Skip to content
This repository has been archived by the owner on Oct 30, 2024. It is now read-only.

chore(deps): update dependency node-fetch to 2.6.7 [security] - abandoned #668

Open
wants to merge 6 commits into
base: main
Choose a base branch
from

Conversation

svc-secops
Copy link
Contributor

This PR contains the following updates:

Package Change
node-fetch 2.6.1 -> 2.6.7

GitHub Vulnerability Alerts

CVE-2022-0235

node-fetch forwards secure headers such as authorization, www-authenticate, cookie, & cookie2 when redirecting to a untrusted site.


Configuration

📅 Schedule: Branch creation - "" in timezone Etc/UTC, Automerge - "after 8am and before 4pm on tuesday" in timezone Etc/UTC.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


This PR has been generated by Renovate Bot.

@svc-secops svc-secops requested a review from a team as a code owner December 19, 2023 12:37
@svc-secops svc-secops added dependencies Pull requests that update a dependency file vulnerability labels Dec 19, 2023
Copy link

netlify bot commented Dec 19, 2023

Deploy Preview for apollo-monodocs failed.

Name Link
🔨 Latest commit f7818a7
🔍 Latest deploy log https://app.netlify.com/sites/apollo-monodocs/deploys/658357652961880009cfc716

Copy link
Contributor

@Meschreiber Meschreiber left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is breaking during installation in deploy preview. Do not merge as is.

@svc-secops
Copy link
Contributor Author

svc-secops commented Dec 21, 2023

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@svc-secops svc-secops changed the title chore(deps): update dependency node-fetch to 2.6.7 [security] chore(deps): update dependency node-fetch to 2.6.7 [security] - abandoned Sep 12, 2024
@svc-secops
Copy link
Contributor Author

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file vulnerability
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants