socket-security[bot]
commented
1 year ago New dependency changes detected. Learn more about Socket for GitHub ↗︎
👍 No new dependency issues detected in pull request
Bot Commands
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all
Pull request alert summary
| Issue | Status |
|---|---|
| Install scripts | ✅ 0 issues |
| Native code | ✅ 0 issues |
| Bin script shell injection | ✅ 0 issues |
| Unresolved require | ✅ 0 issues |
| Invalid package.json | ✅ 0 issues |
| HTTP dependency | ✅ 0 issues |
| Git dependency | ✅ 0 issues |
| Potential typo squat | ✅ 0 issues |
| Known Malware | ✅ 0 issues |
| Telemetry | ✅ 0 issues |
| Protestware/Troll package | ✅ 0 issues |
📊 Modified Dependency Overview:
| ⬆️ Updated Package | Version Diff | Added Capability Access | +/- Transitive Count |
Publisher |
|---|---|---|---|---|
| @sanity/semantic-release-preset@2.0.5 | 2.0.2...2.0.5 | None | +50/-35 |
stipsan |
| @types/styled-components@5.1.26 | 5.1.25...5.1.26 | None | +1/-4 |
types |
| typescript@4.9.5 | 4.8.4...4.9.5 | None | +0/-0 |
typescript-bot |
| @typescript-eslint/parser@5.59.8 | 5.42.0...5.59.8 | None | +20/-20 |
jameshenry |
| husky@8.0.3 | 8.0.1...8.0.3 | None | +0/-0 |
typicode |
| eslint-config-prettier@8.8.0 | 8.5.0...8.8.0 | None | +15/-14 |
lydell |
| @commitlint/config-conventional@17.6.5 | 17.2.0...17.6.5 | None | +0/-0 |
escapedcat |
| @typescript-eslint/eslint-plugin@5.59.8 | 5.42.0...5.59.8 | None | +24/-26 |
jameshenry |
| eslint@8.41.0 | 8.26.0...8.41.0 | None | +14/-13 |
eslintbot |
| @types/jest@27.5.2 | 27.5.1...27.5.2 | None | +0/-0 |
types |
| @commitlint/cli@17.6.5 | 17.2.0...17.6.5 | None | +36/-39 |
escapedcat |
| eslint-plugin-react@7.32.2 | 7.31.10...7.32.2 | None | +40/-33 |
ljharb |
🚮 Removed packages: @types/react@18.0.25, @types/react-dom@18.0.4, lint-staged@13.0.3, sanity@3.0.1
github-actions[bot]
This PR contains the following updates:
🔧 This Pull Request updates lock files to use the latest dependency versions.
Configuration
📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate using a preset from