deps(monorepo): update auto-merge non-major dependencies #3
Conversation
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Hello, I'm 🤖 Stormie-Bot! The Storm team sincerely appreciates your effort/interest in contributing to this project. A Storm developer will review this change and get back to you ASAP. Please feel free to reach out to the Storm team (contact@stormsoftware.com) if you have any questions/comments.
renovate
bot
force-pushed
the
renovate/auto-merge-non-major-dependencies
branch
2 times, most recently
from
ac0974b to
a86e0a4
Compare
|
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/@dotenvx/dotenvx@1.6.4) |
renovate
bot
force-pushed
the
renovate/auto-merge-non-major-dependencies
branch
21 times, most recently
from
750b04e to
e5daeac
Compare
renovate
bot
force-pushed
the
renovate/auto-merge-non-major-dependencies
branch
3 times, most recently
from
4c87696 to
79c4c2a
Compare
renovate
bot
force-pushed
the
renovate/auto-merge-non-major-dependencies
branch
2 times, most recently
from
2c65946 to
f75759c
Compare
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is an install script?Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts. Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
renovate
bot
force-pushed
the
renovate/auto-merge-non-major-dependencies
branch
10 times, most recently
from
cb2cab8 to
fdcd03f
Compare
renovate
bot
force-pushed
the
renovate/auto-merge-non-major-dependencies
branch
from
fdcd03f to
c6744f7
Compare
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
@SocketSecurity ignore-all |
This PR contains the following updates:
^1.6.4->^1.9.00.7.0->0.8.00.7.0->0.8.00.7.0->0.8.00.3.4->0.3.80.3.4->0.3.80.7.0->0.8.00.7.0->0.8.01.0.44->1.0.860.1.73->0.1.811.1.0->1.2.01.39.0->1.40.00.4.4->0.5.02.4->2.6.02.5.0->2.6.01.5->1.7.10.4.0->0.4.20.4.19->0.4.384.4.6->4.5.162.0->2.1.00.99.17->0.99.181.0.16->1.0.170.10.0->0.11.50.3.31->0.4.50.21.5->0.23.13.5.0->3.6.09.5.0->9.9.00.6->0.6.120.6.8->0.6.120.6.8->0.6.121.0.30->1.0.320.3.28->0.3.300.14.25->0.14.300.5.0->0.6.02->2.0.50.11.0->0.13.0v1.9.0->v1.12.05.25.2->5.27.31.4.0->1.5.01.6.18->1.7.140.4.0->0.4.150.4.0->0.4.150.21.1->0.23.0=0.12.1->=0.15.3=1.0.14->=1.2.10.15.0->0.17.00.4.1->0.4.31.18.0->1.19.01.8.0->1.8.10.12.1->0.12.31.0.14->1.0.151.1.4->1.1.50.3.5->0.3.69.6.0->9.8.0>=9.6.0->>=9.8.00.38.3->0.42.03.3.2->3.3.31.7.0->1.10.01.10->1.10.60.12.2->0.12.73.1->3.1.15.0.7->5.0.101.9.0->1.12.31.34.3->1.36.01.0->1.0.23^1.0->^1.0.2081.0.205->1.0.208^1.0->^1.0.208^1.0->^1.0.1251.0.1->1.0.1250.1.16->0.1.193.4.0->3.9.00.10.0->0.11.00.16->0.17.10.25.0->0.26.30.63.6->0.66.91.0.44->1.0.631.28.2->1.39.31.13.0->1.39.30.8.2->0.8.190.1.37->0.1.400.3.4->0.3.90.3.17->0.3.18