Skip to content

Commit d8d52b5

Browse files
renovate[bot]Josh-Walker-GM
authored andcommitted
fix(deps): update dependency find-my-way to v8.2.2 [security] (#11585)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [find-my-way](https://redirect.github.com/delvedor/find-my-way) | [`8.2.0` -> `8.2.2`](https://renovatebot.com/diffs/npm/find-my-way/8.2.0/8.2.2) | [![age](https://developer.mend.io/api/mc/badges/age/npm/find-my-way/8.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/find-my-way/8.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/find-my-way/8.2.0/8.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/find-my-way/8.2.0/8.2.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. ### GitHub Vulnerability Alerts #### [CVE-2024-45813](https://redirect.github.com/delvedor/find-my-way/security/advisories/GHSA-rrr8-f88r-h8q6) ### Impact A bad regular expression is generated any time you have two parameters within a single segment, when adding a `-` at the end, like `/:a-:b-`. ### Patches Update to find-my-way v8.2.2 or v9.0.1. or subsequent versions. ### Workarounds No known workarounds. ### References - [CVE-2024-45296](https://redirect.github.com/advisories/GHSA-9wv6-86v2-598j) - [Detailed blog post about `path-to-regexp` vulnerability](https://blakeembrey.com/posts/2024-09-web-redos/) --- ### Release Notes <details> <summary>delvedor/find-my-way (find-my-way)</summary> ### [`v8.2.2`](https://redirect.github.com/delvedor/find-my-way/releases/tag/v8.2.2) [Compare Source](https://redirect.github.com/delvedor/find-my-way/compare/186c7db33c6c6aaf4e8e68199722e217bdd69337...v8.2.2) ⚠️ Security Release ⚠️ Fixes: GHSA-rrr8-f88r-h8q6 CVE-2024-45813 **Full Changelog**: delvedor/find-my-way@v8.2.0...v8.2.2 ### [`v8.2.1`](https://redirect.github.com/delvedor/find-my-way/compare/v8.2.0...186c7db33c6c6aaf4e8e68199722e217bdd69337) [Compare Source](https://redirect.github.com/delvedor/find-my-way/compare/v8.2.0...186c7db33c6c6aaf4e8e68199722e217bdd69337) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/redwoodjs/redwood). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC44MC4wIiwidXBkYXRlZEluVmVyIjoiMzguODAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1 parent f804d16 commit d8d52b5

File tree

2 files changed

+6
-6
lines changed

2 files changed

+6
-6
lines changed

packages/vite/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,7 @@
8383
"dotenv-defaults": "5.0.2",
8484
"execa": "5.1.1",
8585
"express": "4.21.0",
86-
"find-my-way": "8.2.0",
86+
"find-my-way": "8.2.2",
8787
"fs-extra": "11.2.0",
8888
"http-proxy-middleware": "3.0.2",
8989
"isbot": "5.1.17",

yarn.lock

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8782,7 +8782,7 @@ __metadata:
87828782
dotenv-defaults: "npm:5.0.2"
87838783
execa: "npm:5.1.1"
87848784
express: "npm:4.21.0"
8785-
find-my-way: "npm:8.2.0"
8785+
find-my-way: "npm:8.2.2"
87868786
fs-extra: "npm:11.2.0"
87878787
glob: "npm:11.0.0"
87888788
http-proxy-middleware: "npm:3.0.2"
@@ -17539,14 +17539,14 @@ __metadata:
1753917539
languageName: node
1754017540
linkType: hard
1754117541

17542-
"find-my-way@npm:8.2.0, find-my-way@npm:^8.0.0":
17543-
version: 8.2.0
17544-
resolution: "find-my-way@npm:8.2.0"
17542+
"find-my-way@npm:8.2.2, find-my-way@npm:^8.0.0":
17543+
version: 8.2.2
17544+
resolution: "find-my-way@npm:8.2.2"
1754517545
dependencies:
1754617546
fast-deep-equal: "npm:^3.1.3"
1754717547
fast-querystring: "npm:^1.0.0"
1754817548
safe-regex2: "npm:^3.1.0"
17549-
checksum: 10c0/f0f0370215f7b693729483481cd8c642a2e42e7ec7296f099faf46c523a3cac2bcafc24229dc971f87def36c5fa1fdf7f08a7238144affd2ab3c57f75b9aaca6
17549+
checksum: 10c0/ce462b2033e08a82fa79b837e4ef9e637d5f3e6763564631ad835b4e50b22e2123c0bf27c4fe6b02bc4006cd7949c0351d2b6b6f32248e839b10bdcbd3a3269f
1755017550
languageName: node
1755117551
linkType: hard
1755217552

0 commit comments

Comments
 (0)