Skip to content

Commit

Permalink
Update dependency ansi-regex to v6 (main) (#173229)
Browse files Browse the repository at this point in the history
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [ansi-regex](https://togithub.com/chalk/ansi-regex) | [`^5.0.1` ->
`^6.0.1`](https://renovatebot.com/diffs/npm/ansi-regex/5.0.1/6.0.1) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/ansi-regex/6.0.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/ansi-regex/6.0.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/ansi-regex/5.0.1/6.0.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/ansi-regex/5.0.1/6.0.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>chalk/ansi-regex (ansi-regex)</summary>

###
[`v6.0.1`](https://togithub.com/chalk/ansi-regex/releases/tag/v6.0.1)

[Compare
Source](https://togithub.com/chalk/ansi-regex/compare/v6.0.0...v6.0.1)

##### Fixes

- Fix [ReDoS](https://en.wikipedia.org/wiki/ReDoS) in certain cases
([#&#8203;37](https://togithub.com/chalk/ansi-regex/issues/37))
You are only really affected if you run the regex on untrusted user
input in a server context, which it's very unlikely anyone is doing,
since this regex is mainly used in command-line tools.


[CVE-2021-3807](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3807)

Thank you [@&#8203;yetingli](https://togithub.com/yetingli) for the
patch and reproduction case!

###
[`v6.0.0`](https://togithub.com/chalk/ansi-regex/releases/tag/v6.0.0)

[Compare
Source](https://togithub.com/chalk/ansi-regex/compare/v5.0.1...v6.0.0)

##### Breaking

- Require Node.js 12
[`1b337ad`](https://togithub.com/chalk/ansi-regex/commit/1b337ad)
- This package is now pure ESM. Please [read
this](https://gist.github.com/sindresorhus/a39789f98801d908bbc7ff3ecc99d99c).

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/elastic/kibana).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44Ny4yIiwidXBkYXRlZEluVmVyIjoiMzcuODcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
  • Loading branch information
renovate[bot] authored Dec 13, 2023
1 parent 7978d19 commit fd25bb1
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -882,7 +882,7 @@
"JSONStream": "1.3.5",
"adm-zip": "^0.5.9",
"ajv": "^8.12.0",
"ansi-regex": "^5.0.1",
"ansi-regex": "^6.0.1",
"antlr4ts": "^0.5.0-alpha.3",
"archiver": "^5.3.1",
"async": "^3.2.3",
Expand Down

0 comments on commit fd25bb1

Please sign in to comment.