I did the similar workaround with the above and it worked. I'm sharing the code as this could be one of the smallest code example -

import Amplify from "aws-amplify";
import awsconfig from "./aws-exports";

awsconfig.oauth.redirectSignIn = `${window.location.origin}/`;
awsconfig.oauth.redirectSignOut = `${window.location.origin}/`;

Amplify.configure(awsconfig);

Note that this works only when your redirectSignIn and redirectSignOut is ${window.location.origin}/.

Bumps acorn from 5.7.3 to 5.7.4. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/acornjs/acorn/commit/6370e90067552022710190319cbbbd8c43001957"><code>6370e90</code></a> Mark version 5.7.4</li> <li><a href="https://github.com/acornjs/acorn/commit/fbc15b1344f6dfb992f67b4bbf1357436247c8a0"><code>fbc15b1</code></a> More rigorously check surrogate pairs in regexp validator</li> <li>See full diff in <a href="https://github.com/acornjs/acorn/compare/5.7.3...5.7.4">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps standard-version from 7.1.0 to 8.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/conventional-changelog/standard-version/releases">standard-version's releases</a>.</em></p> <blockquote> <h2>standard-version v8.0.1</h2> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update dependency conventional-changelog to v3.1.21 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/586">#586</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/fd456c995f3f88497fbb912fb8aabb8a42d97dbb">fd456c9</a>)</li> <li><strong>deps:</strong> update dependency conventional-changelog-conventionalcommits to v4.3.0 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/587">#587</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/b3b5eedea3eaf062d74d1004a55a0a6b1e3ca6c6">b3b5eed</a>)</li> <li><strong>deps:</strong> update dependency conventional-recommended-bump to v6.0.9 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/588">#588</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/d4d2ac2a99c095227118da795e1c9e19d06c9a0a">d4d2ac2</a>)</li> <li><strong>deps:</strong> update dependency git-semver-tags to v4 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/589">#589</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/a0f0e813b2be4a2065600a19075fda4d6f331ef8">a0f0e81</a>)</li> <li>Vulnerability Report GHSL-2020-11101 (<a href="https://www.github.com/conventional-changelog/standard-version/commit/9d978ac9d4f64be4c7b9d514712ab3757732d561">9d978ac</a>)</li> </ul> <h2>standard-version v8.0.0</h2> <h3>⚠ BREAKING CHANGES</h3> <ul> <li><code>composer.json</code> and <code>composer.lock</code> will no longer be read from or bumped by default. If you need to obtain a version or write a version to these files, please use <code>bumpFiles</code> and/or <code>packageFiles</code> options accordingly.</li> </ul> <h3>Bug Fixes</h3> <ul> <li>composer.json and composer.lock have been removed from default package and bump files. (<a href="https://www.github.com/conventional-changelog/standard-version/commit/c934f3a38da4e7234d9dba3b2405f3b7e4dc5aa8">c934f3a</a>), closes <a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/495">#495</a> <a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/394">#394</a></li> <li><strong>deps:</strong> update dependency conventional-changelog to v3.1.18 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/510">#510</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/e6aeb779fe53ffed2a252e6cfd69cfcb786b9ef9">e6aeb77</a>)</li> <li><strong>deps:</strong> update dependency yargs to v15.1.0 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/518">#518</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/8f36f9e073119fcbf5ad843237fb06a4ca42a0f9">8f36f9e</a>)</li> <li><strong>deps:</strong> update dependency yargs to v15.3.1 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/559">#559</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/d98cd4674b4d074c0b7f4d50d052ae618cf494c6">d98cd46</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/conventional-changelog/standard-version/blob/master/CHANGELOG.md">standard-version's changelog</a>.</em></p> <blockquote> <h3><a href="https://www.github.com/conventional-changelog/standard-version/compare/v8.0.0...v8.0.1">8.0.1</a> (2020-07-12)</h3> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update dependency conventional-changelog to v3.1.21 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/586">#586</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/fd456c995f3f88497fbb912fb8aabb8a42d97dbb">fd456c9</a>)</li> <li><strong>deps:</strong> update dependency conventional-changelog-conventionalcommits to v4.3.0 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/587">#587</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/b3b5eedea3eaf062d74d1004a55a0a6b1e3ca6c6">b3b5eed</a>)</li> <li><strong>deps:</strong> update dependency conventional-recommended-bump to v6.0.9 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/588">#588</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/d4d2ac2a99c095227118da795e1c9e19d06c9a0a">d4d2ac2</a>)</li> <li><strong>deps:</strong> update dependency git-semver-tags to v4 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/589">#589</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/a0f0e813b2be4a2065600a19075fda4d6f331ef8">a0f0e81</a>)</li> <li>Vulnerability Report GHSL-2020-11101 (<a href="https://www.github.com/conventional-changelog/standard-version/commit/9d978ac9d4f64be4c7b9d514712ab3757732d561">9d978ac</a>)</li> </ul> <h2><a href="https://www.github.com/conventional-changelog/standard-version/compare/v7.1.0...v8.0.0">8.0.0</a> (2020-05-06)</h2> <h3>⚠ BREAKING CHANGES</h3> <ul> <li><code>composer.json</code> and <code>composer.lock</code> will no longer be read from or bumped by default. If you need to obtain a version or write a version to these files, please use <code>bumpFiles</code> and/or <code>packageFiles</code> options accordingly.</li> </ul> <h3>Bug Fixes</h3> <ul> <li>composer.json and composer.lock have been removed from default package and bump files. (<a href="https://www.github.com/conventional-changelog/standard-version/commit/c934f3a38da4e7234d9dba3b2405f3b7e4dc5aa8">c934f3a</a>), closes <a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/495">#495</a> <a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/394">#394</a></li> <li><strong>deps:</strong> update dependency conventional-changelog to v3.1.18 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/510">#510</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/e6aeb779fe53ffed2a252e6cfd69cfcb786b9ef9">e6aeb77</a>)</li> <li><strong>deps:</strong> update dependency yargs to v15.1.0 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/518">#518</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/8f36f9e073119fcbf5ad843237fb06a4ca42a0f9">8f36f9e</a>)</li> <li><strong>deps:</strong> update dependency yargs to v15.3.1 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/559">#559</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/d98cd4674b4d074c0b7f4d50d052ae618cf494c6">d98cd46</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/conventional-changelog/standard-version/commit/57e4e25d83552d225cf96e1dfc50e6042a2f7f6c"><code>57e4e25</code></a> chore: release 8.0.1 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/611">#611</a>)</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/58105e126fd4392b5b23246a90a8c51a05ffded7"><code>58105e1</code></a> chore: Adds basic issue templates (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/613">#613</a>)</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/9d978ac9d4f64be4c7b9d514712ab3757732d561"><code>9d978ac</code></a> fix: Vulnerability Report GHSL-2020-11101</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/267d78dcb3bef90ad4dcbbafd2e77739efacdf37"><code>267d78d</code></a> chore: stop pinning deps (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/615">#615</a>)</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/da84ec4b44f7d45c3e06a93e24b17ee43b988992"><code>da84ec4</code></a> test(windows): skip mock-git tests for Windows (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/616">#616</a>)</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/871201ff8de6091d4b9b2ce9bf8611a1fc2f7836"><code>871201f</code></a> Merge pull request from GHSA-7xcx-6wjh-7xp2</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/a0f0e813b2be4a2065600a19075fda4d6f331ef8"><code>a0f0e81</code></a> fix(deps): update dependency git-semver-tags to v4 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/589">#589</a>)</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/fd456c995f3f88497fbb912fb8aabb8a42d97dbb"><code>fd456c9</code></a> fix(deps): update dependency conventional-changelog to v3.1.21 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/586">#586</a>)</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/b3b5eedea3eaf062d74d1004a55a0a6b1e3ca6c6"><code>b3b5eed</code></a> fix(deps): update dependency conventional-changelog-conventionalcommits to v4...</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/d4d2ac2a99c095227118da795e1c9e19d06c9a0a"><code>d4d2ac2</code></a> fix(deps): update dependency conventional-recommended-bump to v6.0.9 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/588">#588</a>)</li> <li>Additional commits viewable in <a href="https://github.com/conventional-changelog/standard-version/compare/v7.1.0...v8.0.1">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~oss-bot">oss-bot</a>, a new releaser for standard-version since your current version.</p> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps lodash from 4.17.15 to 4.17.19. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lodash/lodash/releases">lodash's releases</a>.</em></p> <blockquote> <h2>4.17.16</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lodash/lodash/commit/d7fbc52ee0466a6d248f047b5d5c3e6d1e099056"><code>d7fbc52</code></a> Bump to v4.17.19</li> <li><a href="https://github.com/lodash/lodash/commit/2e1c0f22f425e9c013815b2cd7c2ebd51f49a8d6"><code>2e1c0f2</code></a> Add npm-package</li> <li><a href="https://github.com/lodash/lodash/commit/1b6c282299f4e0271f932b466c67f0f822aa308e"><code>1b6c282</code></a> Bump to v4.17.18</li> <li><a href="https://github.com/lodash/lodash/commit/a370ac81408de2da77a82b3c4b61a01a3b9c2fac"><code>a370ac8</code></a> Bump to v4.17.17</li> <li><a href="https://github.com/lodash/lodash/commit/1144918f3578a84fcc4986da9b806e63a6175cbb"><code>1144918</code></a> Rebuild lodash and docs</li> <li><a href="https://github.com/lodash/lodash/commit/3a3b0fd339c2109563f7e8167dc95265ed82ef3e"><code>3a3b0fd</code></a> Bump to v4.17.16</li> <li><a href="https://github.com/lodash/lodash/commit/c84fe82760fb2d3e03a63379b297a1cc1a2fce12"><code>c84fe82</code></a> fix(zipObjectDeep): prototype pollution (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4759">#4759</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/e7b28ea6cb17b4ca021e7c9d66218c8c89782f32"><code>e7b28ea</code></a> Sanitize sourceURL so it cannot affect evaled code (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4518">#4518</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/0cec225778d4ac26c2bac95031ecc92a94f08bbb"><code>0cec225</code></a> Fix lodash.isEqual for circular references (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4320">#4320</a>) (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4515">#4515</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/94c3a8133cb4fcdb50db72b4fd14dd884b195cd5"><code>94c3a81</code></a> Document matches* shorthands for over* methods (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4510">#4510</a>) (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4514">#4514</a>)</li> <li>Additional commits viewable in <a href="https://github.com/lodash/lodash/compare/4.17.15...4.17.19">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~mathias">mathias</a>, a new releaser for lodash since your current version.</p> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps elliptic from 6.5.2 to 6.5.3. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/indutny/elliptic/commit/8647803dc3d90506aa03021737f7b061ba959ae1"><code>8647803</code></a> 6.5.3</li> <li><a href="https://github.com/indutny/elliptic/commit/856fe4d99fe7b6200556e6400b3bf585b1721bec"><code>856fe4d</code></a> signature: prevent malleability and overflows</li> <li>See full diff in <a href="https://github.com/indutny/elliptic/compare/v6.5.2...v6.5.3">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps websocket-extensions from 0.1.3 to 0.1.4. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/faye/websocket-extensions-node/blob/master/CHANGELOG.md">websocket-extensions's changelog</a>.</em></p> <blockquote> <h3>0.1.4 / 2020-06-02</h3> <ul> <li>Remove a ReDoS vulnerability in the header parser (CVE-2020-7662, reported by Robert McLaughlin)</li> <li>Change license from MIT to Apache 2.0</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/faye/websocket-extensions-node/commit/8efd0cd6e35faf9bb9cb08759be1e27082177d43"><code>8efd0cd</code></a> Bump version to 0.1.4</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/3dad4ad44a8c5f74d4f8f4efd3f9d6e0b5df3051"><code>3dad4ad</code></a> Remove ReDoS vulnerability in the Sec-WebSocket-Extensions header parser</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/4a76c75efb1c5d6a2f60550e9501757458d19533"><code>4a76c75</code></a> Add Node versions 13 and 14 on Travis</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/44a677a9c0631daed0b0f4a4b68c095b624183b8"><code>44a677a</code></a> Formatting change: {...} should have spaces inside the braces</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/f6c50aba0c20ff45b0f87cea33babec1217ec3f5"><code>f6c50ab</code></a> Let npm reformat package.json</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/2d211f3705d52d9efb4f01daf5a253adf828592e"><code>2d211f3</code></a> Change markdown formatting of docs.</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/0b620834cc1e1f2eace1d55ab17f71d90d88271d"><code>0b62083</code></a> Update Travis target versions.</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/729a4653073fa8dd020561113513bfa2e2119415"><code>729a465</code></a> Switch license to Apache 2.0.</li> <li>See full diff in <a href="https://github.com/faye/websocket-extensions-node/compare/0.1.3...0.1.4">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps elliptic from 6.5.2 to 6.5.3. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/indutny/elliptic/commit/8647803dc3d90506aa03021737f7b061ba959ae1"><code>8647803</code></a> 6.5.3</li> <li><a href="https://github.com/indutny/elliptic/commit/856fe4d99fe7b6200556e6400b3bf585b1721bec"><code>856fe4d</code></a> signature: prevent malleability and overflows</li> <li>See full diff in <a href="https://github.com/indutny/elliptic/compare/v6.5.2...v6.5.3">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps lodash from 4.17.15 to 4.17.19. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lodash/lodash/releases">lodash's releases</a>.</em></p> <blockquote> <h2>4.17.16</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lodash/lodash/commit/d7fbc52ee0466a6d248f047b5d5c3e6d1e099056"><code>d7fbc52</code></a> Bump to v4.17.19</li> <li><a href="https://github.com/lodash/lodash/commit/2e1c0f22f425e9c013815b2cd7c2ebd51f49a8d6"><code>2e1c0f2</code></a> Add npm-package</li> <li><a href="https://github.com/lodash/lodash/commit/1b6c282299f4e0271f932b466c67f0f822aa308e"><code>1b6c282</code></a> Bump to v4.17.18</li> <li><a href="https://github.com/lodash/lodash/commit/a370ac81408de2da77a82b3c4b61a01a3b9c2fac"><code>a370ac8</code></a> Bump to v4.17.17</li> <li><a href="https://github.com/lodash/lodash/commit/1144918f3578a84fcc4986da9b806e63a6175cbb"><code>1144918</code></a> Rebuild lodash and docs</li> <li><a href="https://github.com/lodash/lodash/commit/3a3b0fd339c2109563f7e8167dc95265ed82ef3e"><code>3a3b0fd</code></a> Bump to v4.17.16</li> <li><a href="https://github.com/lodash/lodash/commit/c84fe82760fb2d3e03a63379b297a1cc1a2fce12"><code>c84fe82</code></a> fix(zipObjectDeep): prototype pollution (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4759">#4759</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/e7b28ea6cb17b4ca021e7c9d66218c8c89782f32"><code>e7b28ea</code></a> Sanitize sourceURL so it cannot affect evaled code (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4518">#4518</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/0cec225778d4ac26c2bac95031ecc92a94f08bbb"><code>0cec225</code></a> Fix lodash.isEqual for circular references (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4320">#4320</a>) (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4515">#4515</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/94c3a8133cb4fcdb50db72b4fd14dd884b195cd5"><code>94c3a81</code></a> Document matches* shorthands for over* methods (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4510">#4510</a>) (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4514">#4514</a>)</li> <li>Additional commits viewable in <a href="https://github.com/lodash/lodash/compare/4.17.15...4.17.19">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~mathias">mathias</a>, a new releaser for lodash since your current version.</p> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps elliptic from 6.5.2 to 6.5.3. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/indutny/elliptic/commit/8647803dc3d90506aa03021737f7b061ba959ae1"><code>8647803</code></a> 6.5.3</li> <li><a href="https://github.com/indutny/elliptic/commit/856fe4d99fe7b6200556e6400b3bf585b1721bec"><code>856fe4d</code></a> signature: prevent malleability and overflows</li> <li>See full diff in <a href="https://github.com/indutny/elliptic/compare/v6.5.2...v6.5.3">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps lodash from 4.17.15 to 4.17.19. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lodash/lodash/releases">lodash's releases</a>.</em></p> <blockquote> <h2>4.17.16</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lodash/lodash/commit/d7fbc52ee0466a6d248f047b5d5c3e6d1e099056"><code>d7fbc52</code></a> Bump to v4.17.19</li> <li><a href="https://github.com/lodash/lodash/commit/2e1c0f22f425e9c013815b2cd7c2ebd51f49a8d6"><code>2e1c0f2</code></a> Add npm-package</li> <li><a href="https://github.com/lodash/lodash/commit/1b6c282299f4e0271f932b466c67f0f822aa308e"><code>1b6c282</code></a> Bump to v4.17.18</li> <li><a href="https://github.com/lodash/lodash/commit/a370ac81408de2da77a82b3c4b61a01a3b9c2fac"><code>a370ac8</code></a> Bump to v4.17.17</li> <li><a href="https://github.com/lodash/lodash/commit/1144918f3578a84fcc4986da9b806e63a6175cbb"><code>1144918</code></a> Rebuild lodash and docs</li> <li><a href="https://github.com/lodash/lodash/commit/3a3b0fd339c2109563f7e8167dc95265ed82ef3e"><code>3a3b0fd</code></a> Bump to v4.17.16</li> <li><a href="https://github.com/lodash/lodash/commit/c84fe82760fb2d3e03a63379b297a1cc1a2fce12"><code>c84fe82</code></a> fix(zipObjectDeep): prototype pollution (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4759">#4759</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/e7b28ea6cb17b4ca021e7c9d66218c8c89782f32"><code>e7b28ea</code></a> Sanitize sourceURL so it cannot affect evaled code (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4518">#4518</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/0cec225778d4ac26c2bac95031ecc92a94f08bbb"><code>0cec225</code></a> Fix lodash.isEqual for circular references (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4320">#4320</a>) (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4515">#4515</a>)</li> <li><a href="https://github.com/lodash/lodash/commit/94c3a8133cb4fcdb50db72b4fd14dd884b195cd5"><code>94c3a81</code></a> Document matches* shorthands for over* methods (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4510">#4510</a>) (<a href="https://github-redirect.dependabot.com/lodash/lodash/issues/4514">#4514</a>)</li> <li>Additional commits viewable in <a href="https://github.com/lodash/lodash/compare/4.17.15...4.17.19">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~mathias">mathias</a>, a new releaser for lodash since your current version.</p> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps electron from 7.1.7 to 7.2.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/electron/electron/releases">electron's releases</a>.</em></p> <blockquote> <h2>electron v7.2.4</h2> <h1>Release Notes for v7.2.4</h1> <h2>Fixes</h2> <ul> <li>Fixed Promise timeout issue when running Electron as Node. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23324">#23324</a></li> <li>Fixed a use-after-free error that could happen if a Tray was destroyed while showing a custom context menu. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23182">#23182</a></li> <li>Fixed an issue where windows without <code>nativeWindowOpen: true</code> could invoke the non-native-open path. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23224">#23224</a></li> <li>Fixed memory leak when using contextBridge with sandbox=true. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23232">#23232</a></li> <li>MacOS VoiceOver is now able to find its way back into web contents after it navigated "out" of an application. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23174">#23174</a></li> </ul> <h2>electron v7.2.3</h2> <h1>Release Notes for v7.2.3</h1> <h2>Fixes</h2> <ul> <li>Security: Ensure proxy object is created in the correct context a9bead22</li> </ul> <h2>electron v7.2.2</h2> <h1>Release Notes for v7.2.2</h1> <h2>Fixes</h2> <ul> <li>Fixed a potential crash on invalid <code>zoomFactor</code> values when setting the zoom factor of a webpage. <a href="https://github-redirect.dependabot.com/electron/electron/issues/22710">#22710</a></li> <li>Fixed an issue with <code>maximizable</code> state persistence of BrowserWindows on macOS. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23019">#23019</a></li> <li>Fixed an issue with possible creation of a messageBox which cannot be dismissed on macOS. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23089">#23089</a></li> <li>Fixed an occasional crash when closing all BrowserWindows. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23024">#23024</a></li> <li>Security: Backported fix for CVE-2020-6426: inappropriate implementation in V8. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23043">#23043</a></li> <li>Security: backported a fix for crbug.com/1065094. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23059">#23059</a></li> <li>Security: backported fix for a potential buffer overrun in WebRTC audio encoding. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23037">#23037</a></li> <li>Security: backported fix for site isolation bypass in dedicated workers. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23040">#23040</a></li> <li>Security: backported the fix to CVE-2020-6452: potential container-overflow in MediaStream mojo. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23044">#23044</a></li> </ul> <h2>Other Changes</h2> <ul> <li>Security: Backport fix for buffer underflow in DWrite. <a href="https://github-redirect.dependabot.com/electron/electron/issues/22979">#22979</a></li> <li>Security: Backported fix for use after free in file chooser. <a href="https://github-redirect.dependabot.com/electron/electron/issues/22981">#22981</a></li> <li>Security: backport fix for CVE-2020-6451: Use after free in WebAudio. <a href="https://github-redirect.dependabot.com/electron/electron/issues/22945">#22945</a></li> <li>Security: backport fix for use after free in VideoEncodeAccelerator. <a href="https://github-redirect.dependabot.com/electron/electron/issues/22983">#22983</a></li> <li>Security: backported fix for CVE-2019-20503: Out of bounds read in usersctplib. <a href="https://github-redirect.dependabot.com/electron/electron/issues/22986">#22986</a></li> <li>Security: backported fix for CVE-2020-6422: Use after free in WebGL. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23017">#23017</a></li> <li>Security: backported fix for CVE-2020-6423: Use after free in audio. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23048">#23048</a></li> <li>Security: backported fix for CVE-2020-6427: Use after free in audio. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23015">#23015</a></li> <li>Security: backported fix for CVE-2020-6428: Use after free in audio. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23013">#23013</a></li> <li>Security: backported fix for CVE-2020-6429: Use after free in audio. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23011">#23011</a></li> <li>Security: backported fix for CVE-2020-6449: Use after free in audio. <a href="https://github-redirect.dependabot.com/electron/electron/issues/23009">#23009</a></li> <li>Security: backported fix for use-after-poison in WebAudio (crbug.com/1023810). <a href="https://github-redirect.dependabot.com/electron/electron/issues/22869">#22869</a></li> <li>Security: backported fix for use-after-poison in WebAudio. <a href="https://github-redirect.dependabot.com/electron/electron/issues/22943">#22943</a></li> </ul> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/electron/electron/commit/0552e0d5de46ffa3b481d741f1db5c779e201565"><code>0552e0d</code></a> Bump v7.2.4</li> <li><a href="https://github.com/electron/electron/commit/c87b474496c35580ebbeab13f9c8c982b4eab4d3"><code>c87b474</code></a> refactor: port window-setup to use ctx bridge instead of being run in the mai...</li> <li><a href="https://github.com/electron/electron/commit/69683def0dbea9a7a1bb382050293183c2ba066e"><code>69683de</code></a> fix: use Node's microtasks policy in node_main.cc (<a href="https://github-redirect.dependabot.com/electron/electron/issues/23154">#23154</a>) (<a href="https://github-redirect.dependabot.com/electron/electron/issues/23324">#23324</a>)</li> <li><a href="https://github.com/electron/electron/commit/8148b76efa0092ec236bcde64249fda93ce6ff1d"><code>8148b76</code></a> style: use build/include_directory for NOLINT (<a href="https://github-redirect.dependabot.com/electron/electron/issues/23266">#23266</a>) (<a href="https://github-redirect.dependabot.com/electron/electron/issues/23304">#23304</a>)</li> <li><a href="https://github.com/electron/electron/commit/7dfcb5ef0495cc34738e52c2ef13ecda5c998017"><code>7dfcb5e</code></a> fix: block custom window.open when nativeWindowOpen is true (<a href="https://github-redirect.dependabot.com/electron/electron/issues/23188">#23188</a>) (<a href="https://github-redirect.dependabot.com/electron/electron/issues/23224">#23224</a>)</li> <li><a href="https://github.com/electron/electron/commit/0b3bf1e5566efe64c31d5b6aa07c0a8eb1c81836"><code>0b3bf1e</code></a> fix: do not mutate ipc instances across contexts (<a href="https://github-redirect.dependabot.com/electron/electron/issues/23239">#23239</a>)</li> <li><a href="https://github.com/electron/electron/commit/fd529ac30a7875c22d6d5b6d7af003843e0fbf18"><code>fd529ac</code></a> fix: do not allow child windows to specify their own preload script (<a href="https://github-redirect.dependabot.com/electron/electron/issues/23229">#23229</a>)</li> <li><a href="https://github.com/electron/electron/commit/3909001a006cff7b36505a0a80ca8926f0e0646f"><code>3909001</code></a> fix: ensure that functions are not retained beyond their context being releas...</li> <li><a href="https://github.com/electron/electron/commit/039be2e407237c4696ec099e00662c235527cfb7"><code>039be2e</code></a> build: improve patch filename remembering (<a href="https://github-redirect.dependabot.com/electron/electron/issues/23070">#23070</a>) (<a href="https://github-redirect.dependabot.com/electron/electron/issues/23184">#23184</a>)</li> <li><a href="https://github.com/electron/electron/commit/fb6f60460ba646cb5ea9985b09db3d7bd92e1376"><code>fb6f604</code></a> fix: heap-use-after-free in tray.popUpContextMenu (<a href="https://github-redirect.dependabot.com/electron/electron/issues/22842">#22842</a>) (<a href="https://github-redirect.dependabot.com/electron/electron/issues/23182">#23182</a>)</li> <li>Additional commits viewable in <a href="https://github.com/electron/electron/compare/v7.1.7...v7.2.4">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps websocket-extensions from 0.1.3 to 0.1.4. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/faye/websocket-extensions-node/blob/master/CHANGELOG.md">websocket-extensions's changelog</a>.</em></p> <blockquote> <h3>0.1.4 / 2020-06-02</h3> <ul> <li>Remove a ReDoS vulnerability in the header parser (CVE-2020-7662, reported by Robert McLaughlin)</li> <li>Change license from MIT to Apache 2.0</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/faye/websocket-extensions-node/commit/8efd0cd6e35faf9bb9cb08759be1e27082177d43"><code>8efd0cd</code></a> Bump version to 0.1.4</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/3dad4ad44a8c5f74d4f8f4efd3f9d6e0b5df3051"><code>3dad4ad</code></a> Remove ReDoS vulnerability in the Sec-WebSocket-Extensions header parser</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/4a76c75efb1c5d6a2f60550e9501757458d19533"><code>4a76c75</code></a> Add Node versions 13 and 14 on Travis</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/44a677a9c0631daed0b0f4a4b68c095b624183b8"><code>44a677a</code></a> Formatting change: {...} should have spaces inside the braces</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/f6c50aba0c20ff45b0f87cea33babec1217ec3f5"><code>f6c50ab</code></a> Let npm reformat package.json</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/2d211f3705d52d9efb4f01daf5a253adf828592e"><code>2d211f3</code></a> Change markdown formatting of docs.</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/0b620834cc1e1f2eace1d55ab17f71d90d88271d"><code>0b62083</code></a> Update Travis target versions.</li> <li><a href="https://github.com/faye/websocket-extensions-node/commit/729a4653073fa8dd020561113513bfa2e2119415"><code>729a465</code></a> Switch license to Apache 2.0.</li> <li>See full diff in <a href="https://github.com/faye/websocket-extensions-node/compare/0.1.3...0.1.4">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Issue: #4970

Description of changes: Provide empty stack with UndeterminedEnvironmentErrorto show only error message.

@ljharb Got it! Thank you for your clear explanation and review<3

@ljharb Yes, and it is separated in the dependency's repository. Did you mean it should be major update in terms of semver? I can bump major version in that case.

@benjiwheeler How about replacing travis with GitHub Actions?

What / Why

Bump the version of meant

References

Updates:

• Bump dev deps versions
• Replace travis with GitHub Actions

https://github.com/watilde/meant/blob/master/CHANGELOG.md#102-2020-07-19

• standard: 8.0.0 => 11.0.1
• standard-version: 2.4.0 => 8.0.1
• tap: 7.1.1 => 12.0.7

Using the same version of standard and tap with https://github.com/npm/cli/blob/latest/package.json#L287-L289

Use the same matrix with https://github.com/npm/cli/blob/latest/.github/workflows/ci.yml

Bumps standard-version from 2.4.0 to 8.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/conventional-changelog/standard-version/releases">standard-version's releases</a>.</em></p> <blockquote> <h2>standard-version v8.0.1</h2> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update dependency conventional-changelog to v3.1.21 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/586">#586</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/fd456c995f3f88497fbb912fb8aabb8a42d97dbb">fd456c9</a>)</li> <li><strong>deps:</strong> update dependency conventional-changelog-conventionalcommits to v4.3.0 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/587">#587</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/b3b5eedea3eaf062d74d1004a55a0a6b1e3ca6c6">b3b5eed</a>)</li> <li><strong>deps:</strong> update dependency conventional-recommended-bump to v6.0.9 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/588">#588</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/d4d2ac2a99c095227118da795e1c9e19d06c9a0a">d4d2ac2</a>)</li> <li><strong>deps:</strong> update dependency git-semver-tags to v4 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/589">#589</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/a0f0e813b2be4a2065600a19075fda4d6f331ef8">a0f0e81</a>)</li> <li>Vulnerability Report GHSL-2020-11101 (<a href="https://www.github.com/conventional-changelog/standard-version/commit/9d978ac9d4f64be4c7b9d514712ab3757732d561">9d978ac</a>)</li> </ul> <h2>standard-version v8.0.0</h2> <h3>⚠ BREAKING CHANGES</h3> <ul> <li><code>composer.json</code> and <code>composer.lock</code> will no longer be read from or bumped by default. If you need to obtain a version or write a version to these files, please use <code>bumpFiles</code> and/or <code>packageFiles</code> options accordingly.</li> </ul> <h3>Bug Fixes</h3> <ul> <li>composer.json and composer.lock have been removed from default package and bump files. (<a href="https://www.github.com/conventional-changelog/standard-version/commit/c934f3a38da4e7234d9dba3b2405f3b7e4dc5aa8">c934f3a</a>), closes <a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/495">#495</a> <a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/394">#394</a></li> <li><strong>deps:</strong> update dependency conventional-changelog to v3.1.18 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/510">#510</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/e6aeb779fe53ffed2a252e6cfd69cfcb786b9ef9">e6aeb77</a>)</li> <li><strong>deps:</strong> update dependency yargs to v15.1.0 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/518">#518</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/8f36f9e073119fcbf5ad843237fb06a4ca42a0f9">8f36f9e</a>)</li> <li><strong>deps:</strong> update dependency yargs to v15.3.1 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/559">#559</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/d98cd4674b4d074c0b7f4d50d052ae618cf494c6">d98cd46</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/conventional-changelog/standard-version/blob/master/CHANGELOG.md">standard-version's changelog</a>.</em></p> <blockquote> <h3><a href="https://www.github.com/conventional-changelog/standard-version/compare/v8.0.0...v8.0.1">8.0.1</a> (2020-07-12)</h3> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update dependency conventional-changelog to v3.1.21 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/586">#586</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/fd456c995f3f88497fbb912fb8aabb8a42d97dbb">fd456c9</a>)</li> <li><strong>deps:</strong> update dependency conventional-changelog-conventionalcommits to v4.3.0 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/587">#587</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/b3b5eedea3eaf062d74d1004a55a0a6b1e3ca6c6">b3b5eed</a>)</li> <li><strong>deps:</strong> update dependency conventional-recommended-bump to v6.0.9 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/588">#588</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/d4d2ac2a99c095227118da795e1c9e19d06c9a0a">d4d2ac2</a>)</li> <li><strong>deps:</strong> update dependency git-semver-tags to v4 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/589">#589</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/a0f0e813b2be4a2065600a19075fda4d6f331ef8">a0f0e81</a>)</li> <li>Vulnerability Report GHSL-2020-11101 (<a href="https://www.github.com/conventional-changelog/standard-version/commit/9d978ac9d4f64be4c7b9d514712ab3757732d561">9d978ac</a>)</li> </ul> <h2><a href="https://www.github.com/conventional-changelog/standard-version/compare/v7.1.0...v8.0.0">8.0.0</a> (2020-05-06)</h2> <h3>⚠ BREAKING CHANGES</h3> <ul> <li><code>composer.json</code> and <code>composer.lock</code> will no longer be read from or bumped by default. If you need to obtain a version or write a version to these files, please use <code>bumpFiles</code> and/or <code>packageFiles</code> options accordingly.</li> </ul> <h3>Bug Fixes</h3> <ul> <li>composer.json and composer.lock have been removed from default package and bump files. (<a href="https://www.github.com/conventional-changelog/standard-version/commit/c934f3a38da4e7234d9dba3b2405f3b7e4dc5aa8">c934f3a</a>), closes <a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/495">#495</a> <a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/394">#394</a></li> <li><strong>deps:</strong> update dependency conventional-changelog to v3.1.18 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/510">#510</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/e6aeb779fe53ffed2a252e6cfd69cfcb786b9ef9">e6aeb77</a>)</li> <li><strong>deps:</strong> update dependency yargs to v15.1.0 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/518">#518</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/8f36f9e073119fcbf5ad843237fb06a4ca42a0f9">8f36f9e</a>)</li> <li><strong>deps:</strong> update dependency yargs to v15.3.1 (<a href="https://www.github-redirect.dependabot.com/conventional-changelog/standard-version/issues/559">#559</a>) (<a href="https://www.github.com/conventional-changelog/standard-version/commit/d98cd4674b4d074c0b7f4d50d052ae618cf494c6">d98cd46</a>)</li> </ul> <h2><a href="https://github.com/conventional-changelog/standard-version/compare/v7.0.1...v7.1.0">7.1.0</a> (2019-12-08)</h2> <h3>Features</h3> <ul> <li>Adds support for <code>header</code> (--header) configuration based on the spec. (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/364">#364</a>) (<a href="https://github.com/conventional-changelog/standard-version/commit/ba80a0c27029f54c751fe845560504925b45eab8">ba80a0c</a>)</li> <li>custom 'bumpFiles' and 'packageFiles' support (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/372">#372</a>) (<a href="https://github.com/conventional-changelog/standard-version/commit/564d9482a459d5d7a2020c2972b4d39167ded4bf">564d948</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update dependency conventional-changelog to v3.1.15 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/479">#479</a>) (<a href="https://github.com/conventional-changelog/standard-version/commit/492e72192ebf35d7c58c00526b1e6bd2abac7f13">492e721</a>)</li> <li><strong>deps:</strong> update dependency conventional-changelog-conventionalcommits to v4.2.3 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/496">#496</a>) (<a href="https://github.com/conventional-changelog/standard-version/commit/bc606f8e96bcef1d46b28305622fc76dfbf306cf">bc606f8</a>)</li> <li><strong>deps:</strong> update dependency conventional-recommended-bump to v6.0.5 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/480">#480</a>) (<a href="https://github.com/conventional-changelog/standard-version/commit/1e1e215a633963188cdb02be1316b5506e3b99b7">1e1e215</a>)</li> <li><strong>deps:</strong> update dependency yargs to v15 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/484">#484</a>) (<a href="https://github.com/conventional-changelog/standard-version/commit/35b90c3f24cfb8237e94482fd20997900569193e">35b90c3</a>)</li> <li>use require.resolve for the default preset (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/465">#465</a>) (<a href="https://github.com/conventional-changelog/standard-version/commit/d55737239530f5eee684e9cbf959f7238d609fd4">d557372</a>)</li> <li><strong>deps:</strong> update dependency detect-newline to v3.1.0 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/482">#482</a>) (<a href="https://github.com/conventional-changelog/standard-version/commit/04ab36a12be58915cfa9c60771890e074d1f5685">04ab36a</a>)</li> <li><strong>deps:</strong> update dependency figures to v3.1.0 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/468">#468</a>) (<a href="https://github.com/conventional-changelog/standard-version/commit/63300a935c0079fd03e8e1acc55fd5b1dcea677f">63300a9</a>)</li> <li><strong>deps:</strong> update dependency git-semver-tags to v3.0.1 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/485">#485</a>) (<a href="https://github.com/conventional-changelog/standard-version/commit/9cc188cbb84ee3ae80d5e66f5c54727877313b14">9cc188c</a>)</li> <li><strong>deps:</strong> update dependency yargs to v14.2.1 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/483">#483</a>) (<a href="https://github.com/conventional-changelog/standard-version/commit/dc1fa6170ffe12d4f8b44b70d23688a64d2ad0fb">dc1fa61</a>)</li> <li><strong>deps:</strong> update dependency yargs to v14.2.2 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/488">#488</a>) (<a href="https://github.com/conventional-changelog/standard-version/commit/ecf26b6fc9421a78fb81793c4a932f579f7e9d4a">ecf26b6</a>)</li> </ul> <h3><a href="https://github.com/conventional-changelog/standard-version/compare/v7.0.0...v7.0.1">7.0.1</a> (2019-11-07)</h3> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/conventional-changelog/standard-version/commit/57e4e25d83552d225cf96e1dfc50e6042a2f7f6c"><code>57e4e25</code></a> chore: release 8.0.1 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/611">#611</a>)</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/58105e126fd4392b5b23246a90a8c51a05ffded7"><code>58105e1</code></a> chore: Adds basic issue templates (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/613">#613</a>)</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/9d978ac9d4f64be4c7b9d514712ab3757732d561"><code>9d978ac</code></a> fix: Vulnerability Report GHSL-2020-11101</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/267d78dcb3bef90ad4dcbbafd2e77739efacdf37"><code>267d78d</code></a> chore: stop pinning deps (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/615">#615</a>)</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/da84ec4b44f7d45c3e06a93e24b17ee43b988992"><code>da84ec4</code></a> test(windows): skip mock-git tests for Windows (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/616">#616</a>)</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/871201ff8de6091d4b9b2ce9bf8611a1fc2f7836"><code>871201f</code></a> Merge pull request from GHSA-7xcx-6wjh-7xp2</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/a0f0e813b2be4a2065600a19075fda4d6f331ef8"><code>a0f0e81</code></a> fix(deps): update dependency git-semver-tags to v4 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/589">#589</a>)</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/fd456c995f3f88497fbb912fb8aabb8a42d97dbb"><code>fd456c9</code></a> fix(deps): update dependency conventional-changelog to v3.1.21 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/586">#586</a>)</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/b3b5eedea3eaf062d74d1004a55a0a6b1e3ca6c6"><code>b3b5eed</code></a> fix(deps): update dependency conventional-changelog-conventionalcommits to v4...</li> <li><a href="https://github.com/conventional-changelog/standard-version/commit/d4d2ac2a99c095227118da795e1c9e19d06c9a0a"><code>d4d2ac2</code></a> fix(deps): update dependency conventional-recommended-bump to v6.0.9 (<a href="https://github-redirect.dependabot.com/conventional-changelog/standard-version/issues/588">#588</a>)</li> <li>Additional commits viewable in <a href="https://github.com/conventional-changelog/standard-version/compare/v2.4.0...v8.0.1">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~oss-bot">oss-bot</a>, a new releaser for standard-version since your current version.</p> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

• standard: 8.0.0 => 14.3.4
• standard-version: 2.4.0 => 8.0.1
• tap: 7.1.1 => 14.10.7

As #i18n-notice-box margin is depending on the header's height, I just made a minor tweak.

Before

After