6, npm/@babel/helper-builder-react-jsx-experimental@7.11.5, npm/@babel/helper-create-class-features-plugin@7.10.5, npm/@babel/helper-member-expression-to-functions@7.11.0, npm/@babel/helper-module-imports@7.10.4, npm/@babel/helper-module-transforms@7.11.0, npm/@babel/helper-plugin-utils@7.10.4, npm/@babel/helper-split-export-declaration@7.11.0, npm/@babel/parser@7.11.5, npm/@babel/plugin-proposal-unicode-property-regex@7.10.4, npm/@babel/plugin-syntax-jsx@7.10.4, npm/@babel/plugin-transform-dotall-regex@7.10.4, npm/@babel/runtime@7.11.2, npm/@babel/traverse@7.11.5, npm/@babel/types@7.11.5, npm/@emotion/hash@0.8.0, npm/@emotion/is-prop-valid@0.8.8, npm/@emotion/serialize@0.11.16, npm/@graphql-tools/utils@6.2.3, npm/@hapi/hoek@8.5.1, npm/@hapi/joi@15.1.1, npm/@material-ui/core@4.11.0, npm/@material-ui/icons@4.9.1, npm/@material-ui/styles@4.10.0, npm/@material-ui/utils@4.10.2, npm/@mdx-js/mdx@2.0.0-next.8, npm/@mdx-js/react@2.0.0-next.8, npm/@nodelib/fs.stat@2.0.3, npm/@nodelib/fs.walk@1.2.4, npm/@reach/popover@0.10.3, npm/@reach/portal@0.10.5, npm/@reach/rect@0.10.5, npm/@reach/utils@0.10.5, npm/@types/glob@5.0.36, npm/@types/istanbul-lib-coverage@2.0.3, npm/@types/json-schema@7.0.6, npm/@types/keyv@3.1.1, npm/@types/lodash@4.14.161, npm/@types/node@14.11.2, npm/@types/react-dom@16.9.8, npm/@types/react-helmet@6.1.0, npm/@types/react@16.9.49, npm/@types/unist@2.0.3, npm/accepts@1.3.8, npm/acorn-jsx@5.3.1, npm/acorn@7.4.0, npm/address@1.1.2, npm/ajv@6.12.5, npm/ansi-html@0.0.7, npm/aproba@1.2.0, npm/arch@2.1.2, npm/autoprefixer@9.8.6, npm/axios@0.19.2, npm/babel-code-frame@6.26.0, npm/babel-plugin-macros@2.8.0, npm/backo2@1.0.2, npm/better-opn@1.0.0, npm/bin-wrapper@4.1.0, npm/bl@4.0.3, npm/body-parser@1.20.1, npm/braces@2.3.2, npm/brorand@1.1.0, npm/browserify-aes@1.2.0, npm/browserify-rsa@4.0.1, npm/browserslist@4.16.6, npm/buffer-alloc@1.2.0, npm/buffer@5.6.0, npm/bytes@3.1.2, npm/caniuse-lite@1.0.30001228, npm/caw@2.0.1, npm/chokidar@3.4.2, npm/cipher-base@1.0.4, npm/clone-response@1.0.2, npm/collapse-white-space@1.0.6, npm/color@3.1.2, npm/colorette@1.2.2, npm/commander@2.20.3, npm/console-control-strings@1.1.0, npm/content-type@1.0.4, npm/convert-source-map@1.7.0, npm/core-js-compat@3.6.5, npm/core-util-is@1.0.2, npm/create-hash@1.2.0, npm/create-hmac@1.1.7, npm/cross-spawn@6.0.5, npm/css-select@1.2.0, npm/cssnano@4.1.10, npm/csstype@2.6.13, npm/date-fns@2.16.1, npm/debug@3.2.6, npm/decompress-tar@4.1.1, npm/decompress@4.2.1, npm/deep-equal@1.1.1, npm/detab@2.0.3, npm/dom-serializer@0.1.1, npm/domelementtype@1.3.1, npm/domutils@1.5.1, npm/duplexify@3.7.1, npm/entities@1.1.2, npm/envinfo@7.7.3, npm/errno@0.1.7, npm/error-stack-parser@2.0.6, npm/es-abstract@1.17.6, npm/eslint-visitor-keys@1.3.0, npm/evp_bytestokey@1.0.3, npm/execa@4.0.3, npm/expand-tilde@2.0.2, npm/fast-glob@3.2.4, npm/faye-websocket@0.11.3, npm/find-up@2.1.0, npm/follow-redirects@1.5.10, npm/from2@2.3.0, npm/fs-exists-cached@1.0.0, npm/gatsby-image@2.4.19, npm/gatsby-plugin-google-fonts@1.0.1, npm/gatsby-plugin-manifest@2.4.31, npm/gatsby-plugin-material-ui@2.1.10, npm/gatsby-plugin-offline@3.2.28, npm/gatsby@2.24.65

View full report↗︎

socket-security[bot] commented 8 months ago

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Install scripts npm/esbuild@0.16.17
  • orphan: npm/esbuild@0.16.17
Install scripts npm/cypress@5.6.0
  • Install script: postinstall
  • Source: node index.js --exec install
Install scripts npm/husky@4.3.8
  • Install script: install
  • Source: node husky install
Install scripts npm/husky@4.3.8
  • Install script: postinstall
  • Source: opencollective-postinstall || exit 0
Install scripts npm/@percy/core@1.18.0
  • Install script: postinstall
  • Source: node ./post-install

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/esbuild@0.16.17
  • @SocketSecurity ignore npm/cypress@5.6.0
  • @SocketSecurity ignore npm/husky@4.3.8
  • @SocketSecurity ignore npm/@percy/core@1.18.0
dependabot[bot] commented 7 months ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.