treecko

treecko copied to clipboard

Bumps [codecov](https://github.com/codecov/codecov-node) from 2.3.0 to 3.8.3. Release notes Sourced from codecov's releases. v3.8.3 Fixes #329 fix: Test if response has two lines Dependencies #306 Bump eslint-config-prettier from 7.2.0 to 8.3.0...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Bumps [semantic-release](https://github.com/semantic-release/semantic-release) from 6.3.6 to 17.2.3. Release notes Sourced from semantic-release's releases. v17.2.3 17.2.3 (2020-11-16) Bug Fixes mask secrets when characters get uri encoded (ca90b34) v17.2.2 17.2.2 (2020-10-29) Bug Fixes...

dependabot[bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. #### Changes included in this PR - Changes to the following...

snyk-bot

[Snyk] Security upgrade lodash from 4.17.11 to 4.17.16

1

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.  #### Changes included in this PR - Changes to...

snyk-bot

[Snyk] Fix for 1 vulnerabilities

1

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project. #### Changes included in this PR - Changes to the following...

snyk-bot

[Snyk] Fix for 1 vulnerable dependencies

1

#### Description This PR fixes one or more vulnerable packages in the `npm` dependencies of this project. See the [Snyk test report](https://app.snyk.io/org/nickjohnson-dev/test/github/375f7e42-6671-440d-92e3-7a964ac3d607/master..snyk-fix-f9ffb4e0a16853ba17a070910508bca6) for more details. #### Snyk Project: [nickjohnson-dev/treecko:package.json](https://app.snyk.io/org/nickjohnson-dev/project/375f7e42-6671-440d-92e3-7a964ac3d607) ####...

snyk-bot

Bumps [debug](https://github.com/debug-js/debug) from 2.6.8 to 2.6.9. Release notes Sourced from debug's releases. 2.6.9 Patches Remove ReDoS regexp in %o formatter: #504 Credits Huge thanks to @​zhuangya for their help! Changelog...

dependabot[bot]

Bumps [ms](https://github.com/vercel/ms) to 2.1.3 and updates ancestor dependency [ava](https://github.com/avajs/ava). These dependencies need to be updated together. Updates `ms` from 0.7.3 to 2.1.3 Release notes Sourced from ms's releases. 2.1.3 Patches...

dependabot[bot]

Bumps [qs](https://github.com/ljharb/qs) and [qs](https://github.com/ljharb/qs). These dependencies needed to be updated together. Updates `qs` from 6.4.0 to 6.5.3 Changelog Sourced from qs's changelog. 6.5.3 [Fix] parse: ignore __proto__ keys (#428) [Fix]...

dependabot[bot]