profile
viewpoint
If you are wondering where the data of this site comes from, please visit https://api.github.com/users/ReactiveXYZ-Dev/events. GitMemory does not store any data, but only uses NGINX to cache data for a period of time. The idea behind GitMemory is simply to give users a better reading experience.
Jackie Zhang ReactiveXYZ-Dev @ReactiveXYZ Ann Arbor, US & Melbourne, AU jackiezhang.me Developer at Reactive XYZ and Student at UoM

ReactiveXYZ-Dev/Adonis-Queue-Pro 7

An easy-to-use job queue for AdonisJS framework backed by Kue and Kue-scheduler

atish3/ios-team 5

iOS app for MDP free speech team

GemsLab/StrucEmbedding-GraphLibrary 5

The SEMB library is an easy-to-use tool for getting and evaluating structural node embeddings in graphs.

ReactiveXYZ-Dev/Anonymouse-Api 1

Backend API for the Anonymouse App, totally open source, totally secure :)

ReactiveXYZ-Dev/dleccap 1

Download CAEN and LSA-ISS Lecture recordings. Boosted

Linerd/Kitsune-py 0

A network intrusion detection system based on incremental statistics (AfterImage) and an ensemble of autoencoders (KitNET)

ReactiveXYZ-Dev/281 0

Practice implementations of algorithms covered in EECS281 at UoM

ReactiveXYZ-Dev/Adonis-Queue-Pro-Test 0

Test application for Adonis Queue Pro package

ReactiveXYZ-Dev/aiohttp-security 0

auth and permissions for aiohttp

PR opened recore/recore-tools

Bump postcss from 7.0.17 to 7.0.36

Bumps postcss from 7.0.17 to 7.0.36. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p> <blockquote> <h2>7.0.36</h2> <ul> <li>Backport ReDoS vulnerabilities from PostCSS 8.</li> </ul> <h2>7.0.35</h2> <ul> <li>Add <a href="https://github.com/postcss/postcss/wiki/PostCSS-8-for-end-users">migration guide link</a> to PostCSS 8 error text.</li> </ul> <h2>7.0.34</h2> <ul> <li>Fix compatibility with <code>postcss-scss</code> 2.</li> </ul> <h2>7.0.33</h2> <ul> <li>Add error message for PostCSS 8 plugins.</li> </ul> <h2>7.0.32</h2> <ul> <li>Fix error message (by <a href="https://github.com/admosity"><code>@​admosity</code></a>).</li> </ul> <h2>7.0.31</h2> <ul> <li>Use only the latest source map annotation (by <a href="https://github.com/emzoumpo"><code>@​emzoumpo</code></a>).</li> </ul> <h2>7.0.30</h2> <ul> <li>Fix TypeScript definition (by <a href="https://github.com/nex3"><code>@​nex3</code></a>)</li> </ul> <h2>7.0.29</h2> <ul> <li>Update <code>Processor#version</code>.</li> </ul> <h2>7.0.28</h2> <ul> <li>Fix TypeScript definition (by <a href="https://github.com/nex3"><code>@​nex3</code></a>).</li> </ul> <h2>7.0.27</h2> <ul> <li>Fix TypeScript definition (by <a href="https://github.com/nex3"><code>@​nex3</code></a>).</li> </ul> <h2>7.0.26</h2> <ul> <li>Fix TypeScript definition (by <a href="https://github.com/nex3"><code>@​nex3</code></a>)</li> </ul> <h2>7.0.25</h2> <ul> <li>Fix absolute path support for Windows (by <a href="https://github.com/tomrav"><code>@​tomrav</code></a>)</li> </ul> <h2>7.0.24</h2> <ul> <li>Fix TypeScript definition (by <a href="https://github.com/keithamus"><code>@​keithamus</code></a>).</li> </ul> <h2>7.0.23</h2> <ul> <li>Update <code>Processor#version</code>.</li> </ul> <h2>7.0.22</h2> <ul> <li>Add funding link for <code>npm fund</code>.</li> </ul> <h2>7.0.21</h2> <ul> <li>Revert passing <code>nodes</code> property to node constructor.</li> </ul> <h2>7.0.20</h2> <ul> <li>Allow to pass PostCSS’s nodes in <code>nodes</code> property to node constructor.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p> <blockquote> <h2>7.0.36</h2> <ul> <li>Backport ReDoS vulnerabilities from PostCSS 8.</li> </ul> <h2>7.0.35</h2> <ul> <li>Add migration guide link to PostCSS 8 error text.</li> </ul> <h2>7.0.34</h2> <ul> <li>Fix compatibility with <code>postcss-scss</code> 2.</li> </ul> <h2>7.0.33</h2> <ul> <li>Add error message for PostCSS 8 plugins.</li> </ul> <h2>7.0.36</h2> <ul> <li>Backport ReDoS vulnerabilities from PostCSS 8.</li> </ul> <h2>7.0.35</h2> <ul> <li>Add migration guide link to PostCSS 8 error text.</li> </ul> <h2>7.0.34</h2> <ul> <li>Fix compatibility with <code>postcss-scss</code> 2.</li> </ul> <h2>7.0.33</h2> <ul> <li>Add error message for PostCSS 8 plugins.</li> </ul> <h2>7.0.32</h2> <ul> <li>Fix error message (by <a href="https://github.com/admosity"><code>@​admosity</code></a>).</li> </ul> <h2>7.0.31</h2> <ul> <li>Use only the latest source map annotation (by Emmanouil Zoumpoulakis).</li> </ul> <h2>7.0.30</h2> <ul> <li>Fix TypeScript definition (by Natalie Weizenbaum).</li> </ul> <h2>7.0.29</h2> <ul> <li>Update <code>Processor#version</code>.</li> </ul> <h2>7.0.28</h2> <ul> <li>Fix TypeScript definition (by Natalie Weizenbaum).</li> </ul> <h2>7.0.27</h2> <ul> <li>Fix TypeScript definition (by Natalie Weizenbaum).</li> </ul> <h2>7.0.26</h2> <ul> <li>Fix TypeScript definition (by Natalie Weizenbaum).</li> </ul> <h2>7.0.25</h2> <ul> <li>Fix absolute path support for Windows (by Tom Raviv).</li> </ul> <h2>7.0.24</h2> <ul> <li>Fix TypeScript definition (by Keith Cirkel).</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/postcss/postcss/commit/67e3d7b3402c5d3d036ab7c1e781f86910d6ca72"><code>67e3d7b</code></a> Release 7.0.36 version</li> <li><a href="https://github.com/postcss/postcss/commit/54cbf3c4847eb0fb1501b9d2337465439e849734"><code>54cbf3c</code></a> Backport ReDoS vulnerabilities from PostCSS 8</li> <li><a href="https://github.com/postcss/postcss/commit/12832f3d203474bd273bd06bd3b2407567bfe09e"><code>12832f3</code></a> Release 7.0.35 version</li> <li><a href="https://github.com/postcss/postcss/commit/4455ef6baf84ceea87cb662131f95d798063896c"><code>4455ef6</code></a> Use OpenCollective in funding</li> <li><a href="https://github.com/postcss/postcss/commit/e867c794b5d646839350dd4b76f3cc81423413e6"><code>e867c79</code></a> Add migration guide to PostCSS 8 error</li> <li><a href="https://github.com/postcss/postcss/commit/32a22a98bc4de9c7a2489041ceae24eedc62144f"><code>32a22a9</code></a> Release 7.0.34 version</li> <li><a href="https://github.com/postcss/postcss/commit/22939829688574b9acdbd29106ca2ec9470b2b17"><code>2293982</code></a> Lock build targets</li> <li><a href="https://github.com/postcss/postcss/commit/2c3a111a940b373a60fae196e63931b3b6e9d8ca"><code>2c3a111</code></a> Release 7.0.33 version</li> <li><a href="https://github.com/postcss/postcss/commit/4105f21b48d75847e822e89746633792c478922b"><code>4105f21</code></a> Use yaspeller instead of yaspeller-ci</li> <li><a href="https://github.com/postcss/postcss/commit/c8d02a0da503f9fa5d96a854a2c9244710c18c72"><code>c8d02a0</code></a> Revert yaspeller-ci removal</li> <li>Additional commits viewable in <a href="https://github.com/postcss/postcss/compare/7.0.17...7.0.36">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+267 -980

