-
Notifications
You must be signed in to change notification settings - Fork 3
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Security] Bump elliptic from 6.5.2 to 6.5.4 #1069
base: master
Are you sure you want to change the base?
Conversation
Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.2 to 6.5.4. **This update includes a security fix.** - [Release notes](https://github.com/indutny/elliptic/releases) - [Commits](indutny/elliptic@v6.5.2...v6.5.4) Signed-off-by: dependabot-preview[bot] <[email protected]>
This pull request is being automatically deployed with Vercel (learn more). 🔍 Inspect: https://vercel.com/manifold/ui/h8hikmvs8 |
One of your CI runs failed on this pull request, so Dependabot won't merge it. Dependabot will still automatically merge this pull request if you amend it and your tests pass. |
Codecov Report
@@ Coverage Diff @@
## master #1069 +/- ##
==========================================
- Coverage 79.46% 78.82% -0.65%
==========================================
Files 81 80 -1
Lines 1534 1577 +43
Branches 394 409 +15
==========================================
+ Hits 1219 1243 +24
- Misses 281 303 +22
+ Partials 34 31 -3
Continue to review full report at Codecov.
|
Bumps elliptic from 6.5.2 to 6.5.4. This update includes a security fix.
Vulnerabilities fixed
Sourced from The GitHub Security Advisory Database.
Commits
43ac7f2
6.5.4f4bc72b
package: bump deps441b742
ec: validate that a point before deriving keyse71b2d9
lib: relint using eslint8421a01
build(deps): bump elliptic from 6.4.1 to 6.5.3 (#231)8647803
6.5.3856fe4d
signature: prevent malleability and overflowsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.If all status checks pass Dependabot will automatically merge this pull request during working hours.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot badge me
will comment on this PR with code to add a "Dependabot enabled" badge to your readmeAdditionally, you can set the following in the
.dependabot/config.yml
file in this repo: