Skip to content

Commit

Permalink
chore(renovate): patch Update patch (patch) (#65)
Browse files Browse the repository at this point in the history
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[@actions/core](https://github.com/actions/toolkit/tree/main/packages/core)
([source](https://github.com/actions/toolkit)) | [`1.10.0` ->
`1.10.1`](https://renovatebot.com/diffs/npm/@actions%2fcore/1.10.0/1.10.1)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@actions%2fcore/1.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@actions%2fcore/1.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@actions%2fcore/1.10.0/1.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@actions%2fcore/1.10.0/1.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [chai](http://chaijs.com) ([source](https://github.com/chaijs/chai))
| [`4.3.7` ->
`4.3.10`](https://renovatebot.com/diffs/npm/chai/4.3.7/4.3.10) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/chai/4.3.10?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/chai/4.3.10?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/chai/4.3.7/4.3.10?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/chai/4.3.7/4.3.10?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [jsonwebtoken](https://github.com/auth0/node-jsonwebtoken) |
[`9.0.0` ->
`9.0.2`](https://renovatebot.com/diffs/npm/jsonwebtoken/9.0.0/9.0.2) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/jsonwebtoken/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/jsonwebtoken/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/jsonwebtoken/9.0.0/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/jsonwebtoken/9.0.0/9.0.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [prettier](https://prettier.io)
([source](https://github.com/prettier/prettier)) | [`2.8.7` ->
`2.8.8`](https://renovatebot.com/diffs/npm/prettier/2.8.7/2.8.8) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/prettier/2.8.8?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/prettier/2.8.8?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/prettier/2.8.7/2.8.8?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/prettier/2.8.7/2.8.8?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>actions/toolkit (@&#8203;actions/core)</summary>

###
[`v1.10.1`](https://github.com/actions/toolkit/blob/HEAD/packages/core/RELEASES.md#1101)

- Fix error message reference in oidc utils
[#&#8203;1511](https://github.com/actions/toolkit/pull/1511)

</details>

<details>
<summary>chaijs/chai (chai)</summary>

### [`v4.3.10`](https://github.com/chaijs/chai/releases/tag/v4.3.10)

[Compare
Source](https://github.com/chaijs/chai/compare/v4.3.9...v4.3.10)

This release simply bumps all dependencies to their latest non-breaking
versions.

#### What's Changed

- upgrade all dependencies by
[@&#8203;keithamus](https://github.com/keithamus) in
[https://github.com/chaijs/chai/pull/1540](https://github.com/chaijs/chai/pull/1540)

**Full Changelog**:
chaijs/chai@v4.3.9...v4.3.10

### [`v4.3.9`](https://github.com/chaijs/chai/releases/tag/v4.3.9)

[Compare
Source](https://github.com/chaijs/chai/compare/v4.3.8...v4.3.9)

Upgrade dependencies.

This release upgrades dependencies to address
**[CVE-2023-43646](https://www.cve.org/CVERecord?id=CVE-2023-43646)**
where a large function name can cause "catastrophic backtracking" (aka
ReDOS attack) which can cause the test suite to hang.

**Full Changelog**:
chaijs/chai@v4.3.8...v4.3.9

### [`v4.3.8`](https://github.com/chaijs/chai/releases/tag/v4.3.8)

[Compare
Source](https://github.com/chaijs/chai/compare/v4.3.7...v4.3.8)

#### What's Changed

- 4.x.x: Fix link to commit logs on GitHub by
[@&#8203;bugwelle](https://github.com/bugwelle) in
[https://github.com/chaijs/chai/pull/1487](https://github.com/chaijs/chai/pull/1487)
- build(deps): bump socket.io-parser from 4.0.4 to 4.0.5 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/chaijs/chai/pull/1488](https://github.com/chaijs/chai/pull/1488)
- Small typo in test.js by
[@&#8203;mavaddat](https://github.com/mavaddat) in
[https://github.com/chaijs/chai/pull/1459](https://github.com/chaijs/chai/pull/1459)
- docs: specify return type of objDisplay by
[@&#8203;scarf005](https://github.com/scarf005) in
[https://github.com/chaijs/chai/pull/1490](https://github.com/chaijs/chai/pull/1490)
- Update CONTRIBUTING.md by
[@&#8203;matheus-rodrigues00](https://github.com/matheus-rodrigues00)
in
[https://github.com/chaijs/chai/pull/1521](https://github.com/chaijs/chai/pull/1521)
- Fix: update exports.version to current version by
[@&#8203;peanutenthusiast](https://github.com/peanutenthusiast) in
[https://github.com/chaijs/chai/pull/1534](https://github.com/chaijs/chai/pull/1534)

#### New Contributors

- [@&#8203;bugwelle](https://github.com/bugwelle) made their first
contribution in
[https://github.com/chaijs/chai/pull/1487](https://github.com/chaijs/chai/pull/1487)
- [@&#8203;mavaddat](https://github.com/mavaddat) made their first
contribution in
[https://github.com/chaijs/chai/pull/1459](https://github.com/chaijs/chai/pull/1459)
- [@&#8203;scarf005](https://github.com/scarf005) made their first
contribution in
[https://github.com/chaijs/chai/pull/1490](https://github.com/chaijs/chai/pull/1490)
-
[@&#8203;matheus-rodrigues00](https://github.com/matheus-rodrigues00)
made their first contribution in
[https://github.com/chaijs/chai/pull/1521](https://github.com/chaijs/chai/pull/1521)
- [@&#8203;peanutenthusiast](https://github.com/peanutenthusiast) made
their first contribution in
[https://github.com/chaijs/chai/pull/1534](https://github.com/chaijs/chai/pull/1534)

**Full Changelog**:
chaijs/chai@v4.3.7...v4.3.8

</details>

<details>
<summary>auth0/node-jsonwebtoken (jsonwebtoken)</summary>

###
[`v9.0.2`](https://github.com/auth0/node-jsonwebtoken/blob/HEAD/CHANGELOG.md#902---2023-08-30)

[Compare
Source](https://github.com/auth0/node-jsonwebtoken/compare/v9.0.1...v9.0.2)

- security: updating semver to 7.5.4 to resolve CVE-2022-25883, closes
[#&#8203;921](https://github.com/auth0/node-jsonwebtoken/issues/921).
- refactor: reduce library size by using lodash specific dependencies,
closes
[#&#8203;878](https://github.com/auth0/node-jsonwebtoken/issues/878).

###
[`v9.0.1`](https://github.com/auth0/node-jsonwebtoken/blob/HEAD/CHANGELOG.md#901---2023-07-05)

[Compare
Source](https://github.com/auth0/node-jsonwebtoken/compare/v9.0.0...v9.0.1)

-   fix(stubs): allow decode method to be stubbed

</details>

<details>
<summary>prettier/prettier (prettier)</summary>

###
[`v2.8.8`](https://github.com/prettier/prettier/blob/HEAD/CHANGELOG.md#288)

[Compare
Source](https://github.com/prettier/prettier/compare/2.8.7...2.8.8)

This version is a republished version of v2.8.7.
A bad version was accidentally published and [it can't be
unpublished](https://github.com/npm/cli/issues/1686), apologies for
the churn.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/sammcj/github-app-installation-token).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS42Mi4wIiwidXBkYXRlZEluVmVyIjoiMzcuMC4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
  • Loading branch information
sammcj authored Oct 27, 2023
2 parents 02c84e8 + 9913313 commit 957fa68
Show file tree
Hide file tree
Showing 2 changed files with 172 additions and 91 deletions.
Loading

0 comments on commit 957fa68

Please sign in to comment.