Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: mitre/vulcan
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.1.6
Choose a base ref
...
head repository: mitre/vulcan
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.1.7
Choose a head ref
  • 14 commits
  • 8 files changed
  • 7 contributors

Commits on Nov 9, 2023

  1. Added github actions status badge

    Signed-off-by: Vanessa Fotso <[email protected]>
    vanessuniq committed Nov 9, 2023
    Configuration menu
    Copy the full SHA
    b5db09c View commit details
    Browse the repository at this point in the history

Commits on Nov 10, 2023

  1. Bump axios from 0.21.4 to 1.6.0

    Bumps [axios](https://github.com/axios/axios) from 0.21.4 to 1.6.0.
    - [Release notes](https://github.com/axios/axios/releases)
    - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
    - [Commits](axios/axios@v0.21.4...v1.6.0)
    
    ---
    updated-dependencies:
    - dependency-name: axios
      dependency-type: direct:production
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored Nov 10, 2023
    Configuration menu
    Copy the full SHA
    83f757e View commit details
    Browse the repository at this point in the history
  2. Bump axios from 0.21.4 to 1.6.0 (#617)

    Bumps [axios](https://github.com/axios/axios) from 0.21.4 to 1.6.0.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/axios/axios/releases">axios's
    releases</a>.</em></p>
    <blockquote>
    <h2>Release v1.6.0</h2>
    <h2>Release notes:</h2>
    <h3>Bug Fixes</h3>
    <ul>
    <li><strong>CSRF:</strong> fixed CSRF vulnerability CVE-2023-45857 (<a
    href="https://redirect.github.com/axios/axios/issues/6028">#6028</a>)
    (<a
    href="https://github.com/axios/axios/commit/96ee232bd3ee4de2e657333d4d2191cd389e14d0">96ee232</a>)</li>
    <li><strong>dns:</strong> fixed lookup function decorator to work
    properly in node v20; (<a
    href="https://redirect.github.com/axios/axios/issues/6011">#6011</a>)
    (<a
    href="https://github.com/axios/axios/commit/5aaff532a6b820bb9ab6a8cd0f77131b47e2adb8">5aaff53</a>)</li>
    <li><strong>types:</strong> fix AxiosHeaders types; (<a
    href="https://redirect.github.com/axios/axios/issues/5931">#5931</a>)
    (<a
    href="https://github.com/axios/axios/commit/a1c8ad008b3c13d53e135bbd0862587fb9d3fc09">a1c8ad0</a>)</li>
    </ul>
    <h3>PRs</h3>
    <ul>
    <li>CVE 2023 45857 ( <a
    href="https://api.github.com/repos/axios/axios/pulls/6028">#6028</a>
    )</li>
    </ul>
    <pre><code>
    ⚠️ Critical vulnerability fix. See
    https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459
    </code></pre>
    <h3>Contributors to this release</h3>
    <ul>
    <li><!-- raw HTML omitted --> <a
    href="https://github.com/DigitalBrainJS" title="+449/-114
    ([#6032](axios/axios#6032)
    [#6021](axios/axios#6021)
    [#6011](axios/axios#6011)
    [#5932](axios/axios#5932)
    [#5931](axios/axios#5931) )">Dmitriy
    Mozgovoy</a></li>
    <li><!-- raw HTML omitted --> <a
    href="https://github.com/valentin-panov" title="+4/-4
    ([#6028](axios/axios#6028) )">Valentin
    Panov</a></li>
    <li><!-- raw HTML omitted --> <a href="https://github.com/therealrinku"
    title="+1/-1 ([#5889](axios/axios#5889)
    )">Rinku Chaudhari</a></li>
    </ul>
    <h2>Release v1.5.1</h2>
    <h2>Release notes:</h2>
    <h3>Bug Fixes</h3>
    <ul>
    <li><strong>adapters:</strong> improved adapters loading logic to have
    clear error messages; (<a
    href="https://redirect.github.com/axios/axios/issues/5919">#5919</a>)
    (<a
    href="https://github.com/axios/axios/commit/e4107797a7a1376f6209fbecfbbce73d3faa7859">e410779</a>)</li>
    <li><strong>formdata:</strong> fixed automatic addition of the
    <code>Content-Type</code> header for FormData in non-browser
    environments; (<a
    href="https://redirect.github.com/axios/axios/issues/5917">#5917</a>)
    (<a
    href="https://github.com/axios/axios/commit/bc9af51b1886d1b3529617702f2a21a6c0ed5d92">bc9af51</a>)</li>
    <li><strong>headers:</strong> allow <code>content-encoding</code> header
    to handle case-insensitive values (<a
    href="https://redirect.github.com/axios/axios/issues/5890">#5890</a>)
    (<a
    href="https://redirect.github.com/axios/axios/issues/5892">#5892</a>)
    (<a
    href="https://github.com/axios/axios/commit/4c89f25196525e90a6e75eda9cb31ae0a2e18acd">4c89f25</a>)</li>
    <li><strong>types:</strong> removed duplicated code (<a
    href="https://github.com/axios/axios/commit/9e6205630e1c9cf863adf141c0edb9e6d8d4b149">9e62056</a>)</li>
    </ul>
    <h3>Contributors to this release</h3>
    <ul>
    <li><!-- raw HTML omitted --> <a
    href="https://github.com/DigitalBrainJS" title="+89/-18
    ([#5919](axios/axios#5919)
    [#5917](axios/axios#5917) )">Dmitriy
    Mozgovoy</a></li>
    <li><!-- raw HTML omitted --> <a href="https://github.com/DavidJDallas"
    title="+11/-5 ()">David Dallas</a></li>
    <li><!-- raw HTML omitted --> <a href="https://github.com/fb-sean"
    title="+2/-8 ()">Sean Sattler</a></li>
    <li><!-- raw HTML omitted --> <a href="https://github.com/0o001"
    title="+4/-4 ()">Mustafa Ateş Uzun</a></li>
    <li><!-- raw HTML omitted --> <a
    href="https://github.com/sfc-gh-pmotacki" title="+2/-1
    ([#5892](axios/axios#5892) )">Przemyslaw
    Motacki</a></li>
    <li><!-- raw HTML omitted --> <a href="https://github.com/Cadienvan"
    title="+1/-1 ()">Michael Di Prisco</a></li>
    </ul>
    <h2>Release v1.5.0</h2>
    <h2>Release notes:</h2>
    <h3>Bug Fixes</h3>
    <ul>
    <li><strong>adapter:</strong> make adapter loading error more clear by
    using platform-specific adapters explicitly (<a
    href="https://redirect.github.com/axios/axios/issues/5837">#5837</a>)
    (<a
    href="https://github.com/axios/axios/commit/9a414bb6c81796a95c6c7fe668637825458e8b6d">9a414bb</a>)</li>
    <li><strong>dns:</strong> fixed <code>cacheable-lookup</code>
    integration; (<a
    href="https://redirect.github.com/axios/axios/issues/5836">#5836</a>)
    (<a
    href="https://github.com/axios/axios/commit/b3e327dcc9277bdce34c7ef57beedf644b00d628">b3e327d</a>)</li>
    <li><strong>headers:</strong> added support for setting header names
    that overlap with class methods; (<a
    href="https://redirect.github.com/axios/axios/issues/5831">#5831</a>)
    (<a
    href="https://github.com/axios/axios/commit/d8b4ca0ea5f2f05efa4edfe1e7684593f9f68273">d8b4ca0</a>)</li>
    <li><strong>headers:</strong> fixed common Content-Type header merging;
    (<a
    href="https://redirect.github.com/axios/axios/issues/5832">#5832</a>)
    (<a
    href="https://github.com/axios/axios/commit/8fda2766b1e6bcb72c3fabc146223083ef13ce17">8fda276</a>)</li>
    </ul>
    <h3>Features</h3>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's
    changelog</a>.</em></p>
    <blockquote>
    <h1><a
    href="https://github.com/axios/axios/compare/v1.5.1...v1.6.0">1.6.0</a>
    (2023-10-26)</h1>
    <h3>Bug Fixes</h3>
    <ul>
    <li><strong>CSRF:</strong> fixed CSRF vulnerability CVE-2023-45857 (<a
    href="https://redirect.github.com/axios/axios/issues/6028">#6028</a>)
    (<a
    href="https://github.com/axios/axios/commit/96ee232bd3ee4de2e657333d4d2191cd389e14d0">96ee232</a>)</li>
    <li><strong>dns:</strong> fixed lookup function decorator to work
    properly in node v20; (<a
    href="https://redirect.github.com/axios/axios/issues/6011">#6011</a>)
    (<a
    href="https://github.com/axios/axios/commit/5aaff532a6b820bb9ab6a8cd0f77131b47e2adb8">5aaff53</a>)</li>
    <li><strong>types:</strong> fix AxiosHeaders types; (<a
    href="https://redirect.github.com/axios/axios/issues/5931">#5931</a>)
    (<a
    href="https://github.com/axios/axios/commit/a1c8ad008b3c13d53e135bbd0862587fb9d3fc09">a1c8ad0</a>)</li>
    </ul>
    <h3>PRs</h3>
    <ul>
    <li>CVE 2023 45857 ( <a
    href="https://api.github.com/repos/axios/axios/pulls/6028">#6028</a>
    )</li>
    </ul>
    <pre><code>
    ⚠️ Critical vulnerability fix. See
    https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459
    </code></pre>
    <h3>Contributors to this release</h3>
    <ul>
    <li><!-- raw HTML omitted --> <a
    href="https://github.com/DigitalBrainJS" title="+449/-114
    ([#6032](axios/axios#6032)
    [#6021](axios/axios#6021)
    [#6011](axios/axios#6011)
    [#5932](axios/axios#5932)
    [#5931](axios/axios#5931) )">Dmitriy
    Mozgovoy</a></li>
    <li><!-- raw HTML omitted --> <a
    href="https://github.com/valentin-panov" title="+4/-4
    ([#6028](axios/axios#6028) )">Valentin
    Panov</a></li>
    <li><!-- raw HTML omitted --> <a href="https://github.com/therealrinku"
    title="+1/-1 ([#5889](axios/axios#5889)
    )">Rinku Chaudhari</a></li>
    </ul>
    <h2><a
    href="https://github.com/axios/axios/compare/v1.5.0...v1.5.1">1.5.1</a>
    (2023-09-26)</h2>
    <h3>Bug Fixes</h3>
    <ul>
    <li><strong>adapters:</strong> improved adapters loading logic to have
    clear error messages; (<a
    href="https://redirect.github.com/axios/axios/issues/5919">#5919</a>)
    (<a
    href="https://github.com/axios/axios/commit/e4107797a7a1376f6209fbecfbbce73d3faa7859">e410779</a>)</li>
    <li><strong>formdata:</strong> fixed automatic addition of the
    <code>Content-Type</code> header for FormData in non-browser
    environments; (<a
    href="https://redirect.github.com/axios/axios/issues/5917">#5917</a>)
    (<a
    href="https://github.com/axios/axios/commit/bc9af51b1886d1b3529617702f2a21a6c0ed5d92">bc9af51</a>)</li>
    <li><strong>headers:</strong> allow <code>content-encoding</code> header
    to handle case-insensitive values (<a
    href="https://redirect.github.com/axios/axios/issues/5890">#5890</a>)
    (<a
    href="https://redirect.github.com/axios/axios/issues/5892">#5892</a>)
    (<a
    href="https://github.com/axios/axios/commit/4c89f25196525e90a6e75eda9cb31ae0a2e18acd">4c89f25</a>)</li>
    <li><strong>types:</strong> removed duplicated code (<a
    href="https://github.com/axios/axios/commit/9e6205630e1c9cf863adf141c0edb9e6d8d4b149">9e62056</a>)</li>
    </ul>
    <h3>Contributors to this release</h3>
    <ul>
    <li><!-- raw HTML omitted --> <a
    href="https://github.com/DigitalBrainJS" title="+89/-18
    ([#5919](axios/axios#5919)
    [#5917](axios/axios#5917) )">Dmitriy
    Mozgovoy</a></li>
    <li><!-- raw HTML omitted --> <a href="https://github.com/DavidJDallas"
    title="+11/-5 ()">David Dallas</a></li>
    <li><!-- raw HTML omitted --> <a href="https://github.com/fb-sean"
    title="+2/-8 ()">Sean Sattler</a></li>
    <li><!-- raw HTML omitted --> <a href="https://github.com/0o001"
    title="+4/-4 ()">Mustafa Ateş Uzun</a></li>
    <li><!-- raw HTML omitted --> <a
    href="https://github.com/sfc-gh-pmotacki" title="+2/-1
    ([#5892](axios/axios#5892) )">Przemyslaw
    Motacki</a></li>
    <li><!-- raw HTML omitted --> <a href="https://github.com/Cadienvan"
    title="+1/-1 ()">Michael Di Prisco</a></li>
    </ul>
    <h3>PRs</h3>
    <ul>
    <li>CVE 2023 45857 ( <a
    href="https://api.github.com/repos/axios/axios/pulls/6028">#6028</a>
    )</li>
    </ul>
    <pre><code>
    ⚠️ Critical vulnerability fix. See
    https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459
    </code></pre>
    <h1><a
    href="https://github.com/axios/axios/compare/v1.4.0...v1.5.0">1.5.0</a>
    (2023-08-26)</h1>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/axios/axios/commit/f7adacdbaa569281253c8cfc623ad3f4dc909c60"><code>f7adacd</code></a>
    chore(release): v1.6.0 (<a
    href="https://redirect.github.com/axios/axios/issues/6031">#6031</a>)</li>
    <li><a
    href="https://github.com/axios/axios/commit/9917e67cbb6c157382863bad8c741de58e3f3c2b"><code>9917e67</code></a>
    chore(ci): fix release-it arg; (<a
    href="https://redirect.github.com/axios/axios/issues/6032">#6032</a>)</li>
    <li><a
    href="https://github.com/axios/axios/commit/96ee232bd3ee4de2e657333d4d2191cd389e14d0"><code>96ee232</code></a>
    fix(CSRF): fixed CSRF vulnerability CVE-2023-45857 (<a
    href="https://redirect.github.com/axios/axios/issues/6028">#6028</a>)</li>
    <li><a
    href="https://github.com/axios/axios/commit/7d45ab2e2ad6e59f5475e39afd4b286b1f393fc0"><code>7d45ab2</code></a>
    chore(tests): fixed tests to pass in node v19 and v20 with
    <code>keep-alive</code> enabl...</li>
    <li><a
    href="https://github.com/axios/axios/commit/5aaff532a6b820bb9ab6a8cd0f77131b47e2adb8"><code>5aaff53</code></a>
    fix(dns): fixed lookup function decorator to work properly in node v20;
    (<a
    href="https://redirect.github.com/axios/axios/issues/6011">#6011</a>)</li>
    <li><a
    href="https://github.com/axios/axios/commit/a48a63ad823fc20e5a6a705f05f09842ca49f48c"><code>a48a63a</code></a>
    chore(docs): added AxiosHeaders docs; (<a
    href="https://redirect.github.com/axios/axios/issues/5932">#5932</a>)</li>
    <li><a
    href="https://github.com/axios/axios/commit/a1c8ad008b3c13d53e135bbd0862587fb9d3fc09"><code>a1c8ad0</code></a>
    fix(types): fix AxiosHeaders types; (<a
    href="https://redirect.github.com/axios/axios/issues/5931">#5931</a>)</li>
    <li><a
    href="https://github.com/axios/axios/commit/2ac731d60545ba5c4202c25fd2e732ddd8297d82"><code>2ac731d</code></a>
    chore(docs): update readme.md (<a
    href="https://redirect.github.com/axios/axios/issues/5889">#5889</a>)</li>
    <li><a
    href="https://github.com/axios/axios/commit/88fb52b5fad7aabab0532e7ad086c5f1b0178905"><code>88fb52b</code></a>
    chore(release): v1.5.1 (<a
    href="https://redirect.github.com/axios/axios/issues/5920">#5920</a>)</li>
    <li><a
    href="https://github.com/axios/axios/commit/e4107797a7a1376f6209fbecfbbce73d3faa7859"><code>e410779</code></a>
    fix(adapters): improved adapters loading logic to have clear error
    messages; ...</li>
    <li>Additional commits viewable in <a
    href="https://github.com/axios/axios/compare/v0.21.4...v1.6.0">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=axios&package-manager=npm_and_yarn&previous-version=0.21.4&new-version=1.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot merge` will merge this PR after your CI passes on it
    - `@dependabot squash and merge` will squash and merge this PR after
    your CI passes on it
    - `@dependabot cancel merge` will cancel a previously requested merge
    and block automerging
    - `@dependabot reopen` will reopen this PR if it is closed
    - `@dependabot close` will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the
    [Security Alerts page](https://github.com/mitre/vulcan/network/alerts).
    
