fix(deps): update dependency make-fetch-happen to v14 #669
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. |
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
|
@ivarconr - would you be happy to revisit this PR? This would resolve a security vulnerability in cacache, which this package depends on via make-fetch-happen |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^13.0.1->^14.0.0Release Notes
npm/make-fetch-happen (make-fetch-happen)
v14.0.3Compare Source
Bug Fixes
3e0fe87#316 stop ignoring NODE_TLS_REJECT_UNAUTHORIZED when strictSSL is not defined (#316) (@brunoargolo, Bruno Oliveira)Dependencies
05fbcc3#327 bump negotiator from 0.6.4 to 1.0.0 (#327) (@dependabot[bot])v14.0.2Compare Source
Bug Fixes
fa5f233#324 don't use the request signal in the agent (#324) (@thewilkybarkid, @wraithgar)Chores
b3742c5#323 bump @npmcli/template-oss from 4.23.3 to 4.23.4 (#323) (@dependabot[bot], @npm-cli-bot)v14.0.1Compare Source
Dependencies
5eae0b6#321 bump[email protected]v14.0.0Compare Source
make-fetch-happennow supports node^18.17.0 || >=20.5.0Bug Fixes
a1beba7#318 align to npm 10 node engine range (@reggi)Dependencies
aa5d07a#318[email protected]0113d1f#318[email protected]f0db136#318[email protected]be3558d#318@npmcli/[email protected]d255fcb#299 remove is-lambda dependency (#299)Chores
30ee575#318 run template-oss-apply (@reggi)253f3b9#309 bump @npmcli/eslint-config from 4.0.5 to 5.0.0 (@dependabot[bot])58dc7ef#295 bump @npmcli/template-oss to 4.22.0 (@lukekarrys)f51f1de#311 postinstall for dependabot template-oss PR (@hashtagchris)381750e#311 bump @npmcli/template-oss from 4.23.1 to 4.23.3 (@dependabot[bot])Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.