0 comment

1 changed file

pr created time in 4 days

create barnchrecore/recore-tools

branch : dependabot/npm_and_yarn/postcss-7.0.36

created branch time in 4 days

delete branch GemsLab/StrucEmbedding-GraphLibrary

delete branch : dependabot/pip/pillow-8.1.1

delete time in 11 days

PR closed GemsLab/StrucEmbedding-GraphLibrary

Bump pillow from 8.0.1 to 8.1.1 dependencies

Bumps pillow from 8.0.1 to 8.1.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/python-pillow/Pillow/releases">pillow's releases</a>.</em></p> <blockquote> <h2>8.1.1</h2> <p><a href="https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html">https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html</a></p> <h2>8.1.0</h2> <p><a href="https://pillow.readthedocs.io/en/stable/releasenotes/8.1.0.html">https://pillow.readthedocs.io/en/stable/releasenotes/8.1.0.html</a></p> <h2>Changes</h2> <ul> <li>Fix TIFF OOB Write error <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5175">#5175</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Fix for Buffer Read Overrun in PCX Decoding <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5174">#5174</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Fix for SGI Decode buffer overrun <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5173">#5173</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Fix OOB Read when saving GIF of xsize=1 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5149">#5149</a> [<a href="https://github.com/wiredfool"><code>@​wiredfool</code></a>]</li> <li>Add support for PySide6 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5161">#5161</a> [<a href="https://github.com/hugovk"><code>@​hugovk</code></a>]</li> <li>Moved QApplication into one test <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5167">#5167</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Use disposal settings from previous frame in APNG <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5126">#5126</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Revert "skip wheels on 3.10-dev due to wheel#354" <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5163">#5163</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Better _binary module use <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5156">#5156</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Added exception explaining that <em>repr_png</em> saves to PNG <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5139">#5139</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Use previous disposal method in GIF load_end <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5125">#5125</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Do not catch a ValueError only to raise another <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5090">#5090</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Allow putpalette to accept 1024 integers to include alpha values <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5089">#5089</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Fix OOB Read when writing TIFF with custom Metadata <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5148">#5148</a> [<a href="https://github.com/wiredfool"><code>@​wiredfool</code></a>]</li> <li>Removed unused variable <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5140">#5140</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Fix dereferencing of potential null pointers <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5111">#5111</a> [<a href="https://github.com/cgohlke"><code>@​cgohlke</code></a>]</li> <li>Fixed warnings assigning to "unsigned char *" from "char *" <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5127">#5127</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Add append_images support for ICO <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/4568">#4568</a> [<a href="https://github.com/ziplantil"><code>@​ziplantil</code></a>]</li> <li>Fixed comparison warnings <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5122">#5122</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Block TIFFTAG_SUBIFD <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5120">#5120</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Fix dereferencing potential null pointer <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5108">#5108</a> [<a href="https://github.com/cgohlke"><code>@​cgohlke</code></a>]</li> <li>Replaced PyErr_NoMemory with ImagingError_MemoryError <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5113">#5113</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Remove duplicate code <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5109">#5109</a> [<a href="https://github.com/cgohlke"><code>@​cgohlke</code></a>]</li> <li>Moved warning to end of execution <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/4965">#4965</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Removed unused fromstring and tostring C methods <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5026">#5026</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>init() if one of the formats is unrecognised <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5037">#5037</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> </ul> <h2>Dependencies</h2> <ul> <li>Updated libtiff to 4.2.0 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5153">#5153</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Updated openjpeg to 2.4.0 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5151">#5151</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Updated harfbuzz to 2.7.4 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5138">#5138</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Updated harfbuzz to 2.7.3 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5128">#5128</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Updated libraqm to 0.7.1 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5070">#5070</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Updated libimagequant to 2.13.1 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5065">#5065</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Update FriBiDi to 1.0.10 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5064">#5064</a> [<a href="https://github.com/nulano"><code>@​nulano</code></a>]</li> <li>Updated libraqm to 0.7.1 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5063">#5063</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Updated libjpeg-turbo to 2.0.6 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5044">#5044</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> </ul> <h2>Deprecations</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python-pillow/Pillow/blob/master/CHANGES.rst">pillow's changelog</a>.</em></p> <blockquote> <h2>8.1.1 (2021-03-01)</h2> <ul> <li> <p>Use more specific regex chars to prevent ReDoS. CVE-2021-25292 [hugovk]</p> </li> <li> <p>Fix OOB Read in TiffDecode.c, and check the tile validity before reading. CVE-2021-25291 [wiredfool]</p> </li> <li> <p>Fix negative size read in TiffDecode.c. CVE-2021-25290 [wiredfool]</p> </li> <li> <p>Fix OOB read in SgiRleDecode.c. CVE-2021-25293 [wiredfool]</p> </li> <li> <p>Incorrect error code checking in TiffDecode.c. CVE-2021-25289 [wiredfool]</p> </li> <li> <p>PyModule_AddObject fix for Python 3.10 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5194">#5194</a> [radarhere]</p> </li> </ul> <h2>8.1.0 (2021-01-02)</h2> <ul> <li> <p>Fix TIFF OOB Write error. CVE-2020-35654 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5175">#5175</a> [wiredfool]</p> </li> <li> <p>Fix for Read Overflow in PCX Decoding. CVE-2020-35653 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5174">#5174</a> [wiredfool, radarhere]</p> </li> <li> <p>Fix for SGI Decode buffer overrun. CVE-2020-35655 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5173">#5173</a> [wiredfool, radarhere]</p> </li> <li> <p>Fix OOB Read when saving GIF of xsize=1 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5149">#5149</a> [wiredfool]</p> </li> <li> <p>Makefile updates <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5159">#5159</a> [wiredfool, radarhere]</p> </li> <li> <p>Add support for PySide6 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5161">#5161</a> [hugovk]</p> </li> <li> <p>Use disposal settings from previous frame in APNG <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5126">#5126</a> [radarhere]</p> </li> <li> <p>Added exception explaining that <em>repr_png</em> saves to PNG <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5139">#5139</a> [radarhere]</p> </li> <li> <p>Use previous disposal method in GIF load_end <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5125">#5125</a> [radarhere]</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python-pillow/Pillow/commit/741d8744a54bedbc49f16922c61a06fcb3681f53"><code>741d874</code></a> 8.1.1 version bump</li> <li><a href="https://github.com/python-pillow/Pillow/commit/179cd1c8f94aabc47e9e522e01683ea9aadbd3a5"><code>179cd1c</code></a> Added 8.1.1 release notes to index</li> <li><a href="https://github.com/python-pillow/Pillow/commit/7d296653da045e18b379c991797f933e054a7476"><code>7d29665</code></a> Update CHANGES.rst [ci skip]</li> <li><a href="https://github.com/python-pillow/Pillow/commit/d25036fca7c8658b698492088361453bb20073e2"><code>d25036f</code></a> Credits</li> <li><a href="https://github.com/python-pillow/Pillow/commit/973a4c333ab6d603e82f6eb2aa6f39d1cfcecccb"><code>973a4c3</code></a> Release notes for 8.1.1</li> <li><a href="https://github.com/python-pillow/Pillow/commit/521dab94c7ab72b037bd9a83e9663401e0fd2cee"><code>521dab9</code></a> Use more specific regex chars to prevent ReDoS</li> <li><a href="https://github.com/python-pillow/Pillow/commit/8b8076bdcb3815be0ef0d279651d8d1342b8ea61"><code>8b8076b</code></a> Fix for CVE-2021-25291</li> <li><a href="https://github.com/python-pillow/Pillow/commit/e25be1e33dc526bfd1094bc778a54d8e29bf66c9"><code>e25be1e</code></a> Fix negative size read in TiffDecode.c</li> <li><a href="https://github.com/python-pillow/Pillow/commit/f891baa604636cd2506a9360d170bc2cf4963cc5"><code>f891baa</code></a> Fix OOB read in SgiRleDecode.c</li> <li><a href="https://github.com/python-pillow/Pillow/commit/cbfdde7b1f2295059a20a539ee9960f0bec7b299"><code>cbfdde7</code></a> Incorrect error code checking in TiffDecode.c</li> <li>Additional commits viewable in <a href="https://github.com/python-pillow/Pillow/compare/8.0.1...8.1.1">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+1 -1

1 comment

1 changed file

dependabot[bot]

pr closed time in 11 days

pull request commentGemsLab/StrucEmbedding-GraphLibrary

Bump pillow from 8.0.1 to 8.1.1

Superseded by #7.

