build(deps): bump joi from 17.13.4 to 17.13.7 - #4468
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [joi](https://github.com/hapijs/joi) from 17.13.4 to 17.13.7. - [Commits](hapijs/joi@v17.13.4...v17.13.7) --- updated-dependencies: - dependency-name: joi dependency-version: 17.13.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
There was a problem hiding this comment.
Copilot wasn't able to review any files in this pull request.
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
|
|
1 similar comment
|
|
Up to standards ✅🟢 Issues
|
| Metric | Results |
|---|---|
| Complexity | 0 |
| Duplication | 0 |
NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.
|
|
Dependency limit exceeded — report not shown. This pull request scan exceeded the 10,000-dependency limit applied to this scan, so the results are incomplete and may be inaccurate. To avoid reporting false positives, Socket has not posted a report. Upgrade your plan to raise the dependency limit and get complete reports, or view the partial scan in the dashboard. Socket is always free for open source. If this is a non-commercial open source project, contact us to request a free Team account. |
Bumps joi from 17.13.4 to 17.13.7.
Commits
ed9d7cd17.13.7f2729f7Merge pull request #3145 from hapijs/backport/isodate-timeshift-v17c43fc96chore: add regression test for #3143115e7b5fix(isoDate): pad a bare-hour timeshift with a colon, not just zeros850be1e17.13.69faeeccMerge pull request #3139 from hapijs/chore/backport-messages-proto8d0b808fix: prevent messages proto injection566e73f17.13.53f3907cMerge pull request #3135 from hapijs/chore/backport-rename-proto172ececfix: prevent proto on renamesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Summary by cubic
Updates the indirect
joidependency from 17.13.4 to 17.13.7, which fixes prototype pollution and ISO date timeshift handling. The lockfile also bumps thejoi@^18.0.2entry to 18.2.8 to keep the resolved versions consistent.Written for commit fdbe05a. Summary will update on new commits.