Closed dependabot[bot] closed 3 months ago
Triggered from https://github.com/mincho-js/mincho/pull/31 by @​dependabot[bot].
Checking if we can fast forward main
(1f8794aa20d9a3f5e1dee1465ccb6372483dc59e) to dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
(9b79c35d58008bbd0dc7c06139db54edc3e1cc49).
Target branch (main
):
commit 1f8794aa20d9a3f5e1dee1465ccb6372483dc59e (HEAD -> main, origin/main, origin/HEAD)
Author: alstjr7375 <alstjr7375@daum.net>
Date: Mon Jul 15 18:14:15 2024 +0900
Chore: Action - Activate fast-forward merge
See https://github.com/marketplace/actions/fast-forward-merge
Pull request (dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
):
commit 9b79c35d58008bbd0dc7c06139db54edc3e1cc49 (pull_request/dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63)
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon Jul 15 09:31:11 2024 +0000
Chore(deps): Bump the npm_and_yarn group with 2 updates
Bumps the npm_and_yarn group with 2 updates: [braces](https://github.com/micromatch/braces) and [tar](https://github.com/isaacs/node-tar).
Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)
Updates `tar` from 6.2.0 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v6.2.0...v6.2.1)
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: tar
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
It is possible to fast forward main
(1f8794aa20d9a3f5e1dee1465ccb6372483dc59e) to dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
(9b79c35d58008bbd0dc7c06139db54edc3e1cc49). If you have write access to the target repository, you can add a comment with /fast-forward
to fast forward main
to dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
.
/fast-forward
Triggered from https://github.com/mincho-js/mincho/pull/31#issuecomment-2228079999 by @​black7375.
Trying to fast forward main
(1f8794aa20d9a3f5e1dee1465ccb6372483dc59e) to dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
(9b79c35d58008bbd0dc7c06139db54edc3e1cc49).
Target branch (main
):
commit 1f8794aa20d9a3f5e1dee1465ccb6372483dc59e (HEAD -> main, origin/main, origin/HEAD)
Author: alstjr7375 <alstjr7375@daum.net>
Date: Mon Jul 15 18:14:15 2024 +0900
Chore: Action - Activate fast-forward merge
See https://github.com/marketplace/actions/fast-forward-merge
Pull request (dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
):
commit 9b79c35d58008bbd0dc7c06139db54edc3e1cc49 (pull_request/dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63)
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon Jul 15 09:31:11 2024 +0000
Chore(deps): Bump the npm_and_yarn group with 2 updates
Bumps the npm_and_yarn group with 2 updates: [braces](https://github.com/micromatch/braces) and [tar](https://github.com/isaacs/node-tar).
Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)
Updates `tar` from 6.2.0 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v6.2.0...v6.2.1)
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: tar
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
Fast forwarding main
(1f8794aa20d9a3f5e1dee1465ccb6372483dc59e) to dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
(9b79c35d58008bbd0dc7c06139db54edc3e1cc49).
$ git push origin 9b79c35d58008bbd0dc7c06139db54edc3e1cc49:main
remote: error: GH006: Protected branch update failed for refs/heads/main.
remote: error: Changes must be made through the merge queue At least 1 approving review is required by reviewers with write access. You're not authorized to push to this branch. Visit https://docs.github.com/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches for more information.
To https://github.com/mincho-js/mincho.git
! [remote rejected] 9b79c35d58008bbd0dc7c06139db54edc3e1cc49 -> main (protected branch hook declined)
error: failed to push some refs to 'https://github.com/mincho-js/mincho.git'
/fast-forward
Triggered from https://github.com/mincho-js/mincho/pull/31#issuecomment-2228094585 by @​black7375.
Trying to fast forward main
(1f8794aa20d9a3f5e1dee1465ccb6372483dc59e) to dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
(9b79c35d58008bbd0dc7c06139db54edc3e1cc49).
Target branch (main
):
commit 1f8794aa20d9a3f5e1dee1465ccb6372483dc59e (HEAD -> main, origin/main, origin/HEAD)
Author: alstjr7375 <alstjr7375@daum.net>
Date: Mon Jul 15 18:14:15 2024 +0900
Chore: Action - Activate fast-forward merge
See https://github.com/marketplace/actions/fast-forward-merge
Pull request (dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
):
commit 9b79c35d58008bbd0dc7c06139db54edc3e1cc49 (pull_request/dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63)
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon Jul 15 09:31:11 2024 +0000
Chore(deps): Bump the npm_and_yarn group with 2 updates
Bumps the npm_and_yarn group with 2 updates: [braces](https://github.com/micromatch/braces) and [tar](https://github.com/isaacs/node-tar).
Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)
Updates `tar` from 6.2.0 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v6.2.0...v6.2.1)
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: tar
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
Fast forwarding main
(1f8794aa20d9a3f5e1dee1465ccb6372483dc59e) to dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
(9b79c35d58008bbd0dc7c06139db54edc3e1cc49).
$ git push origin 9b79c35d58008bbd0dc7c06139db54edc3e1cc49:main
remote: error: GH006: Protected branch update failed for refs/heads/main.
remote: error: Changes must be made through the merge queue You're not authorized to push to this branch. Visit https://docs.github.com/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches for more information.
To https://github.com/mincho-js/mincho.git
! [remote rejected] 9b79c35d58008bbd0dc7c06139db54edc3e1cc49 -> main (protected branch hook declined)
error: failed to push some refs to 'https://github.com/mincho-js/mincho.git'
/fast-forward
Triggered from https://github.com/mincho-js/mincho/pull/31#issuecomment-2228097042 by @​black7375.
Trying to fast forward main
(1f8794aa20d9a3f5e1dee1465ccb6372483dc59e) to dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
(9b79c35d58008bbd0dc7c06139db54edc3e1cc49).
Target branch (main
):
commit 1f8794aa20d9a3f5e1dee1465ccb6372483dc59e (HEAD -> main, origin/main, origin/HEAD)
Author: alstjr7375 <alstjr7375@daum.net>
Date: Mon Jul 15 18:14:15 2024 +0900
Chore: Action - Activate fast-forward merge
See https://github.com/marketplace/actions/fast-forward-merge
Pull request (dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
):
commit 9b79c35d58008bbd0dc7c06139db54edc3e1cc49 (pull_request/dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63)
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon Jul 15 09:31:11 2024 +0000
Chore(deps): Bump the npm_and_yarn group with 2 updates
Bumps the npm_and_yarn group with 2 updates: [braces](https://github.com/micromatch/braces) and [tar](https://github.com/isaacs/node-tar).
Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)
Updates `tar` from 6.2.0 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v6.2.0...v6.2.1)
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: tar
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
Fast forwarding main
(1f8794aa20d9a3f5e1dee1465ccb6372483dc59e) to dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
(9b79c35d58008bbd0dc7c06139db54edc3e1cc49).
$ git push origin 9b79c35d58008bbd0dc7c06139db54edc3e1cc49:main
remote: error: GH006: Protected branch update failed for refs/heads/main.
remote: error: You're not authorized to push to this branch. Visit https://docs.github.com/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches for more information.
To https://github.com/mincho-js/mincho.git
! [remote rejected] 9b79c35d58008bbd0dc7c06139db54edc3e1cc49 -> main (protected branch hook declined)
error: failed to push some refs to 'https://github.com/mincho-js/mincho.git'
/fast-forward
Triggered from https://github.com/mincho-js/mincho/pull/31#issuecomment-2228109750 by @​black7375.
Trying to fast forward main
(1f8794aa20d9a3f5e1dee1465ccb6372483dc59e) to dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
(9b79c35d58008bbd0dc7c06139db54edc3e1cc49).
Target branch (main
):
commit 1f8794aa20d9a3f5e1dee1465ccb6372483dc59e (HEAD -> main, origin/main, origin/HEAD)
Author: alstjr7375 <alstjr7375@daum.net>
Date: Mon Jul 15 18:14:15 2024 +0900
Chore: Action - Activate fast-forward merge
See https://github.com/marketplace/actions/fast-forward-merge
Pull request (dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
):
commit 9b79c35d58008bbd0dc7c06139db54edc3e1cc49 (pull_request/dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63)
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon Jul 15 09:31:11 2024 +0000
Chore(deps): Bump the npm_and_yarn group with 2 updates
Bumps the npm_and_yarn group with 2 updates: [braces](https://github.com/micromatch/braces) and [tar](https://github.com/isaacs/node-tar).
Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)
Updates `tar` from 6.2.0 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v6.2.0...v6.2.1)
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: tar
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
Fast forwarding main
(1f8794aa20d9a3f5e1dee1465ccb6372483dc59e) to dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
(9b79c35d58008bbd0dc7c06139db54edc3e1cc49).
$ git push origin 9b79c35d58008bbd0dc7c06139db54edc3e1cc49:main
remote: error: GH006: Protected branch update failed for refs/heads/main.
remote: error: You're not authorized to push to this branch. Visit https://docs.github.com/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches for more information.
To https://github.com/mincho-js/mincho.git
! [remote rejected] 9b79c35d58008bbd0dc7c06139db54edc3e1cc49 -> main (protected branch hook declined)
error: failed to push some refs to 'https://github.com/mincho-js/mincho.git'
/fast-forward
Triggered from https://github.com/mincho-js/mincho/pull/31#issuecomment-2228116128 by @​black7375.
Trying to fast forward main
(1f8794aa20d9a3f5e1dee1465ccb6372483dc59e) to dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
(9b79c35d58008bbd0dc7c06139db54edc3e1cc49).
Target branch (main
):
commit 1f8794aa20d9a3f5e1dee1465ccb6372483dc59e (HEAD -> main, origin/main, origin/HEAD)
Author: alstjr7375 <alstjr7375@daum.net>
Date: Mon Jul 15 18:14:15 2024 +0900
Chore: Action - Activate fast-forward merge
See https://github.com/marketplace/actions/fast-forward-merge
Pull request (dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
):
commit 9b79c35d58008bbd0dc7c06139db54edc3e1cc49 (pull_request/dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63)
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon Jul 15 09:31:11 2024 +0000
Chore(deps): Bump the npm_and_yarn group with 2 updates
Bumps the npm_and_yarn group with 2 updates: [braces](https://github.com/micromatch/braces) and [tar](https://github.com/isaacs/node-tar).
Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)
Updates `tar` from 6.2.0 to 6.2.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v6.2.0...v6.2.1)
---
updated-dependencies:
- dependency-name: braces
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: tar
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com>
Fast forwarding main
(1f8794aa20d9a3f5e1dee1465ccb6372483dc59e) to dependabot/npm_and_yarn/npm_and_yarn-d2bbfeaf63
(9b79c35d58008bbd0dc7c06139db54edc3e1cc49).
$ git push origin 9b79c35d58008bbd0dc7c06139db54edc3e1cc49:main
To https://github.com/mincho-js/mincho.git
1f8794a..9b79c35 9b79c35d58008bbd0dc7c06139db54edc3e1cc49 -> main
Bumps the npm_and_yarn group with 2 updates: braces and tar.
Updates
braces
from 3.0.2 to 3.0.3Commits
74b2db2
3.0.388f1429
update eslint. lint, fix unit tests.415d660
Snyk js braces 6838727 (#40)190510f
fix tests, skip 1 test in test/braces.expand716eb9f
readme bumpa5851e5
Merge pull request #37 from coderaiser/fix/vulnerability2092bd1
feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cf
fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9
remove funding file665ab5d
update keepEscaping doc (#27)Updates
tar
from 6.2.0 to 6.2.1Commits
bef7b1e
6.2.1fe8cd57
prevent extraction in excessively deep subfoldersfe7ebfd
remove security.mdDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show