dependabot[bot]

comment created time in 11 days

PR opened GemsLab/StrucEmbedding-GraphLibrary

Bump pillow from 8.0.1 to 8.2.0

Bumps pillow from 8.0.1 to 8.2.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/python-pillow/Pillow/releases">pillow's releases</a>.</em></p> <blockquote> <h2>8.2.0</h2> <p><a href="https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html">https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html</a></p> <h2>Changes</h2> <ul> <li>Security fixes for 8.2.0 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5377">#5377</a> [<a href="https://github.com/hugovk"><code>@​hugovk</code></a>]</li> <li>Move getxmp() to JpegImageFile <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5376">#5376</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Added getxmp() method <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5144">#5144</a> [<a href="https://github.com/UrielMaD"><code>@​UrielMaD</code></a>]</li> <li>Compile LibTIFF with CMake on Windows <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5359">#5359</a> [<a href="https://github.com/nulano"><code>@​nulano</code></a>]</li> <li>Add ImageShow support for GraphicsMagick <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5349">#5349</a> [<a href="https://github.com/latosha-maltba"><code>@​latosha-maltba</code></a>]</li> <li>Tiff crash fixes in TiffDecode.c <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5372">#5372</a> [<a href="https://github.com/wiredfool"><code>@​wiredfool</code></a>]</li> <li>Remove redundant check (addition to <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5364">#5364</a>) <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5366">#5366</a> [<a href="https://github.com/kkopachev"><code>@​kkopachev</code></a>]</li> <li>Do not load transparent pixels from subsequent GIF frames <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5333">#5333</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Use LZW encoding when saving GIF images <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5291">#5291</a> [<a href="https://github.com/raygard"><code>@​raygard</code></a>]</li> <li>Set all transparent colors to be equal in quantize() <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5282">#5282</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Allow PixelAccess to use Python <strong>int</strong> when parsing x and y <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5206">#5206</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Removed Image._MODEINFO <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5316">#5316</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Add preserve_tone option to autocontrast <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5350">#5350</a> [<a href="https://github.com/elejke"><code>@​elejke</code></a>]</li> <li>Only import numpy when necessary <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5323">#5323</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Fixed linear_gradient and radial_gradient I and F modes <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5274">#5274</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Add support for reading TIFFs with PlanarConfiguration=2 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5364">#5364</a> [<a href="https://github.com/wiredfool"><code>@​wiredfool</code></a>]</li> <li>More OSS-Fuzz support <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5328">#5328</a> [<a href="https://github.com/wiredfool"><code>@​wiredfool</code></a>]</li> <li>Do not premultiply alpha when resizing with Image.NEAREST resampling <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5304">#5304</a> [<a href="https://github.com/nulano"><code>@​nulano</code></a>]</li> <li>Use quantization method attributes <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5353">#5353</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Dynamically link FriBiDi instead of Raqm <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5062">#5062</a> [<a href="https://github.com/nulano"><code>@​nulano</code></a>]</li> <li>Removed build_distance_tables return value <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5363">#5363</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Allow fewer PNG palette entries than the bit depth maximum when saving <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5330">#5330</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Use duration from info dictionary when saving WebP <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5338">#5338</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Improved efficiency when creating GIF disposal images <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5326">#5326</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Stop flattening EXIF IFD into getexif() <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/4947">#4947</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Replaced tiff_deflate with tiff_adobe_deflate compression when saving TIFF images <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5343">#5343</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Save ICC profile from TIFF encoderinfo <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5321">#5321</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Moved RGB fix inside ImageQt class <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5268">#5268</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Fix -Wformat error in TiffDecode <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5305">#5305</a> [<a href="https://github.com/lukegb"><code>@​lukegb</code></a>]</li> <li>Allow alpha_composite destination to be negative <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5313">#5313</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Ensure file is closed if it is opened by ImageQt.ImageQt <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5260">#5260</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Added ImageDraw rounded_rectangle method <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5208">#5208</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Added IPythonViewer <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5289">#5289</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Only draw each rectangle outline pixel once <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5183">#5183</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Use mmap instead of built-in Win32 mapper <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5224">#5224</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Handle PCX images with an odd stride <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5214">#5214</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> <li>Only read different sizes for "Large Thumbnail" MPO frames <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5168">#5168</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> </ul> <h2>Dependencies</h2> <ul> <li>Updated harfbuzz to 2.8.0 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5334">#5334</a> [<a href="https://github.com/radarhere"><code>@​radarhere</code></a>]</li> </ul> <h2>Deprecations</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/python-pillow/Pillow/blob/master/CHANGES.rst">pillow's changelog</a>.</em></p> <blockquote> <h2>8.2.0 (2021-04-01)</h2> <ul> <li> <p>Added getxmp() method <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5144">#5144</a> [UrielMaD, radarhere]</p> </li> <li> <p>Add ImageShow support for GraphicsMagick <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5349">#5349</a> [latosha-maltba, radarhere]</p> </li> <li> <p>Do not load transparent pixels from subsequent GIF frames <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5333">#5333</a> [zewt, radarhere]</p> </li> <li> <p>Use LZW encoding when saving GIF images <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5291">#5291</a> [raygard]</p> </li> <li> <p>Set all transparent colors to be equal in quantize() <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5282">#5282</a> [radarhere]</p> </li> <li> <p>Allow PixelAccess to use Python <strong>int</strong> when parsing x and y <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5206">#5206</a> [radarhere]</p> </li> <li> <p>Removed Image._MODEINFO <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5316">#5316</a> [radarhere]</p> </li> <li> <p>Add preserve_tone option to autocontrast <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5350">#5350</a> [elejke, radarhere]</p> </li> <li> <p>Fixed linear_gradient and radial_gradient I and F modes <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5274">#5274</a> [radarhere]</p> </li> <li> <p>Add support for reading TIFFs with PlanarConfiguration=2 <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5364">#5364</a> [kkopachev, wiredfool, nulano]</p> </li> <li> <p>Deprecated categories <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5351">#5351</a> [radarhere]</p> </li> <li> <p>Do not premultiply alpha when resizing with Image.NEAREST resampling <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5304">#5304</a> [nulano]</p> </li> <li> <p>Dynamically link FriBiDi instead of Raqm <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5062">#5062</a> [nulano]</p> </li> <li> <p>Allow fewer PNG palette entries than the bit depth maximum when saving <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5330">#5330</a> [radarhere]</p> </li> <li> <p>Use duration from info dictionary when saving WebP <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5338">#5338</a> [radarhere]</p> </li> <li> <p>Stop flattening EXIF IFD into getexif() <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/4947">#4947</a> [radarhere, kkopachev]</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/python-pillow/Pillow/commit/e0e353c0ef7516979a9aedce3792596649ce4433"><code>e0e353c</code></a> 8.2.0 version bump</li> <li><a href="https://github.com/python-pillow/Pillow/commit/ee635befc6497f1c6c4fdb58c232e62d922ec8b7"><code>ee635be</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/python-pillow/Pillow/issues/5377">#5377</a> from hugovk/security-and-release-notes</li> <li><a href="https://github.com/python-pillow/Pillow/commit/694c84f88f4299319bac49b20bd9baae82ca41b8"><code>694c84f</code></a> Fix typo [ci skip]</li> <li><a href="https://github.com/python-pillow/Pillow/commit/8febdad8dd51ad5c75a1db78492973588c7cbf6b"><code>8febdad</code></a> Review, typos and lint</li> <li><a href="https://github.com/python-pillow/Pillow/commit/fea419665b75f11910e44cfe6f89622fda63e78b"><code>fea4196</code></a> Reorder, roughly alphabetic</li> <li><a href="https://github.com/python-pillow/Pillow/commit/496245aa4365d0827390bd0b6fbd11287453b3a1"><code>496245a</code></a> Fix BLP DOS -- CVE-2021-28678</li> <li><a href="https://github.com/python-pillow/Pillow/commit/22e9bee4ef225c0edbb9323f94c26cee0c623497"><code>22e9bee</code></a> Fix DOS in PSDImagePlugin -- CVE-2021-28675</li> <li><a href="https://github.com/python-pillow/Pillow/commit/ba65f0b08ee8b93195c3f3277820771f5b62aa52"><code>ba65f0b</code></a> Fix Memory DOS in ImageFont</li> <li><a href="https://github.com/python-pillow/Pillow/commit/bb6c11fb889e6c11b0ee122b828132ee763b5856"><code>bb6c11f</code></a> Fix FLI DOS -- CVE-2021-28676</li> <li><a href="https://github.com/python-pillow/Pillow/commit/5a5e6db0abf4e7a638fb1b3408c4e495a096cb92"><code>5a5e6db</code></a> Fix EPS DOS on _open -- CVE-2021-28677</li> <li>Additional commits viewable in <a href="https://github.com/python-pillow/Pillow/compare/8.0.1...8.2.0">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+1 -1

