Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps-dev): bump https-proxy-agent from 2.2.4 to 5.0.1 #3

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Aug 3, 2022

Bumps https-proxy-agent from 2.2.4 to 5.0.1.

Release notes

Sourced from https-proxy-agent's releases.

5.0.1

Patches

  • Remove servername check: 3d2981c25a3ff0363a6a38754cfe25b3bf27e5cc
  • Fix compatibility with Node.js 14: #104

Credits

Huge thanks to @​lpinca for helping!

5.0.0

Major Changes

  • Refactor to TypeScript: #95

4.0.0

Major Changes

  • Set "engines" requirement to node 6.0.0: #82
  • Update dependencies: c846a6849e058b7477b09922d1d044537985533a

Minor Changes

  • Update debug to v4.0.0: #82

Patches

  • Use localhost instead of 127.0.0.1 in tests: 829905f8bcec66a3ae79ee4b99caa603b9d68173

Credits

Huge thanks to @​Krinkle for helping!

3.0.1

Patches

  • Update proxy to v1.0.1: 7ce932a48d8921ec5a3eaa1396b570b236e15814
  • Add GitHub Actions for Node CI: 67f71c6174342d33adac0b1f2e1d8b8c48c954ba
  • Delete .travis.yml: 3b680bab19fa2c57ea184d5fbb092b142d3a573a
  • Replace Travis CI status badge with workflow status badge: #80
  • Use a net.Socket instead of a plain EventEmitter for replaying proxy errors: #83
  • Test CI on "push to master" and "pull request": 11d4677c96dd9863f251eec9976d163ea541e57d

Credits

Huge thanks to @​lpinca for helping!

3.0.0

This release fixes the MitM vulnerability reported via HackerOne. It is a breaking change because Node 4, 5, and 7 are no longer tested in CI (note that Node 6 is still supported).

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [https-proxy-agent](https://github.com/TooTallNate/node-https-proxy-agent) from 2.2.4 to 5.0.1.
- [Release notes](https://github.com/TooTallNate/node-https-proxy-agent/releases)
- [Commits](TooTallNate/proxy-agents@2.2.4...5.0.1)

---
updated-dependencies:
- dependency-name: https-proxy-agent
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 3, 2022
syalioune pushed a commit that referenced this pull request Oct 27, 2022
…cluding-all-existing-or-future-versions

Limit alert rules to project including all existing or future versions
syalioune pushed a commit that referenced this pull request Oct 27, 2022
commit c5c5ab3
Merge: 0bf649a 622f275
Author: Niklas <[email protected]>
Date:   Tue Oct 18 18:57:26 2022 +0200

    Merge pull request DependencyTrack#290 from nscuro/revert-272

commit 622f275
Author: nscuro <[email protected]>
Date:   Tue Oct 18 18:12:27 2022 +0200

    Revert "Merge pull request DependencyTrack#272 from rbt-mm/master-show-hierarchical-view-in-project-list"

    This reverts commit 58b8940, reversing
    changes made to 3a64bbc.

    Signed-off-by: nscuro <[email protected]>

commit 0bf649a
Merge: 58b8940 b03b122
Author: Niklas <[email protected]>
Date:   Tue Oct 18 17:51:34 2022 +0200

    Merge pull request DependencyTrack#274 from rbt-mm/master-limit-alert-rules-to-project-including-all-existing-or-future-versions

    Include a projects children in an alert rules limitations

commit 58b8940
Merge: 3a64bbc abfe53c
Author: Niklas <[email protected]>
Date:   Tue Oct 18 17:46:59 2022 +0200

    Merge pull request DependencyTrack#272 from rbt-mm/master-show-hierarchical-view-in-project-list

    Show hierarchical view in project list

commit abfe53c
Author: rbt-mm <[email protected]>
Date:   Tue Oct 18 17:05:21 2022 +0200

    Hide detail view button when no active child

    Signed-off-by: RBickert <[email protected]>

    Co-authored-by: Niklas <[email protected]>
    Signed-off-by: RBickert <[email protected]>

commit dbb34d3
Author: RBickert <[email protected]>
Date:   Tue Oct 4 17:56:55 2022 +0200

    Change prototype method in project list

    Do not access Object.prototype method 'hasOwnProperty' from target
    object.
    Only show project name in create project modal, if a project does not
    have a version

    Signed-off-by: RBickert <[email protected]>

commit a79d535
Author: RBickert <[email protected]>
Date:   Tue Oct 4 17:03:10 2022 +0200

    Revert "Update ci-build.yaml"

    This reverts commit aeccadc.

