Closed renovate[bot] closed 3 years ago
Kudos, SonarCloud Quality Gate passed!
0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells
No Coverage information
0.0% Duplication
:tada: This PR is included in version 7.2.0 :tada:
The release is available on:
Your semantic-release bot :package::rocket:
This PR contains the following updates:
^5.0.1
->^6.0.0
Release Notes
chalk/ansi-regex
### [`v6.0.1`](https://togithub.com/chalk/ansi-regex/releases/v6.0.1) [Compare Source](https://togithub.com/chalk/ansi-regex/compare/v6.0.0...v6.0.1) ##### Fixes - Fix [ReDoS](https://en.wikipedia.org/wiki/ReDoS) in certain cases ([#37](https://togithub.com/chalk/ansi-regex/issues/37)) You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools. [CVE-2021-3807](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807) Thank you [@yetingli](https://togithub.com/yetingli) for the patch and reproduction case! ### [`v6.0.0`](https://togithub.com/chalk/ansi-regex/releases/v6.0.0) [Compare Source](https://togithub.com/chalk/ansi-regex/compare/v5.0.1...v6.0.0) ##### Breaking - Require Node.js 12 [`1b337ad`](https://togithub.com/chalk/ansi-regex/commit/1b337ad) - This package is now pure ESM. Please [read this](https://gist.github.com/sindresorhus/a39789f98801d908bbc7ff3ecc99d99c).Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Enabled.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.