__proto__ will now be replaced with ___proto___ in parse (#258), patching a potential
prototype pollution vulnerability. This was reported by the Snyk Security Research Team.(63810ca)
__proto__ will now be replaced with ___proto___ in parse (#258), patching a potential
prototype pollution vulnerability. This was reported by the Snyk Security Research Team. (63810ca)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/vechain/thor-sync.electron/network/alerts).
Bumps yargs-parser to 18.1.3 and updates ancestor dependencies yargs-parser, yargs and webpack. These dependencies need to be updated together.
Updates
yargs-parserfrom 5.0.0 to 18.1.3Release notes
Sourced from yargs-parser's releases.
Changelog
Sourced from yargs-parser's changelog.
... (truncated)
Commits
d301a56chore: release 18.1.3 (#269)f7e15b9fix(setArg): options using camel-case and dot-notation populated twice (#268)78014fcchore: release 18.1.2 (#263)41d3f81fix(array, nargs): support -o=--value and --option=--value format (#262)b96b989chore: release 18.1.1 (#259)63810cafix: proto will now be replaced with proto in parse (#258)48b6d9cchore: release 18.1.0 (#257)9c60265feat: introduce single-digit boolean aliases (#255)87e0a21test: use bin to enforce coverage thresholds (#256)88f36c3force releaseMaintainer changes
This version was pushed to npm by oss-bot, a new releaser for yargs-parser since your current version.
Updates
yargsfrom 15.1.0 to 15.4.1Changelog
Sourced from yargs's changelog.
... (truncated)
Commits
0b519a4chore: update package.json22d7ec0fix(deps): decamelize@3.x is 12mb028b50dchore: release 15.4.0 (#1635)225ab82feat: support array of examples (#1682)e68334brefactor(ts): move and tsify most of root yargs.js to lib/yargs (#1670)cb7fbb8chore: remove old entries fromfilesfield in `package.json (#1677)34949f8Revert "chore(deps): update dependency eslint to v7 (#1656)" (#1673)18c2efddocs(api): clarify process.argv handling and the order of API methods (#1644)791cc59docs: describe commandDir() parameters (#1540) (#1613)83a90f0chore(deps): update typescript-eslint monorepo to v3 (#1662)Updates
webpackfrom 3.12.0 to 5.75.0Release notes
Sourced from webpack's releases.
... (truncated)
Commits
8241da75.75.0a91d923Merge pull request #16458 from webpack/bugfix/semi4608b11Merge pull request #16457 from webpack/tooling/updatedfdd0b0Merge pull request #16122 from AnmolBansalDEV/bug/compilationCallback23b9a1cMerge pull request #16167 from exposir/fixts6f2c5e8Merge pull request #16257 from alexzhang1030/calc_deterministic_verbosef7f36adMerge pull request #16339 from Liamolucko/wasm-i64761a542fix semicolon position2403a36Merge pull request #16345 from ahabhgk/fix-eval-nosourcesc18203cupdate toolingDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/vechain/thor-sync.electron/network/alerts).