socket-security[bot]
commented
1 year ago New dependency changes detected. Learn more about Socket for GitHub ↗︎
👍 No new dependency issues detected in pull request
Bot Commands
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all
Pull request alert summary
| Issue | Status |
|---|---|
| Install scripts | ✅ 0 issues |
| Native code | ✅ 0 issues |
| Bin script shell injection | ✅ 0 issues |
| Unresolved require | ✅ 0 issues |
| Invalid package.json | ✅ 0 issues |
| HTTP dependency | ✅ 0 issues |
| Git dependency | ✅ 0 issues |
| Potential typo squat | ✅ 0 issues |
| Known Malware | ✅ 0 issues |
| Telemetry | ✅ 0 issues |
| Protestware/Troll package | ✅ 0 issues |
📊 Modified Dependency Overview:
| ⬆️ Updated Package | Version Diff | Added Capability Access | +/- Transitive Count |
Publisher |
|---|---|---|---|---|
| semantic-release@21.0.3 | 20.1.3...21.0.3 | None | +26/-3 |
semantic-release-bot |
webtorrent-bot
This PR contains the following updates:
20.1.3->21.0.3Release Notes
semantic-release/semantic-release
### [`v21.0.3`](https://togithub.com/semantic-release/semantic-release/releases/tag/v21.0.3) [Compare Source](https://togithub.com/semantic-release/semantic-release/compare/v21.0.2...v21.0.3) ##### Bug Fixes - bump `@semantic-release/commit-analyzer` to `v10.0.0-beta.1` ([4a6b31f](https://togithub.com/semantic-release/semantic-release/commit/4a6b31f57e84287aaa8e4868d57ba54aa2ca2b71)) - bump `@semantic-release/github` to `9.0.0-beta.2` ([#2818](https://togithub.com/semantic-release/semantic-release/issues/2818)) ([6f19d77](https://togithub.com/semantic-release/semantic-release/commit/6f19d77e54e21ae3a4e83a992119effb923afc94)) - **deps:** updated the beta plugins to stable versions ([3941018](https://togithub.com/semantic-release/semantic-release/commit/39410186dfd3c24c30a9b316a83d466af6c54ace)) ### [`v21.0.2`](https://togithub.com/semantic-release/semantic-release/releases/tag/v21.0.2) [Compare Source](https://togithub.com/semantic-release/semantic-release/compare/v21.0.1...v21.0.2) ##### Bug Fixes - **deps:** update dependency [@semantic-release/release-notes-generator](https://togithub.com/semantic-release/release-notes-generator) to v11 ([#2778](https://togithub.com/semantic-release/semantic-release/issues/2778)) ([ac40804](https://togithub.com/semantic-release/semantic-release/commit/ac40804dc4b90df783bbee3e439e03cefb76c47f)) ### [`v21.0.1`](https://togithub.com/semantic-release/semantic-release/releases/tag/v21.0.1) [Compare Source](https://togithub.com/semantic-release/semantic-release/compare/v21.0.0...v21.0.1) ##### Bug Fixes - **deps:** update dependency env-ci to v9 ([#2757](https://togithub.com/semantic-release/semantic-release/issues/2757)) ([4bddb37](https://togithub.com/semantic-release/semantic-release/commit/4bddb37de2fc6743a82299e277d5852d153e2ba8)) ### [`v21.0.0`](https://togithub.com/semantic-release/semantic-release/releases/tag/v21.0.0) [Compare Source](https://togithub.com/semantic-release/semantic-release/compare/v20.1.3...v21.0.0) ##### BREAKING CHANGES - **deps:** the npm plugin has updated the npm dependency to v9 - legacy authentication using `NPM_USERNAME` and `NPM_PASSWORD` is no longer supported. Use `NPM_TOKEN` instead. ##### Bug Fixes - **deps:** bump `@semantic-release/npm` to `^10.0.0` ([d647433](https://togithub.com/semantic-release/semantic-release/commit/d647433c201a607834a19f6771eb7deaeb709fff))Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.