Skip to content

chore(deps): update dependency got to 11.8.5 [security] - abandoned#264

Open
renovate[bot] wants to merge 2 commits intomasterfrom
renovate/npm-got-vulnerability
Open

chore(deps): update dependency got to 11.8.5 [security] - abandoned#264
renovate[bot] wants to merge 2 commits intomasterfrom
renovate/npm-got-vulnerability

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Jan 20, 2023

Mend Renovate

This PR contains the following updates:

Package Change
got 9.6.0 -> 11.8.5

GitHub Vulnerability Alerts

CVE-2022-33987

The got package before 11.8.5 and 12.1.0 for Node.js allows a redirect to a UNIX socket.


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Jan 20, 2023
@github-actions
Copy link
Copy Markdown
Contributor

Images automagically compressed by Calibre's image-actions

Compression reduced images by 67.5%, saving 3.82 MB.

Filename Before After Improvement Visual comparison
template/public/img/uploads/0001.png 19.37 KB 12.50 KB -35.5% View diff
template/public/img/uploads/4-figuras-minimo-150-00.png 65.38 KB 51.96 KB -20.5% View diff
template/public/img/uploads/4figuras-desktop-10-pecas-12-no-cartao.png 40.99 KB 32.18 KB -21.5% View diff
template/public/img/uploads/compra-segura.webp 76.44 KB 75.37 KB -1.4% View diff
template/public/img/uploads/desktop-794x794.png 107.82 KB 74.95 KB -30.5% View diff
template/public/img/uploads/logopageprincipal.webp 19.42 KB 19.09 KB -1.7% View diff
template/public/img/uploads/mobile-12x-sem-juros-10-pecas-x.jpg 820.52 KB 217.81 KB -73.5% View diff
template/public/img/uploads/ref-computador-1.2.3.jpg 367.35 KB 94.77 KB -74.2% View diff
template/public/img/uploads/ref-computador-3.4.5.6ok.jpg 356.18 KB 94.47 KB -73.5% View diff
template/public/img/uploads/ref-computador-3out.4st.1.2ok.jpg 340.99 KB 89.62 KB -73.7% View diff
template/public/img/uploads/ref-mobile-1.2ok.jpg 1.06 MB 243.79 KB -77.5% View diff
template/public/img/uploads/ref-mobile-3.4ok.jpg 954.98 KB 221.16 KB -76.8% View diff
template/public/img/uploads/ref-mobile-5.6ok.jpg 1.12 MB 284.95 KB -75.1% View diff
template/public/img/uploads/referencias-794-794-px-1-.jpg 85.62 KB 77.66 KB -9.3% View diff
template/public/img/uploads/referencias-794-794-px-2-.jpg 92.49 KB 85.14 KB -8.0% View diff
template/public/img/uploads/referencias-794-794-px-3-.jpg 93.21 KB 85.52 KB -8.3% View diff
template/public/img/uploads/referencias-feed.jpg 132.59 KB 122.34 KB -7.7% View diff

70 images did not require optimisation.

@renovate
Copy link
Copy Markdown
Contributor Author

renovate bot commented Jan 20, 2023

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

Warning: custom changes will be lost.

@renovate renovate bot changed the title chore(deps): update dependency got to 11.8.5 [security] chore(deps): update dependency got to 11.8.5 [security] - abandoned Mar 23, 2023
@renovate
Copy link
Copy Markdown
Contributor Author

renovate bot commented Mar 23, 2023

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants