Skip to content

[Snyk] Fix for 1 vulnerabilities #304

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 57 commits into from
Closed

[Snyk] Fix for 1 vulnerabilities #304

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
57 commits
Select commit Hold shift + click to select a range
4da196a
fix: content/actions/creating-actions/dockerfile-support-for-github-a…
snyk-bot Apr 20, 2022
6239a9f
fix: translations/es-ES/content/actions/creating-actions/dockerfile-s…
snyk-bot Apr 21, 2022
09efe22
Merge pull request #221 from MarcelRaschke/snyk-fix-d3d98a990c19e0702…
MarcelRaschke Apr 21, 2022
cbf7041
Bump @types/react from 17.0.38 to 18.0.9
dependabot[bot] May 10, 2022
16cdff8
fix: translations/pt-BR/content/actions/creating-actions/dockerfile-s…
snyk-bot May 16, 2022
22dd76e
fix: translations/zh-CN/content/actions/creating-actions/dockerfile-s…
snyk-bot May 16, 2022
b9e98ac
fix: translations/ja-JP/content/actions/creating-actions/dockerfile-s…
snyk-bot May 16, 2022
93681f8
Bump dotenv from 10.0.0 to 16.0.1
dependabot[bot] May 17, 2022
84fe17e
Bump actions/github-script
dependabot[bot] May 18, 2022
7d38597
Merge pull request #215 from MarcelRaschke/snyk-fix-03cd5bbcb16c37561…
MarcelRaschke May 23, 2022
05321b8
Bump helmet from 4.6.0 to 5.1.0
dependabot[bot] May 24, 2022
fe19549
Bump node from 16.13.2-alpine to 18.2.0-alpine
dependabot[bot] May 26, 2022
c7e678d
Bump got from 11.8.2 to 12.1.0
dependabot[bot] May 31, 2022
bb34324
Bump puppeteer from 9.1.1 to 14.1.2
dependabot[bot] May 31, 2022
d8a3bc7
Bump @primer/react from 34.6.0 to 35.2.2
dependabot[bot] May 31, 2022
f06a523
Merge pull request #275 from MarcelRaschke/dependabot/npm_and_yarn/pr…
MarcelRaschke Jun 5, 2022
0bd8f30
Merge pull request #274 from MarcelRaschke/dependabot/npm_and_yarn/pu…
MarcelRaschke Jun 5, 2022
a0456a6
Bump @primer/css from 19.4.0 to 20.2.2
dependabot[bot] Jun 5, 2022
413edbc
Bump lint-staged from 12.3.3 to 13.0.0
dependabot[bot] Jun 7, 2022
95f00a6
Bump actions/setup-node from 2.5.1 to 3.3.0
dependabot[bot] Jun 8, 2022
2b18ef0
Merge pull request #277 from MarcelRaschke/dependabot/github_actions/…
MarcelRaschke Jun 11, 2022
c131c31
Bump docker/build-push-action from 2.9.0 to 3
dependabot[bot] Jun 11, 2022
165da93
Bump peter-evans/create-pull-request from 3.12.1 to 4.0.4
dependabot[bot] Jun 11, 2022
5761740
Merge pull request #279 from MarcelRaschke/dependabot/github_actions/…
MarcelRaschke Jun 11, 2022
9896ac0
Merge pull request #278 from MarcelRaschke/dependabot/github_actions/…
MarcelRaschke Jun 11, 2022
8dc0c8f
Bump github/codeql-action from 1.0.31 to 2.1.12
dependabot[bot] Jun 11, 2022
38ce2d8
Bump peter-evans/find-comment from 1.3.0 to 2
dependabot[bot] Jun 11, 2022
8f92983
Merge pull request #280 from MarcelRaschke/dependabot/github_actions/…
MarcelRaschke Jun 11, 2022
01333b1
Merge pull request #281 from MarcelRaschke/dependabot/github_actions/…
MarcelRaschke Jun 11, 2022
adaefa7
Merge pull request #276 from MarcelRaschke/dependabot/npm_and_yarn/li…
MarcelRaschke Jun 11, 2022
f762529
Merge pull request #273 from MarcelRaschke/dependabot/npm_and_yarn/go…
MarcelRaschke Jun 11, 2022
a7cf795
Bump commander from 8.3.0 to 9.3.0
dependabot[bot] Jun 11, 2022
88056ac
Merge pull request #272 from MarcelRaschke/dependabot/npm_and_yarn/co…
