TehShrike ( Josh Duff )

startedmikebevz/node-imap

started time in 2 days

create barnchTehShrike/uvu-diff-repro

branch : master

created branch time in 4 days

created repositoryTehShrike/uvu-diff-repro

Reproduction of an [email protected] issue

created time in 4 days

PR closed TehShrike/sheetsy

Bump lodash from 4.17.11 to 4.17.19 dependencies

Bumps lodash from 4.17.11 to 4.17.19. <details> <summary>Release notes</summary> Sourced from <a href="https://github.com/lodash/lodash/releases">lodash's releases</a>. <blockquote> <h2>4.17.16</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lodash/lodash/commit/d7fbc52ee0466a6d248f047b5d5c3e6d1e099056"><code>d7fbc52</code></a> Bump to v4.17.19</li> <li><a href="https://github.com/lodash/lodash/commit/2e1c0f22f425e9c013815b2cd7c2ebd51f49a8d6"><code>2e1c0f2</code></a> Add npm-package</li> <li><a href="https://github.com/lodash/lodash/commit/1b6c282299f4e0271f932b466c67f0f822aa308e"><code>1b6c282</code></a> Bump to v4.17.18</li> <li><a href="https://github.com/lodash/lodash/commit/a370ac81408de2da77a82b3c4b61a01a3b9c2fac"><code>a370ac8</code></a> Bump to v4.17.17</li> <li><a href="https://github.com/lodash/lodash/commit/1144918f3578a84fcc4986da9b806e63a6175cbb"><code>1144918</code></a> Rebuild lodash and docs</li> <li><a href="https://github.com/lodash/lodash/commit/3a3b0fd339c2109563f7e8167dc95265ed82ef3e"><code>3a3b0fd</code></a> Bump to v4.17.16</li> <li><a href="https://github.com/lodash/lodash/commit/c84fe82760fb2d3e03a63379b297a1cc1a2fce12"><code>c84fe82</code></a> fix(zipObjectDeep): prototype pollution (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4759">#4759</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/e7b28ea6cb17b4ca021e7c9d66218c8c89782f32"><code>e7b28ea</code></a> Sanitize sourceURL so it cannot affect evaled code (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4518">#4518</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/0cec225778d4ac26c2bac95031ecc92a94f08bbb"><code>0cec225</code></a> Fix lodash.isEqual for circular references (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4320">#4320</a>) (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4515">#4515</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/94c3a8133cb4fcdb50db72b4fd14dd884b195cd5"><code>94c3a81</code></a> Document matches* shorthands for over* methods (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4510">#4510</a>) (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4514">#4514</a>)</li> <li>Additional commits viewable in <a href="https://github.com/lodash/lodash/compare/4.17.11...4.17.19">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> This version was pushed to npm by <a href="https://www.npmjs.com/~mathias">mathias</a>, a new releaser for lodash since your current version. </details>

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary>

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+49 -49

1 commit in TehShrike/sheetsy/tree/dependabot/npm_and_yarn/lodash-4.17.19 TehShrike/sheetsy/tree/master

0 comment

1 changed file

dependabot[bot]

pr closed time in 6 days

PR closed TehShrike/sheetsy

Bump elliptic from 6.4.1 to 6.5.3 dependencies

Bumps elliptic from 6.4.1 to 6.5.3. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/indutny/elliptic/commit/8647803dc3d90506aa03021737f7b061ba959ae1"><code>8647803</code></a> 6.5.3</li> <li><a href="https://github.com/indutny/elliptic/commit/856fe4d99fe7b6200556e6400b3bf585b1721bec"><code>856fe4d</code></a> signature: prevent malleability and overflows</li> <li><a href="https://github.com/indutny/elliptic/commit/60489415e545efdfd3010ae74b9726facbf08ca8"><code>6048941</code></a> 6.5.2</li> <li><a href="https://github.com/indutny/elliptic/commit/9984964457c9f8a63b91b01ea103260417eca237"><code>9984964</code></a> package: bump dependencies</li> <li><a href="https://github.com/indutny/elliptic/commit/ec735edde187a43693197f6fa3667ceade751a3a"><code>ec735ed</code></a> utils: leak less information in <code>getNAF()</code></li> <li><a href="https://github.com/indutny/elliptic/commit/71e4e8e2f5b8f0bdbfbe106c72cc9fbc746d3d60"><code>71e4e8e</code></a> 6.5.1</li> <li><a href="https://github.com/indutny/elliptic/commit/7ec66ffa255079260126d87b1762a59ea10de5ea"><code>7ec66ff</code></a> short: add infinity check before multiplying</li> <li><a href="https://github.com/indutny/elliptic/commit/ee7970b92f388e981d694be0436c4c8036b5d36c"><code>ee7970b</code></a> travis: really move on</li> <li><a href="https://github.com/indutny/elliptic/commit/637d0216b58de7edee4f3eb5641295ac323acadb"><code>637d021</code></a> travis: move on</li> <li><a href="https://github.com/indutny/elliptic/commit/5ed0babb6467cd8575a9218265473fda926d9d42"><code>5ed0bab</code></a> package: update deps</li> <li>Additional commits viewable in <a href="https://github.com/indutny/elliptic/compare/v6.4.1...v6.5.3">compare view</a></li> </ul> </details>

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary>

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+49 -49

1 commit in TehShrike/sheetsy/tree/dependabot/npm_and_yarn/elliptic-6.5.3 TehShrike/sheetsy/tree/master

0 comment

1 changed file

dependabot[bot]

pr closed time in 6 days

PR closed TehShrike/sheetsy

Bump ecstatic from 2.2.1 to 2.2.2 dependencies

Bumps ecstatic from 2.2.1 to 2.2.2. <details> <summary>Changelog</summary> Sourced from <a href="https://github.com/jfhbrook/node-ecstatic/blob/2.2.2/CHANGELOG.md">ecstatic's changelog</a>. <blockquote> 2019/05/03 Version 2.2.2 <ul> <li>Backport redirects bugfix</li> </ul> 2017/06/06 Version 2.2.1 <ul> <li>Fix version number in CHANGELOG.md</li> </ul> 2017/06/06 Version 2.2.0 <ul> <li>Will now properly serve gzip files when defaulting the extension</li> <li>Will fall back to serving non-gzip files if file with .gz extension is missing the magic bytes</li> <li>Updated he, url-join</li> <li>Updated devDependencies</li> <li>Added .npmrc</li> <li>Added package-lock.json</li> <li>Much improved documentation for the cli component</li> </ul> 2016/08/10 Version 2.1.0 <ul> <li>New, prettier showDir pages with icons!</li> </ul> 2016/08/09 Version 2.0.0 <ul> <li>No longer strip null bytes from uris before parsing. This avoids a regexp dos attack. The stripping was to avoid a bug regarding c++ null terminated strings shenanigans in some versions of node, but it appears fixed in LTS versions of node.</li> <li>When both showDir and autoIndex are turned off, do not redirect from /foo to /foo/.</li> <li>Add code coverage reports and codecov.io</li> </ul> 2015/05/10 Version 1.4.1 <ul> <li>Compare if-modified-since header against server-generated last-modified header rather than raw mtime</li> </ul> 2015/12/22 Version 1.4.0 <ul> <li>Add ability to specify custom mimetypes via a JSON blob (on the CLI)</li> <li>Started test suite around CLI options parsing</li> <li>Workaround for egregious v8 bug around date parsing throwing during modified-since checks</li> </ul> 2015/11/15 Version 1.3.1 <ul> <li>Add recent contributors to CONTRIBUTORS.md</li> <li>Document showDotFiles in main options example</li> </ul> 2015/11/14 Version 1.3.0 <ul> <li>opts.showDotFiles allows hiding dot files</li> </ul> 2015/11/03 Version 1.2.0 <ul> <li>opts.cache supports function argument</li> </ul> 2015/10/03 Version 1.1.3 <ul> <li>Add CORS=false to defaults</li> </ul> </tr></table> ... (truncated) </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jfhbrook/node-ecstatic/commit/709c0f09a419ebb3419eeb969b4ba987dc3b547a"><code>709c0f0</code></a> Release 2.2.2</li> <li><a href="https://github.com/jfhbrook/node-ecstatic/commit/4e2a944445727294421ded2f8549714d9b29d6f7"><code>4e2a944</code></a> Backport redirect vuln fix</li> <li>See full diff in <a href="https://github.com/jfhbrook/node-ecstatic/compare/2.2.1...2.2.2">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> This version was pushed to npm by <a href="https://www.npmjs.com/~jfhbrook">jfhbrook</a>, a new releaser for ecstatic since your current version. </details>

