14.md (4968B)
1 # PR #14 Bump websocket-extensions from 0.1.3 to 0.1.4 2 3 - **Status:** merged 4 - **Author:** @dependabot[bot] 5 - **Created:** 2020-06-08T08:29:16Z 6 - **Branch:** dependabot/npm_and_yarn/websocket-extensions-0.1.4 → master 7 - **Merged:** 2020-06-08T15:10:44Z 8 - **Labels:** dependencies 9 - **Diff:** [14.diff](./14.diff) 10 11 --- 12 13 Bumps [websocket-extensions](https://github.com/faye/websocket-extensions-node) from 0.1.3 to 0.1.4. 14 <details> 15 <summary>Changelog</summary> 16 <p><em>Sourced from <a href="https://github.com/faye/websocket-extensions-node/blob/master/CHANGELOG.md">websocket-extensions's changelog</a>.</em></p> 17 <blockquote> 18 <h3>0.1.4 / 2020-06-02</h3> 19 <ul> 20 <li>Remove a ReDoS vulnerability in the header parser (CVE-2020-7662, reported by 21 Robert McLaughlin)</li> 22 <li>Change license from MIT to Apache 2.0</li> 23 </ul> 24 </blockquote> 25 </details> 26 <details> 27 <summary>Commits</summary> 28 <ul> 29 <li><a href="https://github.com/faye/websocket-extensions-node/commit/8efd0cd6e35faf9bb9cb08759be1e27082177d43"><code>8efd0cd</code></a> Bump version to 0.1.4</li> 30 <li><a href="https://github.com/faye/websocket-extensions-node/commit/3dad4ad44a8c5f74d4f8f4efd3f9d6e0b5df3051"><code>3dad4ad</code></a> Remove ReDoS vulnerability in the Sec-WebSocket-Extensions header parser</li> 31 <li><a href="https://github.com/faye/websocket-extensions-node/commit/4a76c75efb1c5d6a2f60550e9501757458d19533"><code>4a76c75</code></a> Add Node versions 13 and 14 on Travis</li> 32 <li><a href="https://github.com/faye/websocket-extensions-node/commit/44a677a9c0631daed0b0f4a4b68c095b624183b8"><code>44a677a</code></a> Formatting change: {...} should have spaces inside the braces</li> 33 <li><a href="https://github.com/faye/websocket-extensions-node/commit/f6c50aba0c20ff45b0f87cea33babec1217ec3f5"><code>f6c50ab</code></a> Let npm reformat package.json</li> 34 <li><a href="https://github.com/faye/websocket-extensions-node/commit/2d211f3705d52d9efb4f01daf5a253adf828592e"><code>2d211f3</code></a> Change markdown formatting of docs.</li> 35 <li><a href="https://github.com/faye/websocket-extensions-node/commit/0b620834cc1e1f2eace1d55ab17f71d90d88271d"><code>0b62083</code></a> Update Travis target versions.</li> 36 <li><a href="https://github.com/faye/websocket-extensions-node/commit/729a4653073fa8dd020561113513bfa2e2119415"><code>729a465</code></a> Switch license to Apache 2.0.</li> 37 <li>See full diff in <a href="https://github.com/faye/websocket-extensions-node/compare/0.1.3...0.1.4">compare view</a></li> 38 </ul> 39 </details> 40 <br /> 41 42 43 [](https://help.github.com/articles/configuring-automated-security-fixes) 44 45 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. 46 47 [//]: # (dependabot-automerge-start) 48 [//]: # (dependabot-automerge-end) 49 50 --- 51 52 <details> 53 <summary>Dependabot commands and options</summary> 54 <br /> 55 56 You can trigger Dependabot actions by commenting on this PR: 57 - `@dependabot rebase` will rebase this PR 58 - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it 59 - `@dependabot merge` will merge this PR after your CI passes on it 60 - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it 61 - `@dependabot cancel merge` will cancel a previously requested merge and block automerging 62 - `@dependabot reopen` will reopen this PR if it is closed 63 - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually 64 - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) 65 - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) 66 - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) 67 - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language 68 - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language 69 - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language 70 - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language 71 72 You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/MTRNord/Daydream/network/alerts). 73 74 </details> 75 76 77 ## Comments 78 79 ### @MTRNord — 2020-06-08T15:03:13Z 80 81 @dependabot rebase 82