Closed dependabot[bot] closed 1 month ago
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.
Bumps the npm_and_yarn group with 1 update in the / directory: axios. Bumps the npm_and_yarn group with 2 updates in the /autoadmin-ws-server directory: axios and semver. Bumps the npm_and_yarn group with 1 update in the /frontend directory: @angular/core.
Updates
axios
from 1.7.3 to 1.7.4Release notes
Sourced from axios's releases.
Changelog
Sourced from axios's changelog.
Commits
abd24a7
chore(release): v1.7.4 (#6544)6b6b605
fix(sec): CVE-2024-39338 (#6539) (#6543)07a661a
fix(sec): disregard protocol-relative URL to remediate SSRF (#6539)Updates
axios
from 1.6.8 to 1.7.4Release notes
Sourced from axios's releases.
Changelog
Sourced from axios's changelog.
Commits
abd24a7
chore(release): v1.7.4 (#6544)6b6b605
fix(sec): CVE-2024-39338 (#6539) (#6543)07a661a
fix(sec): disregard protocol-relative URL to remediate SSRF (#6539)Updates
semver
from 7.6.2 to 7.6.3Release notes
Sourced from semver's releases.
Changelog
Sourced from semver's changelog.
Commits
0a12d6c
chore: release 7.6.3 (#720)73a3d79
fix: optimize Range parsing and formatting (#726)2975ece
docs: fix extra backtick typo (#719)Updates
ws
from 8.17.1 to 8.18.0Release notes
Sourced from ws's releases.
Commits
976c53c
[dist] 8.18.059b9629
[feature] Add support forBlob
(#2229)0d1b5e6
[security] Use more descriptive text for 2017 vulnerability link15f11a0
[security] Add new DoS vulnerability to SECURITY.mdUpdates
@angular/core
from 17.3.11 to 17.3.12Release notes
Sourced from
@angular/core
's releases.Changelog
Sourced from
@angular/core
's changelog.... (truncated)
Commits
327bae4
fix(compiler): JIT mode incorrectly interpreting host directive configuration...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show