Bumps lodash to 4.17.21 and updates ancestor dependencies lodash, auth0-api-jwt-rsa-validation and auth0-extensions-cli. These dependencies need to be updated together.
This version was pushed to npm by shawnmclean, a new releaser for auth0-extensions-cli since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/auth0-extensions/auth0-extension-realtime-logs/network/alerts).
Bumps lodash to 4.17.21 and updates ancestor dependencies lodash, auth0-api-jwt-rsa-validation and auth0-extensions-cli. These dependencies need to be updated together.
Updates
lodash
from 4.17.11 to 4.17.21Commits
f299b52
Bump to v4.17.21c4847eb
Improve performance oftoNumber
,trim
andtrimEnd
on large input strings3469357
Prevent command injection through_.template
'svariable
optionded9bc6
Bump to v4.17.20.63150ef
Documentation fixes.00f0f62
test.js: Remove trailing comma.846e434
Temporarily use a custom fork oflodash-cli
.5d046f3
Re-enable Travis tests on4.17
branch.aa816b3
Remove/npm-package
.d7fbc52
Bump to v4.17.19Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates
auth0-api-jwt-rsa-validation
from 0.0.1 to 0.0.3Updates
auth0-extensions-cli
from 1.0.9 to 4.0.4Release notes
Sourced from auth0-extensions-cli's releases.
Commits
ffab6c1
fix testc0f4ec5
fix: testsecc7feb
4.0.45b627b7
Merge pull request #29 from mostekcm/mostekcm-update-npm-modules-to-remove-vu...502c9d5
Update dependencies and get rid of request to minimize vulnerabilitiesc18ec5e
Bump version to 4.0.3.ece4957
no compress.conditionals for prod (#25)54dc355
Add badges.23eaf70
Remove rainbow from release title.f96fcf4
Update circle script for npm publishing. (#27)Maintainer changes
This version was pushed to npm by shawnmclean, a new releaser for auth0-extensions-cli since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show