Closed renovate[bot] closed 1 year ago
Merging #784 (5203fb6) into development (9510f42) will not change coverage. The diff coverage is
n/a
.
@@ Coverage Diff @@
## development #784 +/- ##
============================================
Coverage 98.95% 98.95%
============================================
Files 12 12
Lines 287 287
Branches 53 53
============================================
Hits 284 284
Partials 3 3
Flag | Coverage Δ | |
---|---|---|
core | 98.95% <ø> (ø) |
Flags with carried forward coverage won't be shown. Click here to find out more.
:mega: We’re building smart automated test selection to slash your CI/CD build times. Learn more
This PR contains the following updates:
6.5.2
->6.5.3
6.9.6
->6.9.7
GitHub Vulnerability Alerts
CVE-2022-24999
qs before 6.10.3 allows attackers to cause a Node process hang because an
__ proto__
key can be used. In many typical web framework use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used to visit the application, such asa[__proto__]=b&a[__proto__]&a[length]=100000000
. The fix was backported to qs 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, and 6.2.4.Configuration
📅 Schedule: Branch creation - "" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.