Skip to content

chore(deps): update dependency semver-regex to v4#478

Closed
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/semver-regex-4.x
Closed

chore(deps): update dependency semver-regex to v4#478
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/semver-regex-4.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jul 25, 2022

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
semver-regex 3.1.4 -> 4.0.5 age adoption passing confidence

Release Notes

sindresorhus/semver-regex

v4.0.5

Compare Source

Tip: If you use it in a server context, it's a good idea to give the regex a timeout.

v4.0.4

Compare Source

Tip: If you use it in a server context, it's a good idea to give the regex a timeout.

v4.0.3

Compare Source

  • Fix ReDoS vulnerability d8ba39a
    • This only affects you if you run the regex on untrusted user input in a server context.
    • Also back-ported to v3 in 3.1.4.
    • CVE pending

v4.0.2

Compare Source

  • No changes. Just fixing a npm dist tag.

v4.0.1

Compare Source

  • Fix ReDoS vulnerability 11c6624
    • This only affects you if you run the regex on untrusted user input in a server context.
    • Also back-ported to v3 in 3.1.3.
    • CVE-2021-3795

v4.0.0

Compare Source

Breaking

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by Mend Renovate. View repository job log here.

@vercel
Copy link

vercel bot commented Jul 25, 2022

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Updated
react-stick ✅ Ready (Inspect) Visit Preview Jul 29, 2022 at 10:51PM (UTC)

@codecov-commenter
Copy link

codecov-commenter commented Jul 27, 2022

Codecov Report

Merging #478 (778ae58) into master (de83389) will decrease coverage by 1.76%.
The diff coverage is 97.72%.

@@            Coverage Diff             @@
##           master     #478      +/-   ##
==========================================
- Coverage   96.09%   94.33%   -1.77%     
==========================================
  Files          13       13              
  Lines         282      353      +71     
  Branches        0      109     +109     
==========================================
+ Hits          271      333      +62     
- Misses         11       19       +8     
- Partials        0        1       +1     
Impacted Files Coverage Δ
src/defaultPosition.ts 100.00% <ø> (ø)
src/utils/fit.ts 100.00% <ø> (ø)
src/utils/getDefaultAlign.ts 100.00% <ø> (ø)
src/utils/getModifiers.ts 100.00% <ø> (ø)
src/utils/uniqueId.ts 100.00% <ø> (ø)
src/StickPortal.tsx 86.73% <94.73%> (ø)
src/Stick.tsx 95.87% <100.00%> (ø)
src/StickContext.ts 100.00% <100.00%> (ø)
src/StickInline.tsx 100.00% <100.00%> (ø)
src/StickNode.tsx 100.00% <100.00%> (ø)
... and 12 more

Help us with your feedback. Take ten seconds to tell us how you rate us.

@renovate
Copy link
Contributor Author

renovate bot commented Jul 30, 2022

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 4.x releases. But if you manually upgrade to 4.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@renovate renovate bot deleted the renovate/semver-regex-4.x branch July 30, 2022 10:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants