jhipster / jhipster-net-sample-app-template

JHipster.NET sample application
50 stars 18 forks source link

chore(deps): bump swagger-ui from 2.2.10 to 3.23.11 in /src/JHipsterNetSampleApplication #33

Open dependabot[bot] opened 4 years ago

dependabot[bot] commented 4 years ago

Bumps swagger-ui from 2.2.10 to 3.23.11.

Release notes *Sourced from [swagger-ui's releases](https://github.com/swagger-api/swagger-ui/releases).* > ## Swagger UI 3.23.11 Released! > ⚠️ **This release contains a security fix that addresses a CSS-based input field value exfiltration vulnerability.** If you use Swagger UI to display untrusted OpenAPI documents, you should upgrade to this version ASAP. > > ### Changelog > > * fix: mitigate "sequential `@import` chaining" vulnerability (via [#5616](https://github-redirect.dependabot.com/swagger-api/swagger-ui/issues/5616)) > > ## Swagger UI 3.23.10 Released! > This release fixes two bugs: one visual issue within static documentation, and another within runtime validation for Array-typed parameters. > > ### Changelog > > * fix: ` for `type: string` + `enum` schemas ([#5601](https://github-redirect.dependabot.com/swagger-api/swagger-ui/issues/5601)) - [`f523ec4`](https://github.com/swagger-api/swagger-ui/commit/f523ec40f04a2f5519fe72a51bc138e968fd78ff) housekeeping: reorganize and rewire Mocha tests ([#5600](https://github-redirect.dependabot.com/swagger-api/swagger-ui/issues/5600)) - [`c3890c2`](https://github.com/swagger-api/swagger-ui/commit/c3890c210c4cab6073d1b8bb62c32ed69da6c464) release: v3.23.9 - [`94c86d3`](https://github.com/swagger-api/swagger-ui/commit/94c86d3d50c035813f06204881a3b2052bc80dcd) improvement: `online.swagger.io` -> `validator.swagger.io` ([#5599](https://github-redirect.dependabot.com/swagger-api/swagger-ui/issues/5599)) - [`7cae0d2`](https://github.com/swagger-api/swagger-ui/commit/7cae0d2bdf079fe2f5514f58920eb9e3c1260d14) release: v3.23.8 - [`4ebbc04`](https://github.com/swagger-api/swagger-ui/commit/4ebbc042aeec9a7db2edcee1d742e734fe4ddeb6) fix: 2.0 object parameter validation ([#5583](https://github-redirect.dependabot.com/swagger-api/swagger-ui/issues/5583)) - Additional commits viewable in [compare view](https://github.com/swagger-api/swagger-ui/compare/v2.2.10...v3.23.11)


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/jhipster/jhipster-net-sample-app-template/network/alerts).
CLAassistant commented 4 years ago

CLA assistant check
All committers have signed the CLA.

dependabot[bot] commented 4 years ago

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.