    </details>
    github-actions[bot] authored Nov 10, 2023
    Configuration menu
    Copy the full SHA
    1b3fe0b View commit details
    Browse the repository at this point in the history

Commits on Dec 13, 2023

  1. Create dependabot.yml

    aaronlippold authored Dec 13, 2023
    Configuration menu
    Copy the full SHA
    62d87ee View commit details
    Browse the repository at this point in the history

Commits on Jan 11, 2024

  1. Bump the npm_and_yarn group across 1 directories with 1 update

    Bumps the npm_and_yarn group with 1 update in the /. directory: [follow-redirects](https://github.com/follow-redirects/follow-redirects).
    
    
    Updates `follow-redirects` from 1.15.3 to 1.15.4
    - [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
    - [Commits](follow-redirects/follow-redirects@v1.15.3...v1.15.4)
    
    ---
    updated-dependencies:
    - dependency-name: follow-redirects
      dependency-type: indirect
      dependency-group: npm_and_yarn-security-group
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored Jan 11, 2024
    Configuration menu
    Copy the full SHA
    9a8448f View commit details
    Browse the repository at this point in the history
  2. Bump the npm_and_yarn group across 1 directories with 1 update (#619)

    Bumps the npm_and_yarn group with 1 update in the /. directory:
    [follow-redirects](https://github.com/follow-redirects/follow-redirects).
    
    Updates `follow-redirects` from 1.15.3 to 1.15.4
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/follow-redirects/follow-redirects/commit/65858205e59f1e23c9bf173348a7a7cbb8ac47f5"><code>6585820</code></a>
    Release version 1.15.4 of the npm package.</li>
    <li><a
    href="https://github.com/follow-redirects/follow-redirects/commit/7a6567e16dfa9ad18a70bfe91784c28653fbf19d"><code>7a6567e</code></a>
    Disallow bracketed hostnames.</li>
    <li><a
    href="https://github.com/follow-redirects/follow-redirects/commit/05629af696588b90d64e738bc2e809a97a5f92fc"><code>05629af</code></a>
    Prefer native URL instead of deprecated url.parse.</li>
    <li><a
    href="https://github.com/follow-redirects/follow-redirects/commit/1cba8e85fa73f563a439fe460cf028688e4358df"><code>1cba8e8</code></a>
    Prefer native URL instead of legacy url.resolve.</li>
    <li><a
    href="https://github.com/follow-redirects/follow-redirects/commit/72bc2a4229bc18dc9fbd57c60579713e6264cb92"><code>72bc2a4</code></a>
    Simplify _processResponse error handling.</li>
    <li><a
    href="https://github.com/follow-redirects/follow-redirects/commit/3d42aecdca39b144a0a2f27ea134b4cf67dd796a"><code>3d42aec</code></a>
    Add bracket tests.</li>
    <li><a
    href="https://github.com/follow-redirects/follow-redirects/commit/bcbb096b32686ecad6cd34235358ed6f2217d4f0"><code>bcbb096</code></a>
    Do not directly set Error properties.</li>
    <li>See full diff in <a
    href="https://github.com/follow-redirects/follow-redirects/compare/v1.15.3...v1.15.4">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=follow-redirects&package-manager=npm_and_yarn&previous-version=1.15.3&new-version=1.15.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot merge` will merge this PR after your CI passes on it
    - `@dependabot squash and merge` will squash and merge this PR after
    your CI passes on it
    - `@dependabot cancel merge` will cancel a previously requested merge
    and block automerging
    - `@dependabot reopen` will reopen this PR if it is closed
    - `@dependabot close` will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the
    [Security Alerts page](https://github.com/mitre/vulcan/network/alerts).
    
    </details>
    github-actions[bot] authored Jan 11, 2024
    Configuration menu
    Copy the full SHA
    99f6abc View commit details
    Browse the repository at this point in the history

Commits on Feb 21, 2024

  1. Bump the npm_and_yarn group across 1 directories with 1 update

    Bumps the npm_and_yarn group with 1 update in the /. directory: [ip](https://github.com/indutny/node-ip).
    
    
    Updates `ip` from 1.1.5 to 1.1.9
    - [Commits](indutny/node-ip@v1.1.5...v1.1.9)
    
    ---
    updated-dependencies:
    - dependency-name: ip
      dependency-type: indirect
      dependency-group: npm_and_yarn-security-group
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored Feb 21, 2024
    Configuration menu
    Copy the full SHA
    a4f9964 View commit details
    Browse the repository at this point in the history
  2. Bump the npm_and_yarn group across 1 directories with 1 update (#620)

    Bumps the npm_and_yarn group with 1 update in the /. directory:
    [ip](https://github.com/indutny/node-ip).
    
