renovate[bot]
commented
3 months ago ⚠️ Artifact update problem
Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.
♻ Renovate will retry this branch, including artifacts, only when one of the following happens:
- any of the package files in this branch needs updating, or
- the branch becomes conflicted, or
- you click the rebase/retry checkbox if found above, or
- you rename this PR's title to start with "rebase!" to trigger it manually
The artifact failure details are included below:
File name: package-lock.json
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: eslint-config-airbnb@15.1.0
npm error Found: eslint-plugin-jsx-a11y@6.0.2
npm error node_modules/eslint-plugin-jsx-a11y
npm error dev eslint-plugin-jsx-a11y@"6.0.2" from the root project
npm error
npm error Could not resolve dependency:
npm error peer eslint-plugin-jsx-a11y@"^5.1.1" from eslint-config-airbnb@15.1.0
npm error node_modules/eslint-config-airbnb
npm error dev eslint-config-airbnb@"15.1.0" from the root project
npm error
npm error Conflicting peer dependency: eslint-plugin-jsx-a11y@5.1.1
npm error node_modules/eslint-plugin-jsx-a11y
npm error peer eslint-plugin-jsx-a11y@"^5.1.1" from eslint-config-airbnb@15.1.0
npm error node_modules/eslint-config-airbnb
npm error dev eslint-config-airbnb@"15.1.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /tmp/renovate/cache/others/npm/_logs/2024-08-06T10_43_08_737Z-eresolve-report.txt
npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2024-08-06T10_43_08_737Z-debug-0.log
coderabbitai[bot]
This PR contains the following updates:
2.6.1->2.6.7GitHub Vulnerability Alerts
CVE-2022-0235
node-fetch forwards secure headers such as
authorization,www-authenticate,cookie, &cookie2when redirecting to a untrusted site.Release Notes
node-fetch/node-fetch (node-fetch)
### [`v2.6.7`](https://redirect.github.com/node-fetch/node-fetch/releases/tag/v2.6.7) [Compare Source](https://redirect.github.com/node-fetch/node-fetch/compare/v2.6.6...v2.6.7) ### Security patch release Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th party host while a redirect occurred #### What's Changed - fix: don't forward secure headers to 3th party by [@jimmywarting](https://redirect.github.com/jimmywarting) in [https://github.com/node-fetch/node-fetch/pull/1453](https://redirect.github.com/node-fetch/node-fetch/pull/1453) **Full Changelog**: https://github.com/node-fetch/node-fetch/compare/v2.6.6...v2.6.7 ### [`v2.6.6`](https://redirect.github.com/node-fetch/node-fetch/releases/tag/v2.6.6) [Compare Source](https://redirect.github.com/node-fetch/node-fetch/compare/v2.6.5...v2.6.6) #### What's Changed - fix(URL): prefer built in URL version when available and fallback to whatwg by [@jimmywarting](https://redirect.github.com/jimmywarting) in [https://github.com/node-fetch/node-fetch/pull/1352](https://redirect.github.com/node-fetch/node-fetch/pull/1352) **Full Changelog**: https://github.com/node-fetch/node-fetch/compare/v2.6.5...v2.6.6 ### [`v2.6.5`](https://redirect.github.com/node-fetch/node-fetch/compare/a41c469c6164e7175f39113c875a9ddd2f064504...v2.6.5) [Compare Source](https://redirect.github.com/node-fetch/node-fetch/compare/a41c469c6164e7175f39113c875a9ddd2f064504...v2.6.5) ### [`v2.6.4`](https://redirect.github.com/node-fetch/node-fetch/compare/v2.6.3...a41c469c6164e7175f39113c875a9ddd2f064504) [Compare Source](https://redirect.github.com/node-fetch/node-fetch/compare/v2.6.3...a41c469c6164e7175f39113c875a9ddd2f064504) ### [`v2.6.3`](https://redirect.github.com/node-fetch/node-fetch/compare/v2.6.2...v2.6.3) [Compare Source](https://redirect.github.com/node-fetch/node-fetch/compare/v2.6.2...v2.6.3) ### [`v2.6.2`](https://redirect.github.com/node-fetch/node-fetch/releases/tag/v2.6.2) [Compare Source](https://redirect.github.com/node-fetch/node-fetch/compare/v2.6.1...v2.6.2) fixed main path in package.jsonConfiguration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.