Compare commits

...
Author SHA1 Message Date
dependabot-preview[bot] 9cb2f418b3 Upgrade to GitHub-native Dependabot 2021-04-29 15:24:08 +00:00
Thomas 7880c28a83 Merge pull request #145 from Thomas-Philippot/dependabot/npm_and_yarn/ssri-6.0.2
[Security] Bump ssri from 6.0.1 to 6.0.2
2021-04-28 14:18:20 +02:00
dependabot-preview[bot] 21da763893 [Security] Bump ssri from 6.0.1 to 6.0.2
Bumps [ssri](https://github.com/npm/ssri) from 6.0.1 to 6.0.2. **This update includes a security fix.**
- [Release notes](https://github.com/npm/ssri/releases)
- [Changelog](https://github.com/npm/ssri/blob/v6.0.2/CHANGELOG.md)
- [Commits](https://github.com/npm/ssri/compare/v6.0.1...v6.0.2)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
2021-04-16 22:20:19 +00:00
2 changed files with 33 additions and 3 deletions
+30
View File
@@ -0,0 +1,30 @@
version: 2
updates:
- package-ecosystem: npm
directory: "/"
schedule:
interval: daily
time: "10:00"
timezone: Europe/Paris
open-pull-requests-limit: 10
ignore:
- dependency-name: nuxt-buefy
versions:
- 0.4.4
- 0.4.5
- 0.4.6
- dependency-name: y18n
versions:
- 4.0.1
- 4.0.2
- dependency-name: nuxt
versions:
- 2.14.12
- 2.15.0
- 2.15.1
- 2.15.3
- dependency-name: "@nuxtjs/axios"
versions:
- 5.12.5
- 5.13.0
- 5.13.1
+3 -3
View File
@@ -14354,9 +14354,9 @@
"integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g=="
},
"ssri": {
"version": "6.0.1",
"resolved": "https://registry.npmjs.org/ssri/-/ssri-6.0.1.tgz",
"integrity": "sha512-3Wge10hNcT1Kur4PDFwEieXSCMCJs/7WvSACcrMYrNp+b8kDL1/0wJch5Ni2WrtwEa2IO8OsVfeKIciKCDx/QA==",
"version": "6.0.2",
"resolved": "https://registry.npmjs.org/ssri/-/ssri-6.0.2.tgz",
"integrity": "sha512-cepbSq/neFK7xB6A50KHN0xHDotYzq58wWCa5LeWqnPrHG8GzfEjO/4O8kpmcGW+oaxkvhEJCWgbgNk4/ZV93Q==",
"requires": {
"figgy-pudding": "^3.5.1"
}