Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security updates RC.2 #13136

Merged
merged 18 commits into from May 20, 2024
Merged

Security updates RC.2 #13136

merged 18 commits into from May 20, 2024

Conversation

nachocodoner
Copy link
Member

OSS-415

As part of the initiative to mantain Meteor secure, we will resolve few security alerts performed by dependabot scanning on each release.

dependabot bot added 6 commits May 9, 2024 14:38
Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.13.17 to 7.24.5.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.24.5/packages/babel-traverse)

---
updated-dependencies:
- dependency-name: "@babel/traverse"
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) from 7.17.0 to 7.23.2.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.23.2/packages/babel-traverse)

---
updated-dependencies:
- dependency-name: "@babel/traverse"
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [minimist](https://github.com/minimistjs/minimist) from 1.2.5 to 1.2.8.
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](minimistjs/minimist@v1.2.5...v1.2.8)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [minimist](https://github.com/minimistjs/minimist) from 1.2.5 to 1.2.8.
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](minimistjs/minimist@v1.2.5...v1.2.8)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [minimist](https://github.com/minimistjs/minimist) from 1.2.0 to 1.2.8.
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](minimistjs/minimist@v1.2.0...v1.2.8)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [minimist](https://github.com/minimistjs/minimist) from 1.2.5 to 1.2.8.
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](minimistjs/minimist@v1.2.5...v1.2.8)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…kages/meteor-babel/babel/traverse-7.23.2

Bump @babel/traverse from 7.17.0 to 7.23.2 in /npm-packages/meteor-babel
…ests/apps/ecmascript-regression/minimist-1.2.8

Bump minimist from 1.2.5 to 1.2.8 in /tools/tests/apps/ecmascript-regression
…ests/apps/git-commit-hash/minimist-1.2.8

Bump minimist from 1.2.5 to 1.2.8 in /tools/tests/apps/git-commit-hash
…ests/apps/modules/minimist-1.2.8

Bump minimist from 1.2.0 to 1.2.8 in /tools/tests/apps/modules
…ests/apps/app-config/minimist-1.2.8

Bump minimist from 1.2.5 to 1.2.8 in /tools/tests/apps/app-config
@StorytellerCZ StorytellerCZ added this to the Release 3.0 milestone May 11, 2024
dependabot bot and others added 6 commits May 13, 2024 13:24
Bumps [minimist](https://github.com/minimistjs/minimist) from 1.2.5 to 1.2.8.
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](minimistjs/minimist@v1.2.5...v1.2.8)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [minimist](https://github.com/minimistjs/minimist) from 1.2.5 to 1.2.8.
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](minimistjs/minimist@v1.2.5...v1.2.8)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [minimist](https://github.com/minimistjs/minimist) from 1.2.5 to 1.2.8.
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](minimistjs/minimist@v1.2.5...v1.2.8)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…ests/apps/git-commit-hash/minimist-1.2.8

Bump minimist from 1.2.5 to 1.2.8 in /tools/tests/apps/git-commit-hash
…ests/apps/ecmascript-regression/minimist-1.2.8

Bump minimist from 1.2.5 to 1.2.8 in /tools/tests/apps/ecmascript-regression
…ests/apps/app-config/minimist-1.2.8

Bump minimist from 1.2.5 to 1.2.8 in /tools/tests/apps/app-config
@denihs denihs changed the base branch from devel to release-2.16 May 14, 2024 14:02
@denihs denihs changed the base branch from release-2.16 to devel May 14, 2024 14:04
@nachocodoner nachocodoner marked this pull request as ready for review May 20, 2024 17:37
@nachocodoner nachocodoner merged commit f3ae3a2 into devel May 20, 2024
6 of 7 checks passed
@nachocodoner nachocodoner deleted the 415-security-updates-rc.2 branch May 20, 2024 17:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants