Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /react #3509

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 23, 2024

Bumps webpack-dev-middleware from 5.3.3 to 5.3.4.

Release notes

Sourced from webpack-dev-middleware's releases.

v5.3.4

5.3.4 (2024-03-20)

Bug Fixes

  • security: do not allow to read files above (#1779) (189c4ac)
Changelog

Sourced from webpack-dev-middleware's changelog.

5.3.4 (2024-03-20)

Bug Fixes

  • security: do not allow to read files above (#1779) (189c4ac)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) from 5.3.3 to 5.3.4.
- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)
- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md)
- [Commits](webpack/webpack-dev-middleware@v5.3.3...v5.3.4)

---
updated-dependencies:
- dependency-name: webpack-dev-middleware
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 23, 2024
@bestlong bestlong merged commit 6437958 into master Apr 19, 2024
59 of 62 checks passed
@bestlong bestlong deleted the dependabot/npm_and_yarn/react/webpack-dev-middleware-5.3.4 branch April 19, 2024 04:02
shnizmuffin added a commit to shnizmuffin/laradock that referenced this pull request May 3, 2024
commit 0d213ef
Merge: 4b79f94 2d08b4f
Author: Shao Yu-Lung (Allen) <bestlong168@gmail.com>
Date:   Fri Apr 26 22:05:19 2024 +0800

    Merge pull request laradock#3517 from amorZhu/master

    Handle Phalcon installation exceptions in php-worker

commit 2d08b4f
Author: zhushaolong <15210900722@163.com>
Date:   Thu Apr 25 18:13:25 2024 +0800

    Update docker-compose.yml

commit df4ef54
Author: zhushaolong <15210900722@163.com>
Date:   Thu Apr 25 18:12:23 2024 +0800

    Update php-worker Dockerfile

commit 4b79f94
Merge: 0d25eae 29c2b34
Author: Shao Yu-Lung (Allen) <bestlong168@gmail.com>
Date:   Fri Apr 19 12:57:51 2024 +0800

    Merge pull request laradock#3498 from erikn69/patch-23

    Customizable Soketi Server Version

commit 0d25eae
Merge: 38a2672 eee8891
Author: Shao Yu-Lung (Allen) <bestlong168@gmail.com>
Date:   Fri Apr 19 12:39:39 2024 +0800

    Merge pull request laradock#3481 from erikn69/patch-19

    Fix IONCUBE on Php 8.2

commit 38a2672
Merge: 1775f9f 2004928
Author: Shao Yu-Lung (Allen) <bestlong168@gmail.com>
Date:   Fri Apr 19 12:36:59 2024 +0800

    Merge pull request laradock#3488 from da-mask/main

    Adding Github CLI to workspace

commit 1775f9f
Merge: 6437958 d798f33
Author: Shao Yu-Lung (Allen) <bestlong168@gmail.com>
Date:   Fri Apr 19 12:02:49 2024 +0800

    Merge pull request laradock#3511 from laradock/dependabot/npm_and_yarn/react/express-4.19.2

    build(deps): bump express from 4.18.2 to 4.19.2 in /react

commit 6437958
Merge: 93b6aef f6bc0e3
Author: Shao Yu-Lung (Allen) <bestlong168@gmail.com>
Date:   Fri Apr 19 12:02:35 2024 +0800

    Merge pull request laradock#3509 from laradock/dependabot/npm_and_yarn/react/webpack-dev-middleware-5.3.4

    build(deps): bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /react

commit 93b6aef
Merge: 0d3821f d07e5ff
Author: Shao Yu-Lung (Allen) <bestlong168@gmail.com>
Date:   Fri Apr 19 12:02:14 2024 +0800

    Merge pull request laradock#3507 from laradock/dependabot/npm_and_yarn/react/follow-redirects-1.15.6

    build(deps): bump follow-redirects from 1.14.8 to 1.15.6 in /react

commit 0d3821f
Merge: 5816497 0f3affb
Author: Shao Yu-Lung (Allen) <bestlong168@gmail.com>
Date:   Fri Apr 19 12:01:54 2024 +0800

    Merge pull request laradock#3505 from laradock/dependabot/npm_and_yarn/react/ip-2.0.1

    build(deps): bump ip from 2.0.0 to 2.0.1 in /react

commit d798f33
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Thu Mar 28 17:08:09 2024 +0000

    build(deps): bump express from 4.18.2 to 4.19.2 in /react

    Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2.
    - [Release notes](https://github.com/expressjs/express/releases)
    - [Changelog](https://github.com/expressjs/express/blob/master/History.md)
    - [Commits](expressjs/express@4.18.2...4.19.2)

    ---
    updated-dependencies:
    - dependency-name: express
      dependency-type: indirect
    ...

    Signed-off-by: dependabot[bot] <support@github.com>

commit f6bc0e3
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Sat Mar 23 11:31:28 2024 +0000

    build(deps): bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /react

    Bumps [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) from 5.3.3 to 5.3.4.
    - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)
    - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md)
    - [Commits](webpack/webpack-dev-middleware@v5.3.3...v5.3.4)

    ---
    updated-dependencies:
    - dependency-name: webpack-dev-middleware
      dependency-type: indirect
    ...

    Signed-off-by: dependabot[bot] <support@github.com>

commit d07e5ff
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Fri Mar 15 12:58:35 2024 +0000

    build(deps): bump follow-redirects from 1.14.8 to 1.15.6 in /react

    Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.8 to 1.15.6.
    - [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
    - [Commits](follow-redirects/follow-redirects@v1.14.8...v1.15.6)

    ---
    updated-dependencies:
    - dependency-name: follow-redirects
      dependency-type: indirect
    ...

    Signed-off-by: dependabot[bot] <support@github.com>

commit 5816497
Merge: 3efd4eb be5b1cc
Author: Shao Yu-Lung (Allen) <bestlong168@gmail.com>
Date:   Fri Feb 23 00:28:41 2024 +0800

    Merge pull request laradock#3499 from erikn69/patch-24

    Fix MSSQL on PHP 8.0

commit 0f3affb
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Tue Feb 20 22:03:05 2024 +0000

    build(deps): bump ip from 2.0.0 to 2.0.1 in /react

    Bumps [ip](https://github.com/indutny/node-ip) from 2.0.0 to 2.0.1.
    - [Commits](indutny/node-ip@v2.0.0...v2.0.1)

    ---
    updated-dependencies:
    - dependency-name: ip
      dependency-type: indirect
    ...

    Signed-off-by: dependabot[bot] <support@github.com>

commit be5b1cc
Author: erikn69 <erikn_69@hotmail.com>
Date:   Fri Feb 2 15:43:49 2024 -0500

    Fix MSSQL on PHP 8.0

commit 29c2b34
Author: erikn69 <erikn_69@hotmail.com>
Date:   Wed Jan 24 15:17:52 2024 -0500

    Customizable Soketi Server Version

commit 2004928
Author: DanielFloris <daniel@klika.com.au>
Date:   Fri Dec 15 11:45:06 2023 +1100

    updated documentation

commit b194d9a
Author: DanielFloris <daniel@klika.com.au>
Date:   Fri Dec 15 11:17:18 2023 +1100

    gh cli is installing on workspace

commit eee8891
Author: erikn69 <erikn_69@hotmail.com>
Date:   Thu Nov 23 11:44:48 2023 -0500

    Fix IONCUBE on Php 8.2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant