Skip to content
This repository was archived by the owner on Jun 29, 2022. It is now read-only.

chore(deps): update dependency trim to 0.0.3 [security] #329

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 18, 2022

Mend Renovate

This PR contains the following updates:

Package Change
trim 0.0.1 -> 0.0.3

GitHub Vulnerability Alerts

CVE-2020-7753

All versions of package trim lower than 0.0.3 are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label May 18, 2022
@renovate renovate bot force-pushed the renovate/npm-trim-vulnerability branch 7 times, most recently from 87c8365 to ecd183c Compare May 26, 2022 11:58
@renovate renovate bot force-pushed the renovate/npm-trim-vulnerability branch 14 times, most recently from 69ae28f to 2b8251b Compare June 1, 2022 20:24
@renovate renovate bot force-pushed the renovate/npm-trim-vulnerability branch 8 times, most recently from 1bb2b3d to 10fc10e Compare June 11, 2022 11:32
@renovate renovate bot force-pushed the renovate/npm-trim-vulnerability branch from 10fc10e to 42ef175 Compare June 12, 2022 12:49
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant