search

probot / reminders

set reminders on Issues and Pull Requests
https://github.com/apps/reminders
ISC License
162 stars 24 forks source link

fix(deps): update dependency chrono-node to v2.7.1 [security] - autoclosed #92

Closed renovate[bot] closed 1 month ago

renovate[bot] commented 1 month ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
chrono-node 2.7.0 -> 2.7.1 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces.

Release Notes

wanasit/chrono (chrono-node) ### [`v2.7.1`](https://redirect.github.com/wanasit/chrono/releases/tag/v2.7.1) [Compare Source](https://redirect.github.com/wanasit/chrono/compare/v2.7.0...v2.7.1) - Fix: Apply lazy loading to RU patterns (related to errors in Hermes engine) [`5db3a1f`](https://redirect.github.com/wanasit/chrono/commit/5db3a1f)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR was generated by Mend Renovate. View the repository job log.