search

asaf-mend-test / lvp-is-amazing

0 stars 0 forks source link

Update dependency sw-precache-webpack-plugin to v0.11.5 - autoclosed #46

Closed mend-for-github-com[bot] closed 1 year ago

mend-for-github-com[bot] commented 1 year ago

This PR contains the following updates:

Package Type Update Change
sw-precache-webpack-plugin dependencies patch 0.11.4 -> 0.11.5

This PR resolves the vulnerabilities described in Issue #32

Version 0.11.4 | Risk Change | Critical | High | Medium | Low | | --- | --- | --- | --- | --- | | N/A | 2 | 3 | 9 | 0 |
Version 0.11.5 | Risk Change | Critical | High | Medium | Low | | --- | --- | --- | --- | --- | | -93% | 0 (-2 ) | 2 (-1 ) | 1 (-8 ) | 0 (--) |

Mend ensures you have the greatest risk reduction ("Recommended Fix"-highlighted in green) by removing as many vulnerabilities as possible. Click to see how we calculate risk reduction.

Release Notes

goldhand/sw-precache-webpack-plugin ### [`v0.11.5`](https://togithub.com/goldhand/sw-precache-webpack-plugin/blob/HEAD/CHANGELOG.md#​0115) [Compare Source](https://togithub.com/goldhand/sw-precache-webpack-plugin/compare/v0.11.4...v0.11.5) - Update circleci to node v6.11.5 - Add explicit MIT license - Update package locks - add support for webpack 4 ([#​138](https://togithub.com/goldhand/sw-precache-webpack-plugin/issues/138)) - Replacing prepublish script with prepare. ([#​112](https://togithub.com/goldhand/sw-precache-webpack-plugin/issues/112)) - Fixed service worker file name ([#​111](https://togithub.com/goldhand/sw-precache-webpack-plugin/issues/111)) - use uglify-es, - Don't lose implicit instance of `outputFileSystem`; Don't swallow fs ([#​110](https://togithub.com/goldhand/sw-precache-webpack-plugin/issues/110)) - modify "importSripts" to "importScripts" ([#​98](https://togithub.com/goldhand/sw-precache-webpack-plugin/issues/98))
coderabbitai[bot] commented 1 year ago

[!IMPORTANT]

Auto Review Skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Tips ### Chat with CodeRabbit Bot (`@coderabbitai`) - If you reply to a *review comment* from CodeRabbit, the bot will automatically respond. - To engage with CodeRabbit bot directly around the specific lines of code in the PR, mention @coderabbitai in your review comment - Note: Review comments are made on code diffs or files, not on the PR overview. - Add `@coderabbitai ignore` anywhere in the PR description to prevent this PR from being reviewed. ### CodeRabbit Commands (invoked as PR comments) - `@coderabbitai pause` to pause the reviews on a PR. - `@coderabbitai resume` to resume the paused reviews. - `@coderabbitai review` to trigger a review. This is useful when automatic reviews are disabled for the repository. - `@coderabbitai help` to get help. - `@coderabbitai resolve` to resolve all the CodeRabbit review comments. Note: For conversation with the bot, please use the review comments on code diffs or files. ### CodeRabbit Configration File (`.coderabbit.yaml`) - You can programmatically configure CodeRabbit by adding a `.coderabbit.yaml` file to the root of your repository. - The JSON schema for the configuration file is available [here](https://coderabbit.ai/integrations/coderabbit-overrides.json). - If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: `# yaml-language-server: $schema=https://coderabbit.ai/integrations/coderabbit-overrides.json`