chore(deps): update all non-major dependencies #151
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
26.0.19
->26.0.20
13.13.38
->13.13.39
4.11.0
->4.12.0
4.11.0
->4.12.0
7.16.0
->7.17.0
3.3.0
->3.3.1
4.3.6
->4.3.7
14.15.3
->14.15.4
17.3.0
->17.3.1
9.2.2
->9.2.3
2.0.3
->2.1.0
Release Notes
typescript-eslint/typescript-eslint
v4.12.0
Compare Source
Bug Fixes
Features
sort-type-union-intersection-members
(#2913) (9092c04)4.11.1 (2020-12-28)
Bug Fixes
v4.11.1
Compare Source
Bug Fixes
eslint/eslint
v7.17.0
Compare Source
e128e77
Update: check logical assignment in no-constant-condition (#13946) (Milos Djermanovic)cc48713
Chore: refactor calculating range and loc in no-useless-escape (#13964) (Milos Djermanovic)535fe47
Update: use regexpp's default ecmaVersion in no-control-regex (#13969) (Milos Djermanovic)83e98cd
Fix: use regexpp's default ecmaVersion in no-invalid-regexp (#13968) (Milos Djermanovic)7297363
Docs: fix examples for no-multi-str (#13966) (Milos Djermanovic)0649871
Update: add autofix to rule multiline-ternary (#13958) (薛定谔的猫)f6e7e32
Fix: no-useless-escape wrong loc and fix with CRLF in template elements (#13953) (Milos Djermanovic)19c69c0
Fix: one-var shouldn't split declaration if it isn't in a statement list (#13959) (Milos Djermanovic)e451b96
Docs: update build tool for webpack (#13962) (Sam Chen)c3e9acc
Chore: fix typos (#13960) (YeonJuan)7289ecf
Sponsors: Sync README with website (ESLint Jenkins)prettier/eslint-plugin-prettier
v3.3.1
Compare Source
typicode/husky
v4.3.7
Compare Source
nodejs/node
v14.15.4
Compare Source
This is a security release.
Notable Changes
Vulnerabilities fixed:
CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference (High)
Node.js. You can read more about it in
https://www.openssl.org/news/secadv/20201208.txt
CVE-2020-8265: use-after-free in TLSWrap (High)
its TLS implementation. When writing to a TLS enabled socket,
node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly
allocated WriteWrap object as first argument. If the DoWrite method
does not return an error, this object is passed back to the caller as
part of a StreamWriteResult structure. This may be exploited to
corrupt memory leading to a Denial of Service or potentially other
exploits.
CVE-2020-8287: HTTP Request Smuggling in nodejs (Low)
a http request. For example, two Transfer-Encoding header fields. In
this case Node.js identifies the first header field and ignores the
second. This can lead to HTTP Request Smuggling
(https://cwe.mitre.org/data/definitions/444.html).
Commits
305c0f4977
] - deps: upgrade npm to 6.14.10 (Ruy Adorno) #36571d62c650f75
] - deps: update archs files for OpenSSL-1.1.1i (Myles Borins) #365212de2672eb5
] - deps: upgrade openssl sources to 1.1.1i (Myles Borins) #365217ecac8143f
] - http: add test for http transfer encoding smuggling (Matteo Collina) nodejs-private/node-private#228641f786bb1
] - http: unsetF_CHUNKED
on newTransfer-Encoding
(Matteo Collina) nodejs-private/node-private#2284f8772f9b7
] - src: retain pointers to WriteWrap/ShutdownWrap (James M Snell) nodejs-private/node-private#23semantic-release/semantic-release
v17.3.1
Compare Source
Bug Fixes
sinonjs/sinon
v9.2.3
Compare Source
==================
util.inspect
for formatting human readable output(this retires @sinonjs/formatio)
Microsoft/tslib
v2.1.0
Compare Source
This release adds a new
__spreadArray
helper which avoids side-effects compared to the now-deprecated__spreadArrays
and__spread
helpers. See microsoft#133 for more details.This release also provides a more-specific error message when extending from a type which is not a function and not null. See microsoft#138 for more details.
Renovate configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by WhiteSource Renovate. View repository job log here.