ether / etherpad-lite

Etherpad: A modern really-real-time collaborative document editor.
http://docs.etherpad.org/
Apache License 2.0
16.76k stars 2.85k forks source link

Bump ueberdb2 from 5.0.3 to 5.0.6 #6697

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps ueberdb2 from 5.0.3 to 5.0.6.

Changelog

Sourced from ueberdb2's changelog.

Notable Changes

v4.0.1

Security fix:

  • getSub() now returns null when it encounters a non-"own" property (including __proto__) or any non-object while walking the given property path. This should make it easier to avoid accidental prototype pollution vulnerabilities.

v4.0.0

Compatibility changes:

  • redis: The socket and client_options settings, deprecated since v1.3.1, have been removed.
  • redis: The client configuration object has changed with the new version of the redis client library. See the redis client library documentation for details.

Bug fixes:

  • redis: Several findKeys() fixes.

Updated database dependencies:

  • redis: Updated redis from 3.1.2 to 4.1.0.

v3.0.2

Security fix:

  • getSub() now returns null when it encounters a non-"own" property (including __proto__) or any non-object while walking the given property path. This should make it easier to avoid accidental prototype pollution vulnerabilities.

v3.0.1

Bug fixes:

  • Fixed findKeys() calls containing special regular expression characters (applicable to the database drivers that use the glob-to-regex helper function).

v3.0.0

Compatibility changes:

... (truncated)

Commits
  • 90e1b6d 5.0.6
  • bbec5c4 build(deps-dev): bump rollup from 4.21.2 to 4.22.4 (#767)
  • f4a4ab8 5.0.5
  • 8742e01 build(deps): bump micromatch from 4.0.5 to 4.0.8 (#768)
  • 2f41259 build(deps): bump vite from 5.2.11 to 5.4.8 (#769)
  • 88395db 5.0.4
  • 58a64aa build(deps-dev): bump pg from 8.12.0 to 8.13.0 (#758)
  • 040ed85 build(deps-dev): bump eslint from 8.57.0 to 8.57.1 (#759)
  • 83817d7 build(deps-dev): bump simple-git from 3.26.0 to 3.27.0 (#760)
  • b3bb2fc build(deps-dev): bump @​rollup/plugin-commonjs from 26.0.1 to 28.0.0 (#761)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)