devsoc-unsw / notangles

The best tool to plan your weekly UNSW timetable with friends. Super easy, customisable, drag and drop. Now with autotimetabling and custom event creation! Social timetabling coming soon.
https://notangles.devsoc.app
Other
60 stars 5 forks source link

fix(deps): update dependency protobufjs to v5 [security] - autoclosed #870

Closed renovate[bot] closed 2 months ago

renovate[bot] commented 3 months ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
protobufjs (source) 4.1.3 -> 5.0.3 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2018-3738

Versions of protobufjs before 5.0.3 and 6.8.6 are vulnerable to a regular expression denial of service when parsing crafted invalid *.proto files.

Recommendation

Update to version 5.0.3, 6.8.6 or later.


Release Notes

protobufjs/protobuf.js (protobufjs) ### [`v5.0.3`](https://togithub.com/protobufjs/protobuf.js/releases/tag/5.0.3) [Compare Source](https://togithub.com/protobufjs/protobuf.js/compare/5.0.2...5.0.3) Backported the ReDoS fix originally in 6.8.6 to 5.0.3. ### [`v5.0.2`](https://togithub.com/protobufjs/protobuf.js/compare/5.0.1...5.0.2) [Compare Source](https://togithub.com/protobufjs/protobuf.js/compare/5.0.1...5.0.2) ### [`v5.0.1`](https://togithub.com/protobufjs/protobuf.js/compare/5.0.0...5.0.1) [Compare Source](https://togithub.com/protobufjs/protobuf.js/compare/5.0.0...5.0.1) ### [`v5.0.0`](https://togithub.com/protobufjs/protobuf.js/compare/4240a1011dfa130d206430489841c69c4f214e54...5.0.0) [Compare Source](https://togithub.com/protobufjs/protobuf.js/compare/4240a1011dfa130d206430489841c69c4f214e54...5.0.0)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.