MarcelRaschke Jun 11, 2022
f38c3fb
Bump jest from 27.4.7 to 28.1.1
dependabot[bot] Jun 11, 2022
63463f9
Merge pull request #282 from MarcelRaschke/dependabot/npm_and_yarn/je…
MarcelRaschke Jun 11, 2022
af27bef
Merge pull request #271 from MarcelRaschke/dependabot/npm_and_yarn/pr…
MarcelRaschke Jun 11, 2022
0ab72f3
Merge pull request #270 from MarcelRaschke/dependabot/docker/node-18.…
MarcelRaschke Jun 11, 2022
cca2428
Bump glob from 7.2.0 to 8.0.3
dependabot[bot] Jun 11, 2022
319540c
Merge pull request #268 from MarcelRaschke/dependabot/npm_and_yarn/he…
MarcelRaschke Jun 11, 2022
f40e3a0
Merge pull request #266 from MarcelRaschke/dependabot/github_actions/…
MarcelRaschke Jun 11, 2022
e220eb7
Merge pull request #264 from MarcelRaschke/dependabot/npm_and_yarn/gl…
MarcelRaschke Jun 11, 2022
8fad403
Merge pull request #262 from MarcelRaschke/dependabot/npm_and_yarn/do…
MarcelRaschke Jun 11, 2022
79bf7e1
Merge pull request #260 from MarcelRaschke/snyk-fix-ce84b5837de786e74…
MarcelRaschke Jun 11, 2022
9c5435d
Merge pull request #259 from MarcelRaschke/snyk-fix-3f828cf9f9d45dcbb…
MarcelRaschke Jun 11, 2022
414bcad
Merge pull request #258 from MarcelRaschke/snyk-fix-d1c3f8bb2db00c9fb…
MarcelRaschke Jun 11, 2022
50da007
Bump husky from 7.0.4 to 8.0.1
dependabot[bot] Jun 11, 2022
aaea836
build(deps-dev): bump @jest/globals from 27.4.6 to 28.1.1
dependabot[bot] Jun 11, 2022
84d03f2
build(deps): bump actions/cache from 2.1.7 to 3.0.4
dependabot[bot] Jun 11, 2022
417ffd0
build(deps): bump docker/setup-buildx-action from 1.6.0 to 2
dependabot[bot] Jun 11, 2022
b30525f
Merge pull request #283 from MarcelRaschke/dependabot/npm_and_yarn/je…
MarcelRaschke Jun 11, 2022
7531100
Merge pull request #285 from MarcelRaschke/dependabot/github_actions/…
MarcelRaschke Jun 11, 2022
aed178c
Merge pull request #284 from MarcelRaschke/dependabot/github_actions/…
MarcelRaschke Jun 11, 2022
8730870
Merge pull request #244 from MarcelRaschke/dependabot/npm_and_yarn/ty…
MarcelRaschke Jun 11, 2022
f9e9398
Merge pull request #243 from MarcelRaschke/dependabot/npm_and_yarn/hu…
MarcelRaschke Jun 11, 2022
413eebf
build(deps): bump puppeteer from 14.1.2 to 15.3.0
dependabot[bot] Jul 5, 2022
5a9214b
Merge pull request #292 from MarcelRaschke/dependabot/npm_and_yarn/pu…
MarcelRaschke Jul 8, 2022
62c701b
fix: package.json & package-lock.json to reduce vulnerabilities
snyk-bot Jul 31, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Bump dotenv from 10.0.0 to 16.0.1 
Bumps [dotenv](https://github.com/motdotla/dotenv) from 10.0.0 to 16.0.1.
- [Release notes](https://github.com/motdotla/dotenv/releases)
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v10.0.0...v16.0.1)

---
updated-dependencies:
- dependency-name: dotenv
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
  • Loading branch information
@dependabot
dependabot[bot] authored May 17, 2022
commit 93681f862468f6729f22580ea31282ff2eee836f
16 changes: 8 additions & 8 deletions package-lock.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@
"cors": "^2.8.5",
"csurf": "^1.11.0",
"dayjs": "^1.10.7",
"dotenv": "^10.0.0",
"dotenv": "^16.0.1",
"express": "^4.17.2",
"express-rate-limit": "^6.0.4",
"express-slow-down": "^1.4.0",
Expand Down