Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps lodash to 4.17.21 and updates ancestor dependencies lodash, gulp and babel-core. These dependencies need to be updated together.
Updates
lodash
from 4.17.11 to 4.17.21Commits
f299b52
Bump to v4.17.21c4847eb
Improve performance oftoNumber
,trim
andtrimEnd
on large input strings3469357
Prevent command injection through_.template
'svariable
optionded9bc6
Bump to v4.17.20.63150ef
Documentation fixes.00f0f62
test.js: Remove trailing comma.846e434
Temporarily use a custom fork oflodash-cli
.5d046f3
Re-enable Travis tests on4.17
branch.aa816b3
Remove/npm-package
.d7fbc52
Bump to v4.17.19Maintainer changes
This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.
Updates
gulp
from 3.9.1 to 4.0.2Release notes
Sourced from gulp's releases.
... (truncated)
Changelog
Sourced from gulp's changelog.
Commits
069350a
Release: 4.0.2b4b5a68
Build: Add node 12 to Travis & Azure5667666
Fix: Bind src/dest/symlink to the gulp instance to support esm exports (ref s...4091bd3
Docs: Add notes about esm support (closes #2278)3c66d95
Docs: Fix the Negative Globs section & examples (closes #2297)1693a11
Docs: Remove next tag from recipes (closes #2277)d916276
Docs: Add default task wrappers to Watching Files examples to make runnable (...ea52a92
Docs: Fix syntax error in lastRun API docs (closes #2315)5d81f42
Docs: Fix typo in Explaining Globs (#2326)ea3bba4
Release: 4.0.1Updates
babel-core
from 5.8.38 to 6.26.3Commits
d8be710
v6.26.3a8ddf5e
Only convert input mappings if we get mappings from Babel280cfed
v6.26.26fa027e
Merge pull request #7812 from loganfsmyth/backported-sourcemap-changesc8b4c28
Implement minNodeVersion for babel-cli tests too.753c2af
Disable 2 tests on Node 0.10ae43e06
Backport minNodeVersion test option from #5765 for 6.xe72cf66
Fix Babel 6 builds on Node 0.1080f433a
Backport #7761 for 6.x7360a30
Backport #7312 for 6.xMaintainer changes
This version was pushed to npm by loganfsmyth, a new releaser for babel-core since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.