Skip to content
This repository was archived by the owner on Jan 27, 2026. It is now read-only.

chore(deps): update dependency semantic-release to version 17.2.3 🌟#115

Merged
renovate[bot] merged 1 commit into
masterfrom
renovate/npm-semantic-release-vulnerability
Apr 26, 2021
Merged

chore(deps): update dependency semantic-release to version 17.2.3 🌟#115
renovate[bot] merged 1 commit into
masterfrom
renovate/npm-semantic-release-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Jan 24, 2021

Copy link
Copy Markdown
Contributor

WhiteSource Renovate

This PR contains the following updates:

Package Change
semantic-release 8.2.3 -> 17.2.3

GitHub Vulnerability Alerts

CVE-2020-26226

Impact

Secrets that would normally be masked by semantic-release can be accidentally disclosed if they contain characters that become encoded when included in a URL.

Patches

Fixed in v17.2.3

Workarounds

Secrets that do not contain characters that become encoded when included in a URL are already masked properly.


Configuration

📅 Schedule: "" in timezone America/New_York.

🚦 Automerge: Enabled.

♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box.

This PR has been generated by WhiteSource Renovate. View repository job log here.

@renovate renovate Bot changed the title chore(deps): update dependency semantic-release to version .x 🌟 chore(deps): update dependency semantic-release to version 17.x 🌟 Feb 6, 2021
@renovate renovate Bot changed the title chore(deps): update dependency semantic-release to version 17.x 🌟 chore(deps): update dependency semantic-release to version 17.2.3 🌟 Apr 26, 2021
@renovate renovate Bot merged commit 3454ec5 into master Apr 26, 2021
@renovate renovate Bot deleted the renovate/npm-semantic-release-vulnerability branch April 26, 2021 14:20
@github-actions

Copy link
Copy Markdown

🎉 This PR is included in version 2.2.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant