Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 20, 2023

This PR contains the following updates:

Package Type Update Change
karma (source) devDependencies pin ^0.13.0 -> 0.13.22

GitHub Vulnerability Alerts

CVE-2022-0437

karma prior to version 6.3.14 contains a cross-site scripting vulnerability.

CVE-2021-23495

Karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the return_url query parameter.

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from bd2bcc6 to f7b294d Compare November 20, 2023 19:44
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Nov 20, 2023
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Nov 20, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch 2 times, most recently from 4a8460f to 722764d Compare November 20, 2023 19:57
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Nov 20, 2023
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Dec 3, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch 2 times, most recently from ce48942 to 3bf9d94 Compare December 3, 2023 14:43
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Dec 3, 2023
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Dec 27, 2023
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch 2 times, most recently from e2da1b1 to 5ef771f Compare December 27, 2023 13:03
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Dec 27, 2023
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Jan 4, 2024
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch 2 times, most recently from 02283e9 to 9a397d3 Compare January 4, 2024 16:13
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Jan 4, 2024
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 9a397d3 to 8f90478 Compare January 9, 2024 12:09
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Jan 9, 2024
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 8f90478 to 14dccd1 Compare January 9, 2024 17:26
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Jan 9, 2024
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Jan 16, 2024
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch 2 times, most recently from 50f0ea1 to 7889728 Compare January 16, 2024 17:30
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Jan 16, 2024
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 7889728 to 0aecd14 Compare January 30, 2024 23:31
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Jan 30, 2024
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 0aecd14 to 7380f98 Compare January 31, 2024 01:17
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Jan 31, 2024
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from efa128c to 7678732 Compare October 9, 2025 12:32
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Oct 9, 2025
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Oct 23, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch 2 times, most recently from 10dd01e to e6ec4e4 Compare October 23, 2025 10:14
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Oct 23, 2025
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Nov 11, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch 2 times, most recently from db3ff0d to 1a9d9af Compare November 11, 2025 07:46
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Nov 11, 2025
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Nov 18, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch 2 times, most recently from 35198b8 to 8260865 Compare November 19, 2025 02:09
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Nov 19, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 8260865 to 47f0492 Compare December 3, 2025 18:56
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Dec 3, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 47f0492 to 2c3bb64 Compare December 3, 2025 21:08
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Dec 3, 2025
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Dec 10, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch 2 times, most recently from be57e60 to f3ac3bf Compare December 10, 2025 16:42
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Dec 10, 2025
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Dec 15, 2025
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from f3ac3bf to 8a67239 Compare December 15, 2025 16:37
@renovate renovate bot force-pushed the renovate/npm-karma-vulnerability branch from 8a67239 to 9503f9b Compare December 15, 2025 22:25
@renovate renovate bot changed the title Pin dependency karma to 0.13.22 [SECURITY] Update dependency karma to v6 [SECURITY] Dec 15, 2025
@renovate renovate bot changed the title Update dependency karma to v6 [SECURITY] Pin dependency karma to 0.13.22 [SECURITY] Dec 16, 2025
@renovate
Copy link
Contributor Author

renovate bot commented Dec 16, 2025

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (0.13.22). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants