Skip to content

build(deps): bump tough-cookie from 4.1.2 to 4.1.3#37

Open
dependabot[bot] wants to merge 3 commits intomainfrom
dependabot/npm_and_yarn/tough-cookie-4.1.3
Open

build(deps): bump tough-cookie from 4.1.2 to 4.1.3#37
dependabot[bot] wants to merge 3 commits intomainfrom
dependabot/npm_and_yarn/tough-cookie-4.1.3

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Jul 9, 2023 •
edited
Loading

Bumps tough-cookie from 4.1.2 to 4.1.3.

Release notes

Sourced from tough-cookie's releases.

4.1.3

Security fix for Prototype Pollution discovery in #282. This is a minor release, although output from the inspect utility is affected by this change, we felt this change was important enough to be pushed into the next patch.

Commits
  • 4ff4d29 4.1.3 release preparation, update the package and lib/version to 4.1.3. (#284)
  • 12d4747 Prevent prototype pollution in cookie memstore (#283)
  • f06b72d Fix documentation for store.findCookies, missing allowSpecialUseDomain proper...
  • See full diff in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Jesper Terkelsen and others added 3 commits July 9, 2023 00:28
@tradeshiftcicomponents
feat: mark team ownership in tradeshift
127a7de 
- mark team ownership in tradeshift
- setup rebase automation
@celiogafesi @tradeshiftcicomponents
chore: change ownership
1ab78a5
@dependabot
build(deps): bump tough-cookie from 4.1.2 to 4.1.3
6f53b84 
Bumps [tough-cookie](https://github.com/salesforce/tough-cookie) from 4.1.2 to 4.1.3.
- [Release notes](https://github.com/salesforce/tough-cookie/releases)
- [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md)
- [Commits](salesforce/tough-cookie@v4.1.2...v4.1.3)

---
updated-dependencies:
- dependency-name: tough-cookie
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@tradeshiftcicomponents tradeshiftcicomponents force-pushed the main branch 2 times, most recently from 57e0484 to e8549ec Compare July 23, 2023 00:23
@tradeshiftcicomponents tradeshiftcicomponents force-pushed the main branch 2 times, most recently from 44b1e5d to 18ce916 Compare August 6, 2023 00:20
@tradeshiftcicomponents tradeshiftcicomponents force-pushed the main branch 2 times, most recently from 8906e4a to 39019f1 Compare October 8, 2023 00:20
@tradeshiftcicomponents tradeshiftcicomponents force-pushed the main branch 2 times, most recently from cf537ed to 1e337f3 Compare June 16, 2024 00:24
@tradeshiftcicomponents tradeshiftcicomponents force-pushed the main branch 2 times, most recently from d9a0608 to fdfac90 Compare August 4, 2024 00:25
@tradeshiftcicomponents tradeshiftcicomponents force-pushed the main branch 2 times, most recently from ad388e8 to 6f84a12 Compare August 18, 2024 00:25
@tradeshiftcicomponents tradeshiftcicomponents force-pushed the main branch 2 times, most recently from d79f5fb to da30e56 Compare October 6, 2024 00:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@celiogafesi
⚡