Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency ansi-regex to v6 (main) #173229

Merged
merged 1 commit into from
Dec 13, 2023
Merged

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Dec 12, 2023

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
ansi-regex ^5.0.1 -> ^6.0.1 age adoption passing confidence

Release Notes

chalk/ansi-regex (ansi-regex)

v6.0.1

Compare Source

Fixes
  • Fix ReDoS in certain cases (#​37)
    You are only really affected if you run the regex on untrusted user input in a server context, which it's very unlikely anyone is doing, since this regex is mainly used in command-line tools.

CVE-2021-3807

Thank you @​yetingli for the patch and reproduction case!

v6.0.0

Compare Source

Breaking

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added backport:skip This commit does not require backporting release_note:skip Skip the PR/issue when compiling release notes Team:Core Core services & architecture: plugins, logging, config, saved objects, http, ES client, i18n, etc labels Dec 12, 2023
@renovate renovate bot requested a review from a team December 12, 2023 21:58
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-core (Team:Core)

@kibana-ci
Copy link
Collaborator

💚 Build Succeeded

Metrics [docs]

✅ unchanged

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

@pgayvallet
Copy link
Contributor

@elasticmachine run elasticsearch-ci/docs

@pgayvallet pgayvallet enabled auto-merge (squash) December 13, 2023 07:54
@pgayvallet pgayvallet merged commit fd25bb1 into main Dec 13, 2023
44 checks passed
@pgayvallet pgayvallet deleted the renovate/main-ansi-regex branch December 13, 2023 08:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport:skip This commit does not require backporting release_note:skip Skip the PR/issue when compiling release notes Team:Core Core services & architecture: plugins, logging, config, saved objects, http, ES client, i18n, etc v8.13.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants