chore(deps) Update dependency minimist to v1.2.8 [SECURITY] - autoclosed #1000
Add this suggestion to a batch that can be applied as a single commit. This suggestion is invalid because no changes were made to the code. Suggestions cannot be applied while the pull request is closed. Suggestions cannot be applied while viewing a subset of changes. Only one suggestion per line can be applied in a batch. Add this suggestion to a batch that can be applied as a single commit. Applying suggestions on deleted lines is not supported. You must change the existing code in this line in order to create a valid suggestion. Outdated suggestions cannot be applied. This suggestion has been applied or marked resolved. Suggestions cannot be applied from pending reviews. Suggestions cannot be applied on multi-line comments. Suggestions cannot be applied while the pull request is queued to merge. Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
1.2.7->1.2.8GitHub Vulnerability Alerts
CVE-2021-44906
Minimist prior to 1.2.6 and 0.2.4 is vulnerable to Prototype Pollution via file
index.js, functionsetKey()(lines 69-95).Release Notes
minimistjs/minimist (minimist)
v1.2.8Compare Source
Merged
#17#12#10Fixed
#15#8#15#9#5#8#9Commits
a0267945368ca4e5f506762fde7d36ac5d0auto-changelog73923d2d80727d48bc06a34b0f1c5df0fe4coverttonyca48b128covert,tape; remove unnecessarytapf0fb958fundingin package.json3639e0cnpmignoreto autogenerate an npmignore filebe2e038282b570ef9153f@ljharb/eslint-config,aud098873c@ljharb/eslint-config,aud3124ed3safe-publish-latest4b927deaudinposttestb32d9bdf9fdfc0ba92fe6tape950eaa7npmignoredev dep3226afa980d7acConfiguration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.