reactworkshop

reactworkshop copied to clipboard

Bumps [loader-utils](https://github.com/webpack/loader-utils) from 3.2.0 to 3.2.1. Release notes Sourced from loader-utils's releases. v3.2.1 3.2.1 (2022-11-11) Bug Fixes ReDoS problem (#224) (d2d752d) Changelog Sourced from loader-utils's changelog. 3.2.1 (2022-11-11) Bug Fixes...

dependabot[bot]

Bumps [socket.io-parser](https://github.com/socketio/socket.io-parser) from 4.0.4 to 4.0.5. Release notes Sourced from socket.io-parser's releases. 4.0.5 Bug Fixes check the format of the index of each attachment (b559f05) Links Diff: https://github.com/socketio/socket.io-parser/compare/4.0.4...4.0.5 Changelog Sourced...

dependabot[bot]

Bumps [parse-url](https://github.com/IonicaBizau/parse-url) from 6.0.0 to 6.0.5. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [terser](https://github.com/terser/terser) from 5.10.0 to 5.14.2. Changelog Sourced from terser's changelog. v5.14.2 Security fix for RegExps that should not be evaluated (regexp DDOS) Source maps improvements (#1211) Performance improvements in...

dependabot[bot]

Bumps [moment](https://github.com/moment/moment) from 2.29.1 to 2.29.4. Changelog Sourced from moment's changelog. 2.29.4 Release Jul 6, 2022 #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex 2.29.3 Full changelog Release Apr 17, 2022...

dependabot[bot]

Bumps [jpeg-js](https://github.com/eugeneware/jpeg-js) from 0.4.3 to 0.4.4. Release notes Sourced from jpeg-js's releases. v0.4.4 v0.4.4 (2022-06-07) feat: add comment tag encoding (#87) (13e1ffa), closes #87 fix: validate sampling factors (#106) (9ccd35f),...

dependabot[bot]

Bumps [gatsby-plugin-mdx](https://github.com/gatsbyjs/gatsby/tree/HEAD/packages/gatsby-plugin-mdx) from 3.4.0 to 3.15.2. Release notes Sourced from gatsby-plugin-mdx's releases. v3.14 (September 2021 #1) Welcome to [email protected] release (September 2021 #1) This is the final minor release for...

dependabot[bot]

Bumps [devcert](https://github.com/davewasmer/devcert) from 1.2.0 to 1.2.1. Commits 1ed164f 1.2.1 b076321 switch from vulnerable VALID_DOMAIN regex to is-valid-domain lib (#79) See full diff in compare view Maintainer changes This version was...

dependabot[bot]

Bumps [nanoid](https://github.com/ai/nanoid) from 3.1.30 to 3.3.4. Changelog Sourced from nanoid's changelog. 3.3.4 Fixed --help in CLI (by @​Lete114). 3.3.3 Reduced size (by Anton Khlynovskiy). 3.3.2 Fixed enhanced-resolve support. 3.3.1 Reduced...

dependabot[bot]

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]