Closed dependabot[bot] closed 1 month ago
Latest commit: c4f7ce991a4ff4fda182ba46d730a7042af39c7e
Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.
Click here to learn what changesets are, and how to add one.
Click here if you're a maintainer who wants to add a changeset to this PR
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
Package | New capabilities | Transitives | Size | Publisher |
---|---|---|---|---|
npm/@tus/file-store@1.4.0 | None | 0 |
16.1 kB | murderlon |
npm/@tus/gcs-store@1.3.0 | Transitive: environment | +1 |
54.1 kB | murderlon |
npm/@tus/s3-store@1.5.0 | Transitive: environment | +1 |
82.3 kB | acconut, murderlon, tus-bot |
npm/@tus/server@1.7.0 | Transitive: environment | +1 |
129 kB | murderlon |
npm/@tus/utils@0.3.0 | None | 0 |
37 kB | murderlon |
🚮 Removed packages: npm/@tus/file-store@1.3.3, npm/@tus/gcs-store@1.2.2, npm/@tus/s3-store@1.4.3, npm/@tus/server@1.6.0
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version
or @dependabot ignore this minor version
. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore
condition with the desired update_types
to your config file.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
Bumps braces from 3.0.2 to 3.0.3.
Commits
74b2db2
3.0.388f1429
update eslint. lint, fix unit tests.415d660
Snyk js braces 6838727 (#40)190510f
fix tests, skip 1 test in test/braces.expand716eb9f
readme bumpa5851e5
Merge pull request #37 from coderaiser/fix/vulnerability2092bd1
feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cf
fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9
remove funding file665ab5d
update keepEscaping doc (#27)You can trigger a rebase of this PR by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show