anka

anka copied to clipboard

Bump mixin-deep from 1.3.1 to 1.3.2

1

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. Commits - [`754f0c2`](https://github.com/jonschlinkert/mixin-deep/commit/754f0c20e1bc13ea5a21a64fbc7d6ba5f7b359b9) 1.3.2 - [`90ee1fa`](https://github.com/jonschlinkert/mixin-deep/commit/90ee1fab375fccfd9b926df718243339b4976d50) ensure keys are valid when mixing in values - See full diff in [compare view](https://github.com/jonschlinkert/mixin-deep/compare/1.3.1...1.3.2) Maintainer changes This...

dependabot[bot]

Bumps [npm](https://github.com/npm/cli) from 6.13.4 to 6.14.6. Release notes Sourced from npm's releases. v6.14.6 6.14.6 (2020-07-07) BUG FIXES a9857b8f6 chore: remove auth info from logs (@claudiahdz) b7ad77598 #1416 fix: wrong npm...

dependabot[bot]

Bumps [npm-registry-fetch](https://github.com/npm/registry-fetch) from 4.0.2 to 4.0.5. Changelog Sourced from npm-registry-fetch's changelog. Changelog All notable changes to this project will be documented in this file. See standard-version for commit guidelines. 8.1.1...

dependabot[bot]

Bumps [npm-user-validate](https://github.com/npm/npm-user-validate) from 1.0.0 to 1.0.1. Commits 5c5471c 1.0.1 c8a87da fix: update email validation cd75393 Publish only the minimum of files See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/configuring-github-dependabot-security-updates)...

dependabot[bot]

Bumps [decompress](https://github.com/kevva/decompress) from 4.2.0 to 4.2.1. Release notes Sourced from decompress's releases. v4.2.1 Prevent directory traversal (#73) 967146e https://github.com/kevva/decompress/compare/v4.2.0...v4.2.1 Commits 84a8c10 4.2.1 fafff47 Meta tweaks 967146e Prevent directory traversal (#73)...

dependabot[bot]

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7. Commits c74c8af 1.3.7 024b8b5 update deps, add linting 032fbaf Use Object.create(null) to avoid default object property hazards 2da9039 1.3.6 cfea636 better git push script,...

dependabot[bot]

Bumps [y18n](https://github.com/yargs/y18n) from 3.2.1 to 3.2.2. Commits See full diff in compare view Maintainer changes This version was pushed to npm by oss-bot, a new releaser for y18n since your...

dependabot[bot]

Bumps [ssri](https://github.com/npm/ssri) from 6.0.1 to 6.0.2. Changelog Sourced from ssri's changelog. 6.0.2 (2021-04-07) Bug Fixes backport regex change from 8.0.1 (b30dfdb), closes #19 Commits b7c8c7c chore(release): 6.0.2 b30dfdb fix: backport...

dependabot[bot]

Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.1.2 to 4.7.7. Changelog Sourced from handlebars's changelog. v4.7.7 - February 15th, 2021 fix weird error in integration tests - eb860c0 fix: check prototype property access in...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]