chore(deps): Bump axios, @cosmjs/stargate and @cosmjs/tendermint-rpc #315
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps axios to 1.6.4 and updates ancestor dependencies axios, @cosmjs/stargate and @cosmjs/tendermint-rpc. These dependencies need to be updated together.
Updates
axios
from 0.21.4 to 1.6.4Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
8790b8e
chore(release): v1.6.4 (#6173)0ad520d
chore(ci): fix notify action; (#6172)3c0c11c
fix(security): fixed formToJSON prototype pollution vulnerability; (#6167)75af1cd
fix(security): fixed security vulnerability in follow-redirects (#6163)90864b3
docs: update logos1542719
docs: updated headline sponsorsb15b918
chore(release): v1.6.3 (#6151)b76cce0
chore(ci): added branches filter for notify action; (#6084)5e7ad38
fix: Regular Expression Denial of Service (ReDoS) (#6132)8befb86
docs: update alloy link (#6145)Updates
@cosmjs/stargate
from 0.31.3 to 0.32.2Changelog
Sourced from
@cosmjs/stargate
's changelog.... (truncated)
Commits
2872780
Set version 0.32.2948012a
Merge pull request #1528 from cosmos/upgrade-sever6f6a937
Upgrade semverb23d0b7
Merge pull request #1527 from cosmos/short-denoms8979eac
Use blockchain RPC URLs with protocolb0ccb04
Require protocol to be set in endpoint URLs8ab4b7b
Add unit tests for hasProtocol7ee2aa0
Polish CHANGELOG entry62a4ad1
Merge pull request #1522 from pryzm-finance/fix-gas-price-validation-regexa752cd8
fix: lintUpdates
@cosmjs/tendermint-rpc
from 0.31.3 to 0.32.2Changelog
Sourced from
@cosmjs/tendermint-rpc
's changelog.... (truncated)
Commits
2872780
Set version 0.32.2948012a
Merge pull request #1528 from cosmos/upgrade-sever6f6a937
Upgrade semverb23d0b7
Merge pull request #1527 from cosmos/short-denoms8979eac
Use blockchain RPC URLs with protocolb0ccb04
Require protocol to be set in endpoint URLs8ab4b7b
Add unit tests for hasProtocol7ee2aa0
Polish CHANGELOG entry62a4ad1
Merge pull request #1522 from pryzm-finance/fix-gas-price-validation-regexa752cd8
fix: lintDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.