Skip to content

Commit 945bff1

Browse files
fix(lambda): bump @octokit/request from 8.4.0 to 8.4.1 in /lambdas (#4431)
Bumps [@octokit/request](https://github.com/octokit/request.js) from 8.4.0 to 8.4.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/octokit/request.js/releases"><code>@​octokit/request</code>'s releases</a>.</em></p> <blockquote> <h2>v8.4.1</h2> <h2><a href="https://github.com/octokit/request.js/compare/v8.4.0...v8.4.1">8.4.1</a> (2025-02-15)</h2> <h3>Bug Fixes</h3> <ul> <li>ReDos regex vulnerability, reported by <a href="https://github.com/DayShift"><code>@​DayShift</code></a> (<a href="https://redirect.github.com/octokit/request.js/issues/741">#741</a>) (<a href="https://github.com/octokit/request.js/commit/356411e3217019aa9fc8a68f4236af82490873c2">356411e</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/octokit/request.js/commit/356411e3217019aa9fc8a68f4236af82490873c2"><code>356411e</code></a> fix: ReDos regex vulnerability, reported by <a href="https://github.com/DayShift"><code>@​DayShift</code></a> (<a href="https://redirect.github.com/octokit/request.js/issues/741">#741</a>)</li> <li>See full diff in <a href="https://github.com/octokit/request.js/compare/v8.4.0...v8.4.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@octokit/request&package-manager=npm_and_yarn&previous-version=8.4.0&new-version=8.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/github-aws-runners/terraform-aws-github-runner/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 9212e58 commit 945bff1

File tree

1 file changed

+10
-10
lines changed

1 file changed

+10
-10
lines changed

Diff for: lambdas/yarn.lock

+10-10
Original file line numberDiff line numberDiff line change
@@ -3843,13 +3843,13 @@ __metadata:
38433843
languageName: node
38443844
linkType: hard
38453845

3846-
"@octokit/endpoint@npm:^9.0.1":
3847-
version: 9.0.5
3848-
resolution: "@octokit/endpoint@npm:9.0.5"
3846+
"@octokit/endpoint@npm:^9.0.6":
3847+
version: 9.0.6
3848+
resolution: "@octokit/endpoint@npm:9.0.6"
38493849
dependencies:
38503850
"@octokit/types": "npm:^13.1.0"
38513851
universal-user-agent: "npm:^6.0.0"
3852-
checksum: 10c0/e9bbb2111abe691c146075abb1b6f724a9b77fa8bfefdaaa82b8ebad6c8790e949f2367bb0b79800fef93ad72807513333e83e8ffba389bc85215535f63534d9
3852+
checksum: 10c0/8e06197b21869aeb498e0315093ca6fbee12bd1bdcfc1667fcd7d79d827d84f2c5a30702ffd28bba7879780e367d14c30df5b20d47fcaed5de5fdc05f5d4e013
38533853
languageName: node
38543854
linkType: hard
38553855

@@ -3934,7 +3934,7 @@ __metadata:
39343934
languageName: node
39353935
linkType: hard
39363936

3937-
"@octokit/request-error@npm:^5.0.0, @octokit/request-error@npm:^5.1.0":
3937+
"@octokit/request-error@npm:^5.0.0, @octokit/request-error@npm:^5.1.0, @octokit/request-error@npm:^5.1.1":
39383938
version: 5.1.1
39393939
resolution: "@octokit/request-error@npm:5.1.1"
39403940
dependencies:
@@ -3946,14 +3946,14 @@ __metadata:
39463946
linkType: hard
39473947

39483948
"@octokit/request@npm:^8.3.0, @octokit/request@npm:^8.3.1":
3949-
version: 8.4.0
3950-
resolution: "@octokit/request@npm:8.4.0"
3949+
version: 8.4.1
3950+
resolution: "@octokit/request@npm:8.4.1"
39513951
dependencies:
3952-
"@octokit/endpoint": "npm:^9.0.1"
3953-
"@octokit/request-error": "npm:^5.1.0"
3952+
"@octokit/endpoint": "npm:^9.0.6"
3953+
"@octokit/request-error": "npm:^5.1.1"
39543954
"@octokit/types": "npm:^13.1.0"
39553955
universal-user-agent: "npm:^6.0.0"
3956-
checksum: 10c0/b857782ac2ff5387e9cc502759de73ea642c498c97d06ad2ecd8a395e4b9532d9f3bc3fc460e0d3d0e8f0d43c917a90c493e43766d37782b3979d3afffbf1b4b
3956+
checksum: 10c0/1a69dcb7336de708a296db9e9a58040e5b284a87495a63112f80eb0007da3fc96a9fadecb9e875fc63cf179c23a0f81031fbef2a6f610a219e45805ead03fcf3
39573957
languageName: node
39583958
linkType: hard
39593959

0 commit comments

Comments
 (0)