search

xdy / twodsix-foundryvtt

A system for running games using various 2d6-based role-playing games, specifically with the Cepheus Engine Core Rules and similar systems. <br/>This Product is derived from the Traveller System Reference Document and other Open Gaming Content made available by the Open Gaming License, and does not contain closed content from products published by either Mongoose Publishing or Far Future Enterprises. This Product is not affiliated with either Mongoose Publishing or Far Future Enterprises, and it makes no claim to or challenge to any trademarks held by either entity. The use of the Traveller System Reference Document does not convey the endorsement of this Product by either Mongoose Publishing or Far Future Enterprises as a product of either of their product lines.<br/>Cepheus Engine and Samardan Press™ are the trademarks of Jason "Flynn" Kemp; I am not affiliated with Jason "Flynn" Kemp or Samardan Press™.<br/> See the files OpenGameLicense.md and LICENSE for license details..<br/>
Other
39 stars 25 forks source link

chore(deps-dev): bump @types/node from 20.17.6 to 22.10.1 #1702

Open dependabot[bot] opened 5 days ago

dependabot[bot] commented 5 days ago

Bumps @types/node from 20.17.6 to 22.10.1.

Commits


Most Recent Ignore Conditions Applied to This Pull Request | Dependency Name | Ignore Conditions | | --- | --- | | @types/node | [< 18.8, > 18.7.14] |

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
guardrails[bot] commented 5 days ago

:warning: We detected 2 security issues in this pull request:

Vulnerable Libraries (2)
Severity | Details :-: | :-- High | [pkg:npm/semantic-release@24.2.0](https://github.com/xdy/twodsix-foundryvtt/blob/e5a5d1882a442ba70db37e48aea45ebf0c349f7f/package.json) (t) upgrade to: *> 24.2.0* Medium | [pkg:npm/@league-of-foundry-developers/foundry-vtt-types@12.331.0-beta](https://github.com/xdy/twodsix-foundryvtt/blob/e5a5d1882a442ba70db37e48aea45ebf0c349f7f/package.json) (t) upgrade to: *> 12.331.0-beta* More info on how to fix Vulnerable Libraries in [JavaScript](https://docs.guardrails.io/docs/en/vulnerabilities/javascript/using_vulnerable_libraries.html?utm_source=ghpr).

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.