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary>

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+54 -54

1 commit in TehShrike/sheetsy/tree/dependabot/npm_and_yarn/ecstatic-2.2.2 TehShrike/sheetsy/tree/master

0 comment

1 changed file

dependabot[bot]

pr closed time in 6 days

PR closed TehShrike/sheetsy

Bump acorn from 5.4.1 to 5.7.4 dependencies

Bumps acorn from 5.4.1 to 5.7.4. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/acornjs/acorn/commit/6370e90067552022710190319cbbbd8c43001957"><code>6370e90</code></a> Mark version 5.7.4</li> <li><a href="https://github.com/acornjs/acorn/commit/fbc15b1344f6dfb992f67b4bbf1357436247c8a0"><code>fbc15b1</code></a> More rigorously check surrogate pairs in regexp validator</li> <li><a href="https://github.com/acornjs/acorn/commit/910e62bbda199ce7acc5de10d374afa0f6fcf7d6"><code>910e62b</code></a> Mark version 5.7.3</li> <li><a href="https://github.com/acornjs/acorn/commit/3442a80d2cdfa672ae2b6ccd6c2bd5c167914db4"><code>3442a80</code></a> Make generate-identifier-regex capable of rewriting src/identifier.js</li> <li><a href="https://github.com/acornjs/acorn/commit/22b22f36330d41a20225f26aab314d3e9d5452bd"><code>22b22f3</code></a> Raise specific errors for unterminated template literals</li> <li><a href="https://github.com/acornjs/acorn/commit/1461c7c5778933514126216fb3ec22d8dfc57feb"><code>1461c7c</code></a> Fix a lint error</li> <li><a href="https://github.com/acornjs/acorn/commit/0c12f63f171d8a6c8b354de54a7ff4a8d5fa486e"><code>0c12f63</code></a> Fix tokenizing of regexps after .of</li> <li><a href="https://github.com/acornjs/acorn/commit/832c3081da0df0a586cfc3ea96040f64252088b7"><code>832c308</code></a> Fix 404 url</li> <li><a href="https://github.com/acornjs/acorn/commit/95ca55c7863fafd8bf6d446a0098325388ff9f1c"><code>95ca55c</code></a> Mark version 5.7.2</li> <li><a href="https://github.com/acornjs/acorn/commit/bba80abc23ed67337a6502b8b0f22675c4b22303"><code>bba80ab</code></a> Remove another fixed test from the 262 whitelist</li> <li>Additional commits viewable in <a href="https://github.com/acornjs/acorn/compare/5.4.1...5.7.4">compare view</a></li> </ul> </details>

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary>

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+52 -52

1 commit in TehShrike/sheetsy/tree/dependabot/npm_and_yarn/acorn-5.7.4 TehShrike/sheetsy/tree/master

0 comment

1 changed file

dependabot[bot]

pr closed time in 6 days

created tagTehShrike/obsidian-tag-pages

tagv1.2.2

Creates a page for each tag, containing a list of the pages that have that tag

created time in 8 days

push eventTehShrike/obsidian-tag-pages

TehShrike

commit sha 89a985c47e29a16435fda823fb70e2bce651b745

Fix being exactly 1 too picky about tag quantity