    Updates `ip` from 1.1.5 to 1.1.9
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/indutny/node-ip/commit/1ecbf2fd8c0cc85e44c3b587d2de641f50dc0217"><code>1ecbf2f</code></a>
    1.1.9</li>
    <li><a
    href="https://github.com/indutny/node-ip/commit/6a3ada9b471b09d5f0f5be264911ab564bf67894"><code>6a3ada9</code></a>
    lib: fixed CVE-2023-42282 and added unit test</li>
    <li><a
    href="https://github.com/indutny/node-ip/commit/5dc3b2f3f4b4690fa9a918fa5085b6fca9979fca"><code>5dc3b2f</code></a>
    1.1.8</li>
    <li><a
    href="https://github.com/indutny/node-ip/commit/8e6f28b23a89245eeac74ad2ef9eb0d27cb27e1c"><code>8e6f28b</code></a>
    lib: even better node 6 support</li>
    <li><a
    href="https://github.com/indutny/node-ip/commit/088c9e5664e43cda2a43c1e5b4acf921bb6613a9"><code>088c9e5</code></a>
    1.1.7</li>
    <li><a
    href="https://github.com/indutny/node-ip/commit/1a4ca35ddc55d2987bb1a7e38e9a729a59174611"><code>1a4ca35</code></a>
    lib: add back support for Node.js 6</li>
    <li><a
    href="https://github.com/indutny/node-ip/commit/af82ef42adc513b20f7d1213421ca4b901d10f3d"><code>af82ef4</code></a>
    1.1.6</li>
    <li><a
    href="https://github.com/indutny/node-ip/commit/dba19f6c0c6560bbc5bc18ad12976005900def87"><code>dba19f6</code></a>
    package: exclude test folder from publishing</li>
    <li><a
    href="https://github.com/indutny/node-ip/commit/7cd7f30991363d818cb0c6718a1ad5473c795b12"><code>7cd7f30</code></a>
    ci: use github workflows</li>
    <li><a
    href="https://github.com/indutny/node-ip/commit/4de50aec875d12b004849e11e19d6daf68b50c2d"><code>4de50ae</code></a>
    lib: node 18 support</li>
    <li>See full diff in <a
    href="https://github.com/indutny/node-ip/compare/v1.1.5...v1.1.9">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ip&package-manager=npm_and_yarn&previous-version=1.1.5&new-version=1.1.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot merge` will merge this PR after your CI passes on it
    - `@dependabot squash and merge` will squash and merge this PR after
    your CI passes on it
    - `@dependabot cancel merge` will cancel a previously requested merge
    and block automerging
    - `@dependabot reopen` will reopen this PR if it is closed
    - `@dependabot close` will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore <dependency name> major version` will close this
    group update PR and stop Dependabot creating any more for the specific
    dependency's major version (unless you unignore this specific
    dependency's major version or upgrade to it yourself)
    - `@dependabot ignore <dependency name> minor version` will close this
    group update PR and stop Dependabot creating any more for the specific
    dependency's minor version (unless you unignore this specific
    dependency's minor version or upgrade to it yourself)
    - `@dependabot ignore <dependency name>` will close this group update PR
    and stop Dependabot creating any more for the specific dependency
    (unless you unignore this specific dependency or upgrade to it yourself)
    - `@dependabot unignore <dependency name>` will remove all of the ignore
    conditions of the specified dependency
    - `@dependabot unignore <dependency name> <ignore condition>` will
    remove the ignore condition of the specified dependency and ignore
    conditions
    You can disable automated security fix PRs for this repo from the
    [Security Alerts page](https://github.com/mitre/vulcan/network/alerts).
    
    </details>
    github-actions[bot] authored Feb 21, 2024
    Configuration menu
    Copy the full SHA
    c8f2d5b View commit details
    Browse the repository at this point in the history

Commits on Apr 10, 2024

  1. Bump the npm_and_yarn group across 1 directory with 3 updates

    Bumps the npm_and_yarn group with 3 updates in the / directory: [express](https://github.com/expressjs/express), [follow-redirects](https://github.com/follow-redirects/follow-redirects) and [tar](https://github.com/isaacs/node-tar).
    
    
    Updates `express` from 4.18.2 to 4.19.2
    - [Release notes](https://github.com/expressjs/express/releases)
    - [Changelog](https://github.com/expressjs/express/blob/master/History.md)
    - [Commits](expressjs/express@4.18.2...4.19.2)
    
    Updates `follow-redirects` from 1.15.4 to 1.15.6
    - [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
    - [Commits](follow-redirects/follow-redirects@v1.15.4...v1.15.6)
    
    Updates `tar` from 6.1.11 to 6.2.1
    - [Release notes](https://github.com/isaacs/node-tar/releases)
    - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
    - [Commits](isaacs/node-tar@v6.1.11...v6.2.1)
    
    ---
    updated-dependencies:
    - dependency-name: express
      dependency-type: indirect
      dependency-group: npm_and_yarn
    - dependency-name: follow-redirects
      dependency-type: indirect
      dependency-group: npm_and_yarn
    - dependency-name: tar
      dependency-type: indirect
      dependency-group: npm_and_yarn
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored Apr 10, 2024
    Configuration menu
    Copy the full SHA
    9244fa6 View commit details
    Browse the repository at this point in the history
  2. Bump the npm_and_yarn group across 1 directory with 3 updates (#623)

    Bumps the npm_and_yarn group with 3 updates in the / directory:
    [express](https://github.com/expressjs/express),
    [follow-redirects](https://github.com/follow-redirects/follow-redirects)
    and [tar](https://github.com/isaacs/node-tar).
    
