sourcegraph-git-extras

sourcegraph-git-extras copied to clipboard

This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [mkdirp](https://redirect.github.com/isaacs/node-mkdirp) | [`^0.5.1` -> `^0.5.6`](https://renovatebot.com/diffs/npm/mkdirp/0.5.1/0.5.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | Test plan: CI...

renovate[bot]

This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [graphql](https://redirect.github.com/graphql/graphql-js) | [`^15.4.0` -> `^15.10.1`](https://renovatebot.com/diffs/npm/graphql/15.8.0/15.10.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | Test plan: CI...

renovate[bot]

chore(deps): update dependency lodash to v4.17.21 [security]

1

This PR contains the following updates: | Package | Change | Age | Confidence | |---|---|---|---| | [lodash](https://lodash.com/) ([source](https://redirect.github.com/lodash/lodash)) | [`4.17.20` -> `4.17.21`](https://renovatebot.com/diffs/npm/lodash/4.17.20/4.17.21) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | Test plan:...

renovate[bot]

chore(deps): update actions/setup-node action to v3 - abandoned

2

[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | New value | References | Sourcegraph | |---|---|---|---|---|---| | [actions/setup-node](https://togithub.com/actions/setup-node) | action | major |...

renovate[bot]

build(deps): bump ws from 5.2.2 to 5.2.3

1

Bumps [ws](https://github.com/websockets/ws) from 5.2.2 to 5.2.3. Release notes Sourced from ws's releases. 5.2.3 Bug fixes Backported 00c425ec to the 5.x release line (76d47c14). Commits 6dd88e7 [dist] 5.2.3 76d47c1 [security] Fix...

dependabot[bot]

build(deps-dev): bump lodash from 4.17.20 to 4.17.21

1

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.20 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Bumps [json5](https://github.com/json5/json5) from 1.0.1 to 1.0.2. Release notes Sourced from json5's releases. v1.0.2 Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a...

dependabot[bot]

Bumps [qs](https://github.com/ljharb/qs) from 6.5.2 to 6.5.3. Changelog Sourced from qs's changelog. 6.5.3 [Fix] parse: ignore __proto__ keys (#428) [Fix] utils.merge: avoid a crash with a null target and a truthy...

dependabot[bot]

chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2

1

Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. Release notes Sourced from decode-uri-component's releases. v0.2.2 Prevent overwriting previously decoded tokens 980e0bf https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2 v0.2.1 Switch to GitHub workflows 76abc93 Fix issue where decode...

dependabot[bot]

build(deps): bump ini from 1.3.5 to 1.3.8

1

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.8. Commits a2c5da8 1.3.8 af5c6bb Do not use Object.create(null) 8b648a1 don't test where our devdeps don't even work c74c8af 1.3.7 024b8b5 update deps, add linting...

dependabot[bot]