github-actions[bot]
commented
6 months ago Dependency Review
The following issues were found:
- ❌ 1 vulnerable package(s)
- ✅ 0 package(s) with incompatible licenses
- ✅ 0 package(s) with invalid SPDX license definitions
- ✅ 0 package(s) with unknown licenses.
Vulnerabilities
package-lock.json
| Name | Version | Vulnerability | Severity |
|---|---|---|---|
| undici | 5.27.2 | Undici proxy-authorization header not cleared on cross-origin redirect in fetch | low |
Scanned Manifest Files
package-lock.json
- undici@5.27.2
- @discordjs/builders@1.7.0
- @discordjs/collection@1.5.3
- @discordjs/collection@2.0.0
- @discordjs/formatters@0.3.3
- @discordjs/rest@2.2.0
- @discordjs/util@1.0.2
- @discordjs/ws@1.0.2
- @sapphire/async-queue@1.5.2
- @sapphire/shapeshift@3.9.6
- @sapphire/snowflake@3.5.1
- @types/ws@8.5.9
- @vladfrangu/async_event_emitter@2.2.4
- discord-api-types@0.37.61
- discord.js@14.14.1
- magic-bytes.js@1.8.0
- ts-mixer@6.0.4
- tslib@2.6.2
- ws@8.14.2
- @discordjs/builders@1.4.0
- @discordjs/collection@1.3.0
- @discordjs/rest@1.5.0
- @discordjs/util@0.1.0
- @sapphire/async-queue@1.5.0
- @sapphire/shapeshift@3.8.1
- @sapphire/snowflake@3.4.0
- @tokenizer/token@0.3.0
- @types/ws@8.5.3
- discord-api-types@0.37.24
- discord.js@14.7.1
- file-type@18.0.0
- peek-readable@5.0.0
- readable-web-to-node-stream@3.0.2
- strtok3@7.0.0
- token-types@5.0.1
- ts-mixer@6.0.2
- tslib@2.4.1
- undici@5.28.3
- ws@8.11.0
package.json
- discord.js@^14.14.1
- discord.js@^14.7.1
dependabot[bot]
Bumps discord.js from 14.7.1 to 14.14.1.
Release notes
Sourced from discord.js's releases.
... (truncated)
Changelog
Sourced from discord.js's changelog.
... (truncated)
Commits
2550c79chore(discord.js): release discord.js@14.14.1 (#9957)40726dbrefactor: use formatters (#9956)1e4ef35docs: use preferred nullable syntax (?ToverT | null) (#9946)4bc1daetypes: use wrapper utilities (#9945)cc07a28fix(Emoji):idset asundefinededge case (#9953)f93abf7fix(BaseClient): Default in objects properly (#9952)dbb92e5chore(releases): release party (#9943)975d5f1chore: use descriptive type parameter names (#9937)4ff3ea4feat: default select menu values (#9867)b5e23ecfix(Client): Ensure destroyed connections are not ready (#9942)Maintainer changes
This version was pushed to npm by crawl, a new releaser for discord.js since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show