alpha-wallet-ios

Commit Graph

Author	SHA1	Message	Date
Hwee-Boon Yar	156f79e132	Update `npm` version (development use only) to not rely on vulnerable version of `got` package. CVE-2022-33987	2 years ago
Hwee-Boon Yar	6acf3ecf3e	Fix vulnerabilities by GitHub for node-fetch, mimimist CVE-2022-0235, CVE-2021-44906	3 years ago
Hwee-Boon Yar	1b48d7609f	Fix vulnerabilities by GitHub for parse-link-header CVE-2021-23490	3 years ago
Hwee-Boon Yar	8efb9dced8	Fix vulnerabilities by GitHub for json-schema CVE-2021-3918	3 years ago
Hwee-Boon Yar	a906980ed2	Fix vulnerabilities by GitHub for jsonpointer CVE-2021-23807	3 years ago
Hwee-Boon Yar	31a75899f1	Fix: vulnerability found by GitHub: CVE-2021-3807	3 years ago
Hwee-Boon Yar	7833755969	Fix: vulnerability found by GitHub: CVE-2021-23440	3 years ago
dependabot[bot]	40a48668f1	Build(deps): Bump tar from 4.4.15 to 4.4.19 Bumps [tar](https://github.com/npm/node-tar) from 4.4.15 to 4.4.19. - [Release notes](https://github.com/npm/node-tar/releases) - [Changelog](https://github.com/npm/node-tar/blob/main/CHANGELOG.md) - [Commits](https://github.com/npm/node-tar/compare/v4.4.15...v4.4.19) --- updated-dependencies: - dependency-name: tar dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
dependabot[bot]	8a3f634ea0	Build(deps): Bump path-parse from 1.0.6 to 1.0.7 Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. - [Release notes](https://github.com/jbgutierrez/path-parse/releases) - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) --- updated-dependencies: - dependency-name: path-parse dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
dependabot[bot]	10c6398c9f	Bump tar from 4.4.13 to 4.4.15 Bumps [tar](https://github.com/npm/node-tar) from 4.4.13 to 4.4.15. - [Release notes](https://github.com/npm/node-tar/releases) - [Changelog](https://github.com/npm/node-tar/blob/main/CHANGELOG.md) - [Commits](https://github.com/npm/node-tar/compare/v4.4.13...v4.4.15) --- updated-dependencies: - dependency-name: tar dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
dependabot[bot]	beff400410	Bump hosted-git-info from 2.8.8 to 2.8.9 Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9. - [Release notes](https://github.com/npm/hosted-git-info/releases) - [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md) - [Commits](https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9) Signed-off-by: dependabot[bot] <support@github.com>	4 years ago
Hwee-Boon Yar	2a2b155ca0	Fix: vulnerability found by GitHub: CVE-2020-7774	4 years ago
Hwee-Boon Yar	05ec62ec1d	Fix: vulnerability found by GitHub: CVE-2021-27290	4 years ago
dependabot[bot]	005c34f5f9	Bump ini from 1.3.5 to 1.3.7 Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7. - [Release notes](https://github.com/isaacs/ini/releases) - [Commits](https://github.com/isaacs/ini/compare/v1.3.5...v1.3.7) Signed-off-by: dependabot[bot] <support@github.com>	4 years ago
dependabot[bot]	883d8aff2a	Build(deps): Bump npm-user-validate from 1.0.0 to 1.0.1 Bumps [npm-user-validate](https://github.com/npm/npm-user-validate) from 1.0.0 to 1.0.1. - [Release notes](https://github.com/npm/npm-user-validate/releases) - [Commits](https://github.com/npm/npm-user-validate/compare/v1.0.0...v1.0.1) Signed-off-by: dependabot[bot] <support@github.com>	4 years ago
Hwee-Boon Yar	c669c60855	Fix: GitHub security warning for JavaScript packages: * CVE-2020-8116 * CVE-2019-20149 * GHSA-p9pc-299p-vxgp	4 years ago
dependabot[bot]	c4132eff36	Bump node-fetch from 2.6.0 to 2.6.1 Bumps [node-fetch](https://github.com/bitinn/node-fetch) from 2.6.0 to 2.6.1. - [Release notes](https://github.com/bitinn/node-fetch/releases) - [Changelog](https://github.com/node-fetch/node-fetch/blob/master/docs/CHANGELOG.md) - [Commits](https://github.com/bitinn/node-fetch/compare/v2.6.0...v2.6.1) Signed-off-by: dependabot[bot] <support@github.com>	4 years ago
dependabot[bot]	272ec97205	Bump lodash from 4.17.15 to 4.17.19 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.19. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.15...4.17.19) Signed-off-by: dependabot[bot] <support@github.com>	4 years ago
dependabot[bot]	a224606ca4	Bump npm from 6.13.4 to 6.14.6 Bumps [npm](https://github.com/npm/cli) from 6.13.4 to 6.14.6. - [Release notes](https://github.com/npm/cli/releases) - [Changelog](https://github.com/npm/cli/blob/latest/CHANGELOG.md) - [Commits](https://github.com/npm/cli/compare/v6.13.4...v6.14.6) Signed-off-by: dependabot[bot] <support@github.com>	4 years ago
Hwee-Boon Yar	897353037c	Fix: GitHub security warning for JavaScript packages: CVE-2020-7598, CVE-2019-20149	4 years ago
dependabot[bot]	57fa1eb83b	Bump https-proxy-agent from 2.2.2 to 2.2.4 Bumps [https-proxy-agent](https://github.com/TooTallNate/node-https-proxy-agent) from 2.2.2 to 2.2.4. - [Release notes](https://github.com/TooTallNate/node-https-proxy-agent/releases) - [Commits](https://github.com/TooTallNate/node-https-proxy-agent/compare/2.2.2...2.2.4) Signed-off-by: dependabot[bot] <support@github.com>	5 years ago
dependabot[bot]	c7960e0732	Build(deps): Bump npm from 6.10.3 to 6.13.4 Bumps [npm](https://github.com/npm/cli) from 6.10.3 to 6.13.4. - [Release notes](https://github.com/npm/cli/releases) - [Changelog](https://github.com/npm/cli/blob/latest/CHANGELOG.md) - [Commits](https://github.com/npm/cli/compare/v6.10.3...v6.13.4) Signed-off-by: dependabot[bot] <support@github.com>	5 years ago
Hwee-Boon Yar	db5880679f	Fix vulnerabilities by GitHub for JavaScript: lodash, mem	5 years ago
James Sangalli	64aed28cce	Upgrade fstream for security	5 years ago
James Sangalli	ab7d73da4b	update lodash dependency for security	6 years ago
Hwee-Boon Yar	82c50c622d	Add dangerfile to look for messed up commits. To be used in a post-commit hook	6 years ago

26 Commits (fd3646e4b908c6b352a69dbc63f61e7223c62689)