search

simonepri / phc-argon2

🔒 Node.JS Argon2 password hashing algorithm following the PHC string format.
MIT License
17 stars 6 forks source link

Update argon2 requirement from ^0.19.3 to ^0.21.0 #13

Closed dependabot-preview[bot] closed 5 years ago

dependabot-preview[bot] commented 5 years ago

Updates the requirements on argon2 to permit the latest version.

Release notes *Sourced from [argon2's releases](https://github.com/ranisalt/node-argon2/releases).* > ## v0.21.0 > - Using time-safe comparison for hash verification > - Fixed Windows and ancient GCC build issues > - Bumped dependencies
Commits - [`48f4a48`](https://github.com/ranisalt/node-argon2/commit/48f4a48310c482937ddee9172d861ee8aa36fe1b) v0.21.0 - [`1e871d5`](https://github.com/ranisalt/node-argon2/commit/1e871d56c709bdb6902e135052075de765753151) Backwards compat with GCC 4.8 - [`954f263`](https://github.com/ranisalt/node-argon2/commit/954f2634d6134a36605b9c20f8d74d0f298eef66) Update README to reflect new g++ >= 5 requirement ([#165](https://github-redirect.dependabot.com/ranisalt/node-argon2/issues/165)) - [`ed81ad3`](https://github.com/ranisalt/node-argon2/commit/ed81ad396eff30271b034ea6b34d0a58e6a6787a) chore(package): update lockfile package-lock.json - [`5aa4dcd`](https://github.com/ranisalt/node-argon2/commit/5aa4dcd525d6f78127a10ee0477c4cbfa452140f) chore(package): update bindings to version 1.4.0 - [`c3b753b`](https://github.com/ranisalt/node-argon2/commit/c3b753b57ee9b10111022d7fa4f3b11eafafb78a) Update mocha to the latest version 🚀 ([#164](https://github-redirect.dependabot.com/ranisalt/node-argon2/issues/164)) - [`996deae`](https://github.com/ranisalt/node-argon2/commit/996deae35b515071eee3afaaebeb20195b1236ef) Update README.md [ci skip] - [`369ab82`](https://github.com/ranisalt/node-argon2/commit/369ab826949b777ba0085c24e8b96f5d8666853c) Merge remote-tracking branch 'origin/greenkeeper/@types/node-11.9.4' - [`f6e71f9`](https://github.com/ranisalt/node-argon2/commit/f6e71f94566b56ee2c15cdf87e86a35ade862f2e) Update package-lock.json - [`2a08a90`](https://github.com/ranisalt/node-argon2/commit/2a08a90227ec09692dc527c2d45033ec81972cc8) Replace coveralls with codacy coverage - Additional commits viewable in [compare view](https://github.com/ranisalt/node-argon2/compare/v0.19.3...v0.21.0)


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) Finally, you can contact us by mentioning @dependabot.
dependabot-preview[bot] commented 5 years ago

Superseded by #14.