0 comment

1 changed file

pr created time in 11 days

PR opened recore/recore-tools

Bump merge-deep from 3.0.2 to 3.0.3

Bumps merge-deep from 3.0.2 to 3.0.3. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jonschlinkert/merge-deep/commit/628ff47c9d824ccf21adf9a2b7cc6b74632e11a1"><code>628ff47</code></a> 3.0.3</li> <li><a href="https://github.com/jonschlinkert/merge-deep/commit/cfbe20ccdb00255b711de57e37ed8ce9f109ef3f"><code>cfbe20c</code></a> run verb to generate README documentation</li> <li><a href="https://github.com/jonschlinkert/merge-deep/commit/e370968581413a2e5ffdbbf7c2f5094e0e0b3861"><code>e370968</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/jonschlinkert/merge-deep/issues/17">#17</a> from jonschlinkert/key-properties</li> <li><a href="https://github.com/jonschlinkert/merge-deep/commit/393e2cbaeacf54e77a307c3620a00f0ac057b8d5"><code>393e2cb</code></a> adding a test to ensure using merge-deep for inheritance still works</li> <li><a href="https://github.com/jonschlinkert/merge-deep/commit/c39b16134a6a9704be2e661b49b92e8561f10d90"><code>c39b161</code></a> add test to ensure constructor is not cloned</li> <li><a href="https://github.com/jonschlinkert/merge-deep/commit/11e5dd56de8a6aed0b1ed022089dbce6968d82a5"><code>11e5dd5</code></a> add isValidKey function to ensure only valid keys are merged</li> <li>See full diff in <a href="https://github.com/jonschlinkert/merge-deep/compare/3.0.2...3.0.3">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+267 -980

0 comment

1 changed file

pr created time in 12 days

create barnchrecore/recore-tools

branch : dependabot/npm_and_yarn/merge-deep-3.0.3

created branch time in 12 days

PR opened recore/recore-tools

Bump ws from 2.3.1 to 5.2.2

Bumps ws from 2.3.1 to 5.2.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/websockets/ws/releases">ws's releases</a>.</em></p> <blockquote> <h2>5.2.2</h2> <h1>Bug fixes</h1> <ul> <li>Fixed a use after invalidation bug introduced in 6046a28 (8aba871).</li> </ul> <h2>5.2.1</h2> <h1>Bug fixes</h1> <ul> <li>Fixed a bug that could prevent buffered data from being processed under certain circumstances (6046a28).</li> </ul> <h2>5.2.0</h2> <h1>Features</h1> <ul> <li>Added ability to specify custom headers when rejecting the handshake (<a href="https://github-redirect.dependabot.com/websockets/ws/issues/1379">#1379</a>).</li> </ul> <h2>5.1.1</h2> <h1>Bug fixes</h1> <ul> <li>Fixed a regression introduced in 9e152f9 (<a href="https://github-redirect.dependabot.com/websockets/ws/issues/1347">#1347</a>).</li> </ul> <h2>5.1.0</h2> <h1>Features</h1> <ul> <li>The <code>address</code> argument of the <code>WebSocket</code> constructor can now be a <a href="https://nodejs.org/api/url.html#url_class_url"><code>URL</code></a> instance (<a href="https://github-redirect.dependabot.com/websockets/ws/issues/1329">#1329</a>).</li> <li>The <code>options</code> argument of the <code>WebSocket</code> constructor now accepts any TLS option that is also accepted by <a href="https://nodejs.org/api/https.html#https_https_request_options_callback"><code>https.request()</code></a> (<a href="https://github-redirect.dependabot.com/websockets/ws/issues/1332">#1332</a>).</li> </ul> <h2>5.0.0</h2> <h1>Breaking changes</h1> <ul> <li>Dropped support for Node.js < 4.5.0 (<a href="https://github-redirect.dependabot.com/websockets/ws/issues/1313">#1313</a>).</li> <li>The connection is no longer closed if the server does not agree to any of the client's requested subprotocols (<a href="https://github-redirect.dependabot.com/websockets/ws/issues/1312">#1312</a>).</li> <li><code>net.Socket</code> errors are no longer re-emitted (a4050db).</li> </ul> <h1>Features</h1> <ul> <li>Read backpressure is now properly handled when permessage-deflate is enabled (<a href="https://github-redirect.dependabot.com/websockets/ws/issues/1302">#1302</a>).</li> </ul> <h2>4.1.0</h2> <h1>Features</h1> <ul> <li>Added <code>WebSocketServer.prototype.address()</code> (<a href="https://github-redirect.dependabot.com/websockets/ws/issues/1294">#1294</a>).</li> <li>Added <code>zlib{Deflate,Inflate}Options</code> options (<a href="https://github-redirect.dependabot.com/websockets/ws/issues/1306">#1306</a>).</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/websockets/ws/commit/5d55e52529167c25f4fec35cb4753294e75bf9f2"><code>5d55e52</code></a> [dist] 5.2.2</li> <li><a href="https://github.com/websockets/ws/commit/8aba8712dc5b94de17a952137c077f2d74efb529"><code>8aba871</code></a> [fix] Fix use after invalidation bug</li> <li><a href="https://github.com/websockets/ws/commit/175ce4605b80d610e558c858b0f8d74599a16db1"><code>175ce46</code></a> [dist] 5.2.1</li> <li><a href="https://github.com/websockets/ws/commit/307be7a81ee1c08cbd1e2acf2ea98fbf26ae390d"><code>307be7a</code></a> [fix] Remove the <code>'data'</code> listener when the receiver emits an error</li> <li><a href="https://github.com/websockets/ws/commit/6046a2873944793b01457488aed8062ccaa53743"><code>6046a28</code></a> [fix] Do not prematurely remove the listener of the <code>'data'</code> event</li> <li><a href="https://github.com/websockets/ws/commit/bf9b2ececbe42dd07ef9619d2b4953f57243c843"><code>bf9b2ec</code></a> chore(package): update nyc to version 12.0.2 (<a href="https://github-redirect.dependabot.com/websockets/ws/issues/1395">#1395</a>)</li> <li><a href="https://github.com/websockets/ws/commit/bcab5310beb5a07f62fff92105d4183b0e011252"><code>bcab531</code></a> chore(package): update eslint-plugin-promise to version 3.8.0 (<a href="https://github-redirect.dependabot.com/websockets/ws/issues/1389">#1389</a>)</li> <li><a href="https://github.com/websockets/ws/commit/e4d032c383dd2931de7dfbe81a0a8185cdffbf52"><code>e4d032c</code></a> [dist] 5.2.0</li> <li><a href="https://github.com/websockets/ws/commit/e7bfe5f13895701cab8492a6ed7872ec6b724da2"><code>e7bfe5f</code></a> chore(package): update mocha to version 5.2.0 (<a href="https://github-redirect.dependabot.com/websockets/ws/issues/1385">#1385</a>)</li> <li><a href="https://github.com/websockets/ws/commit/6dae94bc65f9aa6acf21891ba0d46457d5d095a7"><code>6dae94b</code></a> chore(package): update eslint-plugin-import to version 2.12.0 (<a href="https://github-redirect.dependabot.com/websockets/ws/issues/1384">#1384</a>)</li> <li>Additional commits viewable in <a href="https://github.com/websockets/ws/compare/2.3.1...5.2.2">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+254 -967

0 comment

1 changed file

pr created time in 22 days

create barnchrecore/recore-tools

branch : dependabot/npm_and_yarn/ws-5.2.2

created branch time in 22 days

create barnchrecore/recore-tools

branch : dependabot/npm_and_yarn/dns-packet-1.3.4

created branch time in 23 days

PR opened recore/recore-tools

Bump dns-packet from 1.3.1 to 1.3.4

Bumps dns-packet from 1.3.1 to 1.3.4. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mafintosh/dns-packet/commit/ebdf849da5dc0d96836e87628349776c623c5be7"><code>ebdf849</code></a> 1.3.4</li> <li><a href="https://github.com/mafintosh/dns-packet/commit/ac578722f2707310b841b65aae61d6332f8882a1"><code>ac57872</code></a> move all allocUnsafes to allocs for easier maintenance</li> <li><a href="https://github.com/mafintosh/dns-packet/commit/c64c9507e51532c9e9a3cbefa146a134ecc025fd"><code>c64c950</code></a> 1.3.3</li> <li><a href="https://github.com/mafintosh/dns-packet/commit/0598ba19d18da4568b32415e60a9629061b3c45c"><code>0598ba1</code></a> fix .. in encodingLength</li> <li><a href="https://github.com/mafintosh/dns-packet/commit/010aedb33c1ee8c3f558db5249c1d46e2bd7a101"><code>010aedb</code></a> 1.3.2</li> <li><a href="https://github.com/mafintosh/dns-packet/commit/0d0d593f8df4e2712c43957a6c62e95047f12b2d"><code>0d0d593</code></a> backport encodingLength fix to v1</li> <li>See full diff in <a href="https://github.com/mafintosh/dns-packet/compare/v1.3.1...v1.3.4">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+259 -967