    Updates `express` from 4.18.2 to 4.19.2
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/expressjs/express/releases">express's
    releases</a>.</em></p>
    <blockquote>
    <h2>4.19.2</h2>
    <h2>What's Changed</h2>
    <ul>
    <li><a
    href="https://github.com/expressjs/express/commit/0b746953c4bd8e377123527db11f9cd866e39f94">Improved
    fix for open redirect allow list bypass</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    href="https://github.com/expressjs/express/compare/4.19.1...4.19.2">https://github.com/expressjs/express/compare/4.19.1...4.19.2</a></p>
    <h2>4.19.1</h2>
    <h2>What's Changed</h2>
    <ul>
    <li>Fix ci after location patch by <a
    href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5552">expressjs/express#5552</a></li>
    <li>fixed un-edited version in history.md for 4.19.0 by <a
    href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5556">expressjs/express#5556</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    href="https://github.com/expressjs/express/compare/4.19.0...4.19.1">https://github.com/expressjs/express/compare/4.19.0...4.19.1</a></p>
    <h2>4.19.0</h2>
    <h2>What's Changed</h2>
    <ul>
    <li>fix typo in release date by <a
    href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
    in <a
    href="https://redirect.github.com/expressjs/express/pull/5527">expressjs/express#5527</a></li>
    <li>docs: nominating <a
    href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> to be
    project captian by <a
    href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5511">expressjs/express#5511</a></li>
    <li>docs: loosen TC activity rules by <a
    href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5510">expressjs/express#5510</a></li>
    <li>Add note on how to update docs for new release by <a
    href="https://github.com/crandmck"><code>@​crandmck</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5541">expressjs/express#5541</a></li>
    <li><a
    href="https://redirect.github.com/expressjs/express/pull/5551/commits/660ccf5fa33dd0baab069e5c8ddd9ffe7d8bbff1">Prevent
    open redirect allow list bypass due to encodeurl</a></li>
    <li>Release 4.19.0 by <a
    href="https://github.com/wesleytodd"><code>@​wesleytodd</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5551">expressjs/express#5551</a></li>
    </ul>
    <h2>New Contributors</h2>
    <ul>
    <li><a href="https://github.com/crandmck"><code>@​crandmck</code></a>
    made their first contribution in <a
    href="https://redirect.github.com/expressjs/express/pull/5541">expressjs/express#5541</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    href="https://github.com/expressjs/express/compare/4.18.3...4.19.0">https://github.com/expressjs/express/compare/4.18.3...4.19.0</a></p>
    <h2>4.18.3</h2>
    <h2>Main Changes</h2>
    <ul>
    <li>Fix routing requests without method</li>
    <li>deps: [email protected]
    <ul>
    <li>Fix strict json error message on Node.js 19+</li>
    <li>deps: content-type@~1.0.5</li>
    <li>deps: [email protected]</li>
    </ul>
    </li>
    </ul>
    <h2>Other Changes</h2>
    <ul>
    <li>Use https: protocol instead of deprecated git: protocol by <a
    href="https://github.com/vcsjones"><code>@​vcsjones</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5032">expressjs/express#5032</a></li>
    <li>build: [email protected] and [email protected] by <a
    href="https://github.com/abenhamdine"><code>@​abenhamdine</code></a> in
    <a
    href="https://redirect.github.com/expressjs/express/pull/5034">expressjs/express#5034</a></li>
    <li>ci: update actions/checkout to v3 by <a
    href="https://github.com/armujahid"><code>@​armujahid</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5027">expressjs/express#5027</a></li>
    <li>test: remove unused function arguments in params by <a
    href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5124">expressjs/express#5124</a></li>
    <li>Remove unused originalIndex from acceptParams by <a
    href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5119">expressjs/express#5119</a></li>
    <li>Fixed typos by <a
    href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5117">expressjs/express#5117</a></li>
    <li>examples: remove unused params by <a
    href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5113">expressjs/express#5113</a></li>
    <li>fix: parameter str is not described in JSDoc by <a
    href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5130">expressjs/express#5130</a></li>
    <li>fix: typos in History.md by <a
    href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5131">expressjs/express#5131</a></li>
    <li>build : add [email protected] by <a
    href="https://github.com/abenhamdine"><code>@​abenhamdine</code></a> in
    <a
    href="https://redirect.github.com/expressjs/express/pull/5028">expressjs/express#5028</a></li>
    <li>test: remove unused function arguments in params by <a
    href="https://github.com/raksbisht"><code>@​raksbisht</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/5137">expressjs/express#5137</a></li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/expressjs/express/blob/master/History.md">express's
    changelog</a>.</em></p>
    <blockquote>
    <h1>4.19.2 / 2024-03-25</h1>
    <ul>
    <li>Improved fix for open redirect allow list bypass</li>
    </ul>
    <h1>4.19.1 / 2024-03-20</h1>
    <ul>
    <li>Allow passing non-strings to res.location with new encoding handling
    checks</li>
    </ul>
    <h1>4.19.0 / 2024-03-20</h1>
    <ul>
    <li>Prevent open redirect allow list bypass due to encodeurl</li>
    <li>deps: [email protected]</li>
    </ul>
    <h1>4.18.3 / 2024-02-29</h1>
    <ul>
    <li>Fix routing requests without method</li>
    <li>deps: [email protected]
    <ul>
    <li>Fix strict json error message on Node.js 19+</li>
    <li>deps: content-type@~1.0.5</li>
    <li>deps: [email protected]</li>
    </ul>
    </li>
    <li>deps: [email protected]
    <ul>
    <li>Add <code>partitioned</code> option</li>
    </ul>
    </li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/expressjs/express/commit/04bc62787be974874bc1467b23606c36bc9779ba"><code>04bc627</code></a>
    4.19.2</li>
    <li><a
    href="https://github.com/expressjs/express/commit/da4d763ff6ba9df6dbd8f1f0b1d05412dda934d5"><code>da4d763</code></a>
    Improved fix for open redirect allow list bypass</li>
    <li><a
    href="https://github.com/expressjs/express/commit/4f0f6cc67d531431c096ea006c2191b92931bbc3"><code>4f0f6cc</code></a>
    4.19.1</li>
    <li><a
    href="https://github.com/expressjs/express/commit/a003cfab034fbadb1c78ae337ee8ab389adda217"><code>a003cfa</code></a>
    Allow passing non-strings to res.location with new encoding handling
    checks f...</li>
    <li><a
    href="https://github.com/expressjs/express/commit/a1fa90fcea7d8e844e1c9938ad095d62669c3abd"><code>a1fa90f</code></a>
    fixed un-edited version in history.md for 4.19.0</li>
    <li><a
    href="https://github.com/expressjs/express/commit/11f2b1db227fd42c2508c427032c1ec671b306be"><code>11f2b1d</code></a>
    build: fix build due to inconsistent supertest behavior in older
    versions</li>
    <li><a
    href="https://github.com/expressjs/express/commit/084e36506a18774f85206a65d8da04dc1107fc1b"><code>084e365</code></a>
    4.19.0</li>
    <li><a
    href="https://github.com/expressjs/express/commit/0867302ddbde0e9463d0564fea5861feb708c2dd"><code>0867302</code></a>
    Prevent open redirect allow list bypass due to encodeurl</li>
    <li><a
    href="https://github.com/expressjs/express/commit/567c9c665d0de4c344b8e160146050770233783c"><code>567c9c6</code></a>
    Add note on how to update docs for new release (<a
    href="https://redirect.github.com/expressjs/express/issues/5541">#5541</a>)</li>
    <li><a
    href="https://github.com/expressjs/express/commit/69a4cf2819c4449ec6ea45649691fb43a528d5d1"><code>69a4cf2</code></a>
    deps: [email protected]</li>
    <li>Additional commits viewable in <a
    href="https://github.com/expressjs/express/compare/4.18.2...4.19.2">compare
    view</a></li>
    </ul>
    </details>
    <details>
    <summary>Maintainer changes</summary>
    <p>This version was pushed to npm by <a
    href="https://www.npmjs.com/~wesleytodd">wesleytodd</a>, a new releaser
    for express since your current version.</p>
    </details>
    <br />
    
    Updates `follow-redirects` from 1.15.4 to 1.15.6
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/follow-redirects/follow-redirects/commit/35a517c5861d79dc8bff7db8626013d20b711b06"><code>35a517c</code></a>
    Release version 1.15.6 of the npm package.</li>
    <li><a
    href="https://github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b"><code>c4f847f</code></a>
    Drop Proxy-Authorization across hosts.</li>
    <li><a
    href="https://github.com/follow-redirects/follow-redirects/commit/8526b4a1b2ab3a2e4044299377df623a661caa76"><code>8526b4a</code></a>
    Use GitHub for disclosure.</li>
    <li><a
    href="https://github.com/follow-redirects/follow-redirects/commit/b1677ce00110ee50dc5da576751d39b281fc4944"><code>b1677ce</code></a>
    Release version 1.15.5 of the npm package.</li>
    <li><a
    href="https://github.com/follow-redirects/follow-redirects/commit/d8914f7982403ea096b39bd594a00ee9d3b7e224"><code>d8914f7</code></a>
    Preserve fragment in responseUrl.</li>
    <li>See full diff in <a
    href="https://github.com/follow-redirects/follow-redirects/compare/v1.15.4...v1.15.6">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    Updates `tar` from 6.1.11 to 6.2.1
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/isaacs/node-tar/releases">tar's
    releases</a>.</em></p>
    <blockquote>
    <h2>v6.1.13</h2>
    <h2><a
    href="https://github.com/npm/node-tar/compare/v6.1.12...v6.1.13">6.1.13</a>
    (2022-12-07)</h2>
    <h3>Dependencies</h3>
    <ul>
    <li><a
    href="https://github.com/npm/node-tar/commit/cc4e0ddfe523a0bce383846a67442c637a65d486"><code>cc4e0dd</code></a>
    <a href="https://redirect.github.com/npm/node-tar/pull/343">#343</a>
    bump minipass from 3.3.6 to 4.0.0</li>
    </ul>
    <h2>v6.1.12</h2>
    <h2><a
    href="https://github.com/npm/node-tar/compare/v6.1.11...v6.1.12">6.1.12</a>
    (2022-10-31)</h2>
    <h3>Bug Fixes</h3>
    <ul>
    <li><a
    href="https://github.com/npm/node-tar/commit/57493ee66ece50d62114e02914282fc37be3a91a"><code>57493ee</code></a>
    <a href="https://redirect.github.com/npm/node-tar/pull/332">#332</a>
    ensuring close event is emited after stream has ended (<a
    href="https://github.com/webark"><code>@​webark</code></a>)</li>
    <li><a
    href="https://github.com/npm/node-tar/commit/b003c64f624332e24e19b30dc011069bb6708680"><code>b003c64</code></a>
    <a href="https://redirect.github.com/npm/node-tar/pull/314">#314</a>
    replace deprecated String.prototype.substr() (<a
    href="https://redirect.github.com/isaacs/node-tar/issues/314">#314</a>)
    (<a
    href="https://github.com/CommanderRoot"><code>@​CommanderRoot</code></a>,
    <a
    href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
    </ul>
    <h3>Documentation</h3>
    <ul>
    <li><a
    href="https://github.com/npm/node-tar/commit/f12992932f171ea248b27fad95e7d489a56d31ed"><code>f129929</code></a>
    <a href="https://redirect.github.com/npm/node-tar/pull/313">#313</a>
    remove dead link to benchmarks (<a
    href="https://redirect.github.com/isaacs/node-tar/issues/313">#313</a>)
    (<a href="https://github.com/yetzt"><code>@​yetzt</code></a>)</li>
    <li><a
    href="https://github.com/npm/node-tar/commit/c1faa9f44001dfb0bc7638b2850eb6058bd56a4a"><code>c1faa9f</code></a>
    add examples/explanation of using tar.t (<a
    href="https://github.com/isaacs"><code>@​isaacs</code></a>)</li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md">tar's
    changelog</a>.</em></p>
    <blockquote>
    <h1>Changelog</h1>
    <h2>7.0</h2>
    <ul>
    <li>Rewrite in TypeScript, provide ESM and CommonJS hybrid
    interface</li>
    <li>Add tree-shake friendly exports, like
    <code>import('tar/create')</code>
    and <code>import('tar/read-entry')</code> to get individual functions or
    classes.</li>
    <li>Add <code>chmod</code> option that defaults to false, and deprecate
    <code>noChmod</code>. That is, reverse the default option regarding
    explicitly setting file system modes to match tar entry
    settings.</li>
    <li>Add <code>processUmask</code> option to avoid having to call
    <code>process.umask()</code> when <code>chmod: true</code> (or
    <code>noChmod: false</code>) is
    set.</li>
    </ul>
    <h2>6.2</h2>
    <ul>
    <li>Add support for brotli compression</li>
    <li>Add <code>maxDepth</code> option to prevent extraction into
    excessively
    deep folders.</li>
    </ul>
    <h2>6.1</h2>
    <ul>
    <li>remove dead link to benchmarks (<a
    href="https://redirect.github.com/isaacs/node-tar/issues/313">#313</a>)
    (<a href="https://github.com/yetzt"><code>@​yetzt</code></a>)</li>
    <li>add examples/explanation of using tar.t (<a
    href="https://github.com/isaacs"><code>@​isaacs</code></a>)</li>
    <li>ensure close event is emited after stream has ended (<a
    href="https://github.com/webark"><code>@​webark</code></a>)</li>
    <li>replace deprecated String.prototype.substr() (<a
    href="https://github.com/CommanderRoot"><code>@​CommanderRoot</code></a>,
    <a
    href="https://github.com/lukekarrys"><code>@​lukekarrys</code></a>)</li>
    </ul>
    <h2>6.0</h2>
    <ul>
    <li>Drop support for node 6 and 8</li>
    <li>fix symlinks and hardlinks on windows being packed with
    <code>\</code>-style path targets</li>
    </ul>
    <h2>5.0</h2>
    <ul>
    <li>Address unpack race conditions using path reservations</li>
    <li>Change large-numbers errors from TypeError to Error</li>
    <li>Add <code>TAR_*</code> error codes</li>
    <li>Raise <code>TAR_BAD_ARCHIVE</code> warning/error when there are no
    valid
    entries found in an archive</li>
    <li>do not treat ignored entries as an invalid archive</li>
    <li>drop support for node v4</li>
    <li>unpack: conditionally use a file mapping to write files on
    Windows</li>
    <li>Set more portable 'mode' value in portable mode</li>
    <li>Set <code>portable</code> gzip option in portable mode</li>
    </ul>
    <!-- raw HTML omitted -->
    </blockquote>
    <p>... (truncated)</p>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/isaacs/node-tar/commit/bef7b1e4ffab822681fea2a9b22187192ed14717"><code>bef7b1e</code></a>
    6.2.1</li>
    <li><a
    href="https://github.com/isaacs/node-tar/commit/fe8cd57da5686f8695415414bda49206a545f7f7"><code>fe8cd57</code></a>
    prevent extraction in excessively deep subfolders</li>
    <li><a
    href="https://github.com/isaacs/node-tar/commit/fe7ebfdcede1f8a2e65db12e19ecc4b3a9934648"><code>fe7ebfd</code></a>
    remove security.md</li>
    <li><a
    href="https://github.com/isaacs/node-tar/commit/5bc9d404e88c39870e0fbb55655a53de6fbf0a04"><code>5bc9d40</code></a>
    6.2.0</li>
    <li><a
    href="https://github.com/isaacs/node-tar/commit/fe1ef5ec87156ddadcec8b70cdec201f26665681"><code>fe1ef5e</code></a>
    changelog 6.2</li>
    <li><a
    href="https://github.com/isaacs/node-tar/commit/e483220935d931cf6b09292aba62170e68f36205"><code>e483220</code></a>
    get rid of npm lint stuff</li>
    <li><a
    href="https://github.com/isaacs/node-tar/commit/689928a0ba7d9b9014d88a5fa35261f9ae4ef2f3"><code>689928a</code></a>
    ci that works outside of npm org</li>
    <li><a
    href="https://github.com/isaacs/node-tar/commit/db6f53928650a04b340ecdc01db2d49937e5d63c"><code>db6f539</code></a>
    file inference improvements for .tbr and .tgz</li>
    <li><a
    href="https://github.com/isaacs/node-tar/commit/336fa8f27c44bec70d46a6482096af24c668ee16"><code>336fa8f</code></a>
    refactor: dry and other pr comments</li>
    <li><a
    href="https://github.com/isaacs/node-tar/commit/eeba22238736ed0832488efb3c515ada98073424"><code>eeba222</code></a>
    chore: lint fixes</li>
    <li>Additional commits viewable in <a
    href="https://github.com/isaacs/node-tar/compare/v6.1.11...v6.2.1">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot merge` will merge this PR after your CI passes on it
    - `@dependabot squash and merge` will squash and merge this PR after
    your CI passes on it
    - `@dependabot cancel merge` will cancel a previously requested merge
    and block automerging
    - `@dependabot reopen` will reopen this PR if it is closed
    - `@dependabot close` will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore <dependency name> major version` will close this
    group update PR and stop Dependabot creating any more for the specific
    dependency's major version (unless you unignore this specific
    dependency's major version or upgrade to it yourself)
    - `@dependabot ignore <dependency name> minor version` will close this
    group update PR and stop Dependabot creating any more for the specific
    dependency's minor version (unless you unignore this specific
    dependency's minor version or upgrade to it yourself)
    - `@dependabot ignore <dependency name>` will close this group update PR
    and stop Dependabot creating any more for the specific dependency
    (unless you unignore this specific dependency or upgrade to it yourself)
    - `@dependabot unignore <dependency name>` will remove all of the ignore
    conditions of the specified dependency
    - `@dependabot unignore <dependency name> <ignore condition>` will
    remove the ignore condition of the specified dependency and ignore
    conditions
    You can disable automated security fix PRs for this repo from the
    [Security Alerts page](https://github.com/mitre/vulcan/network/alerts).
    
