-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update dependency npm to v6.14.6 [SECURITY] #47
Conversation
There were the following issues with this Pull Request
You may need to change the commit messages to comply with the repository contributing guidelines. 🤖 This comment was generated by commitlint[bot]. Please report issues here. Happy coding! |
b873b4d
to
fdc49c8
Compare
There were the following issues with this Pull Request
You may need to change the commit messages to comply with the repository contributing guidelines. 🤖 This comment was generated by commitlint[bot]. Please report issues here. Happy coding! |
fdc49c8
to
2c30701
Compare
There were the following issues with this Pull Request
You may need to change the commit messages to comply with the repository contributing guidelines. 🤖 This comment was generated by commitlint[bot]. Please report issues here. Happy coding! |
2c30701
to
31130ea
Compare
There were the following issues with this Pull Request
You may need to change the commit messages to comply with the repository contributing guidelines. 🤖 This comment was generated by commitlint[bot]. Please report issues here. Happy coding! |
31130ea
to
d50b6c4
Compare
There were the following issues with this Pull Request
You may need to change the commit messages to comply with the repository contributing guidelines. 🤖 This comment was generated by commitlint[bot]. Please report issues here. Happy coding! |
d50b6c4
to
be65b56
Compare
There were the following issues with this Pull Request
You may need to change the commit messages to comply with the repository contributing guidelines. 🤖 This comment was generated by commitlint[bot]. Please report issues here. Happy coding! |
be65b56
to
d4bdb3c
Compare
There were the following issues with this Pull Request
You may need to change the commit messages to comply with the repository contributing guidelines. 🤖 This comment was generated by commitlint[bot]. Please report issues here. Happy coding! |
d4bdb3c
to
8da39a3
Compare
There were the following issues with this Pull Request
You may need to change the commit messages to comply with the repository contributing guidelines. 🤖 This comment was generated by commitlint[bot]. Please report issues here. Happy coding! |
8da39a3
to
32125ec
Compare
There were the following issues with this Pull Request
You may need to change the commit messages to comply with the repository contributing guidelines. 🤖 This comment was generated by commitlint[bot]. Please report issues here. Happy coding! |
5faae0f
to
b498d37
Compare
b498d37
to
9f0af9b
Compare
f72ad2e
to
ec1a391
Compare
ef657c9
to
cd70de6
Compare
dd3b9d3
to
2a5a5e9
Compare
2a5a5e9
to
5a6a551
Compare
This PR contains the following updates:
6.13.6
->6.14.6
GitHub Vulnerability Alerts
CVE-2020-15095
Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs like
<protocol>://[<user>[:<password>]@​]<hostname>[:<port>][:][/]<path>
. The password value is not redacted and is printed to stdout and also to any generated log files.Release Notes
npm/cli
v6.14.6
Compare Source
BUG FIXES
a9857b8f6
chore: remove auth info from logs (@claudiahdz)b7ad77598
#1416 fix: wrongnpm doctor
command result (@vanishcode)DEPENDENCIES
94eca6377
[email protected]
(@claudiahdz)c49b6ae28
#1418[email protected]
(@kemitchell)DOCUMENTATION
2e052984b
#1459
chore(docs): fixed links to cli commands (@claudiahdz)
0ca3509ca
#1283 Update npm-link.md (@peterfich)
3dd429e9a
#1377
Add note about dropped
*
filenames (@maxwellgerber)9a2e2e797
#1429 Fix typo (@seanpoulter)
v6.14.5
Compare Source
BUG FIXES
33ec41f18
#758 fix: relativize file links when inflating shrinkwrap (@jsnajdr)94ed456df
#1162 fix: npm init help output (@mum-never-proud)DEPENDENCIES
5587ac01f
[email protected]
fc5d94c39
fix: removed default timeout07a4d8884
[email protected]
8228d1f2e
[email protected]
e6d208317
[email protected]
v6.14.4
Compare Source
DEPENDENCIES
[email protected]
transitive dep to resolve security issue9c554fd8c
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
136832dca
[email protected]
8bf99b2b5
#1053 deps: updates term-size to use signed binaryd2f08a1bdb
(@rvagg)v6.14.3
Compare Source
DOCUMENTATION
4ad221487
#1020 docs(teams): updated team docs to reflect MFA workflow (@blkdm0n)4a31a4ba2
#1034 docs: cleanup (@ruyadorno)0eac801cd
#1013 docs: fix links to cli commands (@alenros)7d8e5b99c
#755 docs: correction tonpm update -g
behaviour (@johnkennedy9147)DEPENDENCIES
e11167646
[email protected]
c5b97d17d
fix: bumpminimist
dep to resolve security issue (@isaacs)c50d679c6
[email protected]
a2de99ff9
[email protected]
217debeb9
[email protected]
v6.14.2
Compare Source
DOCUMENTATION
f9248c0be
#730 chore(docs): update unpublish docs & policy reference (@nomadtechie, @mikemimik)DEPENDENCIES
909cc3918
[email protected]
(@darcyclarke)5038b1891
fix: regression in old node versions w/ respect to url.URL implmentation9204ffa58
[email protected]
(@isaacs)6bcf0860a
fix: treat non-http/https login urls as invalid0365d39bd
[email protected]
(@isaacs)dab030536
[email protected]
(@rvagg)v6.14.1
Compare Source
303e5c11e
[email protected]
Fixes a regression where scp-style git urls are passed to the WhatWG URL
parser, which does not handle them properly.
(@isaacs)
v6.14.0
Compare Source
FEATURES
30f170877
#731 add support for multiple funding sources (@ljharb & @ruyadorno)BUG FIXES
55916b130
#508 fix: checknpm.config
before accessing its members (@kaiyoma)7d0cd65b2
#733 fix: access grant with unscoped packages (@netanelgilad)28c3d40d6
,0769c5b20
#945, #697 fix: allow new major versions of node to be automatically considered "supported" (@isaacs, @ljharb)DEPENDENCIES
6f39e93
[email protected]
(@darcyclarke)f14b594ee
[email protected]
(@isaacs)77044150b
[email protected]
(@isaacs)1d112461a
[email protected]
(@isaacs)ba8b4fe
fix: always bypass cache when ?write=truea47fed760
[email protected]
3bbf2d6
fix: babel's "loose mode" class transform enbrittles BufferList (@ljharb)DOCUMENTATION
284c1c055
,fbb5f0e50
#729 update lifecycle hooks docs(@seanhealy, @mikemimik)
1c272832d
#787 fix: trademarks typo (@dnicolson)f6ff41776
#936 fix: postinstall example (@ajaymathur)373224b16
#939 fix: bad links in publish docs (@vit100)MISCELLANEOUS
85c79636d
#736 add script to update dist-tags (@mikemimik)v6.13.7
Compare Source
BUG FIXES
7dbb91438
#655
Update CI detection cases
(@isaacs)
DEPENDENCIES
0fb1296c7
[email protected]
(@mikemimik)
c9b69d569
[email protected]
(@mikemimik)
e8dbaf452
[email protected]
(@mikemimik)
Renovate configuration
📅 Schedule: "" (UTC).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.