Fix regex catastrophic backtracking 6baf2cc
Working around this meant accepting some obscure false-positives. I don't think it will affect any real code, but it's good to be aware of. See the disabled tests in the commit.
This version was pushed to npm by npm-service-account-ipfs, a new releaser for aegir since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/testground/sdk-js/network/alerts).
Bumps semver-regex to 4.0.5 and updates ancestor dependency aegir. These dependencies need to be updated together.
Updates
semver-regexfrom 2.0.0 to 4.0.5Release notes
Sourced from semver-regex's releases.
... (truncated)
Commits
04098504.0.529842b4Improve regex1d451a6Add readme notee7a24104.0.44bb055fMeta tweakse93d9c8Fix some false positive matches (#23)ddfeb8bFix CI65fc4a44.0.3d8ba39aFix ReDoS vulnerabilityb5894c14.0.2Updates
aegirfrom 35.1.1 to 38.1.6Release notes
Sourced from aegir's releases.
... (truncated)
Changelog
Sourced from aegir's changelog.
... (truncated)
Commits
72a9f4echore(release): 38.1.6 [skip ci]c103f37deps: bump gh-pages from 4.0.0 to 5.0.0 (#1173)8761e36deps: bump esbuild from 0.16.17 to 0.17.9 (#1194)5a71818deps: bump execa from 6.1.0 to 7.0.0 (#1191)6e58c9edeps(dev): bump electron from 22.3.0 to 23.1.0 (#1193)f2611aachore(release): 38.1.5 [skip ci]8d37a9afix: revert pinning of esquery depe39e245chore(release): 38.1.4 [skip ci]eff8550fix: pin esquery version temporarily2dad5f2fix: do not create .gitignore files for monorepo workspace projectsMaintainer changes
This version was pushed to npm by npm-service-account-ipfs, a new releaser for aegir since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/testground/sdk-js/network/alerts).