Closed dependabot[bot] closed 4 years ago
@dependabot merge
2020年9月13日(日) 8:43 dependabot[bot] notifications@github.com:
This automated pull request fixes a security vulnerability https://github.com/textlint-ja/textlint-rule-preset-ja-technical-writing/network/alert/yarn.lock/node-fetch/open (low severity).
Learn more about Dependabot security updates https://docs.github.com/github/managing-security-vulnerabilities/configuring-github-dependabot-security-updates.
Bumps node-fetch https://github.com/bitinn/node-fetch from 2.6.0 to 2.6.1. Release notes
Sourced from node-fetch's releases https://github.com/bitinn/node-fetch/releases.
v2.6.1
This is an important security release. It is strongly recommended to update as soon as possible.
See CHANGELOG https://github.com/node-fetch/node-fetch/blob/master/docs/CHANGELOG.md#v261 for details.
Changelog
Sourced from node-fetch's changelog https://github.com/node-fetch/node-fetch/blob/master/docs/CHANGELOG.md.
v2.6.1
This is an important security release. It is strongly recommended to update as soon as possible.
- Fix: honor the size option after following a redirect.
Commits
- b5e2e41 https://github.com/node-fetch/node-fetch/commit/b5e2e41b2b50bf2997720d6125accaf0dd68c0ab update version number
- 2358a6c https://github.com/node-fetch/node-fetch/commit/2358a6c2563d1730a0cdaccc197c611949f6a334 Honor the size option after following a redirect and revert data uri support
- 8c197f8 https://github.com/node-fetch/node-fetch/commit/8c197f8982a238b3c345c64b17bfa92e16b4f7c4 docs: Fix typos and grammatical errors in README.md (#686 https://github-redirect.dependabot.com/bitinn/node-fetch/issues/686)
- 1e99050 https://github.com/node-fetch/node-fetch/commit/1e99050f944ac435fce26a9549eadcc2419a968a fix: Change error message thrown with redirect mode set to error (#653 https://github-redirect.dependabot.com/bitinn/node-fetch/issues/653)
- 244e6f6 https://github.com/node-fetch/node-fetch/commit/244e6f63d42025465796e3ca4ce813bf2c31fc5b docs: Show backers in README
- 6a5d192 https://github.com/node-fetch/node-fetch/commit/6a5d192034a0f438551dffb6d2d8df2c00921d16 fix: Properly parse meta tag when parameters are reversed (#682 https://github-redirect.dependabot.com/bitinn/node-fetch/issues/682)
- 47a24a0 https://github.com/node-fetch/node-fetch/commit/47a24a03eb49a49d81b768892aee10074ed54a91 chore: Add opencollective badge
- 7b13662 https://github.com/node-fetch/node-fetch/commit/7b136627c537cb24430b0310638c9177a85acee1 chore: Add funding link
- 5535c2e https://github.com/node-fetch/node-fetch/commit/5535c2ed478d418969ecfd60c16453462de2a53f fix: Check for global.fetch before binding it (#674 https://github-redirect.dependabot.com/bitinn/node-fetch/issues/674)
- 1d5778a https://github.com/node-fetch/node-fetch/commit/1d5778ad0d910dbd1584fb407a186f5a0bc1ea22 docs: Add Discord badge
- Additional commits viewable in compare view https://github.com/bitinn/node-fetch/compare/v2.6.0...v2.6.1
Maintainer changes
This version was pushed to npm by akepinski https://www.npmjs.com/~akepinski, a new releaser for node-fetch since your current version.
[image: Dependabot compatibility score] https://docs.github.com/en/github/managing-security-vulnerabilities/configuring-github-dependabot-security-updates
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page https://github.com/textlint-ja/textlint-rule-preset-ja-technical-writing/network/alerts .
You can view, comment on, or merge this pull request online at:
https://github.com/textlint-ja/textlint-rule-preset-ja-technical-writing/pull/58 Commit Summary
- chore(deps): bump node-fetch from 2.6.0 to 2.6.1
File Changes
- M yarn.lock https://github.com/textlint-ja/textlint-rule-preset-ja-technical-writing/pull/58/files#diff-8ee2343978836a779dc9f8d6b794c3b2 (6)
Patch Links:
- https://github.com/textlint-ja/textlint-rule-preset-ja-technical-writing/pull/58.patch
https://github.com/textlint-ja/textlint-rule-preset-ja-technical-writing/pull/58.diff
— You are receiving this because you have alerting access. Reply to this email directly, view it on GitHub https://github.com/textlint-ja/textlint-rule-preset-ja-technical-writing/pull/58, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAAE2AQ6GMZQVCKSFASPU2LSFQBSZANCNFSM4RKDXHOQ .
Bumps node-fetch from 2.6.0 to 2.6.1.
Release notes
Sourced from node-fetch's releases.
Changelog
Sourced from node-fetch's changelog.
Commits
b5e2e41
update version number2358a6c
Honor thesize
option after following a redirect and revert data uri support8c197f8
docs: Fix typos and grammatical errors in README.md (#686)1e99050
fix: Change error message thrown with redirect mode set to error (#653)244e6f6
docs: Show backers in README6a5d192
fix: Properly parse meta tag when parameters are reversed (#682)47a24a0
chore: Add opencollective badge7b13662
chore: Add funding link5535c2e
fix: Check for global.fetch before binding it (#674)1d5778a
docs: Add Discord badgeMaintainer changes
This version was pushed to npm by akepinski, a new releaser for node-fetch since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/textlint-ja/textlint-rule-preset-ja-technical-writing/network/alerts).