This release contains an emergency fix which replaces colors.js with chalk. See #781 for more info and discussion, and Marak/colors.js#285 for broader discussion about colors.js.
This version was pushed to npm by thornjad, a new releaser for http-server since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mozilla/webxr-polyfill/network/alerts).
Bumps qs to 6.11.1 and updates ancestor dependency http-server. These dependencies need to be updated together.
Updates
qs
from 6.4.0 to 6.11.1Changelog
Sourced from qs's changelog.
... (truncated)
Commits
9dca37f
v6.11.14c4b23d
[Fix]stringify
: encode comma values more consistently1778ed4
[Dev Deps] update@ljharb/eslint-config
,object-inspect
,tape
20820fa
[Dev Deps] updateaud
2048fa5
[meta] remove extraneous code backticks7e937fa
[actions] update checkout action6ce7665
[Dev Deps] updateaud
,tape
e45d713
[actions] restrict action permissions997044d
[meta] fix changelog markdown92c746b
[readme] add usage offilter
option for injecting custom serialization, i.e...Updates
http-server
from 0.10.0 to 14.1.1Release notes
Sourced from http-server's releases.
... (truncated)
Commits
af0ac3e
14.1.1e5301d3
update license year318c55f
Merge pull request #794 from http-party/dependabot/npm_and_yarn/follow-redire...284a0b0
Merge pull request #803 from dpassen/patch-CVE-2021-4490617cc8d6
Patch CVE-2021-44906dc2fcf0
Bump follow-redirects from 1.14.4 to 1.14.833a6639
Update SECURITY.md251d4a1
Update support commitments for Jan 2022e16ed1d
14.1.056bdf6e
Merge pull request #785 from zbynek/use-chalkMaintainer changes
This version was pushed to npm by thornjad, a new releaser for http-server since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mozilla/webxr-polyfill/network/alerts).