search

beatboxjs / ror-player

A pattern-based drumming machine based on TypeScript, beatbox.js, Vue.js and Bootstrap.
https://player.rhythms-of-resistance.org/
GNU Affero General Public License v3.0
11 stars 10 forks source link

Bump copy-props from 2.0.4 to 2.0.5 #31

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 2 years ago

Bumps copy-props from 2.0.4 to 2.0.5.

Release notes

Sourced from copy-props's releases.

2.0.5

Fix

  • Avoids prototype pollution (#7)

Doc

  • Update license years.
  • Transfer ownership to Gulp Team (#6)

Build

  • Update dependencies: each-props (>=1.3.2), is-plain-object (>=5.0.0).

Test

  • Expand test versions to v11〜v14.
Changelog

Sourced from copy-props's changelog.

Changelog

3.0.1 (2021-10-31)

Bug Fixes

  • ci: Rename prettierignore typo & avoid formatting web (192badf)
  • Update dependencies (ba8a51c)

3.0.0 (2021-09-25)

⚠ BREAKING CHANGES

  • Normalize repository, dropping node <10.13 support (#8)

Miscellaneous Chores

  • Normalize repository, dropping node <10.13 support (#8) (85b1165)
Commits
  • 40b7974 2.0.5
  • 2c738f5 Fix: Avoids prototype pollution (#7)
  • 4cac863 Merge: Transfer ownership to Gulp Team (#6)
  • 54a791d Doc: Transfer ownership to Gulp Team
  • 196fc9e Merge: Update dependencies and expand ci test versions (#5)
  • e89907f Test: Update npm to v4 when nodejs is v5 because of npm install error.
  • e970322 Test: Run coveralls when nodejs >= 6 because of its supports
  • 063e534 Test: Add nodejs v11-v14 into ci test versions
  • 72270af Doc: Update license years
  • f60b928 Build: Update versions of dependencies
  • See full diff in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/beatboxjs/ror-player/network/alerts).
dependabot[bot] commented 1 year ago

Looks like copy-props is up-to-date now, so this is no longer needed.