    Signed-off-by: RBickert <[email protected]>

commit d7b8d69
Author: RBickert <[email protected]>
Date:   Fri Sep 30 16:27:18 2022 +0200

    Filter detail view parents in backend

    Available parents in a project detail view are now filtered in the
    backend instead of the UI

    Signed-off-by: RBickert <[email protected]>

commit 87a9d8c
Author: RBickert <[email protected]>
Date:   Thu Sep 29 16:37:23 2022 +0200

    Fix switching parent to inactive

    A parent project cannot be set to inactive if any of his children are
    set to active

    Signed-off-by: RBickert <[email protected]>

commit 11c7eab
Author: RBickert <[email protected]>
Date:   Fri Sep 23 16:28:37 2022 +0200

    Add hierarchical view in project list

    Added CSwitch in project list to switch between current flat view
    (default) and a new hierarchical view (shows root projects and their
    children in the detail view of a row).

    Project detail view only shows viable projects as selectable parent.

    Hierarchical project list shows inactive projects for children and
    children are sortable.

    Signed-off-by: RBickert <[email protected]>

commit ee96685
Author: RBickert <[email protected]>
Date:   Tue Sep 20 17:03:51 2022 +0200

    Add persistent selection of parent to detail view

    Send selected parent in project detail view via API call to backend to
    create a persistent parent-child-relationship.

    Signed-off-by: RBickert <[email protected]>

commit b05a11c
Author: RBickert <[email protected]>
Date:   Mon Sep 19 16:53:00 2022 +0200

    Add parent in project creation and detail view

    Display list of every project in `Create Project` and `View
    Project` to select a parent project for the new or current project.

    Send selected parent in project creation via API call to backend to
    create a persistent parent-child-relationship.

    Signed-off-by: RBickert <[email protected]>

commit 053f6fa
Author: rbt-mm <[email protected]>
Date:   Wed Sep 28 13:24:38 2022 +0200

    Update ci-build.yaml

    Workflow now starts on every pull request, if the branch name contains 'master' in it.

    Signed-off-by: RBickert <[email protected]>

commit b03b122
Author: RBickert <[email protected]>
Date:   Tue Oct 18 13:11:23 2022 +0200

    Make inclusion of children optional

    Added a switch in the alerts view which optionally includes every active
    child of the subscribed projects in the notification rule.

    Signed-off-by: RBickert <[email protected]>

commit 298c5be
Merge: 54e7c51 3a64bbc
Author: rbt-mm <[email protected]>
Date:   Tue Oct 18 13:01:18 2022 +0200

    Merge branch 'DependencyTrack:master' into master-limit-alert-rules-to-project-including-all-existing-or-future-versions

commit 3a64bbc
Merge: 8a1239c 9d78a3b
Author: Niklas <[email protected]>
Date:   Tue Oct 18 10:06:35 2022 +0200

    Merge pull request DependencyTrack#287 from DependencyTrack/dependabot/docker/docker/nginxinc/nginx-unprivileged-5af0906

    build(deps): bump nginxinc/nginx-unprivileged from `31ac9ab` to `5af0906` in /docker

commit 8a1239c
Merge: 21cd1f0 0610ba0
Author: Niklas <[email protected]>
Date:   Tue Oct 18 10:06:26 2022 +0200

    Merge pull request DependencyTrack#288 from DependencyTrack/dependabot/github_actions/docker/setup-buildx-action-2.2.0

    build(deps): bump docker/setup-buildx-action from 2.1.0 to 2.2.0

commit 0610ba0
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Tue Oct 18 01:33:58 2022 +0000

    build(deps): bump docker/setup-buildx-action from 2.1.0 to 2.2.0

    Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2.1.0 to 2.2.0.
    - [Release notes](https://github.com/docker/setup-buildx-action/releases)
    - [Commits](docker/setup-buildx-action@v2.1.0...v2.2.0)

    ---
    updated-dependencies:
    - dependency-name: docker/setup-buildx-action
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...

    Signed-off-by: dependabot[bot] <[email protected]>

commit 9d78a3b
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Tue Oct 18 01:33:57 2022 +0000

    build(deps): bump nginxinc/nginx-unprivileged in /docker

    Bumps nginxinc/nginx-unprivileged from `31ac9ab` to `5af0906`.

    ---
    updated-dependencies:
    - dependency-name: nginxinc/nginx-unprivileged
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...

    Signed-off-by: dependabot[bot] <[email protected]>

commit 54e7c51
Merge: 1eaefe5 c80f0ea
Author: rbt-mm <[email protected]>
Date:   Wed Oct 5 14:09:32 2022 +0200

    Merge pull request #3 from rbt-mm/rbt-limit-alert-rules-to-project-including-all-existing-or-future-versions

    Limit alert rules to project including all existing or future versions

commit c80f0ea
Author: RBickert <[email protected]>
Date:   Wed Oct 5 10:53:17 2022 +0200

    Add new info in alerts view

    Change "Limit to projects" to "Limit to projects (including all of their
    active children)" to indicate that every child of a subscribed project
    will also be included in the notification rule.

    Signed-off-by: RBickert <[email protected]>

Signed-off-by: Sahiba Mittal <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants