Skip to content

Conversation

@renovate
Copy link

@renovate renovate bot commented Aug 28, 2023

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
karma (source) ~1.4.1~6.3.16 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2022-0437

karma prior to version 6.3.14 contains a cross-site scripting vulnerability.

CVE-2021-23495

Karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the return_url query parameter.


Release Notes

karma-runner/karma (karma)

v6.3.16

Compare Source

Features
  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

6.3.19 (2022-04-19)

Bug Fixes
  • client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes
  • deps: upgrade socket.io to v4.4.1 (52a30bb)

6.3.17 (2022-02-28)

Bug Fixes

6.3.16 (2022-02-10)

Bug Fixes
  • security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

6.3.15 (2022-02-05)

Bug Fixes

6.3.14 (2022-02-05)

Bug Fixes
  • remove string template from client code (91d5acd)
  • warn when singleRun and autoWatch are false (69cfc76)
  • security: remove XSS vulnerability in returnUrl query param (839578c)

6.3.13 (2022-01-31)

Bug Fixes

6.3.12 (2022-01-24)

Bug Fixes
  • remove depreciation warning from log4js (41bed33)

6.3.11 (2022-01-13)

Bug Fixes
  • deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

6.3.10 (2022-01-08)

Bug Fixes
  • logger: create parent folders if they are missing (0d24bd9), closes #​3734

6.3.9 (2021-11-16)

Bug Fixes

6.3.8 (2021-11-07)

Bug Fixes
  • reporter: warning if stack trace contains generated code invocation (4f23b14)

6.3.7 (2021-11-01)

Bug Fixes
  • middleware: replace %X_UA_COMPATIBLE% marker anywhere in the file (f1aeaec), closes #​3711

6.3.6 (2021-10-25)

Bug Fixes

6.3.5 (2021-10-20)

Bug Fixes
  • client: prevent socket.io from hanging due to mocked clocks (#​3695) (105da90)

6.3.4 (2021-06-14)

Bug Fixes

6.3.3 (2021-06-01)

Bug Fixes

6.3.2 (2021-03-29)

Bug Fixes

6.3.1 (2021-03-24)

Bug Fixes

v6.3.15

Compare Source

Features
  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

6.3.19 (2022-04-19)

Bug Fixes
  • client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes
  • deps: upgrade socket.io to v4.4.1 (52a30bb)

6.3.17 (2022-02-28)

Bug Fixes

6.3.16 (2022-02-10)

Bug Fixes
  • security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

6.3.15 (2022-02-05)

Bug Fixes

6.3.14 (2022-02-05)

Bug Fixes
  • remove string template from client code (91d5acd)
  • warn when singleRun and autoWatch are false (69cfc76)
  • security: remove XSS vulnerability in returnUrl query param (839578c)

6.3.13 (2022-01-31)

Bug Fixes

6.3.12 (2022-01-24)

Bug Fixes
  • remove depreciation warning from log4js (41bed33)

6.3.11 (2022-01-13)

Bug Fixes
  • deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

6.3.10 (2022-01-08)

Bug Fixes
  • logger: create parent folders if they are missing (0d24bd9), closes #​3734

6.3.9 (2021-11-16)

Bug Fixes

6.3.8 (2021-11-07)

Bug Fixes
  • reporter: warning if stack trace contains generated code invocation (4f23b14)

6.3.7 (2021-11-01)

Bug Fixes
  • middleware: replace %X_UA_COMPATIBLE% marker anywhere in the file (f1aeaec), closes #​3711

6.3.6 (2021-10-25)

Bug Fixes

6.3.5 (2021-10-20)

Bug Fixes
  • client: prevent socket.io from hanging due to mocked clocks (#​3695) (105da90)

6.3.4 (2021-06-14)

Bug Fixes

6.3.3 (2021-06-01)

Bug Fixes

6.3.2 (2021-03-29)

Bug Fixes

6.3.1 (2021-03-24)

Bug Fixes

v6.3.14

Compare Source

Features
  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

6.3.19 (2022-04-19)

Bug Fixes
  • client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes
  • deps: upgrade socket.io to v4.4.1 (52a30bb)

6.3.17 (2022-02-28)

Bug Fixes

6.3.16 (2022-02-10)

Bug Fixes
  • security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

6.3.15 (2022-02-05)

Bug Fixes

6.3.14 (2022-02-05)

Bug Fixes
  • remove string template from client code (91d5acd)
  • warn when singleRun and autoWatch are false (69cfc76)
  • security: remove XSS vulnerability in returnUrl query param (839578c)

6.3.13 (2022-01-31)

Bug Fixes

6.3.12 (2022-01-24)

Bug Fixes
  • remove depreciation warning from log4js (41bed33)

6.3.11 (2022-01-13)

Bug Fixes
  • deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

6.3.10 (2022-01-08)

Bug Fixes
  • logger: create parent folders if they are missing (0d24bd9), closes #​3734

6.3.9 (2021-11-16)

Bug Fixes

6.3.8 (2021-11-07)

Bug Fixes
  • reporter: warning if stack trace contains generated code invocation (4f23b14)

6.3.7 (2021-11-01)

Bug Fixes
  • middleware: replace %X_UA_COMPATIBLE% marker anywhere in the file (f1aeaec), closes #​3711

6.3.6 (2021-10-25)

Bug Fixes

6.3.5 (2021-10-20)

Bug Fixes
  • client: prevent socket.io from hanging due to mocked clocks (#​3695) (105da90)

6.3.4 (2021-06-14)

Bug Fixes

6.3.3 (2021-06-01)

Bug Fixes

6.3.2 (2021-03-29)

Bug Fixes

6.3.1 (2021-03-24)

Bug Fixes

v6.3.13

Compare Source

Features
  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

6.3.19 (2022-04-19)

Bug Fixes
  • client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes
  • deps: upgrade socket.io to v4.4.1 (52a30bb)

6.3.17 (2022-02-28)

Bug Fixes

6.3.16 (2022-02-10)

Bug Fixes
  • security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

6.3.15 (2022-02-05)

Bug Fixes

6.3.14 (2022-02-05)

Bug Fixes
  • remove string template from client code (91d5acd)
  • warn when singleRun and autoWatch are false (69cfc76)
  • security: remove XSS vulnerability in returnUrl query param (839578c)

6.3.13 (2022-01-31)

Bug Fixes

6.3.12 (2022-01-24)

Bug Fixes
  • remove depreciation warning from log4js (41bed33)

6.3.11 (2022-01-13)

Bug Fixes
  • deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

6.3.10 (2022-01-08)

Bug Fixes
  • logger: create parent folders if they are missing (0d24bd9), closes #​3734

6.3.9 (2021-11-16)

Bug Fixes

6.3.8 (2021-11-07)

Bug Fixes
  • reporter: warning if stack trace contains generated code invocation (4f23b14)

6.3.7 (2021-11-01)

Bug Fixes
  • middleware: replace %X_UA_COMPATIBLE% marker anywhere in the file (f1aeaec), closes #​3711

6.3.6 (2021-10-25)

Bug Fixes

6.3.5 (2021-10-20)

Bug Fixes
  • client: prevent socket.io from hanging due to mocked clocks (#​3695) (105da90)

6.3.4 (2021-06-14)

Bug Fixes

6.3.3 (2021-06-01)

Bug Fixes

6.3.2 (2021-03-29)

Bug Fixes

6.3.1 (2021-03-24)

Bug Fixes

v6.3.12

Compare Source

Features
  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

6.3.19 (2022-04-19)

Bug Fixes
  • client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes
  • deps: upgrade socket.io to v4.4.1 (52a30bb)

6.3.17 (2022-02-28)

Bug Fixes

6.3.16 (2022-02-10)

Bug Fixes
  • security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

6.3.15 (2022-02-05)

Bug Fixes

6.3.14 (2022-02-05)

Bug Fixes
  • remove string template from client code (91d5acd)
  • warn when singleRun and autoWatch are false (69cfc76)
  • security: remove XSS vulnerability in returnUrl query param (839578c)

6.3.13 (2022-01-31)

Bug Fixes

6.3.12 (2022-01-24)

Bug Fixes
  • remove depreciation warning from log4js (41bed33)

6.3.11 (2022-01-13)

Bug Fixes
  • deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

6.3.10 (2022-01-08)

Bug Fixes
  • logger: create parent folders if they are missing (0d24bd9), closes #​3734

6.3.9 (2021-11-16)

Bug Fixes

6.3.8 (2021-11-07)

Bug Fixes
  • reporter: warning if stack trace contains generated code invocation (4f23b14)

6.3.7 (2021-11-01)

Bug Fixes
  • middleware: replace %X_UA_COMPATIBLE% marker anywhere in the file (f1aeaec), closes #​3711

6.3.6 (2021-10-25)

Bug Fixes

6.3.5 (2021-10-20)

Bug Fixes
  • client: prevent socket.io from hanging due to mocked clocks (#​3695) (105da90)

6.3.4 (2021-06-14)

Bug Fixes

6.3.3 (2021-06-01)

Bug Fixes

6.3.2 (2021-03-29)

Bug Fixes

6.3.1 (2021-03-24)

Bug Fixes

v6.3.11

Compare Source

Features
  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

6.3.19 (2022-04-19)

Bug Fixes
  • client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes
  • deps: upgrade socket.io to v4.4.1 (52a30bb)

6.3.17 (2022-02-28)

Bug Fixes

6.3.16 (2022-02-10)

Bug Fixes
  • security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

6.3.15 (2022-02-05)

Bug Fixes

6.3.14 (2022-02-05)

Bug Fixes
  • remove string template from client code (91d5acd)
  • warn when singleRun and autoWatch are false (69cfc76)
  • security: remove XSS vulnerability in returnUrl query param (839578c)

6.3.13 (2022-01-31)

Bug Fixes

6.3.12 (2022-01-24)

Bug Fixes
  • remove depreciation warning from log4js (41bed33)

6.3.11 (2022-01-13)

Bug Fixes
  • deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

6.3.10 (2022-01-08)

Bug Fixes
  • logger: create parent folders if they are missing (0d24bd9), closes #​3734

6.3.9 (2021-11-16)

Bug Fixes

6.3.8 (2021-11-07)

Bug Fixes
  • reporter: warning if stack trace contains generated code invocation (4f23b14)

6.3.7 (2021-11-01)

Bug Fixes
  • middleware: replace %X_UA_COMPATIBLE% marker anywhere in the file (f1aeaec), closes #​3711

6.3.6 (2021-10-25)

Bug Fixes

6.3.5 (2021-10-20)

Bug Fixes
  • client: prevent socket.io from hanging due to mocked clocks (#​3695) (105da90)

6.3.4 (2021-06-14)

Bug Fixes

6.3.3 (2021-06-01)

Bug Fixes

6.3.2 (2021-03-29)

Bug Fixes

6.3.1 (2021-03-24)

Bug Fixes

v6.3.10

Compare Source

Features
  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

6.3.19 (2022-04-19)

Bug Fixes
  • client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes
  • deps: upgrade socket.io to v4.4.1 (52a30bb)

6.3.17 (2022-02-28)

Bug Fixes

6.3.16 (2022-02-10)

Bug Fixes
  • security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

6.3.15 (2022-02-05)

Bug Fixes

6.3.14 (2022-02-05)

Bug Fixes
  • remove string template from client code (91d5acd)
  • warn when singleRun and autoWatch are false (69cfc76)
  • security: remove XSS vulnerability in returnUrl query param (839578c)

6.3.13 (2022-01-31)

Bug Fixes

6.3.12 (2022-01-24)

Bug Fixes
  • remove depreciation warning from log4js (41bed33)

6.3.11 (2022-01-13)

Bug Fixes
  • deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

6.3.10 (2022-01-08)

Bug Fixes
  • logger: create parent folders if they are missing (0d24bd9), closes #​3734

6.3.9 (2021-11-16)

Bug Fixes

6.3.8 (2021-11-07)

Bug Fixes
  • reporter: warning if stack trace contains generated code invocation (4f23b14)

6.3.7 (2021-11-01)

Bug Fixes
  • middleware: replace %X_UA_COMPATIBLE% marker anywhere in the file (f1aeaec), closes #​3711

6.3.6 (2021-10-25)

Bug Fixes

6.3.5 (2021-10-20)

Bug Fixes
  • client: prevent socket.io from hanging due to mocked clocks (#​3695) (105da90)

6.3.4 (2021-06-14)

Bug Fixes

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Aug 29, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 0952001 to c73802d Compare August 29, 2023 02:45
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from c73802d to cdbc337 Compare September 20, 2023 08:37
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Sep 20, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from cdbc337 to 4e41f44 Compare September 21, 2023 05:17
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Sep 21, 2023
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Sep 27, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 4e41f44 to a982f9d Compare September 27, 2023 02:12
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Sep 28, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch 2 times, most recently from e296a40 to f4ae645 Compare September 29, 2023 20:57
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Sep 29, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from f4ae645 to a26f247 Compare September 30, 2023 08:25
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Sep 30, 2023
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Oct 10, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch 2 times, most recently from 5fe97a9 to 4acd629 Compare October 11, 2023 02:22
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Oct 11, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 4acd629 to 751d4cb Compare October 16, 2023 05:40
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Oct 16, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 751d4cb to c111dac Compare October 17, 2023 08:35
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Oct 17, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from c111dac to 9061ffa Compare October 24, 2023 23:19
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Oct 24, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 9061ffa to 4b30df1 Compare October 25, 2023 05:26
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Oct 25, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 4b30df1 to 0cce02f Compare November 6, 2023 20:59
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Nov 6, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 0cce02f to 067b4d4 Compare November 7, 2023 06:00
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Nov 7, 2023
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Aug 24, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from c2b1b00 to 8eb00c0 Compare September 1, 2025 11:53
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Sep 1, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 8eb00c0 to f08cb2e Compare September 2, 2025 11:05
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Sep 2, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from f08cb2e to 95ada0e Compare September 26, 2025 16:05
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Sep 26, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 95ada0e to 78020d3 Compare September 27, 2025 07:10
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Sep 27, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 78020d3 to 663c2cd Compare October 25, 2025 15:47
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Oct 25, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 663c2cd to 45a8353 Compare October 26, 2025 19:35
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Oct 26, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 45a8353 to 0f9941c Compare November 15, 2025 11:40
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Nov 15, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 0f9941c to bf709b0 Compare November 17, 2025 07:51
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Nov 17, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from bf709b0 to 442e496 Compare November 19, 2025 23:33
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Nov 19, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 442e496 to 6bcc25c Compare November 20, 2025 07:12
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Nov 20, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 6bcc25c to 4b5fbda Compare December 5, 2025 07:39
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Dec 5, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 4b5fbda to 92be9f6 Compare December 6, 2025 07:50
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Dec 6, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 92be9f6 to 4af1ff5 Compare January 1, 2026 01:42
@renovate renovate bot changed the title chore(deps): update dependency karma to v6 [security] chore(deps): update dependency karma to ~1.7.0 [security] Jan 1, 2026
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 4af1ff5 to 0f2b6a0 Compare January 2, 2026 07:02
@renovate renovate bot changed the title chore(deps): update dependency karma to ~1.7.0 [security] chore(deps): update dependency karma to v6 [security] Jan 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant