react

react copied to clipboard

Bumps [jsdom](https://github.com/jsdom/jsdom) from 12.2.0 to 16.5.0. Release notes Sourced from jsdom's releases. Version 16.5.0 Added window.queueMicrotask(). Added window.event. Added inputEvent.inputType. (diegohaz) Removed ondragexit from Window and friends, per a spec...

dependabot[bot]

Bumps [http-proxy](https://github.com/http-party/node-http-proxy) from 1.16.2 to 1.18.1. Release notes Sourced from http-proxy's releases. Long overdue maintenance Due to some great contributions I'm happy to announce a new release of http-proxy containing...

dependabot[bot]

Bumps [axios](https://github.com/axios/axios) from 0.19.0 to 0.21.1. Release notes Sourced from axios's releases. v0.21.1 0.21.1 (December 21, 2020) Fixes and Functionality: Hotfix: Prevent SSRF (#3410) Protocol not parsed when setting proxy...

dependabot[bot]

Bumps [socket.io](https://github.com/socketio/socket.io) from 2.0.4 to 2.4.0. Release notes Sourced from socket.io's releases. 2.4.0 Related blog post: https://socket.io/blog/socket-io-2-4-0/ Features (from Engine.IO) add support for all cookie options (19cc582) disable perMessageDeflate by...

dependabot[bot]

Bumps [tree-kill](https://github.com/pkrumins/node-tree-kill) from 1.2.0 to 1.2.2. Release notes Sourced from tree-kill's releases. v1.2.1 Changelog: add missing LICENSE file fix TypeScript definitions Commits cb47838 1.2.2 deee138 fix: handle sanitising better, add...

dependabot[bot]

zjwng

Bumps [websocket-extensions](https://github.com/faye/websocket-extensions-node) from 0.1.3 to 0.1.4. Changelog Sourced from websocket-extensions's changelog. 0.1.4 / 2020-06-02 Remove a ReDoS vulnerability in the header parser (CVE-2020-7662, reported by Robert McLaughlin) Change license from...

dependabot[bot]

Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.11 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Bumps [axios](https://github.com/axios/axios) from 0.19.0 to 0.21.2. Release notes Sourced from axios's releases. v0.21.2 0.21.2 (September 4, 2021) Fixes and Functionality: Updating axios requests to be delayed by pre-emptive promise creation...

dependabot[bot]

update config.yml

matheo-2001