iterative / cml

♾️ CML - Continuous Machine Learning | CI/CD for ML
http://cml.dev
Apache License 2.0
4k stars 338 forks source link

[Snyk] Upgrade @npcz/magic from 1.3.12 to 1.3.14 #1412

Closed 0x2b3bfa0 closed 4 months ago

0x2b3bfa0 commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade @npcz/magic from 1.3.12 to 1.3.14.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **2 versions** ahead of your current version. - The recommended version was released **8 months ago**, on 2022-11-18.
Release notes
Package name: @npcz/magic
  • 1.3.14 - 2022-11-18

    v1.3.14

      </li>
      <li>
        <b>1.3.13</b> - <a href="https://snyk.io/redirect/github/npcz/magic/releases/tag/v1.3.13">2022-08-03</a></br><p>This is a regular maintenance patch to resolve security issues in dev dependencies and update tools to latest version.</p>
    • build(deps): bump node-fetch from 2.6.1 to 2.6.7 #12
    • build(deps): bump minimist from 1.2.5 to 1.2.6 #11
    • chore: update dev dependencies 0f2d70b
    • chore: eliminate error messages inside vscode 3775f2a
    • style: lint fix: double quotes to single 1053259
      </li>
      <li>
        <b>1.3.12</b> - <a href="https://snyk.io/redirect/github/npcz/magic/releases/tag/v1.3.12">2022-01-10</a></br><p>This is a minor update to have a more robust way of referring to the module files and the magic file.</p>

    It also brings a more streamlined build process with no unnecessary copies. The yarn build command behaves exactly as before, but the build now further splits the lib build from the examples build.

    • deps: updates dependencies 44ca43b
    • deps: update dev deps to resolve vulnerabilities a290a53
    • chore: streamline the build process 3984615
    • fix(#10): refer to the module as if it were installed 7c09eaf
    • deps: update dev deps to resolve vulnerabilities a5788d1
    • fix: use @ npcz/magic to refer to the module 25c8e97
    • deps: update emscripten to 3.1.0 fb426a6
      </li>
    </ul>
    from <a href="https://snyk.io/redirect/github/npcz/magic/releases">@npcz/magic GitHub release notes</a>

Commit messages
Package name: @npcz/magic
  • 33b8976 chore: release v1.3.14
  • 301bf18 fix: update to latest emscripten to avoid issues with newer version of node
  • 38b5c8a fix: min version of minimatch to avoid security issue
  • e46a401 chore: allow automatic tasks in vscode
  • 3fe5048 release: prepare release 1.3.13
  • 3775f2a chore: eliminate error messages inside vscode
  • 0f2d70b chore: update dev dependencies
  • 1053259 style: lint fix: double quotes to single
  • b568ff8 Merge pull request #12 from npcz/dependabot/npm_and_yarn/node-fetch-2.6.7
  • 1ab15a2 build(deps): bump node-fetch from 2.6.1 to 2.6.7
  • ccab698 Merge pull request #11 from npcz/dependabot/npm_and_yarn/minimist-1.2.6
  • 3b7e074 build(deps): bump minimist from 1.2.5 to 1.2.6
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

πŸ›  Adjust upgrade PR settings

πŸ”• Ignore this dependency or unsubscribe from future upgrade PRs

github-actions[bot] commented 1 year ago

Test Comment

github-actions[bot] commented 1 year ago

Test Comment

github-actions[bot] commented 1 year ago

Test Comment

github-actions[bot] commented 1 year ago

Test Comment