Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 7, 2023

Bumps hot-shots from 9.0.0 to 10.0.0.

Changelog

Sourced from hot-shots's changelog.

CHANGELOG

10.0 (2023-2-3)

  • @​imyourmanzi In TypeScript, narrow callback parameter types
  • @​bdeitte Remove Node 8 from supported list and add testing of Node 18

9.3.0 (2022-10-23)

9.2.0 (2022-7-30)

  • @​hjr3 Add udpSocketOptions to control how UDP socket is created

9.1.0 (2022-6-20)

  • @​zhyu Append standard Datadog tags from env vars (DD_ENTITY_ID, DD_ENV, DD_SERVICE, and DD_VERSION)
  • @​bdeitte Check if client is undefined before closing to fix error
  • @​bdeitte Start using GitHub Actions for tests and remove now-broken travis file
  • @​bdeitte Update testing dependencies
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [hot-shots](https://github.com/brightcove/hot-shots) from 9.0.0 to 10.0.0.
- [Release notes](https://github.com/brightcove/hot-shots/releases)
- [Changelog](https://github.com/brightcove/hot-shots/blob/master/CHANGES.md)
- [Commits](bdeitte/hot-shots@v9.0.0...v10.0.0)

---
updated-dependencies:
- dependency-name: hot-shots
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 7, 2023
@guardrails
Copy link

guardrails bot commented Feb 7, 2023

⚠️ We detected 22 security issues in this pull request:

Vulnerable Libraries (22)
Severity Details
Medium pkg:npm/browserslist@3.2.8@3.2.8 (t) - no patch available
High pkg:npm/prismjs@1.27.0@1.27.0 (t) - no patch available
Medium pkg:npm/react@17.0.2@17.0.2 (t) - no patch available
Critical pkg:npm/nodemon@2.0.19@2.0.19 (t) - no patch available
High pkg:npm/flat@5.0.2@5.0.2 (t) - no patch available
Medium pkg:npm/history@5.0.0@5.0.0 (t) - no patch available
High pkg:npm/fb-watchman@2.0.1@2.0.1 (t) - no patch available
High pkg:npm/minimatch@3.0.4@3.0.4 (t) upgrade to: 3.0.5
High pkg:npm/shelljs@0.8.5@0.8.5 (t) - no patch available
High pkg:npm/loader-utils@2.0.4@2.0.4 (t) - no patch available
High pkg:npm/accept-language-parser@1.5.0@1.5.0 (t) - no patch available
N/A pkg:npm/debug@2.6.9@2.6.9 (t) upgrade to: 3.1.0
Medium pkg:npm/styled-components@5.3.5@5.3.5 (t) - no patch available
Medium pkg:npm/express@4.18.1@4.18.1 (t) - no patch available
Medium pkg:npm/msgpack5@3.6.1@3.6.1 (t) - no patch available
Medium pkg:npm/node-fetch@2.6.7@2.6.7 (t) - no patch available
Medium pkg:npm/liquidjs@9.22.1@9.22.1 (t) upgrade to: 10.0.0
High pkg:npm/json5@2.2.1@2.2.1 (t) upgrade to: 2.2.2
Medium pkg:npm/got@10.7.0@10.7.0 (t) - no patch available
High pkg:npm/json5@1.0.1@1.0.1 (t) upgrade to: 2.2.2
High pkg:npm/http-cache-semantics@4.1.0@4.1.0 (t) upgrade to: 4.1.1,4.1.1
High pkg:npm/revalidator@0.3.1@0.3.1 (t) - no patch available

More info on how to fix Vulnerable Libraries in JavaScript.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Sep 10, 2024

Superseded by #132.

@dependabot dependabot bot closed this Sep 10, 2024
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/hot-shots-10.0.0 branch September 10, 2024 22:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant