Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump async and htmlhint #44

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 14, 2022

Bumps async to 2.6.4 and updates ancestor dependency htmlhint. These dependencies need to be updated together.

Updates async from 2.6.3 to 2.6.4

Changelog

Sourced from async's changelog.

v2.6.4

  • Fix potential prototype pollution exploit (#1828)
Commits
Maintainer changes

This version was pushed to npm by hargasinski, a new releaser for async since your current version.


Updates htmlhint from 0.10.1 to 1.1.4

Release notes

Sourced from htmlhint's releases.

v1.1.4

1.1.4 (2022-04-11)

Bug Fixes

v1.1.3

1.1.3 (2022-03-28)

Bug Fixes

v1.1.2

1.1.2 (2022-01-27)

Bug Fixes

  • ignore hidden input without label (cab2907), closes #866

v1.1.1

1.1.1 (2022-01-23)

Bug Fixes

v1.1.0

1.1.0 (2021-12-31)

Features

  • attr-lowercase: ignore camelCase SVG attributes (aa16722)

v1.0.0

1.0.0 (2021-11-26)

Features

  • set minimum support to es6 (ed5f895)
  • upgrade to Typescript 4 (472722b)

... (truncated)

Changelog

Sourced from htmlhint's changelog.

1.1.4 (2022-04-11)

Bug Fixes

1.1.3 (2022-03-28)

Bug Fixes

1.1.2 (2022-01-27)

Bug Fixes

  • ignore hidden input without label (cab2907), closes #866

1.1.1 (2022-01-23)

Bug Fixes

1.1.0 (2021-12-31)

Features

  • attr-lowercase: ignore camelCase SVG attributes (aa16722)

1.0.0 (2021-11-26)

Features

  • set minimum support to es6 (ed5f895)
  • upgrade to Typescript 4 (472722b)

BREAKING CHANGES

  • IE11 and older browsers will no longer be supported

0.16.3 (2021-11-24)

... (truncated)

Commits
  • f99b304 chore(release): 1.1.4 [skip ci]
  • 073d661 chore(deps-dev): bump eslint from 8.12.0 to 8.13.0
  • 9c76af7 fix: duplicate text (#981)
  • e84a777 chore(deps): bump ansi-regex from 3.0.0 to 3.0.1
  • e33cb29 chore(deps-dev): bump @​commitlint/config-conventional
  • 9e7b30b chore(deps-dev): bump @​commitlint/cli from 16.1.0 to 16.2.3
  • 732b795 chore(deps-dev): bump prettier from 2.6.1 to 2.6.2
  • 4ad3fe4 chore(release): 1.1.3 [skip ci]
  • 112c0c7 chore(deps-dev): bump @​rollup/plugin-commonjs from 21.0.1 to 21.0.3
  • ca6e21c chore(deps-dev): bump prettier from 2.5.1 to 2.6.1
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 14, 2022
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/async-and-htmlhint-2.6.4 branch 2 times, most recently from 64351f7 to aa35b1a Compare November 14, 2022 11:35
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/async-and-htmlhint-2.6.4 branch 2 times, most recently from e9b1288 to fed66e1 Compare January 20, 2023 07:32
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/async-and-htmlhint-2.6.4 branch 4 times, most recently from fa3c385 to d1fcbcd Compare February 6, 2023 16:30
Bumps [async](https://github.com/caolan/async) to 2.6.4 and updates ancestor dependency [htmlhint](https://github.com/htmlhint/HTMLHint). These dependencies need to be updated together.


Updates `async` from 2.6.3 to 2.6.4
- [Release notes](https://github.com/caolan/async/releases)
- [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md)
- [Commits](caolan/async@v2.6.3...v2.6.4)

Updates `htmlhint` from 0.10.1 to 1.1.4
- [Release notes](https://github.com/htmlhint/HTMLHint/releases)
- [Changelog](https://github.com/htmlhint/HTMLHint/blob/master/CHANGELOG.md)
- [Commits](htmlhint/HTMLHint@0.10.1...v1.1.4)

---
updated-dependencies:
- dependency-name: async
  dependency-type: indirect
- dependency-name: htmlhint
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/async-and-htmlhint-2.6.4 branch from d1fcbcd to 83567fa Compare February 6, 2023 16:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants