book
book copied to clipboard
📖 The text of the book
Bumps [loader-utils](https://github.com/webpack/loader-utils) from 1.4.0 to 1.4.2. Release notes Sourced from loader-utils's releases. v1.4.2 1.4.2 (2022-11-11) Bug Fixes ReDoS problem (#226) (17cbf8f) v1.4.1 1.4.1 (2022-11-07) Bug Fixes security problem (#220) (4504e34)...
Bumps [socket.io-parser](https://github.com/socketio/socket.io-parser) from 4.0.4 to 4.0.5. Release notes Sourced from socket.io-parser's releases. 4.0.5 Bug Fixes check the format of the index of each attachment (b559f05) Links Diff: https://github.com/socketio/socket.io-parser/compare/4.0.4...4.0.5 Changelog Sourced...
Bumps [file-type](https://github.com/sindresorhus/file-type) from 16.3.0 to 16.5.4. Release notes Sourced from file-type's releases. v16.5.4 Fix: Malformed MKV could cause an infinite loop https://github.com/sindresorhus/file-type/commit/d86835680f4cccbee1a60628783c36700ec9e254 CVE-2022-36313 Also fixed in 17.1.3 v16.5.3 Upgrade dependencies...
Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1. Changelog Sourced from terser's changelog. v4.8.1 (backport) Security fix for RegExps that should not be evaluated (regexp DDOS) Commits See full diff in compare...
Bumps [mermaid](https://github.com/knsv/mermaid) from 8.9.3 to 8.14.0. Release notes Sourced from mermaid's releases. 8.14.0 Release Notes Main feature Adding new more secure security level 'sandbox' where all rendering happens in a...
Bumps [devcert](https://github.com/davewasmer/devcert) from 1.1.3 to 1.2.1. Commits 1ed164f 1.2.1 b076321 switch from vulnerable VALID_DOMAIN regex to is-valid-domain lib (#79) fecd645 1.2.0 92a14f8 chore: bring lockfiles current be273aa Feature: Allow multiple...
Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...
Bumps [trim-newlines](https://github.com/sindresorhus/trim-newlines) from 3.0.0 to 3.0.1. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.5.1 to 1.5.10. Commits 8cd4c6c 1.5.10 ce7a01f [fix] Improve handling of empty port 0071490 [doc] Update JSDoc comment a7044e3 [minor] Use more descriptive variable name d547792 [security]...