socket-security[bot]
commented
2 months ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/@types/express-serve-static-core@4.17.41 | None | +4 |
4.05 MB | types |
| npm/@types/express@4.17.21 | None | +4 |
4.01 MB | types |
| npm/@types/mime@1.3.5 | None | 0 |
3.78 kB | types |
| npm/@types/serve-static@1.15.5 | None | +2 |
4 MB | types |
| npm/@webassemblyjs/ast@1.11.6 | None | +5 |
341 kB | xtuc |
| npm/@webassemblyjs/wasm-parser@1.11.6 | None | +7 |
329 kB | xtuc |
| npm/accepts@1.3.8 | None | +3 |
268 kB | dougwilson |
| npm/content-type@1.0.5 | None | 0 |
10.5 kB | dougwilson |
| npm/get-stream@6.0.1 | None | 0 |
12.2 kB | sindresorhus |
| npm/parseurl@1.3.3 | None | 0 |
10.3 kB | dougwilson |
🚮 Removed packages: npm/resolve@1.22.8, npm/safe-buffer@5.2.1, npm/semver@7.5.4, npm/serialize-javascript@6.0.2, npm/shell-quote@1.8.1, npm/string-width@5.1.2, npm/svgo@2.8.0, npm/tapable@2.2.1, npm/terser-webpack-plugin@5.3.10, npm/terser@5.27.0, npm/tslib@2.6.2, npm/type-fest@2.19.0, npm/unified@11.0.4, npm/unpipe@1.0.0, npm/util-deprecate@1.0.2, npm/vfile@6.0.1, npm/webpack-sources@3.2.3, npm/wrap-ansi@8.1.0, npm/xdg-basedir@5.1.0, npm/yaml@1.10.2
dependabot[bot]
sozercan
Bumps github.com/containerd/containerd from 1.7.16 to 1.7.17.
Release notes
Sourced from github.com/containerd/containerd's releases.
... (truncated)
Commits
3a4de45Merge pull request #10235 from dmcgowan/prepare-v1.7.17114b07bPrepare release notes for v1.7.172441c2dMerge pull request #10209 from austinvazquez/cherry-pick-a782fd6da2fa9fa350ef...62af107Merge pull request #10233 from dmcgowan/1.7-unpack-fetch-alla3c0f2fMerge pull request #10232 from kiashok/update-shim-0.11.41573ea5Update ctr image pull all platforms32b594fUpdate unpacker to always fetch all5a03a3aUpdate hcsshim tag to v0.11.5b5aec32Merge pull request #10221 from kiashok/update-ttrpc-release-1.736bbb4dMerge pull request #10210 from swagatbora90/preserve-flags-cherry-pick-1.7Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show