    </details>
    github-actions[bot] authored Apr 10, 2024
    Configuration menu
    Copy the full SHA
    22ce8a2 View commit details
    Browse the repository at this point in the history

Commits on May 10, 2024

  1. Configuration menu
    Copy the full SHA
    979ed2f View commit details
    Browse the repository at this point in the history

Commits on May 17, 2024

  1. Upgrade to New Heroku Plan (#624)

    As announced on May 1, 2024, Heroku Postgres mini and basic plans will
    reach end-of-life (EOL) on May 22, 2024.
    Heimdall was using heroku-postgresql:mini.
    
    Make the necessary changes in the app.json, update to the new Essential
    plan to:
    heroku-postgresql:mini → heroku-postgresql:essential-0
    georgedias authored May 17, 2024
    Configuration menu
    Copy the full SHA
    8fb6493 View commit details
    Browse the repository at this point in the history

Commits on May 21, 2024

  1. v2.1.7

    Signed-off-by: George M Dias <[email protected]>
    georgedias committed May 21, 2024
    Configuration menu
    Copy the full SHA
    07441b7 View commit details
    Browse the repository at this point in the history
  2. v2.1.7

    Signed-off-by: George M Dias <[email protected]>
    georgedias committed May 21, 2024
    Configuration menu
    Copy the full SHA
    ac83e37 View commit details
    Browse the repository at this point in the history
Loading