forked from sonatype-nexus-community/auditjs
-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[pull] main from sonatype-nexus-community:main #3
Open
pull
wants to merge
86
commits into
majacQ:main
Choose a base branch
from
sonatype-nexus-community:main
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
recieve -> receive
* Fix cache location configuration and expose option on CLI fixes #230 * linter appeasement * fix: CWE-20: Improper Input Validation in y18n version 5.0.5 Co-authored-by: Dan Rollo <drollo@sonatype.com> Co-authored-by: Dan Rollo <danrollo@gmail.com>
…de instead of process.exit(). @tneer rules!
## [4.0.26](v4.0.25...v4.0.26) (2021-07-29) ### Bug Fixes * avoid ab-end in Application.spec.ts test by using process.exitCode instead of process.exit(). @tneer rules! ([1e63108](1e63108)) * CWE-20: Improper Input Validation in y18n version 5.0.5 ([1b6a7cb](1b6a7cb)) * the releases must flow. remove semantic-release dry-run flag ([9bb8efb](9bb8efb))
…ject without a package-lock.json
## [4.0.27](v4.0.26...v4.0.27) (2021-07-30) ### Bug Fixes * switch to force-resolutions to avoid error when running on a project without a package-lock.json ([a07ae78](a07ae78))
## [4.0.28](v4.0.27...v4.0.28) (2021-08-03) ### Bug Fixes * workaround to fix issue [#239](#239). may convert to yarn later ([2056567](2056567))
## [4.0.29](v4.0.28...v4.0.29) (2021-08-05) ### Bug Fixes * Initial move to yarn ([#241](#241)) ([88b063f](88b063f))
## [4.0.30](v4.0.29...v4.0.30) (2021-08-09) ### Bug Fixes * CVE-2021-32796, will change when xmldom@0.7.0 is published on npm ([#242](#242)) ([a6c8e32](a6c8e32))
…247) * Make these optional items return undefined if they do not exist
## [4.0.31](v4.0.30...v4.0.31) (2021-09-07) ### Bug Fixes * Make caching class return undefined if property does not exist ([#247](#247)) ([8e3b3ad](8e3b3ad)) * use newer node version in CI release process, required to run semantic-release. ([589e0ce](589e0ce)) * use newly published @xmldom/xmldom package. fixes [#243](#243) ([9f8b646](9f8b646))
## [4.0.32](v4.0.31...v4.0.32) (2021-09-16) ### Bug Fixes * revert fix for SONATYPE-2021-1169, breaks eslint. needs more work ([a7428e2](a7428e2)) * SONATYPE-2021-1169 ([74abe3c](74abe3c))
## [4.0.41](v4.0.40...v4.0.41) (2023-07-12) ### Bug Fixes * sonatype-2022-3677 in node-fetch 2.6.7 ([d1b15ab](d1b15ab))
## [4.0.42](v4.0.41...v4.0.42) (2023-12-13) ### Bug Fixes * error TS2688: Cannot find type definition file for 'node'. ([#274](#274)) ([2d79b85](2d79b85))
…e dependency on inflight package * disable broken coverage target for now. restore coverage targets later - see Issue #273
## [4.0.43](v4.0.42...v4.0.43) (2023-12-13) ### Bug Fixes * minor change to trigger release of fix for sonatype-2023-4801 ([032b20a](032b20a))
… restricted context.
* bump uuid to most recent version * update istanbul-lib dependencies to versions that use a more recent version of uuid * bump graceful-fs to non-deprecated version * bump ansi-regex from 3.0.0 to 3.0.1 to fix vulnerability * bump get-func-name from 2.0.0 to 2.0.2 to fix vulnerability * bump json5 from 2.2.0 to 2.2.3 to fix vulnerability * bump @babel/traverse from 7.15.0 to 7.23.7 to fix vulnerability * bump minimist from 1.2.5 to 1.2.8 to fix vulnerability * add myself to CONTRIBUTORS.md
## [4.0.44](v4.0.43...v4.0.44) (2024-01-10) ### Bug Fixes * minor change to trigger release of PR# 276 ([f676f91](f676f91))
… causes build errors).
## [4.0.45](v4.0.44...v4.0.45) (2024-01-17) ### Bug Fixes * use semantic-release version that works with node 18 (newer node causes build errors). ([a122b0e](a122b0e))
…ditjs@latest" [skip ci]
…hat we use newer node version
…olve CVE-2024-21538 in cross-spawn 7.0.3
## [4.0.46](v4.0.45...v4.0.46) (2024-11-13) ### Bug Fixes * latest mock-fs fixes failing unit tests after other updates, resolve CVE-2024-21538 in cross-spawn 7.0.3 ([7a66cbb](7a66cbb)) * resolve CVE-2024-21538 in cross-spawn : 7.0.3 ([4ade2a7](4ade2a7)) * resolve CVE-2024-21538 in cross-spawn : 7.0.3 (update CI node version) ([d3378f5](d3378f5)) * resolve CVE-2024-4068 in braces : 3.0.2 ([d065149](d065149)) * update CI 'release' target to use latest semantic-release, now that we use newer node version ([e2ac821](e2ac821))
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
⤵️ pull
auto-branch-delete:on-close
Delete branch when pull request gets closed
auto-merge:on-bpr-success
Auto-merge on passed branch protection rule
auto-merge-method:merge
Auto-merge with merge commit
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot]
Can you help keep this open source service alive? 💖 Please sponsor : )