0 comment

1 changed file

pr created time in 23 days

PR opened togetherchicago/chi77

Bump dns-packet from 1.3.1 to 1.3.4 in /frontend

Bumps dns-packet from 1.3.1 to 1.3.4. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mafintosh/dns-packet/commit/ebdf849da5dc0d96836e87628349776c623c5be7"><code>ebdf849</code></a> 1.3.4</li> <li><a href="https://github.com/mafintosh/dns-packet/commit/ac578722f2707310b841b65aae61d6332f8882a1"><code>ac57872</code></a> move all allocUnsafes to allocs for easier maintenance</li> <li><a href="https://github.com/mafintosh/dns-packet/commit/c64c9507e51532c9e9a3cbefa146a134ecc025fd"><code>c64c950</code></a> 1.3.3</li> <li><a href="https://github.com/mafintosh/dns-packet/commit/0598ba19d18da4568b32415e60a9629061b3c45c"><code>0598ba1</code></a> fix .. in encodingLength</li> <li><a href="https://github.com/mafintosh/dns-packet/commit/010aedb33c1ee8c3f558db5249c1d46e2bd7a101"><code>010aedb</code></a> 1.3.2</li> <li><a href="https://github.com/mafintosh/dns-packet/commit/0d0d593f8df4e2712c43957a6c62e95047f12b2d"><code>0d0d593</code></a> backport encodingLength fix to v1</li> <li>See full diff in <a href="https://github.com/mafintosh/dns-packet/compare/v1.3.1...v1.3.4">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+3 -3

0 comment

1 changed file

pr created time in 24 days

PR opened recore/my-prettier

chore(deps): bump browserslist from 4.3.5 to 4.16.6

Bumps browserslist from 4.3.5 to 4.16.6. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md">browserslist's changelog</a>.</em></p> <blockquote> <h2>4.16.6</h2> <ul> <li>Fixed <code>npm-shrinkwrap.json</code> support in <code>--update-db</code> (by Geoff Newman).</li> </ul> <h2>4.16.5</h2> <ul> <li>Fixed unsafe RegExp (by Yeting Li).</li> </ul> <h2>4.16.4</h2> <ul> <li>Fixed unsafe RegExp.</li> <li>Added artifactory support to <code>--update-db</code> (by Ittai Baratz).</li> </ul> <h2>4.16.3</h2> <ul> <li>Fixed <code>--update-db</code>.</li> </ul> <h2>4.16.2</h2> <ul> <li>Fixed <code>--update-db</code> (by <a href="https://github.com/ialarmedalien"><code>@​ialarmedalien</code></a>).</li> </ul> <h2>4.16.1</h2> <ul> <li>Fixed Chrome 4 with <code>mobileToDesktop</code> (by Aron Woost).</li> </ul> <h2>4.16</h2> <ul> <li>Add <code>browserslist config</code> query.</li> </ul> <h2>4.15</h2> <ul> <li>Add TypeScript types (by Dmitry Semigradsky).</li> </ul> <h2>4.14.7</h2> <ul> <li>Fixed Yarn Workspaces support to <code>--update-db</code> (by Fausto Núñez Alberro).</li> <li>Added browser changes to <code>--update-db</code> (by <a href="https://github.com/AleksandrSl"><code>@​AleksandrSl</code></a>).</li> <li>Added color output to <code>--update-db</code>.</li> <li>Updated <code>package.funding</code> to have link to our Open Collective.</li> </ul> <h2>4.14.6</h2> <ul> <li>Fixed Yarn support in <code>--update-db</code> (by Ivan Storck).</li> <li>Fixed npm 7 support in <code>--update-db</code>.</li> </ul> <h2>4.14.5</h2> <ul> <li>Fixed <code>last 2 electron versions</code> query (by Sergey Melyukov).</li> </ul> <h2>4.14.4</h2> <ul> <li>Fixed <code>Unknown version 59 of op_mob</code> error.</li> </ul> <h2>4.14.3</h2> <ul> <li>Update Firefox ESR.</li> </ul> <h2>4.14.2</h2> <ul> <li>Fixed <code>--update-db</code> on Windows (by James Ross).</li> <li>Improved <code>--update-db</code> output.</li> </ul> <h2>4.14.1</h2> <ul> <li>Added <code>--update-db</code> explanation (by Justin Zelinsky).</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/browserslist/browserslist/commit/6fe3614db05b40f9dc1c63588a83d2ada05bae75"><code>6fe3614</code></a> Release 4.16.6 version</li> <li><a href="https://github.com/browserslist/browserslist/commit/33ebac933839847a62ede680273449f6cdca1e18"><code>33ebac9</code></a> Update dependencies</li> <li><a href="https://github.com/browserslist/browserslist/commit/2128170f231a6c9f462276006e09f302d811df31"><code>2128170</code></a> Add support for npm-shrinkwrap files alongside package-lock (<a href="https://github-redirect.dependabot.com/browserslist/browserslist/issues/595">#595</a>)</li> <li><a href="https://github.com/browserslist/browserslist/commit/7cc2aedd0047d800d44aa0259c02b6db1414105c"><code>7cc2aed</code></a> Release 4.16.5 version</li> <li><a href="https://github.com/browserslist/browserslist/commit/27e4afdc68798ca93f8c01c5ea6208b4b361a704"><code>27e4afd</code></a> Update dependencies</li> <li><a href="https://github.com/browserslist/browserslist/commit/1013a1847931a209c34a704aebc85a8c091286e7"><code>1013a18</code></a> Fix version RegExp</li> <li><a href="https://github.com/browserslist/browserslist/commit/b879a1a304def2563f42cc3d3f5711e760662be3"><code>b879a1a</code></a> Use Node.js 16 on CI</li> <li><a href="https://github.com/browserslist/browserslist/commit/bd1e9e01c95cad24be706fb11be7d151cd99ed0a"><code>bd1e9e0</code></a> Fix ReDoS (<a href="https://github-redirect.dependabot.com/browserslist/browserslist/issues/593">#593</a>)</li> <li><a href="https://github.com/browserslist/browserslist/commit/209adf9e0051fa39a2b25354cffd493300f34b02"><code>209adf9</code></a> Release 4.16.4 version</li> <li><a href="https://github.com/browserslist/browserslist/commit/3e2ae3b52daf7f5203247fd4f583b3bda66ea57d"><code>3e2ae3b</code></a> Fix types</li> <li>Additional commits viewable in <a href="https://github.com/browserslist/browserslist/compare/4.3.5...4.16.6">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+498 -1846

0 comment

1 changed file

pr created time in a month

create barnchrecore/my-prettier

branch : dependabot/npm_and_yarn/browserslist-4.16.6

created branch time in a month

PR opened recore/recore-tools

Bump browserslist from 4.6.3 to 4.16.6

Bumps browserslist from 4.6.3 to 4.16.6. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md">browserslist's changelog</a>.</em></p> <blockquote> <h2>4.16.6</h2> <ul> <li>Fixed <code>npm-shrinkwrap.json</code> support in <code>--update-db</code> (by Geoff Newman).</li> </ul> <h2>4.16.5</h2> <ul> <li>Fixed unsafe RegExp (by Yeting Li).</li> </ul> <h2>4.16.4</h2> <ul> <li>Fixed unsafe RegExp.</li> <li>Added artifactory support to <code>--update-db</code> (by Ittai Baratz).</li> </ul> <h2>4.16.3</h2> <ul> <li>Fixed <code>--update-db</code>.</li> </ul> <h2>4.16.2</h2> <ul> <li>Fixed <code>--update-db</code> (by <a href="https://github.com/ialarmedalien"><code>@​ialarmedalien</code></a>).</li> </ul> <h2>4.16.1</h2> <ul> <li>Fixed Chrome 4 with <code>mobileToDesktop</code> (by Aron Woost).</li> </ul> <h2>4.16</h2> <ul> <li>Add <code>browserslist config</code> query.</li> </ul> <h2>4.15</h2> <ul> <li>Add TypeScript types (by Dmitry Semigradsky).</li> </ul> <h2>4.14.7</h2> <ul> <li>Fixed Yarn Workspaces support to <code>--update-db</code> (by Fausto Núñez Alberro).</li> <li>Added browser changes to <code>--update-db</code> (by <a href="https://github.com/AleksandrSl"><code>@​AleksandrSl</code></a>).</li> <li>Added color output to <code>--update-db</code>.</li> <li>Updated <code>package.funding</code> to have link to our Open Collective.</li> </ul> <h2>4.14.6</h2> <ul> <li>Fixed Yarn support in <code>--update-db</code> (by Ivan Storck).</li> <li>Fixed npm 7 support in <code>--update-db</code>.</li> </ul> <h2>4.14.5</h2> <ul> <li>Fixed <code>last 2 electron versions</code> query (by Sergey Melyukov).</li> </ul> <h2>4.14.4</h2> <ul> <li>Fixed <code>Unknown version 59 of op_mob</code> error.</li> </ul> <h2>4.14.3</h2> <ul> <li>Update Firefox ESR.</li> </ul> <h2>4.14.2</h2> <ul> <li>Fixed <code>--update-db</code> on Windows (by James Ross).</li> <li>Improved <code>--update-db</code> output.</li> </ul> <h2>4.14.1</h2> <ul> <li>Added <code>--update-db</code> explanation (by Justin Zelinsky).</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/browserslist/browserslist/commit/6fe3614db05b40f9dc1c63588a83d2ada05bae75"><code>6fe3614</code></a> Release 4.16.6 version</li> <li><a href="https://github.com/browserslist/browserslist/commit/33ebac933839847a62ede680273449f6cdca1e18"><code>33ebac9</code></a> Update dependencies</li> <li><a href="https://github.com/browserslist/browserslist/commit/2128170f231a6c9f462276006e09f302d811df31"><code>2128170</code></a> Add support for npm-shrinkwrap files alongside package-lock (<a href="https://github-redirect.dependabot.com/browserslist/browserslist/issues/595">#595</a>)</li> <li><a href="https://github.com/browserslist/browserslist/commit/7cc2aedd0047d800d44aa0259c02b6db1414105c"><code>7cc2aed</code></a> Release 4.16.5 version</li> <li><a href="https://github.com/browserslist/browserslist/commit/27e4afdc68798ca93f8c01c5ea6208b4b361a704"><code>27e4afd</code></a> Update dependencies</li> <li><a href="https://github.com/browserslist/browserslist/commit/1013a1847931a209c34a704aebc85a8c091286e7"><code>1013a18</code></a> Fix version RegExp</li> <li><a href="https://github.com/browserslist/browserslist/commit/b879a1a304def2563f42cc3d3f5711e760662be3"><code>b879a1a</code></a> Use Node.js 16 on CI</li> <li><a href="https://github.com/browserslist/browserslist/commit/bd1e9e01c95cad24be706fb11be7d151cd99ed0a"><code>bd1e9e0</code></a> Fix ReDoS (<a href="https://github-redirect.dependabot.com/browserslist/browserslist/issues/593">#593</a>)</li> <li><a href="https://github.com/browserslist/browserslist/commit/209adf9e0051fa39a2b25354cffd493300f34b02"><code>209adf9</code></a> Release 4.16.4 version</li> <li><a href="https://github.com/browserslist/browserslist/commit/3e2ae3b52daf7f5203247fd4f583b3bda66ea57d"><code>3e2ae3b</code></a> Fix types</li> <li>Additional commits viewable in <a href="https://github.com/browserslist/browserslist/compare/4.6.3...4.16.6">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+280 -983

0 comment

1 changed file

pr created time in a month

PR opened GemsLab/StrucEmbedding-GraphLibrary

Bump tensorflow from 1.14.0 to 2.5.0

Bumps tensorflow from 1.14.0 to 2.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tensorflow/tensorflow/releases">tensorflow's releases</a>.</em></p> <blockquote> <h2>TensorFlow 2.5.0</h2> <h1>Release 2.5.0</h1> <h2>Major Features and Improvements</h2> <ul> <li>Support for Python3.9 has been added.</li> <li><code>tf.data</code>: <ul> <li><code>tf.data</code> service now supports strict round-robin reads, which is useful for synchronous training workloads where example sizes vary. With strict round robin reads, users can guarantee that consumers get similar-sized examples in the same step.</li> <li>tf.data service now supports optional compression. Previously data would always be compressed, but now you can disable compression by passing <code>compression=None</code> to <code>tf.data.experimental.service.distribute(...)</code>.</li> <li><code>tf.data.Dataset.batch()</code> now supports <code>num_parallel_calls</code> and <code>deterministic</code> arguments. <code>num_parallel_calls</code> is used to indicate that multiple input batches should be computed in parallel. With <code>num_parallel_calls</code> set, <code>deterministic</code> is used to indicate that outputs can be obtained in the non-deterministic order.</li> <li>Options returned by <code>tf.data.Dataset.options()</code> are no longer mutable.</li> <li>tf.data input pipelines can now be executed in debug mode, which disables any asynchrony, parallelism, or non-determinism and forces Python execution (as opposed to trace-compiled graph execution) of user-defined functions passed into transformations such as <code>map</code>. The debug mode can be enabled through <code>tf.data.experimental.enable_debug_mode()</code>.</li> </ul> </li> <li><code>tf.lite</code> <ul> <li>Enabled the new MLIR-based quantization backend by default <ul> <li>The new backend is used for 8 bits full integer post-training quantization</li> <li>The new backend removes the redundant rescales and fixes some bugs (shared weight/bias, extremely small scales, etc)</li> <li>Set <code>experimental_new_quantizer</code> in tf.lite.TFLiteConverter to False to disable this change</li> </ul> </li> </ul> </li> <li><code>tf.keras</code> <ul> <li><code>tf.keras.metrics.AUC</code> now support logit predictions.</li> <li>Enabled a new supported input type in <code>Model.fit</code>, <code>tf.keras.utils.experimental.DatasetCreator</code>, which takes a callable, <code>dataset_fn</code>. <code>DatasetCreator</code> is intended to work across all <code>tf.distribute</code> strategies, and is the only input type supported for Parameter Server strategy.</li> </ul> </li> <li><code>tf.distribute</code> <ul> <li><code>tf.distribute.experimental.ParameterServerStrategy</code> now supports training with Keras <code>Model.fit</code> when used with <code>DatasetCreator</code>.</li> <li>Creating <code>tf.random.Generator</code> under <code>tf.distribute.Strategy</code> scopes is now allowed (except for <code>tf.distribute.experimental.CentralStorageStrategy</code> and <code>tf.distribute.experimental.ParameterServerStrategy</code>). Different replicas will get different random-number streams.</li> </ul> </li> <li>TPU embedding support <ul> <li>Added <code>profile_data_directory</code> to <code>EmbeddingConfigSpec</code> in <code>_tpu_estimator_embedding.py</code>. This allows embedding lookup statistics gathered at runtime to be used in embedding layer partitioning decisions.</li> </ul> </li> <li>PluggableDevice <ul> <li>Third-party devices can now connect to TensorFlow as plug-ins through <a href="https://github.com/tensorflow/community/blob/master/rfcs/20200612-stream-executor-c-api.md">StreamExecutor C API</a>. and <a href="https://github.com/tensorflow/community/blob/master/rfcs/20200624-pluggable-device-for-tensorflow.md">PluggableDevice</a> interface. <ul> <li>Add custom ops and kernels through <a href="https://github.com/tensorflow/community/blob/master/rfcs/20190814-kernel-and-op-registration.md">kernel and op registration C API</a>.</li> <li>Register custom graph optimization passes with <a href="https://github.com/tensorflow/community/blob/master/rfcs/20201027-modular-tensorflow-graph-c-api.md">graph optimization C API</a>.</li> </ul> </li> </ul> </li> <li><a href="https://github.com/oneapi-src/oneDNN">oneAPI Deep Neural Network Library (oneDNN)</a> CPU performance optimizations from <a href="https://software.intel.com/content/www/us/en/develop/articles/intel-optimization-for-tensorflow-installation-guide.html">Intel-optimized TensorFlow</a> are now available in the official x86-64 Linux and Windows builds. <ul> <li>They are off by default. Enable them by setting the environment variable <code>TF_ENABLE_ONEDNN_OPTS=1</code>.</li> <li>We do not recommend using them in GPU systems, as they have not been sufficiently tested with GPUs yet.</li> </ul> </li> <li>TensorFlow pip packages are now built with CUDA11.2 and cuDNN 8.1.0</li> </ul> <h2>Breaking Changes</h2> <ul> <li>The <code>TF_CPP_MIN_VLOG_LEVEL</code> environment variable has been renamed to to <code>TF_CPP_MAX_VLOG_LEVEL</code> which correctly describes its effect.</li> </ul> <h2>Bug Fixes and Other Changes</h2> <ul> <li><code>tf.keras</code>: <ul> <li>Preprocessing layers API consistency changes: <ul> <li><code>StringLookup</code> added <code>output_mode</code>, <code>sparse</code>, and <code>pad_to_max_tokens</code> arguments with same semantics as <code>TextVectorization</code>.</li> <li><code>IntegerLookup</code> added <code>output_mode</code>, <code>sparse</code>, and <code>pad_to_max_tokens</code> arguments with same semantics as <code>TextVectorization</code>. Renamed <code>max_values</code>, <code>oov_value</code> and <code>mask_value</code> to <code>max_tokens</code>, <code>oov_token</code> and <code>mask_token</code> to align with <code>StringLookup</code> and <code>TextVectorization</code>.</li> <li><code>TextVectorization</code> default for <code>pad_to_max_tokens</code> switched to False.</li> <li><code>CategoryEncoding</code> no longer supports <code>adapt</code>, <code>IntegerLookup</code> now supports equivalent functionality. <code>max_tokens</code> argument renamed to <code>num_tokens</code>.</li> <li><code>Discretization</code> added <code>num_bins</code> argument for learning bins boundaries through calling <code>adapt</code> on a dataset. Renamed <code>bins</code> argument to <code>bin_boundaries</code> for specifying bins without <code>adapt</code>.</li> </ul> </li> <li>Improvements to model saving/loading: <ul> <li><code>model.load_weights</code> now accepts paths to saved models.</li> </ul> </li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tensorflow/tensorflow/blob/master/RELEASE.md">tensorflow's changelog</a>.</em></p> <blockquote> <h1>Release 2.5.0</h1> <!-- raw HTML omitted --> <h2>Breaking Changes</h2> <ul> <li> <!-- raw HTML omitted --> </li> <li>The <code>TF_CPP_MIN_VLOG_LEVEL</code> environment variable has been renamed to to <code>TF_CPP_MAX_VLOG_LEVEL</code> which correctly describes its effect.</li> </ul> <h2>Known Caveats</h2> <ul> <li><!-- raw HTML omitted --></li> <li><!-- raw HTML omitted --></li> <li><!-- raw HTML omitted --></li> </ul> <h2>Major Features and Improvements</h2> <ul> <li> <p><!-- raw HTML omitted --></p> </li> <li> <p><!-- raw HTML omitted --></p> </li> <li> <p>TPU embedding support</p> <ul> <li>Added <code>profile_data_directory</code> to <code>EmbeddingConfigSpec</code> in <code>_tpu_estimator_embedding.py</code>. This allows embedding lookup statistics gathered at runtime to be used in embedding layer partitioning decisions.</li> </ul> </li> <li> <p><code>tf.keras.metrics.AUC</code> now support logit predictions.</p> </li> <li> <p>Creating <code>tf.random.Generator</code> under <code>tf.distribute.Strategy</code> scopes is now allowed (except for <code>tf.distribute.experimental.CentralStorageStrategy</code> and <code>tf.distribute.experimental.ParameterServerStrategy</code>). Different replicas will get different random-number streams.</p> </li> <li> <p><code>tf.data</code>:</p> <ul> <li>tf.data service now supports strict round-robin reads, which is useful for synchronous training workloads where example sizes vary. With strict round robin reads, users can guarantee that consumers get similar-sized examples in the same step.</li> <li>tf.data service now supports optional compression. Previously data would always be compressed, but now you can disable compression by passing <code>compression=None</code> to <code>tf.data.experimental.service.distribute(...)</code>.</li> <li><code>tf.data.Dataset.batch()</code> now supports <code>num_parallel_calls</code> and <code>deterministic</code> arguments. <code>num_parallel_calls</code> is used to indicate that multiple input batches should be computed in parallel. With <code>num_parallel_calls</code> set, <code>deterministic</code> is used to indicate that outputs can be obtained in the non-deterministic order.</li> <li>Options returned by <code>tf.data.Dataset.options()</code> are no longer mutable.</li> <li>tf.data input pipelines can now be executed in debug mode, which disables any asynchrony, parallelism, or non-determinism and forces Python execution (as opposed to trace-compiled graph execution) of user-defined functions passed into transformations such as <code>map</code>. The debug mode can be enabled through <code>tf.data.experimental.enable_debug_mode()</code>.</li> </ul> </li> <li> <p><code>tf.lite</code></p> <ul> <li>Enabled the new MLIR-based quantization backend by default <ul> <li>The new backend is used for 8 bits full integer post-training quantization</li> <li>The new backend removes the redundant rescales and fixes some bugs (shared weight/bias, extremely small scales, etc)</li> </ul> </li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tensorflow/tensorflow/commit/a4dfb8d1a71385bd6d122e4f27f86dcebb96712d"><code>a4dfb8d</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/tensorflow/tensorflow/issues/49124">#49124</a> from tensorflow/mm-cherrypick-tf-data-segfault-fix-...</li> <li><a href="https://github.com/tensorflow/tensorflow/commit/2107b1dc414edb3fc78e632bca4f4936171093b2"><code>2107b1d</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/tensorflow/tensorflow/issues/49116">#49116</a> from tensorflow-jenkins/version-numbers-2.5.0-17609</li> <li><a href="https://github.com/tensorflow/tensorflow/commit/16b813906fcb46306aef29a04ddd0cbdb4e77918"><code>16b8139</code></a> Update snapshot_dataset_op.cc</li> <li><a href="https://github.com/tensorflow/tensorflow/commit/86a0d86cb5da6a28b78ea7f886ec2831d23f6d6b"><code>86a0d86</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/tensorflow/tensorflow/issues/49126">#49126</a> from geetachavan1/cherrypicks_X9ZNY</li> <li><a href="https://github.com/tensorflow/tensorflow/commit/9436ae693ef66a9efb7e7e7888134173d9a0821d"><code>9436ae6</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/tensorflow/tensorflow/issues/49128">#49128</a> from geetachavan1/cherrypicks_D73J5</li> <li><a href="https://github.com/tensorflow/tensorflow/commit/6b2bf99cd9336026689579b683a709c5efcb4ae9"><code>6b2bf99</code></a> Validate that a and b are proper sparse tensors</li> <li><a href="https://github.com/tensorflow/tensorflow/commit/c03ad1a46d5b3f23df67dad03185a0ee16020c96"><code>c03ad1a</code></a> Ensure validation sticks in banded_triangular_solve_op</li> <li><a href="https://github.com/tensorflow/tensorflow/commit/12a6ead7ac968c402feb85ce0a8069ccbc6bf735"><code>12a6ead</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/tensorflow/tensorflow/issues/49120">#49120</a> from geetachavan1/cherrypicks_KJ5M9</li> <li><a href="https://github.com/tensorflow/tensorflow/commit/b67f5b8a0a098c34c71c679aa46480035c46886e"><code>b67f5b8</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/tensorflow/tensorflow/issues/49118">#49118</a> from geetachavan1/cherrypicks_BIDTR</li> <li><a href="https://github.com/tensorflow/tensorflow/commit/a13c0ade86295bd3a8356b4b8cc980cf0c5e70e0"><code>a13c0ad</code></a> [tf.data][cherrypick] Fix snapshot segfault when using repeat and prefecth</li> <li>Additional commits viewable in <a href="https://github.com/tensorflow/tensorflow/compare/v1.14.0...v2.5.0">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+1 -1

0 comment

1 changed file

pr created time in a month

startedant-design/ant-design

started time in a month

PR opened recore/recore-tools

Bump hosted-git-info from 2.7.1 to 2.8.9

Bumps hosted-git-info from 2.7.1 to 2.8.9. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md">hosted-git-info's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9">2.8.9</a> (2021-04-07)</h2> <h3>Bug Fixes</h3> <ul> <li>backport regex fix from <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76">#76</a> (<a href="https://github.com/npm/hosted-git-info/commit/29adfe5">29adfe5</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/84">#84</a></li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.7...v2.8.8">2.8.8</a> (2020-02-29)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61">#61</a> & <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/65">#65</a> addressing issues w/ url.URL implmentation which regressed node 6 support (<a href="https://github.com/npm/hosted-git-info/commit/5038b18">5038b18</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/66">#66</a></li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.6...v2.8.7">2.8.7</a> (2020-02-26)</h2> <h3>Bug Fixes</h3> <ul> <li>Do not attempt to use url.URL when unavailable (<a href="https://github.com/npm/hosted-git-info/commit/2d0bb66">2d0bb66</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61">#61</a> <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/62">#62</a></li> <li>Do not pass scp-style URLs to the WhatWG url.URL (<a href="https://github.com/npm/hosted-git-info/commit/f2cdfcf">f2cdfcf</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/60">#60</a></li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.5...v2.8.6">2.8.6</a> (2020-02-25)</h2> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.4...v2.8.5">2.8.5</a> (2019-10-07)</h2> <h3>Bug Fixes</h3> <ul> <li>updated pathmatch for gitlab (<a href="https://github.com/npm/hosted-git-info/commit/e8325b5">e8325b5</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/51">#51</a></li> <li>updated pathmatch for gitlab (<a href="https://github.com/npm/hosted-git-info/commit/ffe056f">ffe056f</a>)</li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.3...v2.8.4">2.8.4</a> (2019-08-12)</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/hosted-git-info/commit/8d4b3697d79bcd89cdb36d1db165e3696c783a01"><code>8d4b369</code></a> chore(release): 2.8.9</li> <li><a href="https://github.com/npm/hosted-git-info/commit/29adfe5ef789784c861b2cdeb15051ec2ba651a7"><code>29adfe5</code></a> fix: backport regex fix from <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76">#76</a></li> <li><a href="https://github.com/npm/hosted-git-info/commit/afeaefdd86ba9bb5044be3c1554a666d007cf19a"><code>afeaefd</code></a> chore(release): 2.8.8</li> <li><a href="https://github.com/npm/hosted-git-info/commit/5038b1891a61ca3cd7453acbf85d7011fe0086bb"><code>5038b18</code></a> fix: <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61">#61</a> & <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/65">#65</a> addressing issues w/ url.URL implmentation which regressed nod...</li> <li><a href="https://github.com/npm/hosted-git-info/commit/7440afa859162051c191e55d8ecfaf69a193b026"><code>7440afa</code></a> chore(release): 2.8.7</li> <li><a href="https://github.com/npm/hosted-git-info/commit/2d0bb6615ecb8f9ef1019bc0737aab7f6449641f"><code>2d0bb66</code></a> fix: Do not attempt to use url.URL when unavailable</li> <li><a href="https://github.com/npm/hosted-git-info/commit/f2cdfcf33ad2bd3bd1acdba0326281089f53c5b1"><code>f2cdfcf</code></a> fix: Do not pass scp-style URLs to the WhatWG url.URL</li> <li><a href="https://github.com/npm/hosted-git-info/commit/e1b83df5d9cb1f8bb220352e20565560548d2292"><code>e1b83df</code></a> chore(release): 2.8.6</li> <li><a href="https://github.com/npm/hosted-git-info/commit/ff259a6117c62df488e927820e30bec2f7ee453f"><code>ff259a6</code></a> Ensure passwords in hosted Git URLs are correctly escaped</li> <li><a href="https://github.com/npm/hosted-git-info/commit/624fd6f301dd5a1fd7ad1b333d6f8921a12ff98c"><code>624fd6f</code></a> chore(release): 2.8.5</li> <li>Additional commits viewable in <a href="https://github.com/npm/hosted-git-info/compare/v2.7.1...v2.8.9">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~nlf">nlf</a>, a new releaser for hosted-git-info since your current version.</p> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+254 -967

0 comment

1 changed file

pr created time in a month

PR opened recore/my-prettier

chore(deps): bump hosted-git-info from 2.4.2 to 2.8.9

Bumps hosted-git-info from 2.4.2 to 2.8.9. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md">hosted-git-info's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9">2.8.9</a> (2021-04-07)</h2> <h3>Bug Fixes</h3> <ul> <li>backport regex fix from <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76">#76</a> (<a href="https://github.com/npm/hosted-git-info/commit/29adfe5">29adfe5</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/84">#84</a></li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.7...v2.8.8">2.8.8</a> (2020-02-29)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61">#61</a> & <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/65">#65</a> addressing issues w/ url.URL implmentation which regressed node 6 support (<a href="https://github.com/npm/hosted-git-info/commit/5038b18">5038b18</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/66">#66</a></li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.6...v2.8.7">2.8.7</a> (2020-02-26)</h2> <h3>Bug Fixes</h3> <ul> <li>Do not attempt to use url.URL when unavailable (<a href="https://github.com/npm/hosted-git-info/commit/2d0bb66">2d0bb66</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61">#61</a> <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/62">#62</a></li> <li>Do not pass scp-style URLs to the WhatWG url.URL (<a href="https://github.com/npm/hosted-git-info/commit/f2cdfcf">f2cdfcf</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/60">#60</a></li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.5...v2.8.6">2.8.6</a> (2020-02-25)</h2> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.4...v2.8.5">2.8.5</a> (2019-10-07)</h2> <h3>Bug Fixes</h3> <ul> <li>updated pathmatch for gitlab (<a href="https://github.com/npm/hosted-git-info/commit/e8325b5">e8325b5</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/51">#51</a></li> <li>updated pathmatch for gitlab (<a href="https://github.com/npm/hosted-git-info/commit/ffe056f">ffe056f</a>)</li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.3...v2.8.4">2.8.4</a> (2019-08-12)</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/hosted-git-info/commit/8d4b3697d79bcd89cdb36d1db165e3696c783a01"><code>8d4b369</code></a> chore(release): 2.8.9</li> <li><a href="https://github.com/npm/hosted-git-info/commit/29adfe5ef789784c861b2cdeb15051ec2ba651a7"><code>29adfe5</code></a> fix: backport regex fix from <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76">#76</a></li> <li><a href="https://github.com/npm/hosted-git-info/commit/afeaefdd86ba9bb5044be3c1554a666d007cf19a"><code>afeaefd</code></a> chore(release): 2.8.8</li> <li><a href="https://github.com/npm/hosted-git-info/commit/5038b1891a61ca3cd7453acbf85d7011fe0086bb"><code>5038b18</code></a> fix: <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61">#61</a> & <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/65">#65</a> addressing issues w/ url.URL implmentation which regressed nod...</li> <li><a href="https://github.com/npm/hosted-git-info/commit/7440afa859162051c191e55d8ecfaf69a193b026"><code>7440afa</code></a> chore(release): 2.8.7</li> <li><a href="https://github.com/npm/hosted-git-info/commit/2d0bb6615ecb8f9ef1019bc0737aab7f6449641f"><code>2d0bb66</code></a> fix: Do not attempt to use url.URL when unavailable</li> <li><a href="https://github.com/npm/hosted-git-info/commit/f2cdfcf33ad2bd3bd1acdba0326281089f53c5b1"><code>f2cdfcf</code></a> fix: Do not pass scp-style URLs to the WhatWG url.URL</li> <li><a href="https://github.com/npm/hosted-git-info/commit/e1b83df5d9cb1f8bb220352e20565560548d2292"><code>e1b83df</code></a> chore(release): 2.8.6</li> <li><a href="https://github.com/npm/hosted-git-info/commit/ff259a6117c62df488e927820e30bec2f7ee453f"><code>ff259a6</code></a> Ensure passwords in hosted Git URLs are correctly escaped</li> <li><a href="https://github.com/npm/hosted-git-info/commit/624fd6f301dd5a1fd7ad1b333d6f8921a12ff98c"><code>624fd6f</code></a> chore(release): 2.8.5</li> <li>Additional commits viewable in <a href="https://github.com/npm/hosted-git-info/compare/v2.4.2...v2.8.9">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~nlf">nlf</a>, a new releaser for hosted-git-info since your current version.</p> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+478 -1834

0 comment

1 changed file

pr created time in a month

delete branch recore/my-prettier

delete branch : dependabot/npm_and_yarn/lodash-4.17.19

delete time in a month

PR closed recore/my-prettier

chore(deps): bump lodash from 4.17.5 to 4.17.19 dependencies

Bumps lodash from 4.17.5 to 4.17.19. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lodash/lodash/releases">lodash's releases</a>.</em></p> <blockquote> <h2>4.17.16</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lodash/lodash/commit/d7fbc52ee0466a6d248f047b5d5c3e6d1e099056"><code>d7fbc52</code></a> Bump to v4.17.19</li> <li><a href="https://github.com/lodash/lodash/commit/2e1c0f22f425e9c013815b2cd7c2ebd51f49a8d6"><code>2e1c0f2</code></a> Add npm-package</li> <li><a href="https://github.com/lodash/lodash/commit/1b6c282299f4e0271f932b466c67f0f822aa308e"><code>1b6c282</code></a> Bump to v4.17.18</li> <li><a href="https://github.com/lodash/lodash/commit/a370ac81408de2da77a82b3c4b61a01a3b9c2fac"><code>a370ac8</code></a> Bump to v4.17.17</li> <li><a href="https://github.com/lodash/lodash/commit/1144918f3578a84fcc4986da9b806e63a6175cbb"><code>1144918</code></a> Rebuild lodash and docs</li> <li><a href="https://github.com/lodash/lodash/commit/3a3b0fd339c2109563f7e8167dc95265ed82ef3e"><code>3a3b0fd</code></a> Bump to v4.17.16</li> <li><a href="https://github.com/lodash/lodash/commit/c84fe82760fb2d3e03a63379b297a1cc1a2fce12"><code>c84fe82</code></a> fix(zipObjectDeep): prototype pollution (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4759">#4759</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/e7b28ea6cb17b4ca021e7c9d66218c8c89782f32"><code>e7b28ea</code></a> Sanitize sourceURL so it cannot affect evaled code (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4518">#4518</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/0cec225778d4ac26c2bac95031ecc92a94f08bbb"><code>0cec225</code></a> Fix lodash.isEqual for circular references (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4320">#4320</a>) (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4515">#4515</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/94c3a8133cb4fcdb50db72b4fd14dd884b195cd5"><code>94c3a81</code></a> Document matches* shorthands for over* methods (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4510">#4510</a>) (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4514">#4514</a>)</li> <li>Additional commits viewable in <a href="https://github.com/lodash/lodash/compare/4.17.5...4.17.19">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~mathias">mathias</a>, a new releaser for lodash since your current version.</p> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+467 -1836

1 comment

1 changed file

dependabot[bot]

pr closed time in a month

pull request commentrecore/my-prettier

chore(deps): bump lodash from 4.17.5 to 4.17.19

Superseded by #10.

dependabot[bot]

comment created time in a month

create barnchrecore/my-prettier

branch : dependabot/npm_and_yarn/lodash-4.17.21

created branch time in a month