github-actions[bot]
commented
1 year ago インフラの差分
```
Bundling asset Stack-youtube-streaming-watcher/Function-notify/Code/Stage...
...3f9f4c48110ece30d0261aef0bb5795c7253b855d7b7fd250014b5/index.js 10.3mb ⚠️
...4c48110ece30d0261aef0bb5795c7253b855d7b7fd250014b5/index.js.map 37.5mb
⚡ Done in 1440ms
Bundling asset Stack-youtube-streaming-watcher/Function-reply/Code/Stage...
...bf9d1f56cf45c668dbc444ade39e8255e5b5673d80a8b297b7d9a7d/index.js 1.9mb ⚠️
...1f56cf45c668dbc444ade39e8255e5b5673d80a8b297b7d9a7d/index.js.map 5.3mb
⚡ Done in 312ms
Stack Stack-youtube-streaming-watcher
Resources
[~] AWS::Lambda::Function Function-notify Functionnotify8D707E33
├─ [~] Code
│ └─ [~] .S3Key:
│ ├─ [-] b1770b152542438aba7740b390e536f7488c75d71781fef0ad0189d3407ec1c2.zip
│ └─ [+] 0f393afa0cc80600fb4d70b44730c34182bb78e1ff2b259ab634c2221f3c1fde.zip
└─ [~] Metadata
└─ [~] .aws:asset:path:
├─ [-] asset.b1770b152542438aba7740b390e536f7488c75d71781fef0ad0189d3407ec1c2
└─ [+] asset.0f393afa0cc80600fb4d70b44730c34182bb78e1ff2b259ab634c2221f3c1fde
[~] AWS::Lambda::Function Function-reply FunctionreplyBE3BEEA6
├─ [~] Code
│ └─ [~] .S3Key:
│ ├─ [-] 9ab43efd881dfea47f95f0db15126cefccaf20078978e38598d25f374872d8ec.zip
│ └─ [+] b71a21e5578430d33ed1a4df19aeeb4611ab2a6811ad13cf8bc06ad3bd717b6b.zip
└─ [~] Metadata
└─ [~] .aws:asset:path:
├─ [-] asset.9ab43efd881dfea47f95f0db15126cefccaf20078978e38598d25f374872d8ec
└─ [+] asset.b71a21e5578430d33ed1a4df19aeeb4611ab2a6811ad13cf8bc06ad3bd717b6b
Stack Stack-youtube-streaming-watcher-us-east-1
There were no differences
```
This PR contains the following updates:
0.4.23->0.5.0GitHub Vulnerability Alerts
CVE-2023-0842
xml2js versions before 0.5.0 allows an external attacker to edit or add new properties to an object. This is possible because the application does not properly validate incoming JSON keys, thus allowing the
__proto__property to be edited.Configuration
📅 Schedule: Branch creation - "" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.