StateOfJS-2019 icon indicating copy to clipboard operation
StateOfJS-2019 copied to clipboard

State of JS 2019 survey report website

Results 43 StateOfJS-2019 issues
Sort by recently updated
recently updated
newest added

Bumps [moment](https://github.com/moment/moment) from 2.29.0 to 2.29.4. Changelog Sourced from moment's changelog. 2.29.4 Release Jul 6, 2022 #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex 2.29.3 Full changelog Release Apr 17, 2022...

dependencies

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.1 to 2.6.7. Release notes Sourced from node-fetch's releases. v2.6.7 Security patch release Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th...

dependencies

Bumps [devcert](https://github.com/davewasmer/devcert) from 1.1.3 to 1.2.1. Commits 1ed164f 1.2.1 b076321 switch from vulnerable VALID_DOMAIN regex to is-valid-domain lib (#79) fecd645 1.2.0 92a14f8 chore: bring lockfiles current be273aa Feature: Allow multiple...

dependencies

Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.15 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependencies

Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.4.7 to 1.5.10. Commits 8cd4c6c 1.5.10 ce7a01f [fix] Improve handling of empty port 0071490 [doc] Update JSDoc comment a7044e3 [minor] Use more descriptive variable name d547792 [security]...

dependencies

Bumps [node-sass](https://github.com/sass/node-sass) from 4.14.1 to 7.0.0. Release notes Sourced from node-sass's releases. v7.0.0 Breaking changes Drop support for Node 15 (@​nschonni) Set rejectUnauthorized to true by default (@​scott-ut, #3149) Features...

dependencies

Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 11.0.1 to 12.3.2. Changelog Sourced from markdown-it's changelog. [12.3.2] - 2022-01-08 Security Fix possible ReDOS in newline rule. Thanks to @​MakeNowJust. [12.3.1] - 2022-01-07 Fixed Fix corner...

dependencies

Bumps [object-path](https://github.com/mariocasciaro/object-path) from 0.11.4 to 0.11.8. Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=object-path&package-manager=npm_and_yarn&previous-version=0.11.4&new-version=0.11.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependencies

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=path-parse&package-manager=npm_and_yarn&previous-version=1.0.6&new-version=1.0.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependencies

Bumps [socket.io-parser](https://github.com/socketio/socket.io-parser) from 3.3.0 to 3.3.2. Release notes Sourced from socket.io-parser's releases. 3.3.2 Bug Fixes prevent DoS (OOM) via massive packets (#95) (89197a0) Links Diff: https://github.com/Automattic/socket.io-parser/compare/3.3.1...3.3.2 3.3.1 Links Diff: https://github.com/socketio/socket.io-parser/compare/3.3.0...3.3.1...

dependencies