github-actions[bot]
commented
1 week ago Dependency Review
✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.
OpenSSF Scorecard
| Package | Version | Score | Details |
|---|
Scanned Manifest Files
package-lock.json
- @types/aws-lambda@8.10.140
- @types/node@20.14.5
- @typescript-eslint/parser@7.13.1
- @typescript-eslint/scope-manager@7.13.1
- @typescript-eslint/types@7.13.1
- @typescript-eslint/typescript-estree@7.13.1
- @typescript-eslint/visitor-keys@7.13.1
- cdk-nag@2.28.144
- eslint-plugin-jsdoc@48.2.12
- eslint-plugin-security@3.0.1
- @types/aws-lambda@8.10.138
- @types/node@20.14.2
- @typescript-eslint/parser@7.13.0
- @typescript-eslint/scope-manager@7.13.0
- @typescript-eslint/types@7.13.0
- @typescript-eslint/typescript-estree@7.13.0
- @typescript-eslint/visitor-keys@7.13.0
- cdk-nag@2.28.139
- eslint-plugin-jsdoc@48.2.7
- eslint-plugin-security@3.0.0
package.json
- @types/aws-lambda@^8.10.140
- @types/node@^20.14.5
- @typescript-eslint/parser@^7.13.1
- cdk-nag@^2.28.144
- eslint-plugin-jsdoc@^48.2.12
- eslint-plugin-security@^3.0.1
- @types/aws-lambda@^8.10.138
- @types/node@^20.14.2
- @typescript-eslint/parser@^7.13.0
- cdk-nag@^2.28.139
- eslint-plugin-jsdoc@^48.2.7
- eslint-plugin-security@^3.0.0
Bumps the patches group with 6 updates:
8.10.1388.10.14020.14.220.14.57.13.07.13.12.28.1392.28.14448.2.748.2.123.0.03.0.1Updates
@types/aws-lambdafrom 8.10.138 to 8.10.140Commits
Updates
@types/nodefrom 20.14.2 to 20.14.5Commits
Updates
@typescript-eslint/parserfrom 7.13.0 to 7.13.1Release notes
Sourced from
@typescript-eslint/parser's releases.Changelog
Sourced from
@typescript-eslint/parser's changelog.Commits
1212a8fchore(release): publish 7.13.1Updates
cdk-nagfrom 2.28.139 to 2.28.144Release notes
Sourced from cdk-nag's releases.
Commits
Updates
eslint-plugin-jsdocfrom 48.2.7 to 48.2.12Release notes
Sourced from eslint-plugin-jsdoc's releases.
Commits
8603579fix: namespace flat configname'sc2d5a35fix: avoid insertingnamefor eslintrc configs; fixes #12395429982fix: add names to flat configsfbc9fcafix(require-description-complete-sentence): regression with heading exempti...e9e4440fix(require-description-complete-sentence): avoid triggering punctuation wa...Updates
eslint-plugin-securityfrom 3.0.0 to 3.0.1Release notes
Sourced from eslint-plugin-security's releases.
Changelog
Sourced from eslint-plugin-security's changelog.
Commits
aa33cf5chore: release 3.0.1 (#162)877a1a2ci: upgrade beemojs/conventional-pr-action v3 (#163)aa1c8c5fix: add name to recommended flat config (#161)913c5dachore(deps): bump tunnel-agent and changelog (#160)26eff1dchore(deps): bump json-schema and jsprim (#150)29fd175chore(deps-dev): bump qs from 6.3.2 to 6.3.3 (#152)fc56623chore(deps-dev): bump npm from 8.7.0 to 8.19.4 (#153)6fa2cc8chore(deps-dev): bump semantic-release from 19.0.2 to 19.0.3 (#149)dcf97a7docs: add TypeScript support section (#159)4dfed2achore: add pkg.funding (#158)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show