quirrel-dev / owl

A high-performance, Redis-backed job queueing library originally built for Quirrel. Has an in-memory mode for development use cases.
MIT License
97 stars 11 forks source link

chore(deps): update dependency nanoid to 3.1.31 [security] - autoclosed #210

Closed renovate[bot] closed 1 year ago

renovate[bot] commented 2 years ago

Mend Renovate

This PR contains the following updates:

Package Change
nanoid 3.1.25 -> 3.1.31

GitHub Vulnerability Alerts

CVE-2021-23566

The package nanoid from 3.0.0, before 3.1.31, are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

coveralls commented 2 years ago

Pull Request Test Coverage Report for Build 3088555995

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

Details


Totals Coverage Status
Change from base Build 3088550916: 0.2%
Covered Lines: 450
Relevant Lines: 475

💛 - Coveralls