search

secureCodeBox / documentation

This repo contains the complete SCB project documentation.
https://docs.secureCodeBox.io
9 stars 11 forks source link

Bump eslint-plugin-security from 1.5.0 to 1.7.1 #334

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps eslint-plugin-security from 1.5.0 to 1.7.1.

Release notes

Sourced from eslint-plugin-security's releases.

eslint-plugin-security v1.7.1

Bug Fixes

  • false positives for static expressions in detect-non-literal-fs-filename, detect-child-process, detect-non-literal-regexp, and detect-non-literal-require (#109) (56102b5)

eslint-plugin-security v1.7.0

Features

eslint-plugin-security v1.6.0

Features

  • Add meta object documentation for all rules (#79) (fb1d9ef)
  • detect-bidi-characters rule (#95) (4294d29)
  • detect-non-literal-fs-filename: change to track non-top-level require() as well (#105) (d3b1543)
  • extend detect non literal fs filename (#92) (08ba476)
  • non-literal-require: support template literals (#81) (208019b)

Bug Fixes

  • Avoid crash when exec() is passed no arguments (7f97815), closes #82 #23
  • Avoid TypeError when exec stub is used with no arguments (#97) (9c18f16)
  • detect-child-process: false positive for destructuring with exec (#102) (657921a)
  • detect-child-process: false positives for destructuring spawn (#103) (fdfe37d)
  • Incorrect method name in detect-buffer-noassert. (313c0c6), closes #63 #80
Changelog

Sourced from eslint-plugin-security's changelog.

1.7.1 (2023-02-02)

Bug Fixes

  • false positives for static expressions in detect-non-literal-fs-filename, detect-child-process, detect-non-literal-regexp, and detect-non-literal-require (#109) (56102b5)

1.7.0 (2023-01-26)

Features

1.6.0 (2023-01-11)

Features

  • Add meta object documentation for all rules (#79) (fb1d9ef)
  • detect-bidi-characters rule (#95) (4294d29)
  • detect-non-literal-fs-filename: change to track non-top-level require() as well (#105) (d3b1543)
  • extend detect non literal fs filename (#92) (08ba476)
  • non-literal-require: support template literals (#81) (208019b)

Bug Fixes

  • Avoid crash when exec() is passed no arguments (7f97815), closes #82 #23
  • Avoid TypeError when exec stub is used with no arguments (#97) (9c18f16)
  • detect-child-process: false positive for destructuring with exec (#102) (657921a)
  • detect-child-process: false positives for destructuring spawn (#103) (fdfe37d)
  • Incorrect method name in detect-buffer-noassert. (313c0c6), closes #63 #80
Commits
  • 0c9c1de chore: release 1.7.1 (#114)
  • 56102b5 fix: false positives for static expressions in detect-non-literal-fs-filename...
  • 75e1e9d chore: release 1.7.0 (#113)
  • 951fcc8 docs: Correct typos
  • 64ae529 feat: improve detect-child-process rule (#108)
  • d699c30 chore: fix repo url (#111)
  • c54e618 chore: release 1.6.0 (#107)
  • 74e5203 chore: Clean up changelog
  • d3b1543 feat(detect-non-literal-fs-filename): change to track non-top-level `require(...
  • 7d482c5 chore: Add release-please to automate releases
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by eslint-community-bot, a new releaser for eslint-plugin-security since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
netlify[bot] commented 1 year ago

Deploy Preview for docs-securecodebox ready!

Name Link
Latest commit 87c1ca335b9b309433e7f2501705af3c26026b55
Latest deploy log https://app.netlify.com/sites/docs-securecodebox/deploys/64c77780255c0f0008773c3a
Deploy Preview https://deploy-preview-334--docs-securecodebox.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Zero3141 commented 1 year ago

Already included in PR342

dependabot[bot] commented 1 year ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.