Bump adm-zip from 0.5.1 to 0.5.2 #16

2021-01-27T10:27:40Z

dependabot-preview[bot] commented

2021-01-27 10:27:40 +00:00

(Migrated from github.com)

Bumps adm-zip from 0.5.1 to 0.5.2.

Changelog

Sourced from adm-zip's changelog.

0.5.2 / 2020-11-27

Fixed path traversal issue (GHSL-2020-198)

Commits

99838cf Release notes
c5aeed4 Incremented version number
119dcad Fixed path traversal issue GHSL-2020-198
1d22ff6 Merge pull request #341 from 5saviahv/history
492d148 added changelog
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
@dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

Update frequency (including time of day and day of week)
Pull request limits (per update run and/or open at any time)
Out-of-range updates (receive only lockfile updates, if desired)
Security updates (receive only security updates, if desired)

Bumps [adm-zip](https://github.com/cthackers/adm-zip) from 0.5.1 to 0.5.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/cthackers/adm-zip/blob/master/history.md">adm-zip's changelog</a>.</em></p> <blockquote> <h1>0.5.2 / 2020-11-27</h1> <ul> <li>Fixed path traversal issue (GHSL-2020-198)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cthackers/adm-zip/commit/99838cfab059da2e6712ab566565f0401ee1dfea"><code>99838cf</code></a> Release notes</li> <li><a href="https://github.com/cthackers/adm-zip/commit/c5aeed445e4828172fd260ddcc51505d7e993b95"><code>c5aeed4</code></a> Incremented version number</li> <li><a href="https://github.com/cthackers/adm-zip/commit/119dcad6599adccc77982feb14a0c7440fa63013"><code>119dcad</code></a> Fixed path traversal issue GHSL-2020-198</li> <li><a href="https://github.com/cthackers/adm-zip/commit/1d22ff693cbb060300bbe83658ccd6f6dec042bf"><code>1d22ff6</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/cthackers/adm-zip/issues/341">#341</a> from 5saviahv/history</li> <li><a href="https://github.com/cthackers/adm-zip/commit/492d1482bd6219f2f6285a928d8f42d328e51576"><code>492d148</code></a> added changelog</li> <li>See full diff in <a href="https://github.com/cthackers/adm-zip/compare/v0.5.1...v0.5.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=adm-zip&package-manager=npm_and_yarn&previous-version=0.5.1&new-version=0.5.2)](https://dependabot.com/compatibility-score/?dependency-name=adm-zip&package-manager=npm_and_yarn&previous-version=0.5.1&new-version=0.5.2) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) </details>

This repo is archived. You cannot comment on pull requests.

1 Participants

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: go-bds/Maneger#16