auth0 / repo-supervisor

Scan your code for security misconfiguration, search for passwords and secrets. :mag:
MIT License
637 stars 88 forks source link

[Snyk] Upgrade js-yaml from 3.13.1 to 3.14.0 #54

Closed crew-security closed 4 years ago

crew-security commented 4 years ago

Snyk has created this PR to upgrade js-yaml from 3.13.1 to 3.14.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Release notes
Package name: js-yaml from js-yaml GitHub release notes
Commit messages
Package name: js-yaml
  • 34e5072 3.14.0 released
  • 7b25c83 Browser files rebuild
  • 6f73473 Dev deps bump
  • 0c29349 Travis-CI: drop old nodejs versions
  • 10be97e fix(loader): Add support for `safe/loadAll(input, options)`
  • d6983dd Fix issue #526: wrong quote position writing condensed flow (#527)
  • 93fbf7d fix issue 526 (wrong quote position writing condensed flow)
  • e569cc7 readme: update titelift info
  • 8fb2905 changelog format update
  • 33c2236 Verify that there are no null-bytes in input
  • aeb6828 Check the node type for !<?> tag in case user manually specifies it
  • 3e93973 Merge pull request #523 from tmcw/unpkg-jsdelivr-fields
  • b565e1a Add unpkg and jsdelivr fields to point to browser build
  • d9fe622 Merge pull request #521 from vcache/feature/dumper-spec-compilance
  • 667b3a1 dumper: don't quote strings with # without need
  • 2fcb465 Add equals sign to list of unsafe values for plain styling (#519)
  • 54074ae Merge pull request #513 from MartijnCuppens/patch-1
  • ae24505 Use `const` where appropriate
  • 3db03f2 README: add Tidelift link
  • 1d88bd1 README cleanup
  • 2334c9b Create FUNDING.yml
  • 1d4c8c6 Merge pull request #508 from fabiospampinato/master
  • 7d507cb Readme: clarified “safeLoad” return type
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs