Closed renovate[bot] closed 2 months ago
Latest commit: 959c24b023de8d9212698ecb7592b2817b43608c
Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.
Click here to learn what changesets are, and how to add one.
Click here if you're a maintainer who wants to add a changeset to this PR
Superseded by https://github.com/keystonejs/keystone/pull/9102
Because you closed this PR without merging, Renovate will ignore this update (^7.3.7
). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps
array of your Renovate config.
If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.
This PR contains the following updates:
7.5.0
->7.5.2
GitHub Vulnerability Alerts
CVE-2022-25883
Versions of the package semver before 7.5.2 on the 7.x branch, before 6.3.1 on the 6.x branch, and all other versions before 5.7.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.
Release Notes
npm/node-semver (semver)
### [`v7.5.2`](https://togithub.com/npm/node-semver/blob/HEAD/CHANGELOG.md#752-2023-06-15) [Compare Source](https://togithub.com/npm/node-semver/compare/v7.5.1...v7.5.2) ##### Bug Fixes - [`58c791f`](https://togithub.com/npm/node-semver/commit/58c791f40ba8cf4be35a5ca6644353ecd6249edc) [#566](https://togithub.com/npm/node-semver/pull/566) diff when detecting major change from prerelease ([#566](https://togithub.com/npm/node-semver/issues/566)) ([@lukekarrys](https://togithub.com/lukekarrys)) - [`5c8efbc`](https://togithub.com/npm/node-semver/commit/5c8efbcb3c6c125af10746d054faff13e8c33fbd) [#565](https://togithub.com/npm/node-semver/pull/565) preserve build in raw after inc ([#565](https://togithub.com/npm/node-semver/issues/565)) ([@lukekarrys](https://togithub.com/lukekarrys)) - [`717534e`](https://togithub.com/npm/node-semver/commit/717534ee353682f3bcf33e60a8af4292626d4441) [#564](https://togithub.com/npm/node-semver/pull/564) better handling of whitespace ([#564](https://togithub.com/npm/node-semver/issues/564)) ([@lukekarrys](https://togithub.com/lukekarrys)) ### [`v7.5.1`](https://togithub.com/npm/node-semver/blob/HEAD/CHANGELOG.md#751-2023-05-12) [Compare Source](https://togithub.com/npm/node-semver/compare/v7.5.0...v7.5.1) ##### Bug Fixes - [`d30d25a`](https://togithub.com/npm/node-semver/commit/d30d25a5c1fb963c3cc9178cb1769fe45e4a3cab) [#559](https://togithub.com/npm/node-semver/pull/559) show type on invalid semver error ([#559](https://togithub.com/npm/node-semver/issues/559)) ([@tjenkinson](https://togithub.com/tjenkinson))Configuration
📅 Schedule: